v1.53.0

Added

• Per-container update policy (#2, voted by @NotRetarded and @famewolf). Cap how far an auto-update may jump on the semver ladder: all (default, every bump), minor (minor + patch, hold majors), patch (patch only). Set it per container with docksentry.policy=minor, or globally with UPDATE_POLICY=minor — the label wins. Held-back updates still show in the "Updates Available" list with a one-line note, and a manual /update or Bulk update applies them anyway (an explicit action always overrides). Bump level comes from the version info Docksentry already reads (OCI version labels, falling back to a semver tag); anything unclassifiable is allowed, not silently skipped.

  This gates the existing digest-based auto-update path — it does not follow or switch semver tags (:1.2.3 is never rewritten to :1.2.4). Tag-following is a separate future capability.

Fixed

• Podman self-update failed with invalid PID mode (#49, @LeeNX). Podman reports the default PID/UTS namespace as "private" where Docker reports empty, and --pid private isn't a valid run value — so the recreate crashed and rolled back. PID/UTS now skip "private" like --ipc already did; real values like host still carry over.