v1.5.0-rc.2
Second release candidate — bug fixes, security hardening, and new UI features on top of RC1.
What's new since RC1
- Up-to-date & pinned badges — Containers table Kind column now shows a green check for up-to-date containers and a pin icon for skipped/pinned updates
- Telegram notification fix — MarkdownV2 special characters in container names/versions were not escaped, causing silent 400 errors from the Telegram API. All trigger paths now escape correctly. (Discussion #211)
- Dashboard edit-mode border fix — Dashed borders no longer clip on grid edges across all viewport sizes
- Mobile UI fixes — DataTable icon clipping, version column alignment, responsive grid margins, vertical scroll on containers page
- Competitor comparison page accuracy — Corrected claims for WUD, Watchtower, Portainer, Dockhand based on research
- Container store performance — SHA-256 hash caching for security state comparisons
- Stats collector refactor — Interval-based deleted state sweep instead of inline on every call
- WebSocket hardening — Extracted rate-limit key resolution, buffer overflow handling in log streams
- CI pipeline stability — Fixed auto-tag pre-release crash, Scorecard alerts, load test thresholds, Playwright artifact naming
Security
- Log injection prevention in startup/migration logs
- Reflected XSS fix in Podman redirect guard
- TOCTOU race fix in SRI script
- Scorecard token-permissions and pinned-dependencies fixes
Upgrade
```bash
docker pull ghcr.io/codeswhat/drydock:1.5.0-rc.2
```
See the full changelog for complete details.