heyderekj/dinky v2.14.0

Dinky 2.14.0

on GitHub

Dinky 2.14.0

Changes since v2.13.2 (commit subjects from this repo):

• Harden dinky serve: loopback-only bind, request checks, bearer token (#28)

⚠️ dinky serve API clients: action required

dinky serve now binds to 127.0.0.1 / [::1] only (previously reachable from other devices on your network) and every endpoint except GET /v1/health now requires a bearer token:

• Send Authorization: Bearer <token> — a new token is printed to stderr on each launch, or pin one with DINKY_SERVE_TOKEN.
• Send Content-Type: application/json on POST requests (plain curl -d and some HTTP clients don't set this by default — use curl --json or set the header explicitly).
• Requests with an Origin header, or a Host other than localhost/127.0.0.1/[::1], are now refused.

See docs/local-cli.md for details and examples.

Install

Homebrew (optional):

brew tap heyderekj/dinky https://github.com/heyderekj/dinky
brew install --cask dinky

Or download Dinky-2.14.0.dmg from the assets below and drag Dinky into Applications. Already using Dinky? Choose Install Update from the in-app banner when it appears.

Finder “Open With” shows two Dinkys

macOS lists each Dinky.app on disk with its own version. After an upgrade, an older copy is often still around.

• Homebrew: brew cleanup dinky (or brew cleanup) removes old cask versions under Caskroom.
• List every copy: mdfind 'kMDItemCFBundleIdentifier == "com.dinky.app"' in Terminal; delete extras you do not need (e.g. in Downloads).