v1.0.1

What's Changed

• Bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #22
• Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #23
• Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #24
• Bump vite from 5.4.21 to 8.1.2 in /client by @dependabot[bot] in #28
• Bump react from 18.3.1 to 19.2.7 in /client by @dependabot[bot] in #31
• Bump react-dom from 18.3.1 to 19.2.7 in /client by @dependabot[bot] in #34
• Bump vite-plugin-pwa from 0.20.5 to 1.3.0 in /client by @dependabot[bot] in #35
• Bump actions/checkout from 4 to 7 by @dependabot[bot] in #25
• deps: consolidate Dependabot majors + fix corrupted client manifest + low-maintenance setup by @StrandedTurtle in #36
• build(deps): bump react-router-dom from 6.30.4 to 7.18.1 in /client by @dependabot[bot] in #38
• build(deps): bump the actions group with 4 updates by @dependabot[bot] in #37
• Add disclaimer about project using Claude by @StrandedTurtle in #39
• Audit hardening: rate-limiter bound, logout cookie path, Cloudflare Tunnel docs by @StrandedTurtle in #40

New Contributors

• @dependabot[bot] made their first contribution in #22

Full Changelog: v1.0.0...v1.0.1

What's Changed

• Bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #22
• Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #23
• Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #24
• Bump vite from 5.4.21 to 8.1.2 in /client by @dependabot[bot] in #28
• Bump react from 18.3.1 to 19.2.7 in /client by @dependabot[bot] in #31
• Bump react-dom from 18.3.1 to 19.2.7 in /client by @dependabot[bot] in #34
• Bump vite-plugin-pwa from 0.20.5 to 1.3.0 in /client by @dependabot[bot] in #35
• Bump actions/checkout from 4 to 7 by @dependabot[bot] in #25
• deps: consolidate Dependabot majors + fix corrupted client manifest + low-maintenance setup by @StrandedTurtle in #36
• build(deps): bump react-router-dom from 6.30.4 to 7.18.1 in /client by @dependabot[bot] in #38
• build(deps): bump the actions group with 4 updates by @dependabot[bot] in #37
• Add disclaimer about project using Claude by @StrandedTurtle in #39
• Audit hardening: rate-limiter bound, logout cookie path, Cloudflare Tunnel docs by @StrandedTurtle in #40

New Contributors

• @dependabot[bot] made their first contribution in #22

Full Changelog: v1.0.0...v1.0.1

v1.0.0

DockPull is a small, self-hosted, mobile-first web UI for updating your docker compose containers manually, on your terms.

No Watchtower-style surprise upgrades, no Diun or external notifier required. It checks your images' registries directly, shows you what's out of date, and updates with a tap.

Built to replace the awkward "something pinged me → open Dockge on my phone → figure out which stack → update" dance with one screen: your containers grouped by stack, real version numbers, and a tap to update.

Highlights:

• 📦 Self-contained update checks — queries registries directly (Docker Hub, GHCR, lscr.io, quay.io…). Mount your Docker credentials to check private images and dodge Docker Hub's anonymous rate limit.
• 🔢 Real version numbers + changelogs — shows human-readable versions (even for :latest/main-tagged images, resolved from GitHub releases) and an in-app "What's changed" panel so you can decide before bumping.
• ✅ Safe updates — after each update it verifies the container actually comes up healthy (catches crash-loops), with a one-click Revert to the previous image if it doesn't.
• 🗂️ Grouped by stack, updates sorted to the top, "updates only" filter, Update all (runs them all at once with live logs), and Pin Version to hold a container where it is.
• 🔔 Notifications — a daily background scan can ping Discord, ntfy, Gotify, or a generic webhook when updates are found.
• 🔒 Hardened for homelab exposure — single-password login with lockout, security headers, SSRF-guarded webhooks, reverse-proxy/subpath support, and a clear threat model in ./SECURITY.md.
• 📱 Installable PWA — add it to your phone's home screen for a standalone app.