Skip to content

Releases: bauerpawel/docker-cleaner

Docker Cleaner 1.0.0

Choose a tag to compare

@bauerpawel bauerpawel released this 18 Oct 07:19

First tagged release. Docker image: pbauer/docker-cleaner:1.0.0 (also latest), linux/amd64 + linux/arm64.

πŸ”’ Security

  • Starlette 1.2.1 β†’ 1.8.0 β€” fixes CVE-2026-54283 (request.form() did not enforce max_fields / max_part_size, allowing resource exhaustion) and CVE-2026-54282 (request path not validated when reconstructing request.url).
  • pydantic-settings 2.14.1 β†’ 2.16.0 β€” fixes CVE-2026-58203 (reading secrets from secrets_dir).
  • pytest 8.3.4 β†’ 9.1.1 (test dependency only) β€” fixes CVE-2025-71176.
  • pip is no longer present in the runtime image.
  • pip-audit reports no known vulnerabilities in the full Python dependency tree.

πŸ“¦ Smaller image

64.9 MB β†’ 52.4 MB compressed (amd64), βˆ’19%.

  • uvicorn[standard] β†’ uvicorn: uvloop, httptools, watchfiles, websockets and PyYAML are no longer installed β€” the panel doesn't use them.
  • Upgraded pip / setuptools / wheel are no longer installed on top of the base image.

⬆️ Dependency updates

FastAPI 0.143.3, Starlette 1.8.0, Uvicorn 0.54.0, Pydantic 2.14.1, pydantic-settings 2.16.0, Docker SDK 7.2.0, APScheduler 3.11.3, croniter 6.2.4, tzdata 2026.5. Tests now use httpx2 (using httpx with Starlette's TestClient is deprecated).

πŸ› οΈ Build & CI

  • The image is built on standard GitHub Actions runners (QEMU for arm64) instead of Docker Build Cloud.
  • Automatic rebuild on the 1st and 15th of every month, so latest picks up security patches of the base image (Debian, Python).
  • Smoke test before every push: the image must start, reach the Docker socket and serve the panel.
  • The Docker Hub description is synced automatically from DOCKERHUB.md.
  • actions/checkout and actions/setup-python v7.

No configuration changes β€” existing docker run / compose setups work as before.