LoginSign Up
← Back to all sparks
D

Dokku

INFRA · APIS
Velocity5.0

Self-hosted platform-as-a-service built on Docker

dokku.com ↗

Dokku ships patches weekly, and quietly grows a Kubernetes backend under its single-host roots.

paaskubernetesk3scli toolingpatch cadence
◆Current state
Dokku releases on a near-weekly patch cadence, and most entries are dominated by Dependabot bumps to test fixtures. The real content is thin but consistent: a command injection fix in docker options evaluation, per-app Let's Encrypt emails on k3s, atomic buildpack list replacement, custom chown values, and JSON output added to apps:list, ps:scale and docker-options reports. Several tags in early July were published within minutes of each other and out of version order.
◆Where it's heading
Two threads carry through. The scheduler-k3s plugin keeps accumulating what a real platform needs — helm chart previews, autoscaling auth state, control-plane node matching, per-app certificate configuration — which pushes Dokku beyond the single-host Docker tool it started as. The second is machine readability: command after command gains --format json, turning the CLI into something automation can consume rather than parse.
◆Prediction
Expect JSON output to keep spreading command by command until it is the norm rather than a flag, and expect the k3s scheduler to stay the destination for new capability while the Docker scheduler receives fixes. The patch train shows no sign of consolidating into a minor release.

◆Recent moves

  1. 15d ago

    Command injection fix, per-app Let's Encrypt on k3s

    A command injection through docker options evaluation is closed — the sharpest security item in this window — alongside per-app Let's Encrypt email configuration on the k3s scheduler. The pairing is typical: one real fix, one more piece of the Kubernetes backend.

    View source ↗
  2. 19d ago

    Buildpack docs links and test dependency bumps

    A documentation link change plus Dependabot updates to Ruby and gRPC versions inside test fixtures. Nothing here reaches a running installation.

    View source ↗
  3. 19d ago

    Certificate CN parsing fixed for OpenSSL 3.x

    One real fix — parsing certificate CN and subject under OpenSSL 3.x — surrounded by Go version bumps in test apps. Relevant only to installs on newer distributions.

    View source ↗
  4. 28d ago

    Atomic buildpack replacement and structured reports

    The densest feature release in this window: buildpack lists can be replaced atomically instead of edited entry by entry, docker-options appear as structured lists in JSON reports, network provenance is exposed, and k3s autoscaling auth state becomes readable. All of it serves scripted operation rather than interactive use.

    View source ↗
  5. 1mo ago

    0.38.19 tag with no release notes

    An entry containing only bootstrap install instructions, published in the same minute as two neighbouring tags and out of version order. Nothing about its contents is observable.

    View source ↗
  6. 1mo ago

    Test fixture Go version bumps

    Dependabot Go updates across several test applications and nothing else. Part of the same three-tag cluster published on July 7.

    View source ↗