LoginSign Up
← Back to all sparks
D

Dashy

INFRA · APIS
Velocity5.0

Self-hosted dashboard for organizing services

dashy.to ↗

Dashy's release-per-PR run keeps closing authentication gaps around header auth and OIDC

self-hosteddashboardhomelabauthenticationdependency-updates
◆Current state
Dashy ships one release per merged PR. Recent releases fix header auth for users not listed in the config, OIDC re-login losing the requested page, and a theme flash plus sub-page styling bug. The two releases on 7 November are a ten-package Dependabot bump and a fix for a slow sub-page load replacing the page the user had already moved to.
◆Where it's heading
Authentication is the recurring thread: lookalike-origin trust on October 31, then header auth for unlisted users and OIDC redirects on November 2. Dashy is hardening its auth options for setups behind reverse proxies and identity providers, while the rest of the stream is small UI fixes and dependency updates.
◆Prediction
More single-PR patch releases, likely including further auth and SSO fixes; nothing in the entries points to a feature release.

◆Recent moves

  1. 6d ago

    Dashy 4.9.17 stops slow sub-pages overriding navigation

    Fixes a race where a slow sub-page load could replace the page the user had already navigated to. A small navigation fix after the auth-focused releases.

    View source ↗
  2. 6d ago

    Dashy 4.9.16 bundles ten dependency updates

    A Dependabot group bump of ten minor and patch dependencies, with no user-visible change.

    View source ↗
  3. 11d ago

    Dashy 4.9.15 fixes header auth for users not in the config

    The second header-auth fix in three days, after the lookalike-origin change in 4.9.12. It matters for setups that authenticate through a reverse proxy, where users missing from the config were mishandled.

    View source ↗
  4. 11d ago

    Dashy 4.9.14 keeps the requested page after OIDC re-login

    After an OIDC re-login users now land on the page they asked for instead of losing it. A small fix in the same auth thread.

    View source ↗
  5. 11d ago

    Dashy 4.9.13 fixes theme flash and sub-page styles

    Removes the theme flash on load and fixes sub-page styles, closing long-open issue #1669. Visible polish, no new capability.

    View source ↗
  6. 13d ago

    Dashy 4.9.12 fixes auth-header trust of lookalike origins

    Fixes auth-header handling so lookalike origins are no longer trusted. The one security change in this run, and worth taking for instances behind header auth.

    View source ↗