CodesWhat/drydock v1.4.0-rc.5 on GitHub

Highlights

Bug fix release addressing issues reported in #120 and discovered during QA.

Empty env var values rejected during container validation — containers with FOO= were silently skipped during watch cycles. Fixed Joi schema with .allow('').
Blank white screen on plain HTTP deployments — Helmet.js HSTS and upgrade-insecure-requests CSP blocked sub-resource loads when TLS was off. Now conditionally omitted.
OIDC login broken by same-origin redirect check — OIDC IdP URLs are always cross-origin; removed the same-origin restriction, keeping protocol validation.
OIDC discovery fails on HTTP IdP URLs — openid-client v6 enforces HTTPS by default. Now passes allowInsecureRequests when discovery URL is http:.
Stale theme preferences after upgrade from v1.3 — added sanitize() pass to strip invalid enum values (removed theme families, icon libraries, etc.) during preferences migration.

Replaced Drydock theme with popular palettes (One Dark, Catppuccin, Nord, Dracula, Tokyo Night, Gruvbox, Rosé Pine, Solarized)
Canonical AGPL-3.0 license text
Replaced curl|python3 with jq in Scorecard scripts
Added Dex OIDC provider to QA compose environment