Changes in Self-Hosted Deployment Environments: Insights from Docker Desktop 4.97.0 and Coolify v4.5.x Updates
Both local development environments and self-hosted PaaS environments have received stability-boosting updates. In late October 2026, Docker released Docker Desktop 4.97.0, refining local network port control and secret management. Meanwhile, the self-hosted PaaS solution Coolify, in its v4.5.x update, has significantly bolstered environment variable isolation for pull request previews and improved backup reliability.
As more development teams combine Docker and Coolify to reduce cloud costs and replicate local environments, I have quickly summarized the impact of these patches on professional development workflows.
Docker Desktop 4.97.0: Enhanced Network Flexibility and Secret Control
Docker Desktop 4.97.0 improves both development convenience and security on macOS and Windows. macOS users can now securely share privileged ports (1–1024) with their local network (LAN). Previously, exposing default web server ports (80, 443) to an internal local network required complex port forwarding proxies; now, you can instantly share local containers with team members through a single setting.
On Windows, a new lightweight virtualization backend, Docker VMM (Beta), has been added to reduce dependency on Hyper-V or WSL2, offering faster boot times and lower resource consumption. Additionally, terminal execution stability has been improved, and security vulnerabilities CVE-2026-114409 and CVE-2026-99999 have been resolved.
Regarding secret management, the docker pass command now supports an environment variable flag, allowing sensitive information to be injected safely when running containers.
This feature helps fundamentally prevent the common mistake of accidentally committing plain-text environment variable files (.env) to a repository.
Coolify v4.5.x: Preview Deployment Isolation and S3v4 Backup Stabilization
Coolify v4.5.x, the self-hosted cloud platform, has completely overhauled internal mechanisms to increase operational safety. The helper image has been updated to version 1.0.19, and in particular, a full isolation layer for environment variables has been implemented to ensure production variables are not leaked or polluted during pull request (PR) preview deployments.
The database backup pipeline has also been improved. When using AWS S3-compatible storage, Signature Version 4 (S3v4) is now strictly applied, and an automatic retry logic has been added for transfer failures. This prevents intermittent issues where late-night backups would silently fail due to network latency. Additionally, the MySQL and MariaDB database recovery process has been refined to ensure transactional integrity even if the connection is interrupted during the application of a backup dump.
Practical Adoption Guide
If you are running personal projects or small-scale production environments on a single VPS or an on-premise server, this Coolify v4.5.x update is well worth applying immediately. The enforcement of S3v4 significantly improves the reliability of nightly backups sent to AWS S3 or Cloudflare R2.
For Docker Desktop 4.97.0, the ability to directly expose ports 80 and 443 to the LAN environment on macOS is extremely useful for mobile device testing or internal team demonstrations. Since the Docker VMM for Windows is still in beta, I recommend maintaining the existing WSL2 backend for local machines running commercial workloads and adopting a gradual testing approach.