‹ Reports
The Dispatch

OSS Report: dokku/dokku


Dokku Development Focuses on Dependency Updates and Bug Fixes Amidst Stagnant Older Pull Requests

Dokku, a Docker-powered Platform as a Service (PaaS), continues to prioritize dependency updates and bug fixes, though older pull requests remain unresolved, indicating potential resource constraints or prioritization challenges.

Recent activities in the Dokku project reveal an emphasis on maintaining up-to-date dependencies, as evidenced by numerous pull requests generated by Dependabot. The project aims to ensure security and compatibility with the latest versions of libraries and tools. Notable pull requests include updates to github.com/onsi/gomega (#7096, #7094) and google.golang.org/grpc (#7090), alongside bug fixes such as handling parent PID issues in LXD VMs (#7088). However, older pull requests, some open for nearly a year, suggest bottlenecks in reviewing and merging contributions.

Recent Activity

Recent issues and pull requests highlight ongoing development and user engagement, with a focus on improving environment variable management and configuration handling. Key issues include problems with nginx configuration post-app cloning and health check deployment tasks. The development team has been active in addressing these challenges:

Recent Commits and PRs (Reverse Chronological Order)

  1. Jose Diaz-Gonzalez merged multiple PRs for dependency updates.
  2. Dependabot submitted PRs for various libraries.
  3. Tasos Maschalidis contributed documentation for a plugin.
  4. Ben Katz made minor documentation fixes.
  5. Flavio Poletti proposed documentation changes.

Of Note

  1. Dependency Management: Active efforts to update dependencies reflect a commitment to security and performance.
  2. Older Pull Requests: Long-standing open PRs indicate potential review bottlenecks or prioritization issues.
  3. Environment Variable Management: Recurring issues suggest a need for improved handling of environment variables during builds.
  4. Nginx Configuration Challenges: Multiple reports highlight difficulties with nginx configurations after app cloning.
  5. Documentation Improvements: Ongoing enhancements to documentation underscore its importance for user support and onboarding.

Overall, while Dokku demonstrates active maintenance through dependency updates and bug fixes, attention to older unresolved pull requests is necessary to prevent stagnation in certain development areas.

Quantified Reports

Quantify Issues



Recent GitHub Issues Activity

Timespan Opened Closed Comments Labeled Milestones
7 Days 7 1 8 0 1
30 Days 12 6 28 0 1
90 Days 32 12 83 1 2
1 Year 122 87 423 2 5
All Time 2698 2650 - - -

Like all software activity quantification, these numbers are imperfect but sometimes useful. Comments, Labels, and Milestones refer to those issues opened in the timespan in question.

Quantify commits



Quantified Commit Activity Over 30 Days

Developer Avatar Branches PRs Commits Files Changes
Jose Diaz-Gonzalez 3 8/5/1 17 72 1633
Dokku Bot 1 0/0/0 2 56 639
dependabot[bot] 11 51/39/6 47 27 321
Ben Katz 1 2/1/0 2 1 4
Tasos Maschalidis 1 1/1/0 1 1 2
Tim de Koning (Reggino) 0 0/1/0 0 0 0
None (andreby) 0 1/0/0 0 0 0
Flavio Poletti (polettix) 0 0/1/0 0 0 0
Muma (DavidTheProgrammer) 0 0/1/0 0 0 0

PRs: created by that dev and opened/merged/closed-unmerged during the period

Detailed Reports

Report On: Fetch issues



Recent Activity Analysis

The Dokku project currently has 48 open issues on GitHub, with a notable uptick in recent activity. Several issues are related to bugs and enhancements, indicating ongoing development and user engagement. A recurring theme is the need for better handling of environment variables and configuration management, particularly in relation to Docker image deployments and build processes.

Notable complications include issues with the nginx configuration not being generated correctly after app cloning, as well as problems related to the handling of health checks and deployment tasks. There are also several instances where users have reported errors stemming from outdated dependencies or misconfigurations following upgrades.

Issue Details

Most Recently Created Issues

  1. Issue #7093: network:info does not appear to do anything

    • Priority: Bug
    • Status: Open
    • Created: 0 days ago
    • Update: N/A
  2. Issue #7092: Adding app name to dokku apps:report

    • Priority: Enhancement
    • Status: Open
    • Created: 1 day ago
    • Update: N/A
  3. Issue #7089: dokku domain:set error: [sudo] password for dokku

    • Priority: Bug
    • Status: Open
    • Created: 1 day ago
    • Update: N/A
  4. Issue #7083: Nginx: runsv not running

    • Priority: Bug
    • Status: Open
    • Created: 2 days ago
    • Update: N/A
  5. Issue #7082: dokku.prerm will loop forever in ps_backtrace() because $ppid == 0

    • Priority: Bug
    • Status: Open
    • Created: 2 days ago
    • Update: N/A

Most Recently Updated Issues

  1. Issue #7081: Deploy fails "listening on ports" healthcheck

    • Priority: Bug
    • Status: Open
    • Created: 2 days ago
    • Updated: 1 day ago
  2. Issue #7061: Disk space usage: Disk when full many deployments in same day

    • Priority: Bug
    • Status: Open
    • Created: 10 days ago
    • Updated: 10 days ago
  3. Issue #7018: Manual steps when upgrading dokku?

    • Priority: Documentation
    • Status: Open
    • Created: 30 days ago
    • Updated: 8 days ago
  4. Issue #6998: Dokku ps:retire (or cron job) trying to retire running app

    • Priority: Bug
    • Status: Open
    • Created: 43 days ago
    • Updated: 11 days ago
  5. Issue #6990: SSL_SERVER_NAME not populated even though ssl is set up for vhost

    • Priority: Bug
    • Status: Open
    • Created: 49 days ago
    • Updated: 11 days ago

Common Themes and Complications

Several issues highlight a lack of clarity in how environment variables are managed during the build process, particularly with Docker images. Users frequently encounter problems with missing or incorrectly configured environment variables, which can lead to failed deployments or unexpected behavior.

Additionally, there are multiple reports regarding the handling of nginx configurations during app cloning and upgrades, suggesting that improvements are needed in how these configurations are generated and maintained.

The ongoing discussions about support for newer versions of Ubuntu and Debian also indicate a need for the project to keep pace with changes in underlying operating systems, which can affect compatibility and functionality.

Overall, the current issue landscape reflects both the active engagement of users seeking enhancements and the challenges they face in managing their applications within the Dokku ecosystem.

Report On: Fetch pull requests



Overview

The dokku/dokku repository currently has 16 open pull requests, primarily focused on dependency updates and minor enhancements. The majority of these pull requests are created by Dependabot, indicating an active effort to keep the project up-to-date with the latest versions of its dependencies.

Summary of Pull Requests

  1. PR #7096: Bumps github.com/onsi/gomega from 1.34.1 to 1.34.2 in /plugins/config. This is a maintenance update requiring Go 1.22+.

  2. PR #7094: Similar to PR #7096, this also bumps github.com/onsi/gomega from 1.34.1 to 1.34.2 but in /plugins/common.

  3. PR #7090: Updates google.golang.org/grpc from 1.65.0 to 1.66.0 in /tests/apps/gogrpc, introducing new features and bug fixes.

  4. PR #7088: Fixes an issue related to handling parent PID being 0 inside an LXD VM, closing issue #7082.

  5. PR #7086: Bumps timberio/vector from 0.39.0-debian to 0.40.1-debian in /plugins/logs.

  6. PR #7085: Updates watchdog from 4.0.2 to 5.0.0, introducing breaking changes that drop support for Python 3.8.

  7. PR #7084: Bumps zipp from 3.20.0 to 3.20.1 in /docs/_build.

  8. PR #7079: Updates pyparsing from 3.1.2 to 3.1.4, fixing a regression affecting Python 3.6 installs.

  9. PR #7077: Adds a cron dependency necessary for running scheduled cron jobs, addressing deployment issues.

  10. PR #7076: Bumps mvdan.cc/sh/v3 from 3.8.0 to 3.9.0 in /plugins/cron, dropping support for Go 1.21.

  11. PR #7075: Upgrades the herokuish builder to gliderlabs/herokuish:latest-24.

  12. PR #7074: Upgrades the CNB builder to heroku/builder:24, closing issue #6994.

  13. PR #7035: Bumps traefik from 2.11.2 to 3.1.x in /plugins/traefik-vhosts.

14-16: A series of older PRs (#6223, #6716, and others) addressing various enhancements and bug fixes, some of which have been open for extended periods (up to nearly a year).

Analysis of Pull Requests

Themes and Commonalities

The recent pull requests predominantly focus on updating dependencies across various components of the Dokku project, reflecting a proactive approach to maintain security and compatibility with newer versions of libraries and tools used within the platform.

  • Dependency Management: A significant number of pull requests are generated by Dependabot, indicating that the project is actively managing its dependencies and ensuring they are kept up-to-date with the latest releases.

  • Bug Fixes and Enhancements: Several PRs address specific bugs or enhance existing functionality (e.g., handling parent PID issues in LXD VMs). This highlights ongoing efforts to improve the stability and usability of Dokku.

  • Documentation Improvements: There are also PRs aimed at improving documentation clarity, such as correcting links or adding missing information about plugins and configurations.

Notable Anomalies

  • Old Pull Requests: Some older pull requests remain open for extended periods (e.g., PR #6223 has been open for over a year). This could indicate a lack of resources or prioritization issues within the development team, potentially leading to stagnation on certain features or fixes.

  • Lack of Merge Activity on Older PRs: The presence of numerous open PRs alongside a history of recent merges suggests that while there is active development happening, there may be bottlenecks in reviewing and merging contributions from the community or even internal contributors.

Recent Merge Activity

The repository has seen a healthy amount of merge activity recently, particularly concerning dependency updates and minor enhancements aimed at improving overall functionality and security posture (e.g., upgrading Go versions). However, the presence of many open PRs indicates that while some areas are actively being addressed, others may require more attention.

Conclusion

Overall, dokku/dokku demonstrates an active development environment with a strong focus on maintaining up-to-date dependencies and addressing bugs promptly while also enhancing documentation for better user guidance. However, attention should be given to older pull requests that remain unresolved to ensure continuous improvement without stagnation in certain areas of development.

Report On: Fetch commits



Repo Commits Analysis

Development Team and Recent Activity

Team Members

  • Jose Diaz-Gonzalez (josegonzalez)

    • Recent Activity:
    • Merged multiple pull requests related to dependency updates, including gunicorn, django, and various Go modules.
    • Worked on documentation improvements, including grammar fixes and clarifications in deployment guides.
    • Contributed to bug fixes, particularly around logging and permissions in the builder-release process.
    • Engaged in feature enhancements, such as upgrading the Herokuish builder and ensuring compatibility with Ubuntu 24.04 LTS.
    • Active in merging dependabot PRs for dependency updates across various modules.
  • Dependabot[bot]

    • Recent Activity:
    • Submitted numerous automated pull requests for dependency updates across multiple libraries, including werkzeug, mkdocs-material, and gomega.
    • Focused on keeping dependencies up-to-date to ensure security and performance improvements.
  • Tasos Maschalidis (Tashows)

    • Recent Activity:
    • Contributed a single commit to add documentation for the dokku-image-size-limit plugin.
  • Ben Katz (bakatz)

    • Recent Activity:
    • Made minor contributions to fix documentation links and grammar issues.
  • Flavio Poletti (polettix)

    • Recent Activity:
    • Proposed changes to improve documentation regarding the procfile-path property.

Summary of Recent Activities

  • The team has been actively merging pull requests related to dependency management, indicating a focus on maintaining up-to-date libraries.
  • Jose Diaz-Gonzalez has been the most active contributor, handling both feature development and maintenance tasks.
  • Dependabot has contributed significantly through automated updates, reflecting a proactive approach to dependency management.
  • Documentation improvements have been a recurring theme, with multiple contributors addressing clarity and accuracy in guides.
  • Bug fixes have been targeted at enhancing user experience, particularly around logging and deployment processes.

Patterns and Conclusions

  • There is a strong emphasis on keeping dependencies current, which is crucial for security and functionality.
  • The team demonstrates a collaborative environment where both manual contributions and automated tools (like Dependabot) play significant roles.
  • Documentation is being prioritized alongside code changes, suggesting an understanding of its importance for user onboarding and support.
  • The active engagement from multiple contributors indicates a healthy development process with diverse input into the project’s evolution.

Overall, the recent activities reflect a committed team focused on improving the Dokku platform through regular updates, bug fixes, and enhanced documentation.