fix(updates): surface Docker Dash app updates in System → Updates page

The v7.3.0 update notifier was reachable from the sidebar badge and
System Settings → General — but not from System → Updates, which is
the page users naturally check for "is there an update for X?". The
existing endpoint only reported the running version with no GitHub
comparison.

- src/routes/system.js: GET /api/system/check-updates now also returns
  app.{current, latest, updateAvailable, releaseUrl, publishedAt,
  lastChecked, enabled}. Forces a live refresh first (throttled
  internally) so the user sees fresh data after clicking the button.
- public/js/pages/system.js: app row shows the same badge logic as the
  sidebar (Update available / Up to date / Disabled). Update available
  badge is clickable → opens the update modal.

Release: v7.3.3

Author: bogdanpricop

CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to Docker Dash are documented here.
 
+## [7.3.3] - 2026-04-25 — System → Updates surfaces app updates too
+
+The v7.3.0 update notifier was reachable from the sidebar badge and System Settings → General — but **not** from System → Updates, which is the page users naturally reach for "is there an update for X?" That page only checked Docker Engine + OS updates, with the Docker Dash row showing only the running version (no comparison to GitHub latest).
+
+### Fixed
+
+- **`GET /api/system/check-updates`** — the existing endpoint now also surfaces the Docker Dash app update status (current, latest, updateAvailable, releaseUrl, publishedAt, lastChecked, enabled). Calls `updateCheck.refresh({ force: true })` first so the user sees fresh data after clicking the *Check Updates* button. Refresh is internally throttled per-instance, so spamming the button is safe. ([src/routes/system.js:354-407](src/routes/system.js#L354-L407))
+
+- **System → Updates page** — the Docker Dash app row now shows the same badge logic the sidebar uses: **Update available** when `updateAvailable=true`, **Up to date** when caught up, **Disabled** when the operator has turned the feature off in System Settings. The "Update available" badge is a clickable link that opens the update notifier modal (release notes + admin upgrade command). UpdateNotifier re-fetches before opening so the modal reflects the freshly-checked cache. ([public/js/pages/system.js:295-314](public/js/pages/system.js#L295-L314))
+
 ## [7.3.1] - 2026-04-25 — Smoother session-expiry recovery
 
 When a session expired, the UX collapsed: every parallel in-flight API call (containers list, stats, alerts, notifications, host overview…) returned 401 and each one independently:

docker-compose.yml

@@ -4,8 +4,8 @@ services:
       context: .
       dockerfile: Dockerfile
       args:
-        APP_VERSION: "${APP_VERSION:-7.3.1}"
-    image: docker-dash:${APP_VERSION:-7.3.1}
+        APP_VERSION: "${APP_VERSION:-7.3.3}"
+    image: docker-dash:${APP_VERSION:-7.3.3}
     container_name: docker-dash
     restart: unless-stopped
     env_file:
@@ -54,7 +54,7 @@ services:
   dd-egress-filter:
     build:
       context: ./docker/egress-filter
-    image: docker-dash-egress-filter:${APP_VERSION:-7.3.1}
+    image: docker-dash-egress-filter:${APP_VERSION:-7.3.3}
     container_name: dd-egress-filter
     restart: unless-stopped
     # Uses the default bridge so target containers on the default bridge can

package.json

@@ -1,6 +1,6 @@
 {
   "name": "docker-dash",
-  "version": "7.3.1",
+  "version": "7.3.3",
   "description": "Full-featured Docker management dashboard",
   "main": "src/server.js",
   "scripts": {

public/js/pages/system.js

@@ -293,11 +293,30 @@ const SystemPage = {
           </tr>
           <tr>
             <td><i class="fas fa-code-branch" style="margin-right:6px"></i> ${i18n.t('pages.system.appVersionLabel')}</td>
-            <td><span class="mono">v${Utils.escapeHtml(app.version || '?')}</span></td>
+            <td>
+              <span class="mono">v${Utils.escapeHtml(app.current || app.version || '?')}</span>
+              ${app.latest ? `<span class="text-dim text-sm" style="margin-left:8px">(${i18n.t('pages.system.latest')}: ${Utils.escapeHtml(app.latest)})</span>` : ''}
+              <span style="margin-left:8px">${
+                app.updateAvailable
+                  ? `<a href="#" id="app-update-modal-link" class="badge badge-warning" style="text-decoration:none"><i class="fas fa-arrow-up"></i> ${i18n.t('pages.system.updateAvailable')}</a>`
+                  : (app.enabled === false
+                      ? `<span class="badge" style="background:var(--surface2);color:var(--text-dim)"><i class="fas fa-pause"></i> ${i18n.t('common.disabled')}</span>`
+                      : `<span class="badge badge-running"><i class="fas fa-check"></i> ${i18n.t('pages.system.upToDate')}</span>`)
+              }</span>
+            </td>
           </tr>
         </table>
         ${osPackageList}
       `;
+
+      // Open the update-notifier modal when the user clicks the "Update available" badge.
+      // Re-init() first so the modal reflects the freshly-fetched cache (the
+      // /check-updates endpoint just forced a refresh).
+      el.querySelector('#app-update-modal-link')?.addEventListener('click', async (e) => {
+        e.preventDefault();
+        try { await window.UpdateNotifier?.init(); } catch { /* fall through to openModal anyway */ }
+        window.UpdateNotifier?.openModal();
+      });
     } catch (err) {
       el.innerHTML = `<div class="text-muted text-sm"><i class="fas fa-exclamation-triangle" style="color:var(--yellow)"></i> ${i18n.t('pages.system.updatesError', { message: err.message })}</div>`;
     }

public/js/pages/whatsnew.js

@@ -9,6 +9,15 @@ const WhatsNewPage = {
   // Add new releases at the TOP of this array.
   // Types: feature, fix, improvement, security, breaking
   _releases: [
+    {
+      version: '7.3.3',
+      date: '2026-04-25',
+      title: 'System → Updates surfaces app updates too',
+      changes: [
+        { type: 'fix', text: 'The v7.3.0 update notifier was reachable from the sidebar badge + System Settings → General, but not from System → Updates — which is the page users naturally reach for "is there an update for X?". Fixed by extending GET /api/system/check-updates to include the same data the sidebar uses (current, latest, updateAvailable, releaseUrl, publishedAt, lastChecked, enabled). The endpoint also forces a live refresh so the user sees fresh data after clicking *Check Updates*.' },
+        { type: 'fix', text: 'System → Updates page now shows a clickable "Update available" badge on the Docker Dash app row. Click → opens the same update modal as the sidebar badge (release notes + admin-only upgrade command). When the feature is disabled in Settings, the row shows a "Disabled" badge instead.' },
+      ],
+    },
     {
       version: '7.3.1',
       date: '2026-04-25',

src/routes/system.js

@@ -398,7 +398,27 @@ router.get('/check-updates', requireAuth, async (req, res) => {
     }
 
     // ── Docker Dash app version ──
-    result.app = { version: require('../version') };
+    // v7.3.2: surface the same data the sidebar badge uses, so System →
+    // Updates and System Settings → General agree.
+    try {
+      const updateCheck = require('../services/update-check');
+      // Best-effort live refresh so the user sees fresh data after clicking
+      // "Check Updates"; throttled internally so spamming the button is safe.
+      await updateCheck.refresh({ force: true });
+      const status = updateCheck.getStatus();
+      result.app = {
+        version: status.current,
+        current: status.current,
+        latest: status.latest,
+        updateAvailable: status.hasUpdate,
+        releaseUrl: status.releaseUrl,
+        publishedAt: status.publishedAt,
+        lastChecked: status.lastChecked,
+        enabled: status.enabled,
+      };
+    } catch {
+      result.app = { version: require('../version') };
+    }
 
     res.json(result);
   } catch (err) {

src/version.js

@@ -2,4 +2,4 @@
 // Single source of truth for the application version.
 // Updated automatically by: npm version X.Y.Z  (via scripts/sync-version.js)
 // server.js reads this to inject into index.html at startup — no build step needed.
-module.exports = '7.3.1';
+module.exports = '7.3.3';