feat(container): update image ghcr.io/rommapp/romm (5.0.0 ➔ 5.1.0) - #3971
Open
renovate[bot] wants to merge 1070 commits into
Open
feat(container): update image ghcr.io/rommapp/romm (5.0.0 ➔ 5.1.0)#3971renovate[bot] wants to merge 1070 commits into
renovate[bot] wants to merge 1070 commits into
Conversation
konflate — summaryNote +513 added · 1239 changed · −415 removed — 2167 resources · 440 apps · 98 CRDs · 1667 not shown Blast radius
Warning ⚠ Cautions
Image changes
konflate · rendered |
Super-linter summary
All files and directories linted successfully For more information, see the GitHub Actions workflow run Powered by Super-linter |
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
ghcr.io/rommapp/romm: 5.0.0 → 5.1.0
Verdict: Changes required before merge — an upstream regression enables a destructive nightly task that cannot be turned off with its documented env var. Worth attention because automerge is enabled on this repo.
Breaking changes:
-
The
Cleanup orphaned resourcestask became a nightly scheduled job that cannot be disabled — introduced in 5.1.0 (upstream #3970, then commit06cafd4b1which 5.1.0 is tagged from). Tracked as open upstream bug #3994. Affectskubernetes/apps/games/romm/app/helmrelease.yaml.Through 5.0.x this task was manual-only. In 5.1.0 it is scheduled, and the new
ENABLE_SCHEDULED_CLEANUP_ORPHANED_RESOURCESflag (defaultfalse) is wired to nothing. I verified this against the 5.1.0 source:backend/tasks/scheduled/cleanup_orphaned_resources.pyimportsENABLE_SCHEDULED_CLEANUP_ORPHANED_RESOURCESbut never reads it; the task is constructed withenabled=Truehardcoded andcron_string=SCHEDULED_CLEANUP_ORPHANED_RESOURCES_CRON.backend/config/__init__.pydefaultsSCHEDULED_CLEANUP_ORPHANED_RESOURCES_CRONto0 5 * * *, and_get_envisos.environ.get(var) or fallback— so an explicitly empty value still falls back to the default. Theif not self.cron_string: self.unschedule()guard ininit()is therefore unreachable.backend/tasks/tasks.pyschedules wheneverenabledis true and a cron string is present.
Net effect: on this deployment the task will run every night at 05:00 and
shutil.rmtreeany directory under/romm/resources/roms/<platform_id>[/<rom_id>]whose platform or ROM is not in the database. That path is the Rook-Ceph PVC mounted at/romm/resources(subPathresources), which holds custom uploaded covers, screenshots and manuals.Why this repo is more exposed than average:
ENABLE_SCHEDULED_RESCAN: "true"withSCHEDULED_RESCAN_CRON: "0 3 * * *"runs a scan two hours before the cleanup, and thelibraryvolume block is currently commented out (helmrelease.yamllines 98–105), so RomM has no ROM library mounted at/romm/library. Any DB-vs-disk drift the scan produces is what the 05:00 cleanup then acts on.Mitigation already upstream: #3971 (shipped in 5.1.0) skips the run when the DB reports zero platforms while artwork exists on disk, so the total-wipe case is guarded. A partial mismatch — one missing platform out of several — is not guarded.
Fixes, in order of preference:
- Hold at 5.0.0 until upstream fixes #3994, which is still open.
- Merge, but neutralise the schedule by setting a cron that effectively never fires, e.g.
SCHEDULED_CLEANUP_ORPHANED_RESOURCES_CRON: "0 5 29 2 *"(leap-year only). Note this is a workaround for an upstream bug, not a supported setting — settingENABLE_SCHEDULED_CLEANUP_ORPHANED_RESOURCES: "false"does nothing. Avoid impossible dates such as30 2since croniter can error rather than simply never fire. - Merge as-is and rely on the VolSync backup of the
rommPVC (VOLSYNC_CAPACITY: 5Gi, perkubernetes/apps/games/romm/ks.yaml) for recovery. This works but only after the fact, and a restore rolls back assets too.
New features worth adopting (optional, all in kubernetes/apps/games/romm/app/helmrelease.yaml):
ROMM_SESSION_SECURE_COOKIE: "true"— new in 5.1.0 (upstream #3952), defaultfalse. RomM is served over HTTPS via theenvoy-internalgateway, so marking session and CSRF cookies Secure costs nothing here.ROMM_CORS_ALLOWED_ORIGINS— new in 5.1.0, defaults to*(allow all). Could be narrowed tohttps://romm.${SECRET_DOMAIN}.- Per-field artwork priority (
scan.priority.cover/screenshot/manual) and the new Scan Settings UI — only relevant if aconfig.ymlis introduced; there is none in this repo today.
Not applicable to this repo:
- The MariaDB
log_bin_trust_function_creators/SUPERprivilege warning in the release notes (the loudest warning in the PR body) — this deployment runs PostgreSQL, not MariaDB:externalsecret.yamlsetsROMM_DB_DRIVER: postgresqlagainstpostgres18-rw.database.svc.cluster.local. Binary logging andlog_bin_trust_function_creatorsare MySQL/MariaDB concepts. Upstream #3932 and #3873 are both MariaDB-only and both closed. - New trigger and generated-column migrations —
0100_roms_facets_table.py,0101_virtual_collection_roms.py,0102_music_playlists.py,0103_roms_facets_provider_ids.py. I read 0100 and 0101: both branch onis_postgresql(conn)and take a proper PostgreSQL path (CREATE OR REPLACE FUNCTION romm_sync_rom_facets()/romm_sync_virtual_collection_roms()plusAFTER INSERT OR UPDATEtriggers,ON CONFLICTupserts, and a PostgreSQL-specific view). Thepostgres-initinit container makes therommrole the owner of therommdatabase, so it holds the CREATE and TRIGGER privileges these need — unlike the shared-Postgres non-superuser case in closed upstream issue #3519. Steps are individually guarded for idempotent re-runs after partial failure (#3767, #3930). Expect a longer-than-usual first startup whileroms_facetsandvirtual_collection_romsbackfill. - The reverse-proxy cache warning about a stale
index.htmlafter the nginxCache-Controlchange (#3892) — routing is Envoy Gateway HTTPRoute toenvoy-internal, which does no response caching by default, and there is no CDN in front of an internal gateway. Nothing to purge. A browser hard-refresh may still be needed once. MAX_ASSET_UPLOAD_SIZE_BYTES(512 MiB default) — caps save/state/screenshot uploads, not ROM uploads.- Valkey RDB rewrite fix (#3983) — a welcome I/O reduction, but
redis-datais anemptyDirhere, so it was never hitting the Ceph PVC.
Known issues (open upstream against 5.1.0, all cosmetic or performance — none blocking):
- #3996 Clicking Play shows the initial loading screen before the play page — regression from #3973, which switched the EmulatorJS player to a full document navigation.
- #3992 Library Management
Missingtab slow to load on large libraries. - #3869 PSP fails to launch, #3891 netplay guest has no audio — both pre-date 5.1.0.
Sources consulted:
- https://redirect.github.com/rommapp/romm/releases/tag/5.1.0
- https://redirect.github.com/rommapp/romm/compare/5.0.0...5.1.0
- https://redirect.github.com/rommapp/romm/issues/3994
- 5.1.0 source:
backend/tasks/scheduled/cleanup_orphaned_resources.py,backend/tasks/tasks.py,backend/config/__init__.py,backend/alembic/versions/0100_roms_facets_table.py,backend/alembic/versions/0101_virtual_collection_roms.py - Repo files:
kubernetes/apps/games/romm/app/helmrelease.yaml,kubernetes/apps/games/romm/app/externalsecret.yaml,kubernetes/apps/games/romm/ks.yaml
Claude Review Usage
|
Owner
|
Holding at 5.0.0 — do not merge until rommapp/romm#3994 is fixed upstream. I independently verified the review's core finding against the 5.1.0 source, and it holds:
So the documented off-switch does nothing, and the task would Chose the hold over the leap-year-cron workaround: the workaround depends on unsupported behaviour of a bug we already know is being actively changed upstream, and there is no urgency behind 5.1.0 here. The failing |
….3.2 ➔ 0.4.3) (#3856) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/charts/tuppr](https://redirect.github.com/home-operations/tuppr) | minor | `0.3.2` → `0.4.3` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/1) for more information. --- ### Release Notes <details> <summary>home-operations/tuppr (ghcr.io/home-operations/charts/tuppr)</summary> ### [`v0.4.3`](https://redirect.github.com/home-operations/tuppr/blob/HEAD/CHANGELOG.md#043-2026-07-29) [Compare Source](https://redirect.github.com/home-operations/tuppr/compare/0.4.1...0.4.3) ##### Features - pre-pull the Talos installer image before starting a run ([#​445](https://redirect.github.com/home-operations/tuppr/issues/445)) ([224074f](https://redirect.github.com/home-operations/tuppr/commit/224074fa8600e62aceb44c0b0cafdf37b4c52b4e)) ##### Bug Fixes - **go:** update module github.com/netresearch/go-cron (v0.15.0 → v0.15.1) ([#​441](https://redirect.github.com/home-operations/tuppr/issues/441)) ([dcb45da](https://redirect.github.com/home-operations/tuppr/commit/dcb45da2aaff67bedaedf6e68fecb5a1d45af59e)) ##### Continuous Integration - build the e2e image once and hand it to every leg ([#​442](https://redirect.github.com/home-operations/tuppr/issues/442)) ([562e9ac](https://redirect.github.com/home-operations/tuppr/commit/562e9ac900c24672948a4e9e4099326cb12683c9)) - **github-action:** Update action jdx/mise-action (v4.2.2 → v4.2.3) ([#​437](https://redirect.github.com/home-operations/tuppr/issues/437)) ([0e13632](https://redirect.github.com/home-operations/tuppr/commit/0e136327ce97dc35e90cdf0d1c2f8c2cae96dff3)) ##### Miscellaneous Chores - **mise:** Update tool aqua:astral-sh/uv (0.11.32 → 0.12.0) ([#​440](https://redirect.github.com/home-operations/tuppr/issues/440)) ([caf8759](https://redirect.github.com/home-operations/tuppr/commit/caf87595455a6f8b5a8784c6b486fd1914e239bb)) - standardize release-please changelog sections ([#​438](https://redirect.github.com/home-operations/tuppr/issues/438)) ([0d719dd](https://redirect.github.com/home-operations/tuppr/commit/0d719dd7191ac9cb54e6f0456d4f9537c03343f1)) ### [`v0.4.1`](https://redirect.github.com/home-operations/tuppr/blob/HEAD/CHANGELOG.md#041-2026-07-23) [Compare Source](https://redirect.github.com/home-operations/tuppr/compare/0.4.0...0.4.1) ##### Features - **talosupgrade:** lease-based Alertmanager silence during upgrade runs ([#​416](https://redirect.github.com/home-operations/tuppr/issues/416)) ([00a8ffd](https://redirect.github.com/home-operations/tuppr/commit/00a8ffd7a806fe7e029f77b1fb34774183e06754)) ##### Bug Fixes - **container:** update image ghcr.io/siderolabs/kubelet (v1.36.2 → v1.36.3) ([#​411](https://redirect.github.com/home-operations/tuppr/issues/411)) ([1c2258f](https://redirect.github.com/home-operations/tuppr/commit/1c2258f1ce07436aa57a27489b875ef54f07aeb4)) - **deps:** update kubernetes monorepo (v0.36.2 → v0.36.3) ([#​408](https://redirect.github.com/home-operations/tuppr/issues/408)) ([69a12e0](https://redirect.github.com/home-operations/tuppr/commit/69a12e0227bb511abaa0ca4c4732d7438214b0ce)) - **helm:** stamp Chart.yaml version on release ([#​414](https://redirect.github.com/home-operations/tuppr/issues/414)) ([a769302](https://redirect.github.com/home-operations/tuppr/commit/a769302f5b9fbcabd4d4034108f68279d0915f99)) - **release:** use the generic updater for Chart.yaml stamping ([#​415](https://redirect.github.com/home-operations/tuppr/issues/415)) ([a64bd11](https://redirect.github.com/home-operations/tuppr/commit/a64bd11e8b4aeef3ce0f9eecbd2238ac230ee640)) - **talos:** handle unreachable nodes without stack-trace log spam ([#​413](https://redirect.github.com/home-operations/tuppr/issues/413)) ([313dec8](https://redirect.github.com/home-operations/tuppr/commit/313dec80bc3420771faba7c6ca73e195d24274c1)) ##### Miscellaneous Chores - **mise:** Update tool kubectl (1.36.2 → 1.36.3) ([#​407](https://redirect.github.com/home-operations/tuppr/issues/407)) ([38a7513](https://redirect.github.com/home-operations/tuppr/commit/38a7513fb831171e662fef9a7f28a1ad284a8cd5)) ### [`v0.4.0`](https://redirect.github.com/home-operations/tuppr/blob/HEAD/CHANGELOG.md#040-2026-07-22) [Compare Source](https://redirect.github.com/home-operations/tuppr/compare/0.3.3...0.4.0) ##### ⚠ BREAKING CHANGES - **notification:** apprise-go backend + customizable templates ([#​404](https://redirect.github.com/home-operations/tuppr/issues/404)) ##### Features - **notification:** apprise-go backend + customizable templates ([#​404](https://redirect.github.com/home-operations/tuppr/issues/404)) ([171a7bf](https://redirect.github.com/home-operations/tuppr/commit/171a7bf335eaaf720af7fbe0ddcd7133b8f1d39d)) ##### Documentation - add MkDocs Material site and trim README ([#​405](https://redirect.github.com/home-operations/tuppr/issues/405)) ([a8fce64](https://redirect.github.com/home-operations/tuppr/commit/a8fce647a7bc96e812a4195ab58afbd29cd97279)) ##### Miscellaneous Chores - **mise:** Update tool aqua:astral-sh/uv (0.11.29 → 0.11.31) ([#​406](https://redirect.github.com/home-operations/tuppr/issues/406)) ([95e4955](https://redirect.github.com/home-operations/tuppr/commit/95e495587d21d3b3930dcee63f848ddeb585ef83)) - **mise:** Update tool oxfmt (0.59.0 → 0.60.0) ([#​403](https://redirect.github.com/home-operations/tuppr/issues/403)) ([f171506](https://redirect.github.com/home-operations/tuppr/commit/f171506afeaa1c508cc75ec1a254141b86d270ab)) - **mise:** Update tool zizmor (1.27.0 → 1.28.0) ([#​401](https://redirect.github.com/home-operations/tuppr/issues/401)) ([f333b5e](https://redirect.github.com/home-operations/tuppr/commit/f333b5e7dd5e33290783d386954ed93fe692b2ad)) ### [`v0.3.3`](https://redirect.github.com/home-operations/tuppr/blob/HEAD/CHANGELOG.md#033-2026-07-21) [Compare Source](https://redirect.github.com/home-operations/tuppr/compare/0.3.2...0.3.3) ##### Features - **deps:** update module github.com/prometheus/client\_golang (v1.23.2 → v1.24.0) ([#​391](https://redirect.github.com/home-operations/tuppr/issues/391)) ([5e00779](https://redirect.github.com/home-operations/tuppr/commit/5e007795a6163178e236542aaeb5ca422250559f)) ##### Bug Fixes - **container:** update talos group (v1.13.6 → v1.13.7) ([#​399](https://redirect.github.com/home-operations/tuppr/issues/399)) ([ed62a17](https://redirect.github.com/home-operations/tuppr/commit/ed62a175cf59ece715f4e73eaa5518660674f192)) - **deps:** update module github.com/go-logr/logr (v1.4.3 → v1.4.4) ([#​394](https://redirect.github.com/home-operations/tuppr/issues/394)) ([9c2c9d9](https://redirect.github.com/home-operations/tuppr/commit/9c2c9d951e8358c9efeb5095e05db5d3bba4cf35)) ##### Styles - match .github editorconfig and reflow markdown yaml to 2-space ([#​393](https://redirect.github.com/home-operations/tuppr/issues/393)) ([e067556](https://redirect.github.com/home-operations/tuppr/commit/e067556726f4f539a0d57b74d1c3b58b1fe6253c)) ##### Miscellaneous Chores - **mise:** Update tool cosign (3.1.1 → 3.1.2) ([#​388](https://redirect.github.com/home-operations/tuppr/issues/388)) ([3a6a917](https://redirect.github.com/home-operations/tuppr/commit/3a6a917f6121a5c7dbd5090dd8c19cd277f11bc7)) - **renovate:** group Talos updates ([#​398](https://redirect.github.com/home-operations/tuppr/issues/398)) ([facac29](https://redirect.github.com/home-operations/tuppr/commit/facac29d1b6557afa5cfc9ab7d578c02c205ad68)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…➔ 1.47.0) (#3827) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/coredns/charts/coredns](https://coredns.io) ([source](https://redirect.github.com/coredns/coredns)) | minor | `1.46.1` → `1.47.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/1) for more information. --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…➔ v0.11.0) (#3898) > ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/open-webui/open-webui](https://redirect.github.com/open-webui/open-webui) | minor | `v0.10.2` → `v0.11.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/1) for more information. --- ### Release Notes <details> <summary>open-webui/open-webui (ghcr.io/open-webui/open-webui)</summary> ### [`v0.11.0`](https://redirect.github.com/open-webui/open-webui/releases/tag/v0.11.0) [Compare Source](https://redirect.github.com/open-webui/open-webui/compare/v0.11.0...v0.11.0) ##### Added - 🎨 **Redesigned interface.** Open WebUI has been visually rebuilt from the ground up. All aspects of the User Interface, from the chat view to the admin panel. Now with a narrower conversation column, lighter typography, tidier spacing, consistent menus and dropdowns, clearly outlined text boxes, and settings rearranged. [Commit](https://redirect.github.com/open-webui/open-webui/commit/aedb6bef4e2eb12234c02085a545ff395d96db18), [Commit](https://redirect.github.com/open-webui/open-webui/commit/b3255a36569f295766271b8a2b0bd969b4083b9f), [Commit](https://redirect.github.com/open-webui/open-webui/commit/ba067258dea2229a9956077b3b0d7b1c68b56f66), [Commit](https://redirect.github.com/open-webui/open-webui/commit/8dd862d3383978f21111e63fb2d6029711abed9a), [Commit](https://redirect.github.com/open-webui/open-webui/commit/263bbc77d803e83b9af4b04c0cae29705af5f072), [Commit](https://redirect.github.com/open-webui/open-webui/commit/f8ea15b84a274712dca33daa970f63ed7368043e), [Commit](https://redirect.github.com/open-webui/open-webui/commit/9f17c5960a0e47a09773da4bba12997a31222fc8), [Commit](https://redirect.github.com/open-webui/open-webui/commit/6772b1cb4f4e0d3dc166956014e6e7b9bddc721a), [Commit](https://redirect.github.com/open-webui/open-webui/commit/d3fd860c131846a9458888f9c256a9a29f3767f2), [Commit](https://redirect.github.com/open-webui/open-webui/commit/f1584b5a3764f72de2de6caad507e7c39ad19c23), [Commit](https://redirect.github.com/open-webui/open-webui/commit/2e8d92c7b1a9bb8d35f4a27ba3c73368d735c480), [Commit](https://redirect.github.com/open-webui/open-webui/commit/e58a4633b15ae53d33fc3b46cb97c76d86be325f), [Commit](https://redirect.github.com/open-webui/open-webui/commit/04b146f2cec7e6a01e9d3590eb83655c128fa3c7), [Commit](https://redirect.github.com/open-webui/open-webui/commit/e5e2cd78769639b2df83776f1b991966f922f8b4), [Commit](https://redirect.github.com/open-webui/open-webui/commit/3316ba76aabe5429596ffd130fd36be4d5c3aa6c), [Commit](https://redirect.github.com/open-webui/open-webui/commit/6fcb38fe2e0aded9b85f655cd8f3279e9f4e765e), [Commit](https://redirect.github.com/open-webui/open-webui/commit/421da674468f638f72cc5266c5a3874aa3bca3b7), [Commit](https://redirect.github.com/open-webui/open-webui/commit/d0bea60581eaa07d41f92ad8f86007e83247e061), [Commit](https://redirect.github.com/open-webui/open-webui/commit/21e180182a5096481d4cbb1a8f94212c0a515a40), [Commit](https://redirect.github.com/open-webui/open-webui/commit/d027a32ed134ae104f2f142ba45ff38e56215c5f), [Commit](https://redirect.github.com/open-webui/open-webui/commit/437c06c4795a72700295d7690d5fd65d1153372c), [Commit](https://redirect.github.com/open-webui/open-webui/commit/1bf05ebc7d135d74969438824778c9f73243ba8d), [Commit](https://redirect.github.com/open-webui/open-webui/commit/fd07e3a8e3e619f3712067765b416f0925fa80d3), [Commit](https://redirect.github.com/open-webui/open-webui/commit/d3ea51fd466a8741afc4dfd4f0d0f2f77fb6467f), [Commit](https://redirect.github.com/open-webui/open-webui/commit/4da2ff2655d9abb851805da127cf60b4d9ad1aa7), [Commit](https://redirect.github.com/open-webui/open-webui/commit/2fcb36267f034f2b83f936bfacedc20b680a2710), [Commit](https://redirect.github.com/open-webui/open-webui/commit/1428a4ddce4998cb3664a5ce37e176442dd426fa), [Commit](https://redirect.github.com/open-webui/open-webui/commit/bc8d24c951e9a2c973fc2dd1f2832a2b0855bc0e), [Commit](https://redirect.github.com/open-webui/open-webui/commit/704d07e9a20a830aad7bfc5131b0d92621cf0691), [Commit](https://redirect.github.com/open-webui/open-webui/commit/e88d2e053c2a63cce3823c9b6006f4a184c4fef2), [Commit](https://redirect.github.com/open-webui/open-webui/commit/6940297486d4a5de127efd1a5148b0adcebe87e3), [Commit](https://redirect.github.com/open-webui/open-webui/commit/9ca8cf528af1c49da3f0a2bc3c6ca95c1dedbcf5), [Commit](https://redirect.github.com/open-webui/open-webui/commit/c4efa81d08c425678c810c51b4d62716e1e57117), [Commit](https://redirect.github.com/open-webui/open-webui/commit/bb12b1a18b77d80829cedb2d5bf965808222415b), [Commit](https://redirect.github.com/open-webui/open-webui/commit/49abfbdd155dc22882fdcb09989e4f4964db16ee), [#​27178](https://redirect.github.com/open-webui/open-webui/pull/27178), [Commit](https://redirect.github.com/open-webui/open-webui/commit/dcc7fb1e8ef144205531829f8a56e52171c4d63d), [Commit](https://redirect.github.com/open-webui/open-webui/commit/5c505c1119fec6170c1bc092ed162f86262a887e) - 🤖 **Sub-agents.** Administrators can now enable sub-agents, which let a model hand parts of a task to background helper agents that run their own tool-driven conversations and report results back into the chat, tuned through new "ENABLE\_SUBAGENTS", concurrency, iteration, and system-prompt settings. [Commit](https://redirect.github.com/open-webui/open-webui/commit/7088d245bb45fc69c0b22748563b9f3c6f0daa73), [Commit](https://redirect.github.com/open-webui/open-webui/commit/2f37e853d1259a901f736a823bad29dcc2c3b130), [Commit](https://redirect.github.com/open-webui/open-webui/commit/959558fd82eb2a3c980231acd500b73ba4b698b3), [Commit](https://redirect.github.com/open-webui/open-webui/commit/3005b7bc71fcbd5abc6e73c3e4caa4ea781cdb76) - 📂 **Folder pages.** Opening a folder now takes you to its own page, where its chats load a page at a time, can be sorted by title or last updated, and you can start a new chat straight from the folder. [Commit](https://redirect.github.com/open-webui/open-webui/commit/409fb39717be9ab7becd9e8c01801a08c5bae318) - ⏲️ **Chat timers.** The assistant can now set a timer that brings a prompt back into the conversation later, after a delay or at a set time, and can drop it automatically if you read the chat or reply before it fires. [Commit](https://redirect.github.com/open-webui/open-webui/commit/b23ddeb2800098c6352203ec8fbe9fca40ba415c) - 🔔 **Notification targets.** Notifications now have their own settings tab where you can send them to several webhook destinations, each picking which events it wants, from chats finishing or failing to channel messages and calendar alerts, with a test button and a choice between always notifying or only when you are away, and any webhook you already had is carried over for you. [Commit](https://redirect.github.com/open-webui/open-webui/commit/c55e373b994d3a14c99a97f44261422012f63266), [Commit](https://redirect.github.com/open-webui/open-webui/commit/cf235738f5a44db415012b3b0ebc1f6e752f5439), [Commit](https://redirect.github.com/open-webui/open-webui/commit/200d447f6289faca42f2a666bbabae2c7f3ebadf), [#​24750](https://redirect.github.com/open-webui/open-webui/issues/24750) - 🗯️ **Full replies in channels.** A reply from the assistant in a channel is now saved and shown in full, with its reasoning, tool calls and other structured parts, where it previously came through blank. [Commit](https://redirect.github.com/open-webui/open-webui/commit/498cdab9a548d7d2fd19c389204ee26236fc7efe), [#​26720](https://redirect.github.com/open-webui/open-webui/pull/26720), [#​27409](https://redirect.github.com/open-webui/open-webui/pull/27409), [#​26707](https://redirect.github.com/open-webui/open-webui/issues/26707), [#​26656](https://redirect.github.com/open-webui/open-webui/issues/26656) - 📣 **Notifications from the assistant.** The assistant can now send you a notification itself when something is worth your attention, so a long task can reach you after you have moved on to something else. [Commit](https://redirect.github.com/open-webui/open-webui/commit/c55e373b994d3a14c99a97f44261422012f63266), [Commit](https://redirect.github.com/open-webui/open-webui/commit/200d447f6289faca42f2a666bbabae2c7f3ebadf) - 🌎 **Share a chat with anyone holding the link.** A shared chat can now be set to Open so it opens without signing in, with visitors no longer bounced to the sign-in page on their way to it, which administrators must first allow through a new "Chats Open Sharing" permission that stays off by default, and such pages ask search engines not to index them. [Commit](https://redirect.github.com/open-webui/open-webui/commit/1f0dc90abe879a55f654f2333e29fb0f630831c7), [Commit](https://redirect.github.com/open-webui/open-webui/commit/0e0d08382ac0d05b1ad98c47e8a2e37df2a185bb) - 🔖 **Chat variables.** A model's system prompt can now declare fields such as text boxes and dropdown lists that you fill in for a conversation, with the values saved alongside the chat and carried over when it is forked or cloned. [Commit](https://redirect.github.com/open-webui/open-webui/commit/bef8ae4b2f05ca49ed88a02ab7a3cdc11b62c4f1), [Commit](https://redirect.github.com/open-webui/open-webui/commit/4e869011cd5040b5d6a197fc83d5f50d2425dbc2), [Commit](https://redirect.github.com/open-webui/open-webui/commit/1e88367cc837b39c0e9958fefbe053803336dce2), [Commit](https://redirect.github.com/open-webui/open-webui/commit/8cbb7f765cfc9c9b3237a6c5593cd93f849033f0), [Commit](https://redirect.github.com/open-webui/open-webui/commit/b35e2d265a4e4a2f2a075b31917d48be1dd9ef19), [Commit](https://redirect.github.com/open-webui/open-webui/commit/239cb740077a14e452ad002a1e671a09ab558e40), [#​26915](https://redirect.github.com/open-webui/open-webui/discussions/26915) - 🗄️ **LDAP group synchronization.** Administrators can now map LDAP groups to Open WebUI groups from the authentication settings, with optional automatic creation of missing groups, so a user's group memberships are kept in step with the directory each time they sign in. [#​27263](https://redirect.github.com/open-webui/open-webui/pull/27263), [#​18015](https://redirect.github.com/open-webui/open-webui/issues/18015) - 👥 **Restrict sharing with groups.** Admins can now stop resources from being shared with entire groups through a new "USER\_PERMISSIONS\_ACCESS\_GRANTS\_ALLOW\_GROUPS" permission, which stays enabled by default so existing group sharing keeps working untouched. [Commit](https://redirect.github.com/open-webui/open-webui/commit/4ed19d504bd30c0fc801e9228d9816669ec1c09c), [Commit](https://redirect.github.com/open-webui/open-webui/commit/f84dabe3d97ff701c097055023f28f3f2f7ebd07), [Commit](https://redirect.github.com/open-webui/open-webui/commit/77da3d8c81b9a6fda4354619de94f5d433328d8e), [Commit](https://redirect.github.com/open-webui/open-webui/commit/84e4d6ef8277f4b4f3ac4d355b3219e9b5a37268), [#​27124](https://redirect.github.com/open-webui/open-webui/pull/27124) - 🤝 **Shared folder collaboration.** People with access to a shared folder can now use its files and system prompt as knowledge in chat and, with write access, rename and manage the folder, all according to their read or write permission. [Commit](https://redirect.github.com/open-webui/open-webui/commit/797293c74957bd79e42262d1dc0fd637a45d0357), [Commit](https://redirect.github.com/open-webui/open-webui/commit/caa2457c17e592587b804f21054cc000944af75c), [Commit](https://redirect.github.com/open-webui/open-webui/commit/009715cd63d1c8b5320aba68e9a70afcde519016), [Commit](https://redirect.github.com/open-webui/open-webui/commit/53ccd718a53de25bb6d61476a6617bfb3f130a44) - 👁️ **Chat previews in the sidebar.** Hovering a chat in the sidebar now shows a compact preview of its recent messages, so you can find the conversation you want without opening it. [Commit](https://redirect.github.com/open-webui/open-webui/commit/d0f7da4f45b8831b09b2ab3ec8f91aa354d90ba3), [Commit](https://redirect.github.com/open-webui/open-webui/commit/aaf2834db758bfec69408ab4cabcf324965c221c), [Commit](https://redirect.github.com/open-webui/open-webui/commit/1513ddaf58fe18029086880461d7cad0649a699c), [Commit](https://redirect.github.com/open-webui/open-webui/commit/93bd05271c07c249978d69abf3297fd2841900f9) - 🕗 **Local message timestamps.** Message timestamps now appear on hover in your device's local date and time format, with the full weekday and date shown in a tooltip. [Commit](https://redirect.github.com/open-webui/open-webui/commit/797293c74957bd79e42262d1dc0fd637a45d0357), [Commit](https://redirect.github.com/open-webui/open-webui/commit/f84dabe3d97ff701c097055023f28f3f2f7ebd07) - 📇 **User variables.** You can now store your own values in account settings, such as your role or how you like answers written, and a model's system prompt can insert them wherever they are needed. [Commit](https://redirect.github.com/open-webui/open-webui/commit/bd5d7b2e879511882429075d804d9222956f4a1a), [Commit](https://redirect.github.com/open-webui/open-webui/commit/212eec408ca320edfa2271e604d10e14b6a9bc1a), [Commit](https://redirect.github.com/open-webui/open-webui/commit/793a43d9c48225925929eb312fe2b70d5914d1da) - 🧺 **Automations that file their chats away.** An automation can now be pointed at one of your folders, from the dialog, the editor or by asking the assistant, so each run lands there instead of loose in your chat list, and the folder is cleared automatically if it is later deleted. [Commit](https://redirect.github.com/open-webui/open-webui/commit/f798d05586a140f1a6b51f1e51b2b2a63d079d45), [Commit](https://redirect.github.com/open-webui/open-webui/commit/bab71ed08b5af6f4a8ff2daa02792baae9edab03), [Commit](https://redirect.github.com/open-webui/open-webui/commit/db5c092299471444c356216d5ef39b382ba1aa1e) - 🔵 **See what you have not read yet.** Folders in the sidebar now carry a count of chats with something new in them, a folder's own page marks unread chats with a dot, shows a spinner on any still generating, clears the dot as you open one, and keeps itself up to date as replies finish elsewhere, unread chats sort to the top of a folder, and you can mark a single chat unread again mark everything in a folder read, or mark every chat read at once from the sidebar. [Commit](https://redirect.github.com/open-webui/open-webui/commit/f798d05586a140f1a6b51f1e51b2b2a63d079d45), [Commit](https://redirect.github.com/open-webui/open-webui/commit/f867825bf3b7699bc2bd967ef46b2bb63e48b098), [Commit](https://redirect.github.com/open-webui/open-webui/commit/1de36d600f7191c28a98bf4b347b44cf8f1bef43), [Commit](https://redirect.github.com/open-webui/open-webui/commit/85c47fb467177ed811ba77dfe62461dfbe8e2548), [Commit](https://redirect.github.com/open-webui/open-webui/commit/b7489bbc6c4e376c017edffd8da3c2eb4e6c1c8e), [Commit](https://redirect.github.com/open-webui/open-webui/commit/3cd72ee6a8e93dc39a4d4c173117056e25326c8a), [Commit](https://redirect.github.com/open-webui/open-webui/commit/6f93ecd4fd77b0d51a5fbbd2fc3fd6d151036a55), [Commit](https://redirect.github.com/open-webui/open-webui/commit/e5a08d52208e8b1ed07ff94906e27d174146b1ca), [Commit](https://redirect.github.com/open-webui/open-webui/commit/8ddf119570b3c0b04b673d41cb2363370c23939b) - 🗜️ **Compact a chat on demand.** Typing a compact command in a long conversation now summarizes the earlier turns straight away, instead of waiting for it to happen automatically once the conversation grows past the threshold. [Commit](https://redirect.github.com/open-webui/open-webui/commit/7a9928ef172b7c280c377c86cb52957e39340158), [Commit](https://redirect.github.com/open-webui/open-webui/commit/75894161e46aafe30a7db4ecc946af60f04495e4) - 🌿 **Fork a chat.** Every response now has a fork button that copies the conversation up to that point into a new chat which remembers where it branched, so you can carry on down a different path without touching the original. [Commit](https://redirect.github.com/open-webui/open-webui/commit/63ada247066dfc51e0e9559366f0cfd9a98db40b), [Commit](https://redirect.github.com/open-webui/open-webui/commit/cf887b68ea58bcd1d8b035842c4ea35a5113ed8b), [Commit](https://redirect.github.com/open-webui/open-webui/commit/73421c5b42ac5c2ebc5faa520b7ed3fa0e39f10d), [Commit](https://redirect.github.com/open-webui/open-webui/commit/e769f9ff4f9fa7b0faebdd4f34ff98fe0dcc300d) - 📌 **Pin the conversation map.** The chat overview now has a pin control that stops it recentring on the newest message, so you can keep looking at the branch you were reading while a reply comes in. [#​25736](https://redirect.github.com/open-webui/open-webui/pull/25736) - 📊 **Chat status at a glance.** The slash menu now shows how full the context window is, and a new status command opens a panel with context usage, queued messages, running tasks, and the chat ID. [Commit](https://redirect.github.com/open-webui/open-webui/commit/7a9928ef172b7c280c377c86cb52957e39340158), [Commit](https://redirect.github.com/open-webui/open-webui/commit/263bbc77d803e83b9af4b04c0cae29705af5f072) - 🎹 **Customizable keyboard shortcuts.** Most keyboard shortcuts can now be rebound to key combinations of your choosing in settings, which saves them to your account, warns you when two actions share a combination, and offers a reset to the defaults, with moving to the previous or next chat and opening the controls panel available to bind as well. [Commit](https://redirect.github.com/open-webui/open-webui/commit/343eb1d659262cc9d762a2ce49bef25434a03bfa), [Commit](https://redirect.github.com/open-webui/open-webui/commit/de681aa543b356d456b83c13ad88c7f9941319e7), [#​26624](https://redirect.github.com/open-webui/open-webui/pull/26624) - ⌨️ **Turn keyboard shortcuts off.** A new switch in the keyboard settings disables every configurable shortcut and hides its hint, so combinations that clash with your browser or operating system pass straight through. [#​27300](https://redirect.github.com/open-webui/open-webui/pull/27300), [#​1008](https://redirect.github.com/open-webui/open-webui/issues/1008) - ⌨️ **Skills in slash commands.** Typing a slash in the message input now lists your skills alongside your prompts, grouped under headings and with descriptions on hover, so you can attach a skill without leaving the keyboard. [Commit](https://redirect.github.com/open-webui/open-webui/commit/9588c97e64e10d161a9a0ab1ab9ba3fee6cbb94d) - 📎 **Attach anything with the at menu.** Typing an at sign in the message input now searches your folders, knowledge collections, and individual files as well as your models, and pasting a link offers it as a web page or YouTube attachment. [Commit](https://redirect.github.com/open-webui/open-webui/commit/e8b4c7f9e212253267b8c79dc5360894f0d91bec) - 📝 **Chat with a note.** Chatting with a note now gives you the full chat experience, including model choice, tools and file attachments, alongside suggested prompts, a button to insert a response straight into the note, edits that appear in the note as the assistant makes them, and as many separate conversations per note as you want to keep. [Commit](https://redirect.github.com/open-webui/open-webui/commit/423cafd4e75e34b487f3b5d10ec1c506f073b3da), [Commit](https://redirect.github.com/open-webui/open-webui/commit/185bca8552ee3f87ea95fdcad32a433924881b9a) - ↕️ **Sort your lists.** The notes, prompts, models, knowledge, skills, tools and functions lists can now be sorted by title or by when they were last updated, in either direction, by clicking the column headings. [Commit](https://redirect.github.com/open-webui/open-webui/commit/30c91e46e5d237bee3c8805bd54749408cc2727a), [Commit](https://redirect.github.com/open-webui/open-webui/commit/56f2cb530259df5393ea1ae844bad5cc6b2c810c), [#​27457](https://redirect.github.com/open-webui/open-webui/pull/27457), [#​27456](https://redirect.github.com/open-webui/open-webui/discussions/27456) - 🗒️ **Notes without stored contents.** A note whose contents were never filled in now opens and saves normally instead of failing. [Commit](https://redirect.github.com/open-webui/open-webui/commit/6c59ef313fdaac7fa8e9089be758c4651f8b9412) - 📄 **Note attachments.** Notes now have an upload option in their menu and show attached files above the note itself, where you can open or remove them, instead of only accepting files dropped onto the page. [Commit](https://redirect.github.com/open-webui/open-webui/commit/c4c4ab57e33bb4359b51a4c255f4569fa38a5058), [Commit](https://redirect.github.com/open-webui/open-webui/commit/0dc93b8ae798ad834e7f3327571452bfdf4c218f) - 🗂️ **The assistant can search your attachments.** A new Files capability lets the model list the files attached to the chat and search them by meaning or by exact text, and read the parts it needs, rather than having their whole contents pushed into the conversation up front, and knowledge collections or notes attached to a chat are now announced to the model so it can query those the same way. [Commit](https://redirect.github.com/open-webui/open-webui/commit/57e60423b9963c4a69fdfda7ae5799efc5583010), [Commit](https://redirect.github.com/open-webui/open-webui/commit/55e0801dab8fe5f8bceff7d7c49772676724b8b1), [#​26711](https://redirect.github.com/open-webui/open-webui/pull/26711), [#​27232](https://redirect.github.com/open-webui/open-webui/issues/27232), [#​26708](https://redirect.github.com/open-webui/open-webui/issues/26708) - 🔎 **Search in the attachment menu.** The attachment menu now lets you search your knowledge bases, notes, files, and chats instead of scrolling to find them, with matching text shown for chats. [Commit](https://redirect.github.com/open-webui/open-webui/commit/668f9fe3905fea5fdfccb2b9b308c8f4d7d2f061) - ⚗️ **Default file upload mode.** You can now choose in settings how attached files are handled by default, rather than picking that on each upload. [#​20900](https://redirect.github.com/open-webui/open-webui/pull/20900), [#​18431](https://redirect.github.com/open-webui/open-webui/issues/18431) - ⬇️ **Response auto-scroll toggle.** A new interface setting lets you stop the view following a reply as it is written, so you can read earlier text while generation continues. [Commit](https://redirect.github.com/open-webui/open-webui/commit/cea991260f279f004489dab5d930bc25b0abf612), [#​26826](https://redirect.github.com/open-webui/open-webui/pull/26826) - 📜 **Client certificates for SearXNG.** Web search can now present a client certificate to a SearXNG instance that requires one, through new "SEARXNG\_CLIENT\_CERT\_FILE" and "SEARXNG\_CLIENT\_KEY\_FILE" settings. [Commit](https://redirect.github.com/open-webui/open-webui/commit/def26ce266c2e1d80e31b3ad12099db61a674832), [#​26992](https://redirect.github.com/open-webui/open-webui/issues/26992) - 🔭 **OpenSERP web search.** Web search can now run against a self-hosted OpenSERP instance, which returns results from several major search engines without any API key, configured through a new "OPENSERP\_BASE\_URL" setting. [#​27437](https://redirect.github.com/open-webui/open-webui/pull/27437), [#​27438](https://redirect.github.com/open-webui/open-webui/issues/27438) - 🥇 **Model order as a setting.** Administrators can now set the order models appear in through a new "MODEL\_ORDER\_LIST" variable, so the arrangement survives a restart on instances that do not persist configuration. [#​27420](https://redirect.github.com/open-webui/open-webui/pull/27420), [#​27206](https://redirect.github.com/open-webui/open-webui/issues/27206) - ⏱️ **Idle cap for streamed replies.** Administrators can now set an "AIOHTTP\_CLIENT\_STREAM\_IDLE\_TIMEOUT" that ends a streamed reply when the provider stops sending anything for that long, instead of holding the connection open until the overall timeout expires. [Commit](https://redirect.github.com/open-webui/open-webui/commit/4a7d4ebadac27d652ec200fa3939f10e9a5c17ed), [Commit](https://redirect.github.com/open-webui/open-webui/commit/c727643e05f3597395ee1a60b17117d04f693a18) - 🖼️ **Media types an extraction engine may handle.** Administrators can now list which image and video types the configured content extraction engine is allowed to process, instead of media being passed to it only when the engine is the external one, so an engine with its own text recognition can take images. [Commit](https://redirect.github.com/open-webui/open-webui/commit/db2d24896b0682191a54f41c6b9f0b9d2971637f), [#​26940](https://redirect.github.com/open-webui/open-webui/pull/26940), [#​14768](https://redirect.github.com/open-webui/open-webui/issues/14768) - 🧵 **Where a channel reply lands.** Administrators can now choose whether a reply to a mention posts in a thread under that message or straight into the channel. [Commit](https://redirect.github.com/open-webui/open-webui/commit/db2d24896b0682191a54f41c6b9f0b9d2971637f), [#​27410](https://redirect.github.com/open-webui/open-webui/pull/27410) - 📚 **Limits for knowledge tools.** Administrators can now set how much a knowledge search or file view may return, how many files one search may scan, and how many matches are reported, and a knowledge command's whole output is now capped so a single call cannot flood the conversation. [Commit](https://redirect.github.com/open-webui/open-webui/commit/11e61b69ebd922602edc37ded7b42fdd43bb8456), [#​27524](https://redirect.github.com/open-webui/open-webui/pull/27524), [#​27327](https://redirect.github.com/open-webui/open-webui/issues/27327), [#​26139](https://redirect.github.com/open-webui/open-webui/issues/26139) - 🎛️ **File streaming chunk size.** Administrators can now tune how large each chunk of a streamed file transfer is through a new "AIOHTTP\_FILE\_STREAM\_CHUNK\_SIZE" setting. [Commit](https://redirect.github.com/open-webui/open-webui/commit/429f2df50cd2f0ec8d0a1bb4136a46e2f94a4bf5) - 🪛 **Model for summarizing long chats.** Administrators can now pick a dedicated model to write context compaction summaries, separate from the task model, with the conversation's own model used when none is chosen. [#​26806](https://redirect.github.com/open-webui/open-webui/pull/26806), [#​27051](https://redirect.github.com/open-webui/open-webui/issues/27051) - 📏 **Context compaction token cap.** Administrators can now set a "Token Cap" that limits how high per-model context compaction thresholds are allowed to reach, giving finer control over long-conversation summarization. [Commit](https://redirect.github.com/open-webui/open-webui/commit/5c389ad93f0668d4bab717d14bd189b679338ef2), [Commit](https://redirect.github.com/open-webui/open-webui/commit/31996a5acfe1458720fa19f1b9fb4da95749b5e6), [Commit](https://redirect.github.com/open-webui/open-webui/commit/44c2a27ce0695d8e9c7e72f9a84dc325cb15096a) - ⚖️ **Retained messages after compaction.** Administrators can now set what share of recent messages survives when a long conversation is summarized, between a tenth and half of it. [Commit](https://redirect.github.com/open-webui/open-webui/commit/33cf3fbb7f017ab1b79dce5c5ca4d4e1c3092844), [#​27050](https://redirect.github.com/open-webui/open-webui/issues/27050) - 🧠 **Memory as a per-model capability.** Whether a model receives your stored memories is now a switch on the model itself, so it can be left on for everyday assistants and off for ones that should start from nothing. [Commit](https://redirect.github.com/open-webui/open-webui/commit/6732852ce6c1a2a445bc001b122c60cf12e0278b), [#​26861](https://redirect.github.com/open-webui/open-webui/pull/26861), [#​18610](https://redirect.github.com/open-webui/open-webui/discussions/18610) - ☑️ **Searchable model pickers.** When editing a model, the Tools, Skills, Knowledge, Voice, Filters and Actions pickers now let you search and toggle items in place, select or clear them all at once, and see what is active at a glance. [Commit](https://redirect.github.com/open-webui/open-webui/commit/e355959e9156fd61a1105953d731d007fbb4bae3), [Commit](https://redirect.github.com/open-webui/open-webui/commit/e1f96aa20ef80c8b01e3a81039d2cca3001d0ef5), [Commit](https://redirect.github.com/open-webui/open-webui/commit/fa889837e9e90c7284def56fac2daed20a3ce699), [Commit](https://redirect.github.com/open-webui/open-webui/commit/5424ac58917d2a21f21256b62d1c42f1a8c51c51), [Commit](https://redirect.github.com/open-webui/open-webui/commit/ea2e3d0afc76fa99f2af665fd50425dd28d000d5), [Commit](https://redirect.github.com/open-webui/open-webui/commit/cda5bdb9d42886dfe74d05907179e3f96097030c), [#​26758](https://redirect.github.com/open-webui/open-webui/issues/26758) - 🎚️ **Switch for single sign-on.** OAuth and OIDC now have their own on and off switch in the authentication settings, matching the LDAP one above it, so sign-in through a provider can be turned off without clearing the configuration. [#​26988](https://redirect.github.com/open-webui/open-webui/pull/26988) - 🖲️ **One sign-in attempt at a time.** The sign-in, sign-up and LDAP form now disables its buttons while a request is in flight, so a slow response no longer turns repeated clicks or Enter presses into several concurrent attempts. [#​27416](https://redirect.github.com/open-webui/open-webui/pull/27416), [#​27264](https://redirect.github.com/open-webui/open-webui/issues/27264) - 🛂 **Trusted clients for token exchange.** Administrators can now list which OAuth clients may have their tokens exchanged for a session, through a new "OAUTH\_TOKEN\_EXCHANGE\_TRUSTED\_CLIENT\_IDS" setting, so a token a person obtained by signing in to an unrelated application of the same provider can no longer be turned into a session as that person. [#​27546](https://redirect.github.com/open-webui/open-webui/pull/27546), [Commit](https://redirect.github.com/open-webui/open-webui/commit/b190dcf3caa00dc8b7b9c7312828298d9143f60d), [Commit](https://redirect.github.com/open-webui/open-webui/commit/c4332be71e6e9c314e8a13b9d2819a6932561630) - 🚪 **Throttle for token exchange.** Administrators can now cap how often the OAuth token exchange endpoint may be called from one address through new "OAUTH\_TOKEN\_EXCHANGE\_RATE\_LIMIT" and "OAUTH\_TOKEN\_EXCHANGE\_RATE\_LIMIT\_WINDOW" settings, which bound automated attempts with leaked or guessed tokens and stay off until set. [Commit](https://redirect.github.com/open-webui/open-webui/commit/453b9fb0291c0de8957a2713988c7c53dbcc5465) - 🔏 **PKCE for every sign-in provider.** The code challenge setting now applies to Google, Microsoft and GitHub sign-in as well as OpenID Connect, so the same protection covers every provider. [Commit](https://redirect.github.com/open-webui/open-webui/commit/40320c113637f80e0466e30cae63ab9ac1ba596e), [#​27302](https://redirect.github.com/open-webui/open-webui/pull/27302) - 🔤 **Embeddings through the OpenAI-compatible API.** Integrations built on OpenAI client libraries can now create embeddings through the Ollama proxy, so embedding requests go through the same sign-in and model access rules as chat instead of needing direct access to Ollama. [#​27332](https://redirect.github.com/open-webui/open-webui/pull/27332), [Commit](https://redirect.github.com/open-webui/open-webui/commit/9f00b62b3a005b030ffaf638fd1da4c27e3c0586), [#​27328](https://redirect.github.com/open-webui/open-webui/discussions/27328), [Docs:#​1331](https://redirect.github.com/open-webui/docs/pull/1331) - 🎚️ **Passthrough parameters per connection.** Administrators can now list request parameters that a connection should receive untranslated, under a new Advanced section in connection settings, so provider-specific options reach the upstream API intact. [Commit](https://redirect.github.com/open-webui/open-webui/commit/bb12b1a18b77d80829cedb2d5bf965808222415b) - 🅰️ **Anthropic requests passed straight through.** Requests to the Anthropic-compatible API aimed at an Anthropic or LiteLLM connection now reach the provider untouched rather than being translated on the way, and LiteLLM is selectable as a connection type. [Commit](https://redirect.github.com/open-webui/open-webui/commit/b81627b2c95aad184a6abf59145ca3b18a32bb2c) - 💭 **Reasoning in Anthropic responses.** Responses from the Anthropic-compatible API now carry the model's reasoning as thinking blocks, in both streamed and complete responses. [Commit](https://redirect.github.com/open-webui/open-webui/commit/bb12b1a18b77d80829cedb2d5bf965808222415b) - 🧩 **Structured output through the Anthropic-compatible API.** Requests can now ask for a JSON schema or JSON object response and set a reasoning effort, which are carried through to the upstream model. [Commit](https://redirect.github.com/open-webui/open-webui/commit/bb12b1a18b77d80829cedb2d5bf965808222415b) - 🪧 **Group names in forwarded headers.** Custom headers on a connection can now carry the groups a person belongs to, by name or by id, so an upstream service or gateway can apply its own rules per group. [#​27236](https://redirect.github.com/open-webui/open-webui/pull/27236), [#​26834](https://redirect.github.com/open-webui/open-webui/issues/26834) - 🪪 **User identity forwarded to Mistral OCR.** Document extraction through Mistral OCR now carries the requesting user's identity when user info forwarding is enabled, so a gateway in front of it can attribute requests per user like other outbound integrations already do. [#​27253](https://redirect.github.com/open-webui/open-webui/pull/27253), [#​27250](https://redirect.github.com/open-webui/open-webui/issues/27250) - 🔢 **Anthropic token-counting endpoint.** The Anthropic-compatible API now offers a token-counting endpoint, so integrations can check how many input tokens a request will use before sending it. [Commit](https://redirect.github.com/open-webui/open-webui/commit/08dacd19da1b0eefd9d274d24ed59ec1e5d5a2de), [Commit](https://redirect.github.com/open-webui/open-webui/commit/23062e9fcaace42cf06db33f9533127bbbcd33d9) - 🖲️ **Terminal instructions read fresh.** The instructions a terminal server provides are now fetched for each request, so changing them on the server takes effect immediately instead of after re-saving the connection or restarting. [#​27242](https://redirect.github.com/open-webui/open-webui/pull/27242) - 🖥️ **Live terminal server policies.** Administrators can now read an orchestrator terminal server's current policy and lifecycle settings directly in connection settings rather than relying on a locally cached copy. [Commit](https://redirect.github.com/open-webui/open-webui/commit/2f37e853d1259a901f736a823bad29dcc2c3b130), [Commit](https://redirect.github.com/open-webui/open-webui/commit/3005b7bc71fcbd5abc6e73c3e4caa4ea781cdb76) - 🌍 **Model privacy at a glance.** Admins can now make a model public or private straight from its menu in the model list, where each model is marked as public, shared, or private. [Commit](https://redirect.github.com/open-webui/open-webui/commit/fb2ea272952ed96b0db5ac59a861637204100cb6) - 📈 **Personal usage dashboard.** A new Usage tab in settings shows your own activity over time, including a token-activity heatmap, current and longest streaks, lifetime and peak token counts, your longest active chat, and your most used models and tools. [Commit](https://redirect.github.com/open-webui/open-webui/commit/af9a315ac30b83241f3df5556d7a2abfcd5d25b0) - 🧠 **Memories in settings.** Your memories are now listed directly in personalization settings where you can search, add, edit, and remove them, instead of being tucked behind a separate manage dialog. [Commit](https://redirect.github.com/open-webui/open-webui/commit/db934a3b4ff16532b48670d7cc75e7048a6db993) - 💾 **Import notes and automations.** Notes can now be brought in from text and markdown files, and automations can be exported and imported as files, so you can move them between instances. [Commit](https://redirect.github.com/open-webui/open-webui/commit/f8350360dfd60ff890b73fe2f39aaf20a52ad28b), [Commit](https://redirect.github.com/open-webui/open-webui/commit/2018546a7baeb853bb4d98e2fb2a092ef20aa431) - 🧮 **Counts in the tabs.** The workspace tabs now show how many models, knowledge bases, prompts, skills, and tools you have, and the admin tabs do the same for users, groups, leaderboard entries, and feedback, so you can see the size of each section without opening it. [Commit](https://redirect.github.com/open-webui/open-webui/commit/05e3f713175c1eea43a99f29521eb01700c21d3c), [Commit](https://redirect.github.com/open-webui/open-webui/commit/727041da78bcfcb44c0e4c83c4e6a641b7061b90), [Commit](https://redirect.github.com/open-webui/open-webui/commit/f8ea15b84a274712dca33daa970f63ed7368043e) - 🧾 **Group permissions at a glance.** The groups list now shows whether each group uses custom or default permissions, without opening it. [Commit](https://redirect.github.com/open-webui/open-webui/commit/ccb1ab7739fbeb77c810036dcac240570034a56a), [Commit](https://redirect.github.com/open-webui/open-webui/commit/1d1f60ab440b167b9c6ab8f4011b884caa99f27d) - 📤 **Streamed file transfers.** Uploading a model, pipeline or audio file now sends it in chunks instead of holding the whole thing in memory, and reading and writing files no longer blocks other requests, so large transfers no longer spike memory or stall the server. [Commit](https://redirect.github.com/open-webui/open-webui/commit/429f2df50cd2f0ec8d0a1bb4136a46e2f94a4bf5), [#​27351](https://redirect.github.com/open-webui/open-webui/pull/27351), [#​27349](https://redirect.github.com/open-webui/open-webui/issues/27349) - 🧰 **Built-in tool descriptions built once.** The descriptions handed to the model for the built-in tools are now worked out once at startup rather than rebuilt on every message. [Commit](https://redirect.github.com/open-webui/open-webui/commit/d727ee4d1febb2b72d5f6c26668c562eadca54f1), [Commit](https://redirect.github.com/open-webui/open-webui/commit/12974c9e4ed97b2d68c4ad129c057ff0e774254e), [#​27374](https://redirect.github.com/open-webui/open-webui/pull/27374), [#​27396](https://redirect.github.com/open-webui/open-webui/pull/27396) - 🪺 **Records read without a double pass.** Loading a model, tool, prompt, skill, note, knowledge base, channel or calendar no longer converts the record twice on the way out. [Commit](https://redirect.github.com/open-webui/open-webui/commit/f1409266feb224e74fe023d7459f1e2b5aad0b29), [#​27377](https://redirect.github.com/open-webui/open-webui/pull/27377) - 🔧 **Faster tool and knowledge base listings.** Listing tools no longer loads each one's full source, and working out which tools and knowledge bases you can see takes a single check rather than one per item. [#​27387](https://redirect.github.com/open-webui/open-webui/pull/27387) - 🧊 **Quicker collection checks on Chroma.** Checking whether a collection exists now asks for that one collection instead of listing them all, which grew slower with every knowledge base and file. [Commit](https://redirect.github.com/open-webui/open-webui/commit/48ee357156fd7f567ea13eb5ddba0a25701c0351), [#​27394](https://redirect.github.com/open-webui/open-webui/pull/27394) - 🔠 **Tokenizer loaded once.** The tokenizer used to split documents is now kept after first use rather than being loaded again for every file. [Commit](https://redirect.github.com/open-webui/open-webui/commit/7e31f64bc81b2264136a85efc7bb86c00f346784), [#​27394](https://redirect.github.com/open-webui/open-webui/pull/27394) - 📗 **Faster knowledge base file lists.** Opening a knowledge base now loads just the file names and details instead of the entire extracted text of every document, so large collections appear almost instantly. [#​27386](https://redirect.github.com/open-webui/open-webui/pull/27386), [#​26144](https://redirect.github.com/open-webui/open-webui/issues/26144) - 🗝️ **Faster file access checks.** Working out whether you can open a file no longer scales with how many workspace models and knowledge bases exist, so opening files and listing folder contents stays quick on large instances. [#​27383](https://redirect.github.com/open-webui/open-webui/pull/27383) - 🕰️ **Faster automation scheduling.** Working out when an automation that repeats every few minutes or hours runs next is now near instant, instead of taking twenty seconds or more and slowing further each year. [Commit](https://redirect.github.com/open-webui/open-webui/commit/b3aead23da6cf8ebeedbd9fa3b97c7ac1a3f54ec), [#​26954](https://redirect.github.com/open-webui/open-webui/issues/26954) - 📁 **Faster folder loading.** Your folder list no longer runs a separate lookup for every folder to check where it sits, so it loads in a single pass. [Commit](https://redirect.github.com/open-webui/open-webui/commit/9a49b271aaf5d6eeaec24ab974be38a8c68ddd76) - 🎯 **One round of requests per folder click.** Selecting a folder in the sidebar now fetches the folder, the folder tree, and each expanded folder's chats once instead of two to four times. [#​27540](https://redirect.github.com/open-webui/open-webui/pull/27540), [#​27539](https://redirect.github.com/open-webui/open-webui/issues/27539) - 🎧 **No wasted work when nobody is listening.** Updates for a chat whose tab has been closed, or for requests made through the API, are no longer packaged up only to be discarded, which matters most on long streamed replies. [#​27366](https://redirect.github.com/open-webui/open-webui/pull/27366), [Commit](https://redirect.github.com/open-webui/open-webui/commit/858e9236df1c3d84782e373c22b56cfc312b6db8) - 📑 **Cheaper audit logging.** With audit logging on, each request is no longer authenticated a second time just to record the log entry, so audited instances carry noticeably less overhead. [#​27373](https://redirect.github.com/open-webui/open-webui/pull/27373) - 🪧 **Cheaper tagging after each reply.** Saving the tags generated for a conversation now updates just that field instead of loading, rewriting and re-reading the whole conversation, which cost more the longer the chat. [#​27382](https://redirect.github.com/open-webui/open-webui/pull/27382) - ✍️ **Faster saves across the app.** Saving a chat, note, prompt, tool or user setting no longer re-reads the record it just wrote, so writes finish sooner, most noticeably on long conversations. [#​27381](https://redirect.github.com/open-webui/open-webui/pull/27381), [#​27379](https://redirect.github.com/open-webui/open-webui/pull/27379), [Commit](https://redirect.github.com/open-webui/open-webui/commit/c182a95ffdb87bae3d47d93387ec1a26c97740a2), [Commit](https://redirect.github.com/open-webui/open-webui/commit/977c7930623b860949410a73922579daf81705a7) - 🛢️ **Less database overhead per request.** SQLite installations no longer run a connection check before every database call, and requests that never touch the database skip the bookkeeping that used to run regardless. [#​27385](https://redirect.github.com/open-webui/open-webui/pull/27385) - ⚡ **Faster memory lookups.** Stored memories are now indexed so retrieving them stays quick as the number you have grows. [Commit](https://redirect.github.com/open-webui/open-webui/commit/28bdcb063b8d5d6a0b10943b1b2f87b16ff63621), [#​26957](https://redirect.github.com/open-webui/open-webui/pull/26957) - 🪪 **Fewer checks before a reply starts.** Working out whether you may use a model now looks up the model and your group memberships once instead of repeating both, including for every model a workspace model is built on. [#​27378](https://redirect.github.com/open-webui/open-webui/pull/27378) - 👤 **Lighter user activity checks.** Checking whether someone is currently active now reads only that timestamp rather than their whole profile, including their profile image. [Commit](https://redirect.github.com/open-webui/open-webui/commit/c8f2e09fdcafc800c1e3af6da1cd6f2581cd9191), [#​27224](https://redirect.github.com/open-webui/open-webui/pull/27224) - 📨 **Fewer settings lookups when sending a message.** Sending a chat message now reads the settings behind tools, file retrieval, voice, skills and the code interpreter in fewer trips to the database, so replies start sooner. [#​27223](https://redirect.github.com/open-webui/open-webui/pull/27223) - 🪄 **Lighter conversion for Ollama requests.** Preparing a request for an Ollama model no longer copies the entire conversation before sending it, which cost more with every message and repeated on each tool-call round. [#​27371](https://redirect.github.com/open-webui/open-webui/pull/27371) - 🦙 **Fewer settings lookups on Ollama requests.** Ollama chat, generation and embedding requests now read their connection settings once instead of up to four times, so each request reaches the server sooner. [#​27226](https://redirect.github.com/open-webui/open-webui/pull/27226) - 🧹 **Less repeated work on every response.** Security headers are now worked out once at startup rather than rebuilt for each response, and ordinary page requests skip the redirect handling they never needed, so responses carry less overhead. [#​27229](https://redirect.github.com/open-webui/open-webui/pull/27229) - 🚀 **Lower per-request overhead.** Requests no longer each perform a settings lookup before they are handled, trimming a little latency from everything the app does. [Commit](https://redirect.github.com/open-webui/open-webui/commit/4493b56e424db29fa9e72310b1ca6b025c3e5f8b), [#​27395](https://redirect.github.com/open-webui/open-webui/pull/27395), [Commit](https://redirect.github.com/open-webui/open-webui/commit/6ff1df326c76824f0706671b0974df4035cb453f), [Commit](https://redirect.github.com/open-webui/open-webui/commit/85664f650cc111a6b170b97ed0c391d962717bec), [#​27227](https://redirect.github.com/open-webui/open-webui/pull/27227) - 💨 **Leaner filter handling while streaming.** Filters applied to a streaming reply no longer re-read their settings and each plugin's full source from the database for every chunk, so responses with filters enabled cost the server far less work. [#​27228](https://redirect.github.com/open-webui/open-webui/pull/27228), [#​27372](https://redirect.github.com/open-webui/open-webui/pull/27372), [Commit](https://redirect.github.com/open-webui/open-webui/commit/f9107edeebc7ee545d7e3c1f1b7d449c123ab398), [Commit](https://redirect.github.com/open-webui/open-webui/commit/f578d8d67ec2c109b0d8c38d90eaeb4448f83610), [Commit](https://redirect.github.com/open-webui/open-webui/commit/9acbe3aa0f258a3bda593bb98ec81c6acc458d20), [#​27392](https://redirect.github.com/open-webui/open-webui/pull/27392) - 🚦 **No filter bookkeeping without filters.** Streamed API responses only build up the full reply for outlet filters when the model actually has one configured, instead of doing it for every request. [Commit](https://redirect.github.com/open-webui/open-webui/commit/315a6b5995663eabe1c96776d66b6593860d47d6), [#​27391](https://redirect.github.com/open-webui/open-webui/pull/27391) - ✂️ **Cheaper tag detection while streaming.** Watching a reply for reasoning and code blocks now examines only the newly arrived text rather than rescanning the whole answer on every chunk, so a long answer no longer costs progressively more as it grows. [#​27360](https://redirect.github.com/open-webui/open-webui/pull/27360) - 🌊 **Steadier long responses.** Building up a streamed reply no longer costs more work as it grows, so long answers keep pace instead of slowing down toward the end. [#​27231](https://redirect.github.com/open-webui/open-webui/pull/27231), [#​27359](https://redirect.github.com/open-webui/open-webui/pull/27359), [Commit](https://redirect.github.com/open-webui/open-webui/commit/ba556bd8f0517881cb250bb512631ddf8a0c82c3), [#​27390](https://redirect.github.com/open-webui/open-webui/pull/27390) - 📦 **Faster JSON handling as an option.** Administrators can now switch the whole application to a faster encoder through a new "ENABLE\_ORJSON" setting, covering request bodies, responses, upstream provider payloads and live updates, where the encoding of live updates was the largest single cost on the workers handling them in clustered deployments; it stays off by default because the faster encoder is stricter about what it accepts. [#​27583](https://redirect.github.com/open-webui/open-webui/pull/27583) - ⚙️ **Faster Redis handling.** The compiled "hiredis" parser now ships as a dependency and is used automatically, so deployments backed by Redis spend noticeably less processor time reading responses. [#​27282](https://redirect.github.com/open-webui/open-webui/pull/27282) - 🔗 **Fewer Redis round trips per chat.** Deployments backed by Redis now look up the model and connected sessions once per request instead of twice, and fetch the model list in a single call. [#​27225](https://redirect.github.com/open-webui/open-webui/pull/27225) - 🛰️ **Fewer Sentinel lookups.** Redis Sentinel deployments no longer ask which server is the primary and open a fresh connection before every single command, which had caused heavy connection churn and stalls under load. [Commit](https://redirect.github.com/open-webui/open-webui/commit/75a8a0046b5b2ebd9942b25035b346aa953f81cc), [#​27213](https://redirect.github.com/open-webui/open-webui/pull/27213), [#​27210](https://redirect.github.com/open-webui/open-webui/issues/27210) - 📡 **Lighter live connection handling.** Typing indicators, shared document edits and reconnections no longer re-read your account or copy the full participant list each time, and idle sessions are no longer rewritten every few seconds. [Commit](https://redirect.github.com/open-webui/open-webui/commit/021c4c7a2e8b5b213f49800ecd331b1b18c2ef99), [#​27393](https://redirect.github.com/open-webui/open-webui/pull/27393) - 🏎️ **Faster chat search on PostgreSQL.** Searching chats on PostgreSQL now reads from the message table instead of unpacking each conversation's stored data row by row, so results stay quick as your history grows. [Commit](https://redirect.github.com/open-webui/open-webui/commit/cc9a44569ef08b64ff44d15607c43966f362ce75), [#​27221](https://redirect.github.com/open-webui/open-webui/issues/27221) - ⚡ **Lighter model lists.** Model lists no longer carry embedded profile images in their data, so they load faster. [Commit](https://redirect.github.com/open-webui/open-webui/commit/9281adc5647b7046e3ddcc53ac4b84be7f650221), [Commit](https://redirect.github.com/open-webui/open-webui/commit/f3a35507845e4a911c3d278d680a9989bb8d99ad) - 🏗️ **Fewer queries when building the model list.** Assembling the model list now makes fewer database round trips and no longer fetches every plugin's source code along the way, so it comes together faster. [Commit](https://redirect.github.com/open-webui/open-webui/commit/6b655689ccbdf2111620d005a8e6dedb8fb673f8), [#​27389](https://redirect.github.com/open-webui/open-webui/pull/27389) - 🪶 **Model lists without knowledge text.** Model lists no longer include the extracted text of files attached to a model as knowledge, so they stay small regardless of how large those knowledge bases are. [Commit](https://redirect.github.com/open-webui/open-webui/commit/48625e657ff11161c3588af2747598f102c1a4d1), [#​27287](https://redirect.github.com/open-webui/open-webui/issues/27287) - 🔛 **Functions can react to being switched on or off.** Two new events fire just before a function is enabled or disabled, and the function being enabled receives its own event even though it is not active yet, so it can run whatever setup or teardown it needs. [Commit](https://redirect.github.com/open-webui/open-webui/commit/94a60b04573acf6423e9c0519997b779f82e0560), [#​26754](https://redirect.github.com/open-webui/open-webui/pull/26754), [#​26748](https://redirect.github.com/open-webui/open-webui/discussions/26748) - 🔛 **Multiple choice settings in plugins.** A tool or function can now offer a setting where you tick several options from a list, fixed or worked out at the time it is shown, instead of asking you to type a comma-separated list of allowed values. [#​26884](https://redirect.github.com/open-webui/open-webui/pull/26884), [#​26848](https://redirect.github.com/open-webui/open-webui/issues/26848) - 🔌 **Disable plugins entirely.** Administrators can now completely turn off the built-in Tools and Functions plugin surfaces through a new "ENABLE\_PLUGINS" setting, which hides them across the workspace and admin areas and removes their execution paths. [Commit](https://redirect.github.com/open-webui/open-webui/commit/bd6e0b61c2ae073aba9556ae46c345f4749acb84), [Commit](https://redirect.github.com/open-webui/open-webui/commit/8e46450acd7ae11a4dee166d19a7c9833d991e79), [Commit](https://redirect.github.com/open-webui/open-webui/commit/951f96021a970fbd4837a4ee441565c0cf3d2824), [Commit](https://redirect.github.com/open-webui/open-webui/commit/252e6fd855099e1c880f4def18aa09aedbe1733a) - 🧵 **Lighter chat listings and search.** Building a page of chat search results or a folder listing no longer copies each full conversation to read its title and dates, so those pages come together faster and use far less memory while they are built. [#​27388](https://redirect.github.com/open-webui/open-webui/pull/27388) - 📮 **Name lookups off the thread pool.** Looking up a hostname no longer occupies one of the limited threads shared by every other piece of blocking work, so model calls, searches, page fetches and tool calls stop queueing behind each other once a few lookups are slow. [#​27440](https://redirect.github.com/open-webui/open-webui/pull/27440) - 🥬 **Faster web page parsing.** Pages pulled in by web search and web retrieval are now read with a faster parser, cutting roughly a tenth off the time spent on a ten result search. [#​27439](https://redirect.github.com/open-webui/open-webui/pull/27439) - 🧭 **No pointless lookups when filtering search results.** Filtering web search results against a domain list no longer resolves every result to an address first, which had turned a three second search into half a minute wherever the resolver was slow or a name did not resolve. [Commit](https://redirect.github.com/open-webui/open-webui/commit/42ea8a5a2f04b6a57ccb47a61611a62479b60b78), [#​26920](https://redirect.github.com/open-webui/open-webui/issues/26920) - 🚄 **Leaner passthrough streaming.** Responses the server only relays now go straight through in whole network reads instead of being split line by line, roughly halving the work spent shuttling a streamed reply on those routes. [#​27384](https://redirect.github.com/open-webui/open-webui/pull/27384) - 🧶 **Web page parsing off the critical path.** Reading those pages no longer holds up everything else on the server, so other people's replies, live updates and health checks keep flowing during a search instead of stalling for a second or more. [#​27446](https://redirect.github.com/open-webui/open-webui/pull/27446) - 🈶 **Faster uploads of non-English text files.** Working out the encoding of an uploaded text file now samples the part that needs it rather than scanning the whole file, taking a four megabyte Japanese or Chinese document from several seconds down to well under one. [#​27445](https://redirect.github.com/open-webui/open-webui/pull/27445) - ♿ **Improved UI accessibility.** Keyboard and screen reader users can now tell which chat in the sidebar is the one being viewed, open reasoning and detail blocks in a response, expand sidebar sections and open a folder without a mouse, sort the admin user list from the keyboard and hear which column it is sorted by, open a dropdown and its submenus with the keyboard, close them again with Escape and land back where they started, hear which value a dropdown is set to rather than only its label, hear what each admin settings switch, group permission toggle, checkbox, API key field and advanced model parameter slider controls, have the message box announced by its placeholder instead of as an unnamed field, press Enter on Cancel in a confirmation dialog without triggering the delete, reach the regenerate control, jump straight past the sidebar to the conversation with a skip link, hear what an icon-only button does across chat, calls, file previews, modals and the admin pages rather than an unlabelled button, placeholder text, section headings, field descriptions, inactive tab labels, timestamps, counters and icons are now readable against their background when High Contrast Mode is on, and sidebar buttons across notes, automations, the playground, and admin pages announce whether they open or close the sidebar. [#​275 > ✂ **Note** > > PR body was truncated to here. </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19--> --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Luke Evans <contactluke@gmail.com>
## What
Adds a `## Code Review Rules` section to `AGENTS.md` — the section
heading Codex code review looks for when it reviews a pull request.
## Why
Piloting Codex code review (included in ChatGPT Plus) as a second,
advisory reviewer alongside the existing `claude/renovate-review` gate.
Without repository guidance it reviews against generic Kubernetes
expectations and reports this repo's deliberate patterns as defects.
The section is inert until the Codex GitHub app is installed on the
repository, so this change is safe to land on its own.
## Contents
- **Always flag** — the silent-failure cases: internal coordinates in a
public repo, plaintext secrets, an unescaped literal `${VAR}` deploying
blank, an app removal pruning its PVC.
- **Worth flagging** — repo-specific wiring: missing
`metadata.namespace`, quoted anchored ports, hyphenated app names
leaking into route hosts, extra route aliases spending DNS records,
missing `dependsOn` on the secret store, components declared in the
wrong file, protected-infra bumps needing a repo-side change.
- **Do not flag** — the carve-outs a generic reviewer gets wrong: bare
`${VAR}`, YAML anchors, digest-pinned image tags, `OCIRepository` tags
that are deliberately *not* digest-pinned, `HTTPRoute` with no
`Ingress`, schema complaints about pre-substitution YAML,
production-grade HA asks.
Explicitly scoped as advisory so the two reviewers stay complementary:
the gate keeps doing upstream changelog research on dependency PRs,
these rules aim Codex at repo-side wiring.
## Validation
`super-linter` v8.6.0 (the version pinned in `shared-workflows`) run
locally against the changed file with the repository's canonical
markdownlint config staged the way CI stages it — clean, exit 0.
Lefthook pre-commit and `check-internal-identifiers` both pass.
…v2.12.0) (#3970) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/pocket-id/pocket-id](https://redirect.github.com/pocket-id/pocket-id) | minor | `v2.11.0` → `v2.12.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/1) for more information. --- ### Release Notes <details> <summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary> ### [`v2.12.0`](https://redirect.github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2120) [Compare Source](https://redirect.github.com/pocket-id/pocket-id/compare/v2.11.0...v2.12.0) ##### Bug Fixes - sync group membership for users added at creation time ([#​1600](https://redirect.github.com/pocket-id/pocket-id/pull/1600) by [@​ItalyPaleAle](https://redirect.github.com/ItalyPaleAle)) - relax Francis DB usage while HA is still WIP ([#​1602](https://redirect.github.com/pocket-id/pocket-id/pull/1602) by [@​ItalyPaleAle](https://redirect.github.com/ItalyPaleAle)) - honor webauthn user verification setting ([0983e91](https://redirect.github.com/pocket-id/pocket-id/commit/0983e911693396d8c807331ed867be5369f501f2) by [@​stonith404](https://redirect.github.com/stonith404)) - horizontal shadow of cards in light mode cut off ([599f7d1](https://redirect.github.com/pocket-id/pocket-id/commit/599f7d118df0225abf96429c42c26d7c627942a3) by [@​stonith404](https://redirect.github.com/stonith404)) - datatype mismatch between postgres and sqlite causes import to fail ([ad06ea6](https://redirect.github.com/pocket-id/pocket-id/commit/ad06ea6e008ea61edd5a84df0fbab3125ff047c7) by [@​stonith404](https://redirect.github.com/stonith404)) - show only accessible clients on "My Apps" page ([e10f66c](https://redirect.github.com/pocket-id/pocket-id/commit/e10f66c07a8f4a8d42a03bb7edda14d4bf9ba31d) by [@​stonith404](https://redirect.github.com/stonith404)) - autofocus one time input fields ([#​1605](https://redirect.github.com/pocket-id/pocket-id/pull/1605) by [@​James18232](https://redirect.github.com/James18232)) - enforce user verification for login assertions ([4743d59](https://redirect.github.com/pocket-id/pocket-id/commit/4743d5967a6b7e53d6d8c670c62f0bdea3abd4af) by [@​stonith404](https://redirect.github.com/stonith404)) - make oidc device code redemption atomic ([6bd058a](https://redirect.github.com/pocket-id/pocket-id/commit/6bd058ac46c771ff7dc133b72f42c6c341dba6f4) by [@​stonith404](https://redirect.github.com/stonith404)) - race condition in initial admin setup ([ca28ddc](https://redirect.github.com/pocket-id/pocket-id/commit/ca28ddcb04ce2905aaad0c5255caceae723cda56) by [@​stonith404](https://redirect.github.com/stonith404)) - fail early if webauthn session invalid ([968f97f](https://redirect.github.com/pocket-id/pocket-id/commit/968f97fa6174a1319bd33309bf647be3d11bd816) by [@​stonith404](https://redirect.github.com/stonith404)) ##### Features - add support for proxy protocol ([807bd9e](https://redirect.github.com/pocket-id/pocket-id/commit/807bd9e037f201ba1d87c65387091a61c5e65e54) by [@​stonith404](https://redirect.github.com/stonith404)) - add declaritive user id configuration ([#​1622](https://redirect.github.com/pocket-id/pocket-id/pull/1622) by [@​schnz](https://redirect.github.com/schnz)) - migrate one-time and signup tokens to an actor ([#​1611](https://redirect.github.com/pocket-id/pocket-id/pull/1611) by [@​ItalyPaleAle](https://redirect.github.com/ItalyPaleAle)) - add support for declaritive client secret configuration ([#​1619](https://redirect.github.com/pocket-id/pocket-id/pull/1619) by [@​schnz](https://redirect.github.com/schnz)) - add qr code alternative sign in method ([#​1594](https://redirect.github.com/pocket-id/pocket-id/pull/1594) by [@​stonith404](https://redirect.github.com/stonith404)) - migrate app locks to Francis ([#​1624](https://redirect.github.com/pocket-id/pocket-id/pull/1624) by [@​ItalyPaleAle](https://redirect.github.com/ItalyPaleAle)) - drop user initiated one time access token login method ([0c27f73](https://redirect.github.com/pocket-id/pocket-id/commit/0c27f733b95de63855264327443cc65cf2ccefba) by [@​stonith404](https://redirect.github.com/stonith404)) - display country and city on qr code login approval screen ([9e72bc1](https://redirect.github.com/pocket-id/pocket-id/commit/9e72bc1c70506146919a21058f5e20b0f042082a) by [@​stonith404](https://redirect.github.com/stonith404)) ##### Other - Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#​1599](https://redirect.github.com/pocket-id/pocket-id/pull/1599) by [@​dependabot](https://redirect.github.com/dependabot)\[bot]) - update AAGUIDs ([#​1608](https://redirect.github.com/pocket-id/pocket-id/pull/1608) by [@​github-actions](https://redirect.github.com/github-actions)\[bot]) - use actors for db configuration ([#​1604](https://redirect.github.com/pocket-id/pocket-id/pull/1604) by [@​ItalyPaleAle](https://redirect.github.com/ItalyPaleAle)) - remove not used permissions ([942bb3b](https://redirect.github.com/pocket-id/pocket-id/commit/942bb3be2e92bd7b6bf1d89c40cab49544194d43) by [@​stonith404](https://redirect.github.com/stonith404)) - upgrade vulnerable dependencies ([f6b02ef](https://redirect.github.com/pocket-id/pocket-id/commit/f6b02efe4542cd3a57ba222c42fafe1e968a32d8) by [@​stonith404](https://redirect.github.com/stonith404)) - fix missing data in `database.json` ([6e859de](https://redirect.github.com/pocket-id/pocket-id/commit/6e859de2dd55dfc59d9cde3fab5d7a9789c6aca9) by [@​stonith404](https://redirect.github.com/stonith404)) - Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#​1621](https://redirect.github.com/pocket-id/pocket-id/pull/1621) by [@​dependabot](https://redirect.github.com/dependabot)\[bot]) - use `NewTextHandler` instead of `NewHandler` for tint ([8563934](https://redirect.github.com/pocket-id/pocket-id/commit/8563934fd5d410c13e9ff58e56a07bef0ea22726) by [@​stonith404](https://redirect.github.com/stonith404)) - run unit tests on windows and linux ([31d62c6](https://redirect.github.com/pocket-id/pocket-id/commit/31d62c65e59f184d13aeef74860839665c183c78) by [@​stonith404](https://redirect.github.com/stonith404)) - correctly close filesystems ([6bd4679](https://redirect.github.com/pocket-id/pocket-id/commit/6bd4679bab03e16b85a0591d2c95ebdd530cf785) by [@​stonith404](https://redirect.github.com/stonith404)) - modularize email module and use actor for email verification ([#​1625](https://redirect.github.com/pocket-id/pocket-id/pull/1625) by [@​stonith404](https://redirect.github.com/stonith404)) - pin version of fosite fork ([91d3712](https://redirect.github.com/pocket-id/pocket-id/commit/91d37126fa916932a1097a4a60c161965aa24e50) by [@​stonith404](https://redirect.github.com/stonith404)) - translations remove unused translation strings ([d5eb3fe](https://redirect.github.com/pocket-id/pocket-id/commit/d5eb3fe62c5ddbfd7f2bc5c116f755dccd40d6b4) by [@​stonith404](https://redirect.github.com/stonith404)) - enforce eslint rules ([9060291](https://redirect.github.com/pocket-id/pocket-id/commit/9060291475aaadb5be2149213cfb647bb8381247) by [@​stonith404](https://redirect.github.com/stonith404)) - upgrade vulnerable dependencies ([0c5e014](https://redirect.github.com/pocket-id/pocket-id/commit/0c5e0149cd070b39e5da7722471885432d5b5452) by [@​stonith404](https://redirect.github.com/stonith404)) **Full Changelog**: <pocket-id/pocket-id@v2.11.0...v2.12.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…2) (#3978) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/nodered/node-red](https://redirect.github.com/node-red/node-red-docker) | patch | `5.0.1` → `5.0.2` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/1) for more information. --- ### Release Notes <details> <summary>node-red/node-red-docker (docker.io/nodered/node-red)</summary> ### [`v5.0.2`](https://redirect.github.com/node-red/node-red-docker/releases/tag/v5.0.2) [Compare Source](https://redirect.github.com/node-red/node-red-docker/compare/v5.0.1...v5.0.2) #### What's Changed - Added image tags for major versions by [@​simonjamain](https://redirect.github.com/simonjamain) in [#​526](https://redirect.github.com/node-red/node-red-docker/pull/526) - 🚀 Update to Node-RED 5.0.2 release by [@​knolleary](https://redirect.github.com/knolleary) in [#​527](https://redirect.github.com/node-red/node-red-docker/pull/527) - Node-RED 5.0.2 - <https://github.com/node-red/node-red/releases/tag/5.0.2> #### New Contributors - [@​simonjamain](https://redirect.github.com/simonjamain) made their first contribution in [#​526](https://redirect.github.com/node-red/node-red-docker/pull/526) **Full Changelog**: <node-red/node-red-docker@v5.0.1...v5.0.2> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…1) (#3979) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/seerr-team/seerr](https://redirect.github.com/seerr-team/seerr) | patch | `v3.4.0` → `v3.4.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/1) for more information. --- ### Release Notes <details> <summary>seerr-team/seerr (ghcr.io/seerr-team/seerr)</summary> ### [`v3.4.1`](https://redirect.github.com/seerr-team/seerr/releases/tag/v3.4.1) [Compare Source](https://redirect.github.com/seerr-team/seerr/compare/v3.4.0...v3.4.1) ##### 🐛 Bug Fixes - *(ui)* Keep user list action buttons sized with a single user ([#​3311](https://redirect.github.com/seerr-team/seerr/issues/3311)) - ([f926248](https://redirect.github.com/seerr-team/seerr/commit/f926248e2daf660a452bbc16f36748adb240ab33)) - Don't delete requests when removing media from arr ([#​3288](https://redirect.github.com/seerr-team/seerr/issues/3288)) - ([3ee6f92](https://redirect.github.com/seerr-team/seerr/commit/3ee6f9200cb040c7ad910294da3a9415dc84e71a)) - Handle already-removed media in radarr/sonarr delete ([#​3209](https://redirect.github.com/seerr-team/seerr/issues/3209)) - ([8ea0c17](https://redirect.github.com/seerr-team/seerr/commit/8ea0c174ea6d23062a13f510924235f6d56b481e)) ##### ⚙️ Miscellaneous Tasks - *(release)* Prepare v3.4.1 - ([69f73a6](https://redirect.github.com/seerr-team/seerr/commit/69f73a6f1486fdb51b8ddae9a94a8dfb629f461c)) - *(release)* Prepare v3.4.1 release - ([5c8f1cb](https://redirect.github.com/seerr-team/seerr/commit/5c8f1cb54b816d42f01bd35eb2e755bf0d74339a)) - Fix docker login race condition ([#​3303](https://redirect.github.com/seerr-team/seerr/issues/3303)) - ([95e18de](https://redirect.github.com/seerr-team/seerr/commit/95e18ded1d6c7edf7e88f580e61266ef14b79475)) - Parallelize the action steps when possible ([#​3225](https://redirect.github.com/seerr-team/seerr/issues/3225)) - ([45f7a7a](https://redirect.github.com/seerr-team/seerr/commit/45f7a7a9abe43f5600db153b89750e9a2d76b916)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…e8 ➔ 2b124b4) (#3895) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/cloudnative-pg/postgresql | digest | `b38bee8` → `2b124b4` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…#3980) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/autobrr/qui](https://redirect.github.com/autobrr/qui) | minor | `v1.23.0` → `v1.24.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/1) for more information. --- ### Release Notes <details> <summary>autobrr/qui (ghcr.io/autobrr/qui)</summary> ### [`v1.24.0`](https://redirect.github.com/autobrr/qui/releases/tag/v1.24.0) ##### Changelog ##### New Features - [`4fc31d1`](https://redirect.github.com/autobrr/qui/commit/4fc31d18aa27444d60c7635e7d3d01a4613b4991): feat(backups): reclaim orphaned torrent cache blobs at startup ([#​2190](https://redirect.github.com/autobrr/qui/issues/2190)) ([@​nitrobass24](https://redirect.github.com/nitrobass24)) - [`cf3e4dd`](https://redirect.github.com/autobrr/qui/commit/cf3e4dd03306789fcbcad7d8b4661cf38996aad9): feat(crossseed): detect ReFS block-cloned delete matches ([#​2183](https://redirect.github.com/autobrr/qui/issues/2183)) ([@​Audionut](https://redirect.github.com/Audionut)) - [`dd6b28f`](https://redirect.github.com/autobrr/qui/commit/dd6b28f59e2f6b949140cb4cdac9587d12f2fa05): feat(crossseed): detect hardlinked cross-seeds in delete dialog ([#​2180](https://redirect.github.com/autobrr/qui/issues/2180)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`aba44c0`](https://redirect.github.com/autobrr/qui/commit/aba44c090283a429fdc9a63a3217e2d83192881e): feat(crossseed): match season packs across alternate titles and anime absolute numbering ([#​2105](https://redirect.github.com/autobrr/qui/issues/2105)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`2dcb341`](https://redirect.github.com/autobrr/qui/commit/2dcb34153478f8d1a912f9e2b589b70ca0d48765): feat(qbittorrent): detect "torrent has been rejected" as unregistered ([#​2133](https://redirect.github.com/autobrr/qui/issues/2133)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`3306d62`](https://redirect.github.com/autobrr/qui/commit/3306d6234f3350d34303ad7144e5de961f0717b7): feat(web): add Brazilian Portuguese (pt-BR) localization and i18n coverage tooling ([#​2136](https://redirect.github.com/autobrr/qui/issues/2136)) ([@​MaKTaiL](https://redirect.github.com/MaKTaiL)) - [`9c5bdbc`](https://redirect.github.com/autobrr/qui/commit/9c5bdbc98dcb143a7e26f0e72aa4d8856a072e9b): feat(web): add supporter subscription entry point ([#​2185](https://redirect.github.com/autobrr/qui/issues/2185)) ([@​s0up4200](https://redirect.github.com/s0up4200)) ##### Bug Fixes - [`85e52aa`](https://redirect.github.com/autobrr/qui/commit/85e52aa90fa8ca5a725ae63fc93f76117964d089): fix(backups): overlap export stalls and cap the adaptive delay ([#​2188](https://redirect.github.com/autobrr/qui/issues/2188)) ([@​nitrobass24](https://redirect.github.com/nitrobass24)) - [`a13b6db`](https://redirect.github.com/autobrr/qui/commit/a13b6dbe32583cc8e8906b7f8a9b967004fa0959): fix(backups): write cache blobs atomically ([#​2189](https://redirect.github.com/autobrr/qui/issues/2189)) ([@​nitrobass24](https://redirect.github.com/nitrobass24)) - [`250b115`](https://redirect.github.com/autobrr/qui/commit/250b1152efc86a7f5129271779fc58facf2723dc): fix(crossseed): complete RSS-deduplicated searches and surface search errors ([#​2162](https://redirect.github.com/autobrr/qui/issues/2162)) ([@​jussaw](https://redirect.github.com/jussaw)) - [`ef250e0`](https://redirect.github.com/autobrr/qui/commit/ef250e0d2ffaa1b80be636f4749e934899ebb8fd): fix(crossseed): keep partial results when a single tracker fails ([#​2156](https://redirect.github.com/autobrr/qui/issues/2156)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`55d07a2`](https://redirect.github.com/autobrr/qui/commit/55d07a2d159b11194080fc6d7cb65af1522c0c3c): fix(crossseed): retain candidates using exact size evidence ([#​2160](https://redirect.github.com/autobrr/qui/issues/2160)) ([@​Audionut](https://redirect.github.com/Audionut)) - [`0824c54`](https://redirect.github.com/autobrr/qui/commit/0824c5478d4f2578da447763318d0721b93c01ad): fix(hardlink): use 128-bit Windows file IDs ([#​2182](https://redirect.github.com/autobrr/qui/issues/2182)) ([@​Audionut](https://redirect.github.com/Audionut)) - [`613dac8`](https://redirect.github.com/autobrr/qui/commit/613dac8d03fee844187fa2ce9d9bd4a1a8cfbe62): fix(reannounce): update torrent age calculation and add 'started' outcome to reannounce automation ([#​2135](https://redirect.github.com/autobrr/qui/issues/2135)) ([@​MaKTaiL](https://redirect.github.com/MaKTaiL)) - [`6acffb1`](https://redirect.github.com/autobrr/qui/commit/6acffb1fb6a2d8f104a85ea724935bd42f550344): fix(web): update radix-ui packages to fix dialog dismissal regression ([#​2143](https://redirect.github.com/autobrr/qui/issues/2143)) ([@​nitrobass24](https://redirect.github.com/nitrobass24)) - [`05bf3f4`](https://redirect.github.com/autobrr/qui/commit/05bf3f485e1f1a74976b12aabd42eb12182e241f): fix: preserve empty torrent path components ([#​2152](https://redirect.github.com/autobrr/qui/issues/2152)) ([@​Mevas](https://redirect.github.com/Mevas)) - [`914c74d`](https://redirect.github.com/autobrr/qui/commit/914c74d3497d82d8c06969040ff45fbc98954b14): fix: reject qBittorrent never-completed sentinels in completion detection, automations, and UI ([#​2171](https://redirect.github.com/autobrr/qui/issues/2171)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`b5c82c3`](https://redirect.github.com/autobrr/qui/commit/b5c82c3ebb3fdeff95012f6f8376cea9fbfe8f9c): fix: sanitize non-UTF-8 bytes from torrent-derived strings ([#​2158](https://redirect.github.com/autobrr/qui/issues/2158)) ([@​Zmegolaz](https://redirect.github.com/Zmegolaz)) ##### Other Changes - [`04deece`](https://redirect.github.com/autobrr/qui/commit/04deece9c0ba765411c715ef02b8e32e7f4a0e51): chore(deps): bump fast-uri from 3.1.3 to 3.1.4 in /web ([#​2174](https://redirect.github.com/autobrr/qui/issues/2174)) ([@​dependabot](https://redirect.github.com/dependabot)\[bot]) - [`4c9931e`](https://redirect.github.com/autobrr/qui/commit/4c9931ebfcad34f6d4d239b87400be5eae5f452b): chore(deps): bump go-qbittorrent to v1.17.0 ([#​2178](https://redirect.github.com/autobrr/qui/issues/2178)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`c6c052c`](https://redirect.github.com/autobrr/qui/commit/c6c052c5533d0f965c841874c46d1000a34bdedf): chore(deps): bump postcss from 8.5.16 to 8.5.18 in /documentation ([#​2176](https://redirect.github.com/autobrr/qui/issues/2176)) ([@​dependabot](https://redirect.github.com/dependabot)\[bot]) - [`6c09481`](https://redirect.github.com/autobrr/qui/commit/6c094815fba3a80564a99db79c42e97f9762d8ea): chore(deps): bump the github group with 2 updates ([#​2153](https://redirect.github.com/autobrr/qui/issues/2153)) ([@​dependabot](https://redirect.github.com/dependabot)\[bot]) - [`6113044`](https://redirect.github.com/autobrr/qui/commit/61130445e322e831f550c323749538902f87f0d5): chore(deps): bump the github group with 4 updates ([#​2173](https://redirect.github.com/autobrr/qui/issues/2173)) ([@​dependabot](https://redirect.github.com/dependabot)\[bot]) - [`4ccd457`](https://redirect.github.com/autobrr/qui/commit/4ccd4571d77b552a57fef4ad61c2ab90e8ca5c43): chore(deps): bump the github group with 7 updates ([#​2128](https://redirect.github.com/autobrr/qui/issues/2128)) ([@​dependabot](https://redirect.github.com/dependabot)\[bot]) - [`4eaaab3`](https://redirect.github.com/autobrr/qui/commit/4eaaab3cabde397d43e66f008a4b778b41953bb7): chore(docs): fix missing tip close ([#​2155](https://redirect.github.com/autobrr/qui/issues/2155)) ([@​Audionut](https://redirect.github.com/Audionut)) - [`84b6359`](https://redirect.github.com/autobrr/qui/commit/84b63591e16363914070c9e3aa999bae2be1f467): chore(web): bump postcss to 8.5.23 ([#​2181](https://redirect.github.com/autobrr/qui/issues/2181)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`7ef6ccc`](https://redirect.github.com/autobrr/qui/commit/7ef6cccb4d4a9a4862884fbc98f81269289d1b94): docs: add instructions for macOS Container ([#​2161](https://redirect.github.com/autobrr/qui/issues/2161)) ([@​danielcg](https://redirect.github.com/danielcg)) - [`2854ce7`](https://redirect.github.com/autobrr/qui/commit/2854ce753bd87b64fd07183fe84971f3922994f1): docs: update Telegram Shoutrrr URL format ([#​2145](https://redirect.github.com/autobrr/qui/issues/2145)) ([@​denisoster](https://redirect.github.com/denisoster)) **Full Changelog**: <autobrr/qui@v1.23.0...v1.24.0> ##### Docker images - `docker pull ghcr.io/autobrr/qui:v1.24.0` - `docker pull ghcr.io/autobrr/qui:latest` ##### What to do next? - Join our [Discord server](https://discord.autobrr.com/qui) Thank you for using qui! </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…ce exposed (#3983) The 2026-07-30 fleet-consistency work on the three doco-cd repos exposed metrics that had no scrape jobs yet. Close the loop: - seedbox-docker: docker_state_exporter (:9419) — the seedbox was the one box without container-lifecycle series; plus a lean seedbox-docker.rules group (down/unhealthy/flapping, 10m holds for the flappy tailnet path; exporter-down is absorbed by the existing instance-wide health signals). - nut-appliance-traefik: the appliance's new Traefik metrics entrypoint (:8082), matching seedbox-traefik. - truenas-traefik + truenas-doco-cd: the NAS's new metrics entrypoint and the newly published doco-cd :9120, matching the other two boxes. - Refresh the NutApplianceHostMetricsMissing comment — its job regex now covers five scrapes, not three.
…as (#3988) The two jobs added in #3983 targeted SECRET_STORAGE_SERVER, but Traefik's metrics entrypoint and doco-cd's :9120 publish on the NAS's dedicated ingress alias address (bind-is-the-guard discipline), not the primary address the host-network exporters answer on — so both scraped up=0. New substitution var SECRET_STORAGE_INGRESS added to the cluster-secrets item and verified present in the cluster Secret before this lands.
…95602) (#3984) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/nodered/node-red](https://redirect.github.com/node-red/node-red-docker) | digest | `ce23618` → `c195602` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
….2.4 ➔ v5.2.5) (#3986) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/amruthpillai/reactive-resume](https://redirect.github.com/amruthpillai/reactive-resume) | patch | `v5.2.4` → `v5.2.5` | --- ### Release Notes <details> <summary>amruthpillai/reactive-resume (ghcr.io/amruthpillai/reactive-resume)</summary> ### [`v5.2.5`](https://redirect.github.com/amruthpillai/reactive-resume/releases/tag/v5.2.5) [Compare Source](https://redirect.github.com/amruthpillai/reactive-resume/compare/v5.2.4...v5.2.5) #### What's Changed - fix: clamp page margin values to \[0, 100] to prevent crash on paste by [@​Emran-Y](https://redirect.github.com/Emran-Y) in [#​3277](https://redirect.github.com/amruthpillai/reactive-resume/pull/3277) - feat: add semantic CSS stylesheets by [@​amruthpillai](https://redirect.github.com/amruthpillai) in [#​3274](https://redirect.github.com/amruthpillai/reactive-resume/pull/3274) - Sync Translations from Crowdin by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​3279](https://redirect.github.com/amruthpillai/reactive-resume/pull/3279) - docs: align pnpm version with packageManager field by [@​santhiprakash](https://redirect.github.com/santhiprakash) in [#​3278](https://redirect.github.com/amruthpillai/reactive-resume/pull/3278) **Full Changelog**: <amruthpillai/reactive-resume@v5.2.4...v5.2.5> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Owner
|
@codex review |
|
Codex Review: Didn't find any major issues. Another round soon, please! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
#3990) ## The hole The `device hostname (cr)` pattern in `check_internal_identifiers.py` was: ```python cr-(?!talos(?:-|\b))[a-z][a-z0-9]*(?:-[a-z0-9]+)+ ``` That trailing `+` requires a **second** hyphenated segment, so a single-segment device name matched nothing at all. `scan_text()` and `scan_files()` share the same pattern dict, so the tracked-file path and the prose path (commit messages, PR bodies) were both blind to it. Consequence: one such name is already on `main` in a file that is not allowlisted, and every PR carrying it passed `Internal Identifier Scan` green. ## The fix `+` → `*` on the trailing group. Verified the exclusions still hold: | Input | Before | After | |---|---|---| | single-segment device name | ✗ missed | ✓ caught | | two-segment device name | ✓ caught | ✓ caught | | `ghcr-auth` (substring) | ✓ ignored | ✓ ignored | | a Talos node name | ✓ ignored (node-name pattern owns it) | ✓ ignored | | `docker-backup` (app name) | ✓ ignored | ✓ ignored | Both paths tested — tracked-file scan and `--text-file`. ## Cleanup The tightened pattern finds three pre-existing occurrences, all in explanatory comments where the name was incidental rather than functional, so all three are reworded rather than allowlisted (the allowlist is for values that operate the cluster). Full tracked scan is clean afterwards: `OK -- no new internal infrastructure identifiers (all 1674 tracked files)`. ## How it surfaced A Codex code-review trial on the open PRs flagged the name in a pending PR — one this guard had just passed green. The finding's stated rationale was wrong (it called the name "previously untracked"; it is already on `main`), but chasing it found the regex defect. ## Validation - `python3 .github/scripts/check_internal_identifiers.py` — clean - Prose path spot-checked against the four cases above - super-linter v8.6.0 locally, scoped to the changed files, with the shared workflow's `VALIDATE_*=false` flags copied verbatim so the polarity matches CI — exit 0
…d ➔ d5a18c0) (#3989) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/github/github-mcp-server | digest | `c491ffd` → `d5a18c0` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvZGlnZXN0Il19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [uv](https://redirect.github.com/astral-sh/uv) | tools | patch | `0.11.32` → `0.11.33` | `0.12.0` | --- ### Release Notes <details> <summary>astral-sh/uv (uv)</summary> ### [`v0.11.33`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01133) [Compare Source](https://redirect.github.com/astral-sh/uv/compare/0.11.32...0.11.33) Released on 2026-07-28. ##### Enhancements - Abort panics in release builds for smaller uv binaries ([#​20271](https://redirect.github.com/astral-sh/uv/pull/20271)) - Use `.tar.gz` archives for Pyodide installs ([#​20667](https://redirect.github.com/astral-sh/uv/pull/20667)) ##### Preview features - Avoid checking any scripts in `uv check` unless `--script` is passed ([#​20676](https://redirect.github.com/astral-sh/uv/pull/20676)) - Check locked tools for malware before cache reuse ([#​20301](https://redirect.github.com/astral-sh/uv/pull/20301)) - Write and read `package.metadata`-free lockfiles ([#​20688](https://redirect.github.com/astral-sh/uv/pull/20688), [#​20691](https://redirect.github.com/astral-sh/uv/pull/20691), [#​20685](https://redirect.github.com/astral-sh/uv/pull/20685), [#​20695](https://redirect.github.com/astral-sh/uv/pull/20695)) ##### Bug fixes - Correctly split dependencies into production and optional markers ([#​20671](https://redirect.github.com/astral-sh/uv/pull/20671)) - Fix discrepancies in argument parsing of exclude-newer ([#​20679](https://redirect.github.com/astral-sh/uv/pull/20679)) - Cleanup managed Python temporary directory on error ([#​20752](https://redirect.github.com/astral-sh/uv/pull/20752)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvZ2l0aHViLXJlbGVhc2UiLCJ0eXBlL3BhdGNoIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…65e ➔ 87a1f9c) (#3991) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/lukeevanstech/todoist-sort | digest | `a7da65e` → `87a1f9c` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvZGlnZXN0Il19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/dictionarry-hub/profilarr](https://redirect.github.com/Dictionarry-Hub/profilarr) | minor | `2.0.9` → `2.1.0` | | [ghcr.io/dictionarry-hub/profilarr-parser](https://redirect.github.com/Dictionarry-Hub/profilarr) | minor | `2.0.9` → `2.1.0` | --- ### Release Notes <details> <summary>Dictionarry-Hub/profilarr (ghcr.io/dictionarry-hub/profilarr)</summary> ### [`v2.1.0`](https://redirect.github.com/Dictionarry-Hub/profilarr/releases/tag/v2.1.0) [Compare Source](https://redirect.github.com/Dictionarry-Hub/profilarr/compare/v2.0.9...v2.1.0) ##### v2.1.0 ##### ✨ Features - Add upgrade filter preview ([#​693](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/693)) - Support env-managed API key ([#​800](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/800)) - Support database sync priority per Arr instance ([#​694](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/694)) - Auto-select condition pattern by name ([#​806](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/806)) - Add size-based upgrade selectors ([#​880](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/880)) ##### 🐛 Fixes - Use display-name map for language enum lookup ([#​753](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/753)) - Strip TypeScript in Svelte scripts for rolldown build ([#​767](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/767)) - Remove unsupported semver-major-days from github-actions cooldown ([#​773](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/773)) - Improve custom format scoring toggles ([#​788](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/788)) - Enforce page meta on route pages ([#​789](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/789)) - Replace gcompat alpine runtime ([#​792](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/792)) - Pre-cache bcrypt native library ([#​793](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/793)) - Treat upgrade tags and genres as sets ([#​803](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/803)) - Support decimal custom format sizes ([#​805](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/805)) - Match arr source fallback in parser ([#​815](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/815)) - Use import-map aliases for vite, svelte-check, openapi-typescript invocations ([#​816](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/816)) - Correct Arr log level pagination ([#​875](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/875)) - Align Profilarr and Arr log views ([#​877](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/877)) - Preserve custom formats from all synced databases ([#​879](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/879)) - Add all-field entity filters ([#​882](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/882)) - Add setting to disable sync prompt ([#​883](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/883)) - Remove stale library client cache ([#​884](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/884)) - Calculate Sonarr upgrade scores from episode files ([#​885](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/885)) - Improve draggable card contrast ([#​887](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/887)) ##### 📚 Documentation - Add release communication process ([#​730](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/730)) - Document image release channels in README ([#​844](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/844)) ##### ♻️ Refactors - Migrate runtime images to Alpine ([#​770](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/770)) - Consolidate all dependencies into deno.jsonc ([#​783](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/783)) ##### 🔧 Maintenance - Add Trivy container scanning ([#​771](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/771)) - Update dependabot config ([#​772](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/772)) - Hide dependency updates from release notes ([#​787](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/787)) - Pin Deno 2.8 toolchain ([#​795](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/795)) ##### ⚙️ CI - Harden supply chain configuration ([#​818](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/818)) - Add rolling major-version image tag ([#​828](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/828)) ##### 🌱 New Contributors - [@​Amoenus](https://redirect.github.com/Amoenus) made their first contribution in [#​800](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/800) - [@​MrMarble](https://redirect.github.com/MrMarble) made their first contribution in [#​753](https://redirect.github.com/Dictionarry-Hub/profilarr/issues/753) **Full Changelog**: <Dictionarry-Hub/profilarr@v2.0.9...v2.1.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…6-08-08) (#4200) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [homebridge/homebridge](https://redirect.github.com/homebridge/docker-homebridge) | minor | `2026-07-31` → `2026-08-08` | --- ### Release Notes <details> <summary>homebridge/docker-homebridge (homebridge/homebridge)</summary> ### [`v2026-08-08`](https://redirect.github.com/homebridge/docker-homebridge/releases/tag/2026-08-08): Homebridge Docker Release 2026-08-08 [Compare Source](https://redirect.github.com/homebridge/docker-homebridge/compare/2026-08-05...2026-08-08) #### Homebridge Docker Image This Ubuntu Linux based Docker image allows you to run [Nfarina's](https://redirect.github.com/nfarina) [Homebridge](https://redirect.github.com/homebridge/homebridge) on your home network which emulates the iOS HomeKit API. This is a multi-arch image and will run on x86\_64, Raspberry Pi 2, 3, 4, Zero 2 W, or other Docker-enabled ARMv7/8 devices. Docker will automatically pull the correct image for your system. | Image Tag | Architectures | Base Image | Release Type | | :------------- | :---------------------- | :----------- | :----------- | | latest, ubuntu | amd64, arm32v7, arm64v8 | Ubuntu 24.04 | Stable | | synology | amd64, arm32v7, arm64v8 | Ubuntu 22.04 | Stable | | beta | amd64, arm32v7, arm64v8 | Ubuntu 24.04 | Beta | | alpha | amd64, arm32v7, arm64v8 | Ubuntu 24.04 | Alpha | | legacy | amd64, arm32v7, arm64v8 | Ubuntu 24.04 | Legacy | ##### Release Types - **Stable** (`latest`, `ubuntu`): Stable releases using the latest stable versions of Homebridge and plugins - **Legacy** (`legacy`, `legacy`): Stable releases using the latest stable versions of Homebridge 1.x and plugins - **Beta** (`beta`): Pre-release versions with beta versions of Homebridge and the Homebridge UI for testing new features - **Alpha** (`alpha`): Early pre-release versions with alpha versions of Homebridge and the Homebridge UI for early testing and development #### Current Package Manifest: ##### Docker.manifest Homebridge Docker Package Manifest Release Version: 2026-08-08 | Package | Version | | :--------------------: | :-----: | | Ubuntu | 24.04 | | ffmpeg for homebridge | v2.2.2 | | Homebridge APT Package | v2.0.14 | | NodeJS | 24.19.0 | | Homebridge UI | 5.27.0 | | Homebridge | 2.3.0 | #### Docker Build Instruction Changes - **[@​homebridge/homebridge-apt-pkg](https://redirect.github.com/homebridge/homebridge-apt-pkg)**: Updated from 2.0.13 to 2.0.14 #### Changes Since Previous Release (2026-08-05): ##### Changes in Docker.manifest ```diff - |Homebridge APT Package|v2.0.13| + |Homebridge APT Package|v2.0.14| - |Homebridge|2.2.1| + |Homebridge|2.3.0| ``` ##### Docker Homebridge Changes ##### Code Changes - Update stable dependencies in . ([#​1062](https://redirect.github.com/homebridge/docker-homebridge/issues/1062)) (`acce10a`) - Update alpha dependencies in alpha ([#​1061](https://redirect.github.com/homebridge/docker-homebridge/issues/1061)) (`a7c07cf`) - Update beta dependencies in beta ([#​1060](https://redirect.github.com/homebridge/docker-homebridge/issues/1060)) (`48e64e5`) - Update legacy dependencies in legacy ([#​1059](https://redirect.github.com/homebridge/docker-homebridge/issues/1059)) (`de9a1da`) - Update alpha dependencies in alpha ([#​1058](https://redirect.github.com/homebridge/docker-homebridge/issues/1058)) (`d60bfc0`) - Update beta dependencies in beta ([#​1057](https://redirect.github.com/homebridge/docker-homebridge/issues/1057)) (`fcb2ca2`) ### [`v2026-08-05`](https://redirect.github.com/homebridge/docker-homebridge/releases/tag/2026-08-05): Homebridge Docker Release 2026-08-05 [Compare Source](https://redirect.github.com/homebridge/docker-homebridge/compare/2026-07-31...2026-08-05) #### Homebridge Docker Image This Ubuntu Linux based Docker image allows you to run [Nfarina's](https://redirect.github.com/nfarina) [Homebridge](https://redirect.github.com/homebridge/homebridge) on your home network which emulates the iOS HomeKit API. This is a multi-arch image and will run on x86\_64, Raspberry Pi 2, 3, 4, Zero 2 W, or other Docker-enabled ARMv7/8 devices. Docker will automatically pull the correct image for your system. | Image Tag | Architectures | Base Image | Release Type | | :------------- | :---------------------- | :----------- | :----------- | | latest, ubuntu | amd64, arm32v7, arm64v8 | Ubuntu 24.04 | Stable | | synology | amd64, arm32v7, arm64v8 | Ubuntu 22.04 | Stable | | beta | amd64, arm32v7, arm64v8 | Ubuntu 24.04 | Beta | | alpha | amd64, arm32v7, arm64v8 | Ubuntu 24.04 | Alpha | | legacy | amd64, arm32v7, arm64v8 | Ubuntu 24.04 | Legacy | ##### Release Types - **Stable** (`latest`, `ubuntu`): Stable releases using the latest stable versions of Homebridge and plugins - **Legacy** (`legacy`, `legacy`): Stable releases using the latest stable versions of Homebridge 1.x and plugins - **Beta** (`beta`): Pre-release versions with beta versions of Homebridge and the Homebridge UI for testing new features - **Alpha** (`alpha`): Early pre-release versions with alpha versions of Homebridge and the Homebridge UI for early testing and development #### Current Package Manifest: ##### Docker.manifest Homebridge Docker Package Manifest Release Version: 2026-08-05 | Package | Version | | :--------------------: | :-----: | | Ubuntu | 24.04 | | ffmpeg for homebridge | v2.2.2 | | Homebridge APT Package | v2.0.13 | | NodeJS | 24.19.0 | | Homebridge UI | 5.27.0 | | Homebridge | 2.2.1 | #### Docker Build Instruction Changes - **[@​homebridge/homebridge-apt-pkg](https://redirect.github.com/homebridge/homebridge-apt-pkg)**: Updated from 2.0.12 to 2.0.13 #### Changes Since Previous Release (2026-07-31): ##### Changes in Docker.manifest ```diff - |Homebridge APT Package|v2.0.12| + |Homebridge APT Package|v2.0.13| - |NodeJS|24.18.1| + |NodeJS|24.19.0| ``` ##### Docker Homebridge Changes ##### Code Changes - Update stable dependencies in . ([#​1056](https://redirect.github.com/homebridge/docker-homebridge/issues/1056)) (`a2ba13a`) - Update synology dependencies in synology ([#​1055](https://redirect.github.com/homebridge/docker-homebridge/issues/1055)) (`40565d4`) - Update alpha dependencies in alpha ([#​1054](https://redirect.github.com/homebridge/docker-homebridge/issues/1054)) (`81e8824`) - Update beta dependencies in beta ([#​1053](https://redirect.github.com/homebridge/docker-homebridge/issues/1053)) (`b175f95`) - Update alpha dependencies in alpha ([#​1052](https://redirect.github.com/homebridge/docker-homebridge/issues/1052)) (`61432bc`) - Update beta dependencies in beta ([#​1051](https://redirect.github.com/homebridge/docker-homebridge/issues/1051)) (`8d56901`) - Update alpha dependencies in alpha ([#​1050](https://redirect.github.com/homebridge/docker-homebridge/issues/1050)) (`286bb18`) - Update beta dependencies in beta ([#​1049](https://redirect.github.com/homebridge/docker-homebridge/issues/1049)) (`10161e4`) - Update legacy dependencies in legacy ([#​1048](https://redirect.github.com/homebridge/docker-homebridge/issues/1048)) (`c323a7d`) - Update alpha dependencies in alpha ([#​1047](https://redirect.github.com/homebridge/docker-homebridge/issues/1047)) (`f2c1484`) - Update beta dependencies in beta ([#​1046](https://redirect.github.com/homebridge/docker-homebridge/issues/1046)) (`704bf49`) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…27.0) (#4199) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/techarohq/anubis](https://images.chainguard.dev/directory/image/static/overview) ([source](https://redirect.github.com/chainguard-images/images/tree/HEAD/images/static)) | minor | `v1.26.2` → `v1.27.0` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…7.5) (#4198) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/s1t5/mailarchiver](https://redirect.github.com/s1t5/mail-archiver) | minor | `2607.4` → `2607.5` | --- ### Release Notes <details> <summary>s1t5/mail-archiver (ghcr.io/s1t5/mailarchiver)</summary> ### [`v2607.5`](https://redirect.github.com/s1t5/mail-archiver/releases/tag/2607.5) [Compare Source](https://redirect.github.com/s1t5/mail-archiver/compare/2607.4...2607.5) ##### ⚙️ Improvements - **Last Sync Display During Full Sync** - Account lists, dashboard, and account details/edit pages now show a localized "Synchronization running…" badge (with spinner) instead of the misleading 1970-01-01 epoch timestamp while a full sync is in progress. A "Synchronization pending…" badge is shown when the epoch is set but no sync job is currently running. ##### 🐛 Bug Fixes - **Account Actions Dropdown Clipping** - On the Mail Accounts desktop table, the kebab actions menu was clipped by the container and only reachable by scrolling inside the table. The container now allows vertical overflow on desktop so the menu is fully visible. </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
… ➔ v3.26.2) (#4197) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/raylabshq/gitea-mirror](https://redirect.github.com/RayLabsHQ/gitea-mirror) | minor | `v3.25.0` → `v3.26.2` | --- ### Release Notes <details> <summary>RayLabsHQ/gitea-mirror (ghcr.io/raylabshq/gitea-mirror)</summary> ### [`v3.26.2`](https://redirect.github.com/RayLabsHQ/gitea-mirror/releases/tag/v3.26.2) [Compare Source](https://redirect.github.com/RayLabsHQ/gitea-mirror/compare/v3.26.1...v3.26.2) ##### Fixes - **Smoother hover scrolling for long repository names.** The marquee added in v3.26.1 was choppy because it animated a layout property. It now uses a GPU-composited transform, so the scroll is smooth. The hover target is also bigger: hovering anywhere over the repository cell scrolls both the name and the owner/repo path together. **Full Changelog**: <RayLabsHQ/gitea-mirror@v3.26.1...v3.26.2> ### [`v3.26.1`](https://redirect.github.com/RayLabsHQ/gitea-mirror/releases/tag/v3.26.1) [Compare Source](https://redirect.github.com/RayLabsHQ/gitea-mirror/compare/v3.26.0...v3.26.1) ##### Fixes - **Long repository names no longer wrap in the repositories table.** Names and owner/repo paths that used to break onto two lines now stay on a single line, truncated with an ellipsis. Hovering over the text scrolls it sideways so you can read the full name, and it slides back when you move the mouse away. **Full Changelog**: <RayLabsHQ/gitea-mirror@v3.26.0...v3.26.1> ### [`v3.26.0`](https://redirect.github.com/RayLabsHQ/gitea-mirror/releases/tag/v3.26.0) [Compare Source](https://redirect.github.com/RayLabsHQ/gitea-mirror/compare/v3.25.0...v3.26.0) ##### Features - **GitHub API calls now reuse ETags across syncs** ([#​356](https://redirect.github.com/RayLabsHQ/gitea-mirror/issues/356), thanks [@​joshfree](https://redirect.github.com/joshfree)). Every GET replays the previously seen `ETag` as `If-None-Match`, so when nothing changed GitHub answers `304 Not Modified` and the cached body is used instead of a full download. Authorized 304s do not count against the token's primary rate limit, so large mirror sets and short sync intervals are much less likely to hit throttling. The cache is in-memory and per-user, keyed by the fully expanded request URL, bounded by both entry count and a 64MB byte budget, and clients created with only a token get a hashed token scope so users never share cache entries. No configuration needed and no schema changes; sync results are identical. **Full Changelog**: <RayLabsHQ/gitea-mirror@v3.25.0...v3.26.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…v2.13.0) (#4196) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/pocket-id/pocket-id](https://redirect.github.com/pocket-id/pocket-id) | minor | `v2.12.0` → `v2.13.0` | --- ### Release Notes <details> <summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary> ### [`v2.13.0`](https://redirect.github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2130) [Compare Source](https://redirect.github.com/pocket-id/pocket-id/compare/v2.12.0...v2.13.0) ##### Bug Fixes - retry qr code login polling for known transient gateway responses ([7039692](https://redirect.github.com/pocket-id/pocket-id/commit/703969278be2a6b2cae30ca89dba4b73b0c969fa) by [@​stonith404](https://redirect.github.com/stonith404)) - decrease QR code login session duration to 5 minutes ([e35be30](https://redirect.github.com/pocket-id/pocket-id/commit/e35be309a3d40064617ef0ad557476c93ba983a9) by [@​stonith404](https://redirect.github.com/stonith404)) - show more user-friendly error message if QR code has expired ([27199f6](https://redirect.github.com/pocket-id/pocket-id/commit/27199f61d4adaeca463db68980dae6c2a885c5b4) by [@​stonith404](https://redirect.github.com/stonith404)) - one-time-access-token CLI fails with "RuntimePSKs is required" ([#​1637](https://redirect.github.com/pocket-id/pocket-id/pull/1637) by [@​salcatroppa](https://redirect.github.com/salcatroppa)) - session revoke fails if orphaned session tokens exist ([598895e](https://redirect.github.com/pocket-id/pocket-id/commit/598895e7c53df28598d578896f6396241e9e9ef7) by [@​stonith404](https://redirect.github.com/stonith404)) - disable api key auth for webauthn register endpoints ([db64b15](https://redirect.github.com/pocket-id/pocket-id/commit/db64b150be9046ee971f520b4c30f3b3d434facf) by [@​stonith404](https://redirect.github.com/stonith404)) - explicitly set SameSite to Lax for cookies ([69d55ad](https://redirect.github.com/pocket-id/pocket-id/commit/69d55ada6c695c47f764285ca9e94736e50a8103) by [@​stonith404](https://redirect.github.com/stonith404)) - explicitly require JSON for request bodies ([1238bf0](https://redirect.github.com/pocket-id/pocket-id/commit/1238bf0f378340d101c90295990b514131b10fe7) by [@​stonith404](https://redirect.github.com/stonith404)) - don't rely on content length header for optional json binding ([2c7d1b6](https://redirect.github.com/pocket-id/pocket-id/commit/2c7d1b63e1a366718d0c1951475e791922bb2445) by [@​stonith404](https://redirect.github.com/stonith404)) - respect log level in HTTP request logs ([488c50e](https://redirect.github.com/pocket-id/pocket-id/commit/488c50ef95e3e88f3a0085a67b399819a4647c7f) by [@​stonith404](https://redirect.github.com/stonith404)) - don't skip rate limits for loopback addresses ([140b5d3](https://redirect.github.com/pocket-id/pocket-id/commit/140b5d3cb440ccc7a30a3a1c9aae2f7a9d5efb4a) by [@​stonith404](https://redirect.github.com/stonith404)) - make OIDC client token lifetimes optional ([#​1650](https://redirect.github.com/pocket-id/pocket-id/pull/1650) by [@​ItalyPaleAle](https://redirect.github.com/ItalyPaleAle)) - in non-HA mode, increase AlarmLeaseDuration ([#​1660](https://redirect.github.com/pocket-id/pocket-id/pull/1660) by [@​ItalyPaleAle](https://redirect.github.com/ItalyPaleAle)) - separate TLS inputs and preserve certificate reloads ([#​1653](https://redirect.github.com/pocket-id/pocket-id/pull/1653) by [@​stonith404](https://redirect.github.com/stonith404)) - brotli compression ignored ([#​1661](https://redirect.github.com/pocket-id/pocket-id/pull/1661) by [@​stonith404](https://redirect.github.com/stonith404)) - align last signed in text left ([c87012a](https://redirect.github.com/pocket-id/pocket-id/commit/c87012ae01cb9e85ab305fffc40347297eff6ffb) by [@​stonith404](https://redirect.github.com/stonith404)) ##### Features - make oauth access tokens RFC 9068 compliant ([7c55bdf](https://redirect.github.com/pocket-id/pocket-id/commit/7c55bdf115fc5b7fea89ef5cd3c79dc926ddf5ac) by [@​stonith404](https://redirect.github.com/stonith404)) - implement OAuth Client ID Metadata Document ([#​1526](https://redirect.github.com/pocket-id/pocket-id/pull/1526) by [@​jfroy](https://redirect.github.com/jfroy)) - add ability to customize session duration of clients ([#​1641](https://redirect.github.com/pocket-id/pocket-id/pull/1641) by [@​stonith404](https://redirect.github.com/stonith404)) - add observability to actors ([#​1646](https://redirect.github.com/pocket-id/pocket-id/pull/1646) by [@​ItalyPaleAle](https://redirect.github.com/ItalyPaleAle)) - include Francis data in Pocket ID backups ([#​1645](https://redirect.github.com/pocket-id/pocket-id/pull/1645) by [@​ItalyPaleAle](https://redirect.github.com/ItalyPaleAle)) - add settings for limiting what passkeys can be used ([#​1662](https://redirect.github.com/pocket-id/pocket-id/pull/1662) by [@​stonith404](https://redirect.github.com/stonith404)) ##### Other - preserve tab indentation for package.json in release script ([a1ebf4e](https://redirect.github.com/pocket-id/pocket-id/commit/a1ebf4e98b65fa465f99bfa2fb9694a903076a32) by [@​stonith404](https://redirect.github.com/stonith404)) - Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#​1639](https://redirect.github.com/pocket-id/pocket-id/pull/1639) by [@​dependabot](https://redirect.github.com/dependabot)\[bot]) - use paraglide markup instead of custom implementation ([b08ac7b](https://redirect.github.com/pocket-id/pocket-id/commit/b08ac7bf7de04872a83913db19fc6392ecf7bd96) by [@​stonith404](https://redirect.github.com/stonith404)) - fix wrong database version in `database.json` ([281bea5](https://redirect.github.com/pocket-id/pocket-id/commit/281bea54d351128e29bb2e54455a7cb2e619554a) by [@​stonith404](https://redirect.github.com/stonith404)) - standardize API error handling ([#​1635](https://redirect.github.com/pocket-id/pocket-id/pull/1635) by [@​stonith404](https://redirect.github.com/stonith404)) - add deepsec to gitignore ([e3e0ddc](https://redirect.github.com/pocket-id/pocket-id/commit/e3e0ddc192d01de35b8f907144ac66b6b2963ac0) by [@​stonith404](https://redirect.github.com/stonith404)) - upgrade vulnerable dependencies ([9320144](https://redirect.github.com/pocket-id/pocket-id/commit/9320144991fa0f9f6c1419af0c78c7e2395dc61e) by [@​stonith404](https://redirect.github.com/stonith404)) - remove unused curl dependency from Dockerfile ([98160b2](https://redirect.github.com/pocket-id/pocket-id/commit/98160b20a15056535bf12d357b7d97c63a165cd0) by [@​stonith404](https://redirect.github.com/stonith404)) - remove invalid unit test ([95809dd](https://redirect.github.com/pocket-id/pocket-id/commit/95809dd29cea92e30f54c34876305f7a27a595bd) by [@​stonith404](https://redirect.github.com/stonith404)) - use smaller francis.bin ([4fe6f06](https://redirect.github.com/pocket-id/pocket-id/commit/4fe6f0688c2760abfe35558ffc9126f3a1e9edc0) by [@​stonith404](https://redirect.github.com/stonith404)) - move GeoLite to its own package ([#​1647](https://redirect.github.com/pocket-id/pocket-id/pull/1647) by [@​ItalyPaleAle](https://redirect.github.com/ItalyPaleAle)) - fix formatting ([#​1666](https://redirect.github.com/pocket-id/pocket-id/pull/1666) by [@​Copilot](https://redirect.github.com/Copilot)) **Full Changelog**: <pocket-id/pocket-id@v2.12.0...v2.13.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…3 ➔ 1.4.0) (#4195) This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/matter-js/matterjs-server | minor | `1.3.3` → `1.4.0` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…es (1.5.4 ➔ 1.6.0) (#4194) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/journeydocker/plex-auto-languages](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages) | minor | `1.5.4` → `1.6.0` | --- ### Release Notes <details> <summary>JourneyDocker/Plex-Auto-Languages (ghcr.io/journeydocker/plex-auto-languages)</summary> ### [`v1.6.0`](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/releases/tag/1.6.0) [Compare Source](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/compare/1.5.4...1.6.0) ##### Features - parallelize alert handling and user fan-out ([JourneyOver](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/5249852a333faaad75e0fce80b91357a176065ec)) - schedule tasks on specific days ([JourneyOver](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/0cf710378be0b1a8c2822deda0171be4254a66c0)) - **cache**: add EpisodeRef record for post-refresh consumers [#​105](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/105) ([nickwolf](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/4b3f405c2d9b71e71c6beadf25abe89d2344c9aa)) - add ref-path helpers for naming, filepath and show-label checks [#​105](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/105) ([nickwolf](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/5caa38285895cceedd29dff357a4935a74f42c7d)) - add ref-returning recently-added lookup [#​105](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/105) ([nickwolf](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/fae28033cd0a128cfe63985004b6cfb1dcb93c80)) ##### Bug Fixes - **cache**: stream library refresh instead of loading every episode at once [#​102](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/102) ([nickwolf](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/94513885548ac7ef1c586756682ffc889ece02e7)) - prevent errors with incomplete episode data ([JourneyOver](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/158173d418498dd474632cf103596c503e07303f)) - **cache**: return lightweight refs instead of retaining Episodes [#​105](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/105) ([nickwolf](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/72e0e0c90540a6abd05737ed4ad4dceeceb9e318)) - stamp librarySectionTitle from the owning section to avoid a reload per episode [#​105](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/105) ([nickwolf](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/2d6545cef5cbd9dcd2d1749ac93148889dea88a1)) - **perf**: boost alert processing under load ([JourneyOver](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/8ad52950383a6c5abc375e88f73a29f6c955ec5f)) ##### Code Refactoring - consume EpisodeRef in scheduler and status handlers [#​105](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/105) ([nickwolf](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/4bba6bec3f38eb49a2006b9096c7a40cff79913e)) ##### Chores - **deps**: update dependency apprise to v1.12.0 ([#​98](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/issues/98)) [#​98](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/98) ([renovate\[bot\]](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/30b7d7bda346ec898dcb2f378b945eef33809e7f)) - **deps**: update dependency tqdm to v4.68.4 ([#​99](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/issues/99)) [#​99](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/99) ([renovate\[bot\]](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/f2218eae9d8b1e60c2acf3a578a386fe73d541bc)) - **deps**: update dependency plexapi to v4.18.2 ([#​100](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/issues/100)) [#​100](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/100) ([renovate\[bot\]](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/83ee0da56b9be564272ac697046b64a5f8929133)) - **deps**: update dependency tqdm to v4.69.0 ([#​104](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/issues/104)) [#​104](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/104) ([renovate\[bot\]](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/1fb6277aeb1743574c4df8ea0d323e0ac5394e42)) - quiet down alert handler status logs ([JourneyOver](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/ed1d225583de69ed22f88d9c3c3d97aa5fabb9f6)) - **deps**: update dependency tqdm to v4.69.1 ([#​106](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/issues/106)) [#​106](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/106) ([renovate\[bot\]](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/2a9741d478dbf64691408f4b943ef14013a6d450)) - **deps**: update dependency tqdm to v4.70.0 ([#​107](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/issues/107)) [#​107](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/107) ([renovate\[bot\]](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/aaa60e27c3fa725eaf98f9959c0a986967f2ddad)) - **release**: 1.6.0 ([JourneyOver](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/793706d2738621d0e228756c36066ea41337abc1)) ##### Commits - [`a0701b8`](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/a0701b8): ignore none sub if ref video not have sub (devildant) [#​95](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/95) - [`5d9de72`](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/5d9de72): optimize (devildant) [#​95](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/95) - [`d952b15`](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/commit/d952b15): update version string to 1.5.5-dev (JourneyOver) [#​95](https://redirect.github.com/JourneyDocker/Plex-Auto-Languages/pull/95) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…(2026.7.4 ➔ 2026.8.1) (#4193) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/home-assistant](https://ghcr.io/home-operations/home-assistant) ([source](https://redirect.github.com/home-assistant/core)) | minor | `2026.7.4` → `2026.8.1` | --- ### Release Notes <details> <summary>home-assistant/core (ghcr.io/home-operations/home-assistant)</summary> ### [`v2026.8.1`](https://redirect.github.com/home-assistant/core/releases/tag/2026.8.1) [Compare Source](https://redirect.github.com/home-assistant/core/compare/2026.8.0...2026.8.1) - Fixes [#​173399](https://redirect.github.com/home-assistant/core/issues/173399) Seerr webhook registration ([@​shtefko] - [#​177201]) ([overseerr docs]) - Debounce Matter cover state writes to coalesce split attribute updates ([@​agners] - [#​177540]) ([matter docs]) - Bump pydaikin to 2.18.4 ([@​fredrike] - [#​178001]) ([daikin docs]) - Adapt vicare to set via\_device\_id in DeviceInfo ([@​emontnemery] - [#​178229]) ([vicare docs]) - Adapt mqtt to set via\_device\_id in DeviceInfo ([@​emontnemery] - [#​178234]) ([mqtt docs]) - bump pyenphase to 3.2.1 ([@​catsmanac] - [#​178273]) ([enphase\_envoy docs][enphase_envoy docs]) - Bump lyngdorf to 1.4.3 ([@​fishloa] - [#​178323]) ([lyngdorf docs]) - Track shielded service call task in REST API ([@​arturpragacz] - [#​178377]) ([api docs]) - Bump aiowebostv to v0.9.1 ([@​thecode] - [#​178384]) ([webostv docs]) - chore: update python-picnic-api2 to v2.0.1 ([@​codesalatdev] - [#​178395]) ([picnic docs]) - Bump lyngdorf to 1.4.4 ([@​fishloa] - [#​178401]) ([lyngdorf docs]) - Use SmartThings cooling setpoint range for air conditioners ([@​StellarSea] - [#​178430]) ([smartthings docs]) - Bump solaredge-web to 0.3.1 ([@​tronikos] - [#​178437]) ([solaredge docs]) - Bump pytrydan to 1.0.5 ([@​dgomes] - [#​178447]) ([v2c docs]) - mikrotik: Don't reuse a string from Vodafone Station ([@​reedy] - [#​178455]) ([mikrotik docs]) - Update frontend to [`2026072`](https://redirect.github.com/home-assistant/core/commit/20260729).6 ([@​bramkragten] - [#​178470]) ([frontend docs]) [#​177201]: https://redirect.github.com/home-assistant/core/pull/177201 [#​177540]: https://redirect.github.com/home-assistant/core/pull/177540 [#​177559]: https://redirect.github.com/home-assistant/core/pull/177559 [#​178001]: https://redirect.github.com/home-assistant/core/pull/178001 [#​178229]: https://redirect.github.com/home-assistant/core/pull/178229 [#​178234]: https://redirect.github.com/home-assistant/core/pull/178234 [#​178273]: https://redirect.github.com/home-assistant/core/pull/178273 [#​178323]: https://redirect.github.com/home-assistant/core/pull/178323 [#​178377]: https://redirect.github.com/home-assistant/core/pull/178377 [#​178384]: https://redirect.github.com/home-assistant/core/pull/178384 [#​178395]: https://redirect.github.com/home-assistant/core/pull/178395 [#​178401]: https://redirect.github.com/home-assistant/core/pull/178401 [#​178430]: https://redirect.github.com/home-assistant/core/pull/178430 [#​178437]: https://redirect.github.com/home-assistant/core/pull/178437 [#​178447]: https://redirect.github.com/home-assistant/core/pull/178447 [#​178455]: https://redirect.github.com/home-assistant/core/pull/178455 [#​178470]: https://redirect.github.com/home-assistant/core/pull/178470 [@​StellarSea]: https://redirect.github.com/StellarSea [@​agners]: https://redirect.github.com/agners [@​arturpragacz]: https://redirect.github.com/arturpragacz [@​bramkragten]: https://redirect.github.com/bramkragten [@​catsmanac]: https://redirect.github.com/catsmanac [@​codesalatdev]: https://redirect.github.com/codesalatdev [@​dgomes]: https://redirect.github.com/dgomes [@​emontnemery]: https://redirect.github.com/emontnemery [@​fishloa]: https://redirect.github.com/fishloa [@​fredrike]: https://redirect.github.com/fredrike [@​reedy]: https://redirect.github.com/reedy [@​shtefko]: https://redirect.github.com/shtefko [@​thecode]: https://redirect.github.com/thecode [@​tronikos]: https://redirect.github.com/tronikos [api docs]: https://www.home-assistant.io/integrations/api/ [daikin docs]: https://www.home-assistant.io/integrations/daikin/ [enphase_envoy docs]: https://www.home-assistant.io/integrations/enphase_envoy/ [frontend docs]: https://www.home-assistant.io/integrations/frontend/ [lyngdorf docs]: https://www.home-assistant.io/integrations/lyngdorf/ [matter docs]: https://www.home-assistant.io/integrations/matter/ [mikrotik docs]: https://www.home-assistant.io/integrations/mikrotik/ [mqtt docs]: https://www.home-assistant.io/integrations/mqtt/ [overseerr docs]: https://www.home-assistant.io/integrations/overseerr/ [picnic docs]: https://www.home-assistant.io/integrations/picnic/ [smartthings docs]: https://www.home-assistant.io/integrations/smartthings/ [solaredge docs]: https://www.home-assistant.io/integrations/solaredge/ [v2c docs]: https://www.home-assistant.io/integrations/v2c/ [vicare docs]: https://www.home-assistant.io/integrations/vicare/ [webostv docs]: https://www.home-assistant.io/integrations/webostv/ ### [`v2026.8.0`](https://redirect.github.com/home-assistant/core/releases/tag/2026.8.0) [Compare Source](https://redirect.github.com/home-assistant/core/compare/2026.7.4...2026.8.0) <https://www.home-assistant.io/blog/2026/08/05/release-20268/> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…l-secrets (2.8.0 ➔ 2.9.0) (#4192) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/external-secrets/charts/external-secrets](https://redirect.github.com/external-secrets/external-secrets) | minor | `2.8.0` → `2.9.0` | --- ### Release Notes <details> <summary>external-secrets/external-secrets (ghcr.io/external-secrets/charts/external-secrets)</summary> ### [`v2.9.0`](https://redirect.github.com/external-secrets/external-secrets/releases/tag/v2.9.0) [Compare Source](https://redirect.github.com/external-secrets/external-secrets/compare/v2.8.0...v2.9.0) Image: `ghcr.io/external-secrets/external-secrets:v2.9.0` Image: `ghcr.io/external-secrets/external-secrets:v2.9.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.9.0-ubi-boringssl` <!-- Release notes generated using configuration in .github/release.yml at main --> #### What's Changed ##### General - chore: release helm chart 2.8.0 by [@​Skarlso](https://redirect.github.com/Skarlso) in [#​6656](https://redirect.github.com/external-secrets/external-secrets/pull/6656) - fix(conjur): add InstallTimeout to helm chart installation and pin server image version by [@​alekc](https://redirect.github.com/alekc) in [#​6658](https://redirect.github.com/external-secrets/external-secrets/pull/6658) - fix(deps): bump grpc-go for GHSA-hrxh-6v49-42gf by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6695](https://redirect.github.com/external-secrets/external-secrets/pull/6695) - feat(charts): add opt-in schedulerName and runtimeClassName to the pods by [@​somaz94](https://redirect.github.com/somaz94) in [#​6675](https://redirect.github.com/external-secrets/external-secrets/pull/6675) - fix(webhookconfig): use a constant Eventf format by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6699](https://redirect.github.com/external-secrets/external-secrets/pull/6699) - fix: bump codeqls together by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6707](https://redirect.github.com/external-secrets/external-secrets/pull/6707) - fix(security): install crane in a reliable way and fix code scanning issue by [@​Skarlso](https://redirect.github.com/Skarlso) in [#​6712](https://redirect.github.com/external-secrets/external-secrets/pull/6712) - chore: Fix cve-2026-56852 by bump golang.org/x/text\@​0.40 by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6734](https://redirect.github.com/external-secrets/external-secrets/pull/6734) - chore(fix): template abuse for secret values by [@​Skarlso](https://redirect.github.com/Skarlso) in [#​6730](https://redirect.github.com/external-secrets/external-secrets/pull/6730) - chore: Bump controller runtime by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6703](https://redirect.github.com/external-secrets/external-secrets/pull/6703) - chore(fix): moved the validation further up the chain by [@​Skarlso](https://redirect.github.com/Skarlso) in [#​6735](https://redirect.github.com/external-secrets/external-secrets/pull/6735) - fix: pin all dependencies by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6727](https://redirect.github.com/external-secrets/external-secrets/pull/6727) - feat(e2e): implement fan-out matrix validation and credential scoping by [@​alekc](https://redirect.github.com/alekc) in [#​6660](https://redirect.github.com/external-secrets/external-secrets/pull/6660) - fix(akeyless): use local errors.As target to avoid data race by [@​HYPERVAPOR](https://redirect.github.com/HYPERVAPOR) in [#​6749](https://redirect.github.com/external-secrets/external-secrets/pull/6749) - test(crd): add e2e suite and CI leg for the CRD provider by [@​alekc](https://redirect.github.com/alekc) in [#​6742](https://redirect.github.com/external-secrets/external-secrets/pull/6742) - docs(webhook): add debugging guide and fix stale secret-label claim by [@​alekc](https://redirect.github.com/alekc) in [#​6746](https://redirect.github.com/external-secrets/external-secrets/pull/6746) - test(e2e): skip the global addon uninstall on disposable clusters by [@​alekc](https://redirect.github.com/alekc) in [#​6780](https://redirect.github.com/external-secrets/external-secrets/pull/6780) - feat: add environments support to 1Password SDK by [@​Skarlso](https://redirect.github.com/Skarlso) in [#​6318](https://redirect.github.com/external-secrets/external-secrets/pull/6318) - fix(akeyless): stop reporting API failures as a missing item by [@​alekc](https://redirect.github.com/alekc) in [#​6753](https://redirect.github.com/external-secrets/external-secrets/pull/6753) - fix(makefile): harden clean worktree check by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6702](https://redirect.github.com/external-secrets/external-secrets/pull/6702) - fix: support docs builds from worktrees by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6741](https://redirect.github.com/external-secrets/external-secrets/pull/6741) - feat(cache): add atomic ContainsOrAdd by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6706](https://redirect.github.com/external-secrets/external-secrets/pull/6706) - fix: omit empty AWS secret replica regions by [@​goutamadwant](https://redirect.github.com/goutamadwant) in [#​6596](https://redirect.github.com/external-secrets/external-secrets/pull/6596) - fix: Follow up PR6318 by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6782](https://redirect.github.com/external-secrets/external-secrets/pull/6782) - feat: Show sponsoring of Roche by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6790](https://redirect.github.com/external-secrets/external-secrets/pull/6790) - fix(e2e): make the oracle suite runnable by [@​alekc](https://redirect.github.com/alekc) in [#​6770](https://redirect.github.com/external-secrets/external-secrets/pull/6770) - chore: temporarily allow GHSA-gcjh-h69q-9w9g by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6795](https://redirect.github.com/external-secrets/external-secrets/pull/6795) - fix(api): stop defaulting optional ExternalSecret strategy fields by [@​alekc](https://redirect.github.com/alekc) in [#​6798](https://redirect.github.com/external-secrets/external-secrets/pull/6798) - chore: remove/cleanup remaining tools from tools.go. by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6786](https://redirect.github.com/external-secrets/external-secrets/pull/6786) - chore: Cleanup sponsors dead links by [@​evrardj-roche](https://redirect.github.com/evrardj-roche) in [#​6791](https://redirect.github.com/external-secrets/external-secrets/pull/6791) - fix(aws): detach replicated regions before deleting AWS SecretsManager secret by [@​cmoscofian](https://redirect.github.com/cmoscofian) in [#​6687](https://redirect.github.com/external-secrets/external-secrets/pull/6687) - chore: fix enable cache being removed on installCRD=false by [@​Skarlso](https://redirect.github.com/Skarlso) in [#​6799](https://redirect.github.com/external-secrets/external-secrets/pull/6799) ##### Dependencies - chore(deps): bump golang from `0178a64` to `0178a64` by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6663](https://redirect.github.com/external-secrets/external-secrets/pull/6663) - chore(deps): bump mkdocs-material from 9.7.6 to 9.7.7 in /hack/api-docs by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6669](https://redirect.github.com/external-secrets/external-secrets/pull/6669) - chore(deps): bump actions/download-artifact from 4.3.0 to 8.0.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6674](https://redirect.github.com/external-secrets/external-secrets/pull/6674) - chore(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6667](https://redirect.github.com/external-secrets/external-secrets/pull/6667) - chore(deps): bump fkirc/skip-duplicate-actions from 5.3.1 to 5.3.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6671](https://redirect.github.com/external-secrets/external-secrets/pull/6671) - chore(deps): bump actions/stale from 10.3.0 to 10.4.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6673](https://redirect.github.com/external-secrets/external-secrets/pull/6673) - chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6672](https://redirect.github.com/external-secrets/external-secrets/pull/6672) - chore(deps): bump aws-actions/configure-aws-credentials from 4.0.2 to 6.2.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6670](https://redirect.github.com/external-secrets/external-secrets/pull/6670) - chore(deps): bump distroless/static from `d5f030c` to `9197324` by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6662](https://redirect.github.com/external-secrets/external-secrets/pull/6662) - chore(deps): bump ubi9/ubi from `8bf0e8f` to `2a6bd69` by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6661](https://redirect.github.com/external-secrets/external-secrets/pull/6661) - chore(deps): bump actions/setup-go from 6.0.0 to 7.0.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6664](https://redirect.github.com/external-secrets/external-secrets/pull/6664) - chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6665](https://redirect.github.com/external-secrets/external-secrets/pull/6665) - chore(deps): bump github/codeql-action/init from 4.36.3 to 4.37.3 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6666](https://redirect.github.com/external-secrets/external-secrets/pull/6666) - chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6715](https://redirect.github.com/external-secrets/external-secrets/pull/6715) - chore(deps): bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6717](https://redirect.github.com/external-secrets/external-secrets/pull/6717) - chore(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6722](https://redirect.github.com/external-secrets/external-secrets/pull/6722) - chore(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.3 in the codeql group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6713](https://redirect.github.com/external-secrets/external-secrets/pull/6713) - chore(deps): bump google-github-actions/auth from [`fc21748`](https://redirect.github.com/external-secrets/external-secrets/commit/fc2174804b84f912b1f6d334e9463f484f1c552d) to [`cd3439a`](https://redirect.github.com/external-secrets/external-secrets/commit/cd3439a4d2c29fd597fb063e209ee2c2d6128dcd) by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6714](https://redirect.github.com/external-secrets/external-secrets/pull/6714) - chore(deps): bump actions/cache from 4.2.4 to 6.1.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6716](https://redirect.github.com/external-secrets/external-secrets/pull/6716) - chore(deps): bump actions/labeler from 6.1.0 to 7.0.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6718](https://redirect.github.com/external-secrets/external-secrets/pull/6718) - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.2.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6719](https://redirect.github.com/external-secrets/external-secrets/pull/6719) - chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6720](https://redirect.github.com/external-secrets/external-secrets/pull/6720) - chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6723](https://redirect.github.com/external-secrets/external-secrets/pull/6723) - chore(deps): bump docker/login-action from 4.4.0 to 4.5.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6736](https://redirect.github.com/external-secrets/external-secrets/pull/6736) - chore(deps): bump actions/stale from 10.4.0 to 11.0.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6738](https://redirect.github.com/external-secrets/external-secrets/pull/6738) - chore(deps): bump the codeql group with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6751](https://redirect.github.com/external-secrets/external-secrets/pull/6751) - chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6752](https://redirect.github.com/external-secrets/external-secrets/pull/6752) - chore(deps): bump the codeql group with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6801](https://redirect.github.com/external-secrets/external-secrets/pull/6801) - chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6802](https://redirect.github.com/external-secrets/external-secrets/pull/6802) - chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6805](https://redirect.github.com/external-secrets/external-secrets/pull/6805) - chore(deps): bump azure/login from 3.0.0 to 3.0.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6804](https://redirect.github.com/external-secrets/external-secrets/pull/6804) - chore(deps): bump google-github-actions/auth from [`cd3439a`](https://redirect.github.com/external-secrets/external-secrets/commit/cd3439a4d2c29fd597fb063e209ee2c2d6128dcd) to [`1206044`](https://redirect.github.com/external-secrets/external-secrets/commit/12060449e87204eca501a11f2f7f1483024afff0) by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6737](https://redirect.github.com/external-secrets/external-secrets/pull/6737) - chore(deps): bump step-security/harden-runner from 2.19.4 to 2.20.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​6803](https://redirect.github.com/external-secrets/external-secrets/pull/6803) #### New Contributors - [@​HYPERVAPOR](https://redirect.github.com/HYPERVAPOR) made their first contribution in [#​6749](https://redirect.github.com/external-secrets/external-secrets/pull/6749) - [@​goutamadwant](https://redirect.github.com/goutamadwant) made their first contribution in [#​6596](https://redirect.github.com/external-secrets/external-secrets/pull/6596) **Full Changelog**: <external-secrets/external-secrets@v2.8.0...v2.9.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…#4191) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/autobrr/qui](https://redirect.github.com/autobrr/qui) | minor | `v1.24.0` → `v1.25.0` | --- ### Release Notes <details> <summary>autobrr/qui (ghcr.io/autobrr/qui)</summary> ### [`v1.25.0`](https://redirect.github.com/autobrr/qui/releases/tag/v1.25.0) [Compare Source](https://redirect.github.com/autobrr/qui/compare/v1.24.0...v1.25.0) #### Changelog ##### New Features - [`fe6393f`](https://redirect.github.com/autobrr/qui/commit/fe6393fabaae174229dde7379110e1f18755fec1): feat(crossseed): add skip individual episodes option to library search runs ([#​2216](https://redirect.github.com/autobrr/qui/issues/2216)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`6d2fe15`](https://redirect.github.com/autobrr/qui/commit/6d2fe1526f083c774d1d7b1308aab6c7c4d2d05c): feat(crossseed): assemble season packs from seeded episodes in automation flows ([#​2211](https://redirect.github.com/autobrr/qui/issues/2211)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`fe3ec95`](https://redirect.github.com/autobrr/qui/commit/fe3ec958f723a6abc57c325684de3ffecd65263c): feat(crossseed): curb season pack churn in automation flows ([#​2213](https://redirect.github.com/autobrr/qui/issues/2213)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`870042e`](https://redirect.github.com/autobrr/qui/commit/870042ef940ca630cbded9920efdd517ab10f72a): feat(crossseed): match torrents whose files pair by exact size ([#​2219](https://redirect.github.com/autobrr/qui/issues/2219)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`5ea7ece`](https://redirect.github.com/autobrr/qui/commit/5ea7ece516c530b0b5884302844e165b1d3e6ca6): feat(crossseed): page RSS feeds until a page is fully known ([#​2207](https://redirect.github.com/autobrr/qui/issues/2207)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`3d7b25a`](https://redirect.github.com/autobrr/qui/commit/3d7b25ae6a3f43e5676bedffa590128570e31921): feat(crossseed): replace the auto-resume percentage rule with a byte limit ([#​2228](https://redirect.github.com/autobrr/qui/issues/2228)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`63ee4dc`](https://redirect.github.com/autobrr/qui/commit/63ee4dccb6043715b4712730fb8fdd2e8c043543): feat(crossseed): rescue exact-size title mismatches ([#​2230](https://redirect.github.com/autobrr/qui/issues/2230)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`f8c31e5`](https://redirect.github.com/autobrr/qui/commit/f8c31e5c809a13e87491eff16df8edddd23ec45b): feat(crossseed): search for season packs of seeded episodes in library runs ([#​2212](https://redirect.github.com/autobrr/qui/issues/2212)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`2900640`](https://redirect.github.com/autobrr/qui/commit/2900640f0c45296e4e8900a5d679370f19e2e087): feat(crossseed): track seeded search history per indexer ([#​2218](https://redirect.github.com/autobrr/qui/issues/2218)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`486a194`](https://redirect.github.com/autobrr/qui/commit/486a1947000bccf295fef560c2ab8d1d0500ec2f): feat(filters): saved filter views ([#​2193](https://redirect.github.com/autobrr/qui/issues/2193)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`d37e60f`](https://redirect.github.com/autobrr/qui/commit/d37e60f156a28c02e777c457b380ca4684453982): feat(indexers): remember Prowlarr and Jackett connections in the discover dialog ([#​2231](https://redirect.github.com/autobrr/qui/issues/2231)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`ea428ad`](https://redirect.github.com/autobrr/qui/commit/ea428ade61c6ce47d87f79719b2a6138e4f2005a): feat(torrents): navigate the torrent list with arrow keys ([#​2196](https://redirect.github.com/autobrr/qui/issues/2196)) ([@​s0up4200](https://redirect.github.com/s0up4200)) ##### Bug Fixes - [`2c30c62`](https://redirect.github.com/autobrr/qui/commit/2c30c623964e3a7198a012d60af20e4ea20efa8f): fix(crossseed): apply search aliases only to the source torrent ([#​2221](https://redirect.github.com/autobrr/qui/issues/2221)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`17e9b4c`](https://redirect.github.com/autobrr/qui/commit/17e9b4c2b9edd706b2d56bc92701cc191c7bf013): fix(crossseed): clarify the max age setting copy ([#​2223](https://redirect.github.com/autobrr/qui/issues/2223)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`d5ba915`](https://redirect.github.com/autobrr/qui/commit/d5ba9150631cd1a5f7f103cae53d5e86468c7b51): fix(crossseed): compare the search size band against the full torrent size ([#​2206](https://redirect.github.com/autobrr/qui/issues/2206)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`aae8174`](https://redirect.github.com/autobrr/qui/commit/aae8174500df17d7af18db667d9a1f63d569ada5): fix(crossseed): demote unlinkable season pack episodes to missing ([#​2215](https://redirect.github.com/autobrr/qui/issues/2215)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`d53e322`](https://redirect.github.com/autobrr/qui/commit/d53e322320c1275dbcf364ed744bdf3fc39b430b): fix(crossseed): match titles whose punctuation scene naming drops ([#​2191](https://redirect.github.com/autobrr/qui/issues/2191)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`1404913`](https://redirect.github.com/autobrr/qui/commit/140491311612b38564f9b3ddcbcc60b943aad8db): fix(crossseed): recover season structure from files when a search result is applied ([#​2232](https://redirect.github.com/autobrr/qui/issues/2232)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`086702d`](https://redirect.github.com/autobrr/qui/commit/086702d204c33cda613c6bcc897864ca8e14c912): fix(crossseed): recover season structure from metainfo files when a torrent is applied ([#​2235](https://redirect.github.com/autobrr/qui/issues/2235)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`7fed37f`](https://redirect.github.com/autobrr/qui/commit/7fed37f9e08badc139ec5e8efbe1ba155e437c52): fix(crossseed): retry zero-result searches with alternate titles ([#​2204](https://redirect.github.com/autobrr/qui/issues/2204)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`d69b4b7`](https://redirect.github.com/autobrr/qui/commit/d69b4b761a40d7848cb99c4982d770bbb2c5f55b): fix(crossseed): skip Gazelle lookups for content that RED/OPS cannot host ([#​2195](https://redirect.github.com/autobrr/qui/issues/2195)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`f3c4dfd`](https://redirect.github.com/autobrr/qui/commit/f3c4dfd928fe969438b2c6cbd844574b00767b9a): fix(crossseed): treat one-sided HDR and collection tags as compatible ([#​2205](https://redirect.github.com/autobrr/qui/issues/2205)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`48d287c`](https://redirect.github.com/autobrr/qui/commit/48d287c12f65158f82392184958f06965761964b): fix(dirscan): reopen no\_match files when new indexers appear ([#​2199](https://redirect.github.com/autobrr/qui/issues/2199)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`bc6f3de`](https://redirect.github.com/autobrr/qui/commit/bc6f3de8b9bd6704e5138007406e51ec37e138d3): fix(indexers): prevent incorrect autodiscovery updates ([#​2236](https://redirect.github.com/autobrr/qui/issues/2236)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`6053b6f`](https://redirect.github.com/autobrr/qui/commit/6053b6f022ed3149cb2b4e045761b1a8c5115ca2): fix(logging): make DEBUG the supported diagnostic level ([#​2239](https://redirect.github.com/autobrr/qui/issues/2239)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`d6816ab`](https://redirect.github.com/autobrr/qui/commit/d6816ab7866554103d8667a44e2c5165acd9f434): fix(torznab): keep rate-limited caps searches uncovered ([#​2229](https://redirect.github.com/autobrr/qui/issues/2229)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`6a86929`](https://redirect.github.com/autobrr/qui/commit/6a86929ec9761144aec2f47dc48b3e3e4bd8d1ad): fix(torznab): keep structured season/ep params when indexer caps support them ([#​2214](https://redirect.github.com/autobrr/qui/issues/2214)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`f4b5446`](https://redirect.github.com/autobrr/qui/commit/f4b54460360871b80440db08d3a42c05a9134905): fix(torznab): skip indexers whose caps fetch is rate limited ([#​2217](https://redirect.github.com/autobrr/qui/issues/2217)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`42cec66`](https://redirect.github.com/autobrr/qui/commit/42cec660a371b6f0e73f11c20389206fff4a0251): fix(web): don't hijack Cmd/Ctrl+Shift+A as select-all in torrent table ([#​2200](https://redirect.github.com/autobrr/qui/issues/2200)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`9971a4f`](https://redirect.github.com/autobrr/qui/commit/9971a4f413d89861b17d50d5b3af1f922bf39471): fix(web): scope overlay blur to the support dialog ([#​2197](https://redirect.github.com/autobrr/qui/issues/2197)) ([@​s0up4200](https://redirect.github.com/s0up4200)) ##### Other Changes - [`351f4c7`](https://redirect.github.com/autobrr/qui/commit/351f4c7e5f98f6abdac2a3daa9457a79aa03bacf): chore(deps): bump docker/login-action from 4.5.1 to 4.5.2 in the github group ([#​2225](https://redirect.github.com/autobrr/qui/issues/2225)) ([@​dependabot](https://redirect.github.com/dependabot)\[bot]) - [`9fed7e9`](https://redirect.github.com/autobrr/qui/commit/9fed7e900538ec12bef6a2da960820963d183a29): chore(deps): bump postcss from 8.5.18 to 8.5.23 in /documentation ([#​2224](https://redirect.github.com/autobrr/qui/issues/2224)) ([@​dependabot](https://redirect.github.com/dependabot)\[bot]) - [`b804785`](https://redirect.github.com/autobrr/qui/commit/b804785afd46706e4c8e494e37aea7c883d2b85a): chore(deps): bump the github group with 2 updates ([#​2203](https://redirect.github.com/autobrr/qui/issues/2203)) ([@​dependabot](https://redirect.github.com/dependabot)\[bot]) - [`6aaf5ea`](https://redirect.github.com/autobrr/qui/commit/6aaf5eaffadab1f15d86b56c3684c876b1b78409): chore(deps): bump the golang group with 16 updates ([#​2209](https://redirect.github.com/autobrr/qui/issues/2209)) ([@​dependabot](https://redirect.github.com/dependabot)\[bot]) - [`4f062bd`](https://redirect.github.com/autobrr/qui/commit/4f062bdd45cdc9fc2d7cfdbb97bb3914858f62e1): chore(deps): bump the npm group in /web with 43 updates ([#​2210](https://redirect.github.com/autobrr/qui/issues/2210)) ([@​dependabot](https://redirect.github.com/dependabot)\[bot]) - [`a0ed321`](https://redirect.github.com/autobrr/qui/commit/a0ed3210f059cc8cb557ae780488e392723714a7): ci(release): fold signing smoke test into develop snapshot build ([#​2201](https://redirect.github.com/autobrr/qui/issues/2201)) ([@​s0up4200](https://redirect.github.com/s0up4200)) - [`91d30a0`](https://redirect.github.com/autobrr/qui/commit/91d30a08589090b9c5094a1da5a8413b2e24f6e5): docs(web): correct the vitest setup-file and auto-cleanup rules ([#​2238](https://redirect.github.com/autobrr/qui/issues/2238)) ([@​s0up4200](https://redirect.github.com/s0up4200)) **Full Changelog**: <autobrr/qui@v1.24.0...v1.25.0> #### Docker images - `docker pull ghcr.io/autobrr/qui:v1.25.0` - `docker pull ghcr.io/autobrr/qui:latest` #### What to do next? - Join our [Discord server](https://discord.autobrr.com/qui) Thank you for using qui! </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…er (3.8.0 ➔ 3.10.0) (#4190) This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [aqua:editorconfig-checker/editorconfig-checker](https://redirect.github.com/editorconfig-checker/editorconfig-checker) | tools | minor | `3.8.0` → `3.10.0` | `3.11.1` (+1) | --- ### Release Notes <details> <summary>editorconfig-checker/editorconfig-checker (aqua:editorconfig-checker/editorconfig-checker)</summary> ### [`v3.10.0`](https://redirect.github.com/editorconfig-checker/editorconfig-checker/blob/HEAD/CHANGELOG.md#3100-2026-08-07) [Compare Source](https://redirect.github.com/editorconfig-checker/editorconfig-checker/compare/v3.9.0...v3.10.0) ##### Features - **immutable-releases:** ensure that despite the release being a draft the tag is created ([912f4a9](https://redirect.github.com/editorconfig-checker/editorconfig-checker/commit/912f4a986b7da0b22cfa3a055cc24a355dee7cbc)) - **immutable-releases:** set release-please to create draft releases ([2d48c2e](https://redirect.github.com/editorconfig-checker/editorconfig-checker/commit/2d48c2ecae1743614cefa660c2796e14cefd7520)) - **immutable-release:** tell release-please to create draft releases ([a685b54](https://redirect.github.com/editorconfig-checker/editorconfig-checker/commit/a685b542509d0349ce6215adf6088a242fa93d84)) ### [`v3.9.0`](https://redirect.github.com/editorconfig-checker/editorconfig-checker/blob/HEAD/CHANGELOG.md#390-2026-07-31) [Compare Source](https://redirect.github.com/editorconfig-checker/editorconfig-checker/compare/v3.8.0...v3.9.0) ##### Features - enable immutable releases ([6865c06](https://redirect.github.com/editorconfig-checker/editorconfig-checker/commit/6865c0606d7099ff7b8da5a3e1cd5aced3195a6d)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…11.22.2) (#4189) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/zwave-js/zwave-js-ui](https://redirect.github.com/zwave-js/zwave-js-ui) | patch | `11.22.0` → `11.22.2` | --- ### Release Notes <details> <summary>zwave-js/zwave-js-ui (ghcr.io/zwave-js/zwave-js-ui)</summary> ### [`v11.22.2`](https://redirect.github.com/zwave-js/zwave-js-ui/blob/HEAD/CHANGELOG.md#11222-2026-08-07) [Compare Source](https://redirect.github.com/zwave-js/zwave-js-ui/compare/v11.22.1...v11.22.2) ##### ✨ Features - bump [@​zwave-js/server](https://redirect.github.com/zwave-js/server)@​3.10.1 ([#​4781](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4781)) ([11f41f0](https://redirect.github.com/zwave-js/zwave-js-ui/commit/11f41f0edd4d7b762f8663a388704217617f95eb)) ### [`v11.22.1`](https://redirect.github.com/zwave-js/zwave-js-ui/blob/HEAD/CHANGELOG.md#11221-2026-08-07) [Compare Source](https://redirect.github.com/zwave-js/zwave-js-ui/compare/v11.22.0...v11.22.1) ##### ✨ Features - **bot:** classify issue repository with an agentic workflow ([#​4764](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4764)) ([1dacfa3](https://redirect.github.com/zwave-js/zwave-js-ui/commit/1dacfa38ccb6e5de1ba380a9ec716bbdc44337d8)), closes [#​4763](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4763) - **bot:** compute embeddings locally instead of using GitHub Models ([#​4763](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4763)) ([f220b8a](https://redirect.github.com/zwave-js/zwave-js-ui/commit/f220b8a08d5ced21b1680da8578accf2aa15c186)), closes [zwave-js/zwave-js#8985](https://redirect.github.com/zwave-js/zwave-js/issues/8985) [zwave-js/zwave-js#8974](https://redirect.github.com/zwave-js/zwave-js/issues/8974) - **bot:** judge docs answers with an agentic workflow ([#​4765](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4765)) ([5169a12](https://redirect.github.com/zwave-js/zwave-js-ui/commit/5169a12b16cae70cfd77e79a9815f5d864118b7a)), closes [#​4764](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4764) [zwave-js/zwave-js#8987](https://redirect.github.com/zwave-js/zwave-js/issues/8987) - bump zwave-js\@​15.27.0 ([#​4780](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4780)) ([69b0057](https://redirect.github.com/zwave-js/zwave-js-ui/commit/69b0057a2b978afc523e4644f972938caf079c08)) ##### 🐛 Bug Fixes - **bot:** keep the answer bot working when its index cache is evicted ([#​4753](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4753)) ([b07cb44](https://redirect.github.com/zwave-js/zwave-js-ui/commit/b07cb44491db7c0deeec92b95d23898356f35551)), closes [#​4743](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4743) [#​4752](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4752) - **bot:** measure index staleness by upload time, not content age ([#​4754](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4754)) ([c236df2](https://redirect.github.com/zwave-js/zwave-js-ui/commit/c236df2d684dea1f935c2dd2b2b41ea1c5cb31c3)), closes [#​4753](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4753) [#​4749](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4749) [#​4682](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4682) [#​4753](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4753) - **bot:** run triage on transferred issues ([#​4762](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4762)) ([9643f6e](https://redirect.github.com/zwave-js/zwave-js-ui/commit/9643f6e9a8cf8e3f46cd7d5b179cbb70794330c7)), closes [zwave-js/zwave-js#8982](https://redirect.github.com/zwave-js/zwave-js/issues/8982) ##### ♻️ Code Refactoring - **bot:** extract per-repo config into zwave-js-bot.config.json ([#​4770](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4770)) ([0edab73](https://redirect.github.com/zwave-js/zwave-js-ui/commit/0edab73ed7a7df99688defacacf2e4c4a122461c)) ##### ⚡ Performance Improvements - **api:** call `getDefinedValueIDs` once per node ready ([#​4778](https://redirect.github.com/zwave-js/zwave-js-ui/issues/4778)) ([942dcfe](https://redirect.github.com/zwave-js/zwave-js-ui/commit/942dcfed673773a2cdc18c50597d997fd3f8882c)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
… ➔ 2.2.15) (#4188) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/stakater/charts/reloader](https://redirect.github.com/stakater/Reloader) | patch | `2.2.14` → `2.2.15` | --- ### Release Notes <details> <summary>stakater/Reloader (ghcr.io/stakater/charts/reloader)</summary> ### [`v2.2.15`](https://redirect.github.com/stakater/Reloader/compare/chart-v2.2.14...chart-v2.2.15) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…tbox (8.3.49 ➔ 8.3.51) (#4186) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/netbox-community/netbox-chart/netbox](https://netbox.dev/) ([source](https://redirect.github.com/netbox-community/netbox-chart)) | patch | `8.3.49` → `8.3.51` | --- ### Release Notes <details> <summary>netbox-community/netbox-chart (ghcr.io/netbox-community/netbox-chart/netbox)</summary> ### [`v8.3.51`](https://redirect.github.com/netbox-community/netbox-chart/releases/tag/netbox-8.3.51) IP address management (IPAM) and data center infrastructure management (DCIM) tool #### What's Changed - chore(deps): update postgresql docker tag to v18.8.7 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​1342](https://redirect.github.com/netbox-community/netbox-chart/pull/1342) **Full Changelog**: <netbox-community/netbox-chart@netbox-operator-1.2.143...netbox-8.3.51> ### [`v8.3.50`](https://redirect.github.com/netbox-community/netbox-chart/releases/tag/netbox-8.3.50) IP address management (IPAM) and data center infrastructure management (DCIM) tool #### What's Changed - build(deps): bump github/codeql-action from 4.37.3 to 4.37.5 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1340](https://redirect.github.com/netbox-community/netbox-chart/pull/1340) - build(deps): bump github/codeql-action from 4.37.5 to 4.37.6 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1341](https://redirect.github.com/netbox-community/netbox-chart/pull/1341) - chore(deps): update valkey docker tag to v6.2.7 by [@​renovate](https://redirect.github.com/renovate)\[bot] in [#​1343](https://redirect.github.com/netbox-community/netbox-chart/pull/1343) **Full Changelog**: <netbox-community/netbox-chart@netbox-operator-1.2.142...netbox-8.3.50> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…➔ 0.52.193) (#4185) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/nesquena/hermes-webui](https://redirect.github.com/nesquena/hermes-webui) | patch | `0.52.166` → `0.52.193` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/n8n-io/n8n](https://n8n.io) ([source](https://redirect.github.com/n8n-io/n8n)) | patch | `2.34.0` → `2.34.4` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
….11.21 ➔ 0.11.22) (#4183) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/charts/miroir](https://redirect.github.com/home-operations/miroir) | patch | `0.11.21` → `0.11.22` | --- ### Release Notes <details> <summary>home-operations/miroir (ghcr.io/home-operations/charts/miroir)</summary> ### [`v0.11.22`](https://redirect.github.com/home-operations/miroir/blob/HEAD/CHANGELOG.md#01122-2026-08-07) [Compare Source](https://redirect.github.com/home-operations/miroir/compare/0.11.21...0.11.22) ##### Features - **agent:** latch node breaker on DRBD kernel assertions ([#​417](https://redirect.github.com/home-operations/miroir/issues/417)) ([19bc188](https://redirect.github.com/home-operations/miroir/commit/19bc188d34f9d46236b117821608274a33f65bf6)) ##### Miscellaneous Chores - **mise:** Update tool oxfmt (0.61.0 → 0.62.0) ([#​418](https://redirect.github.com/home-operations/miroir/issues/418)) ([0597786](https://redirect.github.com/home-operations/miroir/commit/0597786e6470dec84fd8cb960988f55b44e0a102)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…➔ 1.5.1) (#4182) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/gtsteffaniak/filebrowser](https://redirect.github.com/gtsteffaniak/filebrowser) | patch | `1.5.0-stable` → `1.5.1-stable` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
#4181) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/fluxcd/flux-cli](https://redirect.github.com/fluxcd/flux2) | patch | `v2.9.3` → `v2.9.4` | --- ### Release Notes <details> <summary>fluxcd/flux2 (ghcr.io/fluxcd/flux-cli)</summary> ### [`v2.9.4`](https://redirect.github.com/fluxcd/flux2/releases/tag/v2.9.4) [Compare Source](https://redirect.github.com/fluxcd/flux2/compare/v2.9.3...v2.9.4) #### Highlights Flux v2.9.4 is a patch release that ships various fixes to the Flux controllers, covering source-watcher tarball extraction and glob expansion limits, the refspecs accepted by `ImageUpdateAutomation`, the HTTP request limits of the notification-controller servers, and Helm repository index loading, OCI chart digest pinning, `Bucket` error handling and GCS static authentication in source-controller. On the CLI side, `flux migrate -f` now supports migrating repositories to Flux 2.9. Users are encouraged to upgrade for the best experience. Note that this release contains CRD schema changes for `ArtifactGenerator` and `ImageUpdateAutomation`; both CRDs must be updated along with the controllers. ℹ️ Please follow the [Upgrade Procedure for Flux v2.7+](https://redirect.github.com/fluxcd/flux2/discussions/5572) for a smooth upgrade from Flux v2.6 to the latest version. Fixes: - Confine tarball extraction and bound glob expansion (source-watcher) - Disallow force-update and deletion via refspecs (image-automation-controller) - Unify HTTP server request limits (notification-controller) - Align Helm repository index loading with upstream Helm v4 (source-controller) - Improve error handling in `Bucket` reconciliation (source-controller) - Pin OCI chart verification by digest (source-controller) - Limit GCS static authentication to service account keys (source-controller) - Restrict the `allow-webhooks` network policy to the receiver port (flux CLI) Improvements: - Add support for migrating repositories to 2.9 in `flux migrate -f` (flux CLI) - Update fluxcd/pkg dependencies, which align the ECR host detection with upstream (source-controller, image-reflector-controller, flux CLI) - Update Bitbucket Cloud receiver guidance (notification-controller) #### Components changelog - source-controller [v1.9.4](https://redirect.github.com/fluxcd/source-controller/blob/v1.9.4/CHANGELOG.md) - source-watcher [v2.2.3](https://redirect.github.com/fluxcd/source-watcher/blob/v2.2.3/CHANGELOG.md) - notification-controller [v1.9.3](https://redirect.github.com/fluxcd/notification-controller/blob/v1.9.3/CHANGELOG.md) - image-reflector-controller [v1.2.4](https://redirect.github.com/fluxcd/image-reflector-controller/blob/v1.2.4/CHANGELOG.md) - image-automation-controller [v1.2.4](https://redirect.github.com/fluxcd/image-automation-controller/blob/v1.2.4/CHANGELOG.md) #### CLI changelog - \[release/v2.9.x] Add support for 2.9 in `migrate -f` by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​6021](https://redirect.github.com/fluxcd/flux2/pull/6021) - Update fluxcd/pkg dependencies by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​6026](https://redirect.github.com/fluxcd/flux2/pull/6026) - \[release/v2.9.x] fix: restrict `allow-webhooks` netpol to receiver port by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​6029](https://redirect.github.com/fluxcd/flux2/pull/6029) - Update toolkit components by [@​fluxcdbot](https://redirect.github.com/fluxcdbot) in [#​6031](https://redirect.github.com/fluxcd/flux2/pull/6031) **Full Changelog**: <fluxcd/flux2@v2.9.3...v2.9.4> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
KB entry for the #4187 incident, in the standard Symptom → Cause → Fix shape, plus prevention (annotate live CRDs out-of-band before migrating off a CRD-templating chart; keep a `helm show crds` copy). Indexed under Storage / backups and All entries. `zensical build --strict` passes locally.
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/controlplaneio-fluxcd/charts/flux-instance](https://fluxoperator.dev) ([source](https://redirect.github.com/controlplaneio-fluxcd/flux-operator)) | minor | `0.57.0` → `0.58.0` | | [ghcr.io/controlplaneio-fluxcd/charts/flux-operator](https://fluxoperator.dev) ([source](https://redirect.github.com/controlplaneio-fluxcd/flux-operator)) | minor | `0.57.0` → `0.58.0` | | [ghcr.io/controlplaneio-fluxcd/flux-operator-manifests](https://redirect.github.com/controlplaneio-fluxcd/flux-operator) | minor | `v0.57.0` → `v0.58.0` | | [ghcr.io/controlplaneio-fluxcd/flux-operator-mcp](https://redirect.github.com/controlplaneio-fluxcd/flux-operator) | minor | `v0.57.0` → `v0.58.0` | --- ### Release Notes <details> <summary>controlplaneio-fluxcd/flux-operator (ghcr.io/controlplaneio-fluxcd/charts/flux-instance)</summary> ### [`v0.58.0`](https://redirect.github.com/controlplaneio-fluxcd/flux-operator/releases/tag/v0.58.0) [Compare Source](https://redirect.github.com/controlplaneio-fluxcd/flux-operator/compare/v0.57.0...v0.58.0) ##### What's Changed - scripts: include docs index in prep-release by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​976](https://redirect.github.com/controlplaneio-fluxcd/flux-operator/pull/976) - \[web] Add CPU/Memory usage to workload dashboard by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​982](https://redirect.github.com/controlplaneio-fluxcd/flux-operator/pull/982) - build(deps-dev): bump postcss from 8.5.12 to 8.5.25 in /web by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​983](https://redirect.github.com/controlplaneio-fluxcd/flux-operator/pull/983) - operator: fix workload identity for Azure DevOps by [@​PadenZach](https://redirect.github.com/PadenZach) in [#​986](https://redirect.github.com/controlplaneio-fluxcd/flux-operator/pull/986) - Release v0.58.0 by [@​stefanprodan](https://redirect.github.com/stefanprodan) in [#​988](https://redirect.github.com/controlplaneio-fluxcd/flux-operator/pull/988) ##### New Contributors - [@​PadenZach](https://redirect.github.com/PadenZach) made their first contribution in [#​986](https://redirect.github.com/controlplaneio-fluxcd/flux-operator/pull/986) **Full Changelog**: <controlplaneio-fluxcd/flux-operator@v0.57.0...v0.58.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…e (0.4.3 ➔ 0.5.0) (#4208) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/charts/konflate](https://redirect.github.com/home-operations/konflate) | minor | `0.4.3` → `0.5.0` | --- ### Release Notes <details> <summary>home-operations/konflate (ghcr.io/home-operations/charts/konflate)</summary> ### [`v0.5.0`](https://redirect.github.com/home-operations/konflate/blob/HEAD/CHANGELOG.md#050-2026-08-08) [Compare Source](https://redirect.github.com/home-operations/konflate/compare/0.4.3...0.5.0) ##### ⚠ BREAKING CHANGES - **go:** Update module github.com/google/cel-go (v0.30.0 → v0.31.0) ([#​430](https://redirect.github.com/home-operations/konflate/issues/430)) - **go:** Update module github.com/google/go-github/v89 (v89.0.0 → v90.0.0) ([#​421](https://redirect.github.com/home-operations/konflate/issues/421)) ##### Features - **go:** update module github.com/google/cel-go (v0.29.2 → v0.30.0) ([#​386](https://redirect.github.com/home-operations/konflate/issues/386)) ([f2bdfca](https://redirect.github.com/home-operations/konflate/commit/f2bdfca757c86a1fb07064de50493222dcc0efc8)) - **go:** Update module github.com/google/cel-go (v0.30.0 → v0.31.0) ([#​430](https://redirect.github.com/home-operations/konflate/issues/430)) ([69730e9](https://redirect.github.com/home-operations/konflate/commit/69730e9de6343057cc6a775adad6886970dcddb2)) - **go:** Update module github.com/google/go-github/v89 (v89.0.0 → v90.0.0) ([#​421](https://redirect.github.com/home-operations/konflate/issues/421)) ([a7b2e5c](https://redirect.github.com/home-operations/konflate/commit/a7b2e5c11e862fe0e61649fd56dddd3dc6092663)) - **go:** update module github.com/modelcontextprotocol/go-sdk (v1.6.1 → v1.7.0) ([#​396](https://redirect.github.com/home-operations/konflate/issues/396)) ([abb7832](https://redirect.github.com/home-operations/konflate/commit/abb7832cbbd0af28e1614b2e99ffea8275130087)) - **go:** update module gitlab.com/gitlab-org/api/client-go/v2 (v2.51.0 → v2.52.0) ([#​394](https://redirect.github.com/home-operations/konflate/issues/394)) ([3f55a21](https://redirect.github.com/home-operations/konflate/commit/3f55a2188379038a30f0b967a610c18ff5d2e786)) - **go:** update module gitlab.com/gitlab-org/api/client-go/v2 (v2.52.0 → v2.53.0) ([#​397](https://redirect.github.com/home-operations/konflate/issues/397)) ([87ec1b8](https://redirect.github.com/home-operations/konflate/commit/87ec1b80f7b41caf0f9ec0345f456409201d7841)) - **go:** update module gitlab.com/gitlab-org/api/client-go/v2 (v2.53.0 → v2.55.0) ([#​404](https://redirect.github.com/home-operations/konflate/issues/404)) ([0fc03f9](https://redirect.github.com/home-operations/konflate/commit/0fc03f9926b8d670dec17e44280f250c674c8e13)) - **go:** update module gitlab.com/gitlab-org/api/client-go/v2 (v2.55.1 → v2.56.0) ([#​422](https://redirect.github.com/home-operations/konflate/issues/422)) ([b979cf6](https://redirect.github.com/home-operations/konflate/commit/b979cf687c88449fb03956046f11b903203dd514)) - **npm:** update dependency [@​sveltejs/vite-plugin-svelte](https://redirect.github.com/sveltejs/vite-plugin-svelte) (7.2.0 → 7.3.0) ([#​431](https://redirect.github.com/home-operations/konflate/issues/431)) ([39a6890](https://redirect.github.com/home-operations/konflate/commit/39a68903276579688af494e695f69a6e8150e91e)) - **npm:** update dependency simple-icons (16.27.1 → 16.28.0) ([#​414](https://redirect.github.com/home-operations/konflate/issues/414)) ([ba5e26e](https://redirect.github.com/home-operations/konflate/commit/ba5e26e415e6c06a099fb1e7e5ba05d5d61a066a)) - **npm:** update dependency vite (8.1.5 → 8.2.0) ([#​401](https://redirect.github.com/home-operations/konflate/issues/401)) ([01a6b5e](https://redirect.github.com/home-operations/konflate/commit/01a6b5e1c040914f8eb5ab86e101ac8c40cf1bcd)) ##### Bug Fixes - **ci:** fail the merge gate on cancelled jobs, and key the lint cache on the toolchain ([#​402](https://redirect.github.com/home-operations/konflate/issues/402)) ([144f7a1](https://redirect.github.com/home-operations/konflate/commit/144f7a1ba38e2d86a7493b2ccd4833801ede9ab4)) - **go:** update module github.com/go-git/go-git/v5 (v5.19.1 → v5.19.2) ([#​398](https://redirect.github.com/home-operations/konflate/issues/398)) ([ea7924d](https://redirect.github.com/home-operations/konflate/commit/ea7924d31dd4585fbb5217e8cc70e43931c0706a)) - **go:** update module github.com/google/go-containerregistry (v0.21.7 → v0.21.8) ([#​407](https://redirect.github.com/home-operations/konflate/issues/407)) ([5a13abd](https://redirect.github.com/home-operations/konflate/commit/5a13abdf6609d9f6100da84cd018341ff1232136)) - **go:** update module github.com/google/go-containerregistry (v0.21.8 → v0.21.9) ([#​423](https://redirect.github.com/home-operations/konflate/issues/423)) ([3982013](https://redirect.github.com/home-operations/konflate/commit/3982013e6857df8787a10548dc46ae1b4a988899)) - **go:** update module github.com/home-operations/flate (v0.4.12 → v0.4.14) ([#​429](https://redirect.github.com/home-operations/konflate/issues/429)) ([7715e8c](https://redirect.github.com/home-operations/konflate/commit/7715e8c7ff578303a72a4cbff87a49c2328c6ed4)) - **go:** update module github.com/klauspost/compress (v1.19.1 → v1.19.2) ([#​425](https://redirect.github.com/home-operations/konflate/issues/425)) ([cdbbbfb](https://redirect.github.com/home-operations/konflate/commit/cdbbbfb55e22d7dc585eb450a536f879c649f6b6)) - **go:** update module gitlab.com/gitlab-org/api/client-go/v2 (v2.55.0 → v2.55.1) ([#​406](https://redirect.github.com/home-operations/konflate/issues/406)) ([69ead8d](https://redirect.github.com/home-operations/konflate/commit/69ead8dd57b3724312a85a77ba33e8c5d26d2f15)) - **go:** update module go (1.26.4 → 1.26.5) ([#​419](https://redirect.github.com/home-operations/konflate/issues/419)) ([38f22bd](https://redirect.github.com/home-operations/konflate/commit/38f22bd916e6ad363ffd2a08087fbcef0e467bc7)) - **npm:** update dependency [@​playwright/test](https://redirect.github.com/playwright/test) (1.62.0 → 1.62.1) ([#​403](https://redirect.github.com/home-operations/konflate/issues/403)) ([d991907](https://redirect.github.com/home-operations/konflate/commit/d991907a2203e65aa76313e34d648e1e8048e98e)) - **npm:** update dependency simple-icons (16.27.0 → 16.27.1) ([#​385](https://redirect.github.com/home-operations/konflate/issues/385)) ([cabef89](https://redirect.github.com/home-operations/konflate/commit/cabef8900f79d311f0d986acfb6920574f08692c)) - **npm:** update dependency svelte-check (4.7.3 → 4.7.4) ([#​391](https://redirect.github.com/home-operations/konflate/issues/391)) ([4d817ed](https://redirect.github.com/home-operations/konflate/commit/4d817eda51e6b6286fd45fd601f3633391d6152f)) - **npm:** update dependency svelte-check (4.7.4 → 4.7.5) ([#​428](https://redirect.github.com/home-operations/konflate/issues/428)) ([c9357cd](https://redirect.github.com/home-operations/konflate/commit/c9357cdbec620882ee295c092f8217cdc9145c8e)) - **npm:** update dependency vite (8.2.0 → 8.2.1) ([#​427](https://redirect.github.com/home-operations/konflate/issues/427)) ([1d80800](https://redirect.github.com/home-operations/konflate/commit/1d808007af41faafeeb7585e04ca8840abbde7ea)) ##### Documentation - add AGENTS.md with Go conventions ([#​411](https://redirect.github.com/home-operations/konflate/issues/411)) ([8e93c1c](https://redirect.github.com/home-operations/konflate/commit/8e93c1c3bd4e7816c04e53e2d00fa8c721695ecd)) - point the CI badge at ci.yaml ([#​383](https://redirect.github.com/home-operations/konflate/issues/383)) ([9462e3f](https://redirect.github.com/home-operations/konflate/commit/9462e3f68a03e06a921456b08de25fc66bfe3bf0)) ##### Build System - **mise:** add actionlint and refresh the lockfile ([#​387](https://redirect.github.com/home-operations/konflate/issues/387)) ([16c498a](https://redirect.github.com/home-operations/konflate/commit/16c498afefa74dcc70f6f8f2be5176a5198cbd37)) ##### Continuous Integration - gate pull requests on a single Build Success check ([#​382](https://redirect.github.com/home-operations/konflate/issues/382)) ([509a70a](https://redirect.github.com/home-operations/konflate/commit/509a70a9e8d5b11fb26a2f5ad1911d468379e814)) - **github-action:** Update action actions/stale (v10.4.0 → v11.0.0) ([#​405](https://redirect.github.com/home-operations/konflate/issues/405)) ([319dbfb](https://redirect.github.com/home-operations/konflate/commit/319dbfba2494ef85dc07d6812ebc7e668baa1310)) - **github-action:** Update action docker/github-builder (v1.15.0 → v1.16.0) ([#​432](https://redirect.github.com/home-operations/konflate/issues/432)) ([d587c5a](https://redirect.github.com/home-operations/konflate/commit/d587c5ad2ec274a54811dd36af1f694e9d0fd54d)) - **github-action:** Update action docker/login-action (v4.5.0 → v4.5.1) ([#​390](https://redirect.github.com/home-operations/konflate/issues/390)) ([ed6f576](https://redirect.github.com/home-operations/konflate/commit/ed6f57695aa1935bfe8dba265b09c3193c74837e)) - **github-action:** Update action docker/login-action (v4.5.2 → v4.6.0) ([#​412](https://redirect.github.com/home-operations/konflate/issues/412)) ([50067b6](https://redirect.github.com/home-operations/konflate/commit/50067b6a7ccd3d5f3e9c9176a28e109b7b893fb6)) - **github-action:** Update action home-operations/.github/actions/workflow-lint (v1.0.2 → v1.0.3) ([#​418](https://redirect.github.com/home-operations/konflate/issues/418)) ([0bfd788](https://redirect.github.com/home-operations/konflate/commit/0bfd78869bd920269ef138a0a06156d00bfe337a)) - **github-action:** Update action jdx/mise-action (v4.2.1 → v4.2.2) ([#​389](https://redirect.github.com/home-operations/konflate/issues/389)) ([8e83bbe](https://redirect.github.com/home-operations/konflate/commit/8e83bbe3e868305eff6b6e5c5f66e1272ef4a12b)) - **github-action:** Update action jdx/mise-action (v4.2.2 → v4.2.3) ([#​393](https://redirect.github.com/home-operations/konflate/issues/393)) ([9516941](https://redirect.github.com/home-operations/konflate/commit/9516941bcff144b29900c945226169be34f55562)) - **github-action:** Update action jdx/mise-action (v4.2.3 → v4.2.4) ([#​420](https://redirect.github.com/home-operations/konflate/issues/420)) ([dbad13c](https://redirect.github.com/home-operations/konflate/commit/dbad13c6301e27f0f1e98985e7903e951478f1f5)) - **github-action:** Update github-actions ([#​400](https://redirect.github.com/home-operations/konflate/issues/400)) ([fcb0d58](https://redirect.github.com/home-operations/konflate/commit/fcb0d5835b2ed7e32bfec5a8d20ea11469d00ecc)) - **github-action:** update workflow-lint action (1.0.0 → v1.0.2) ([#​415](https://redirect.github.com/home-operations/konflate/issues/415)) ([14c2be6](https://redirect.github.com/home-operations/konflate/commit/14c2be60dc93f8b1788249b8b200c06d5b46a73a)) - lint workflows with the shared composite action ([#​388](https://redirect.github.com/home-operations/konflate/issues/388)) ([ae92794](https://redirect.github.com/home-operations/konflate/commit/ae92794bfb2e4dcf7f2721b9052c1e8b13dee1c7)) - skip release-please version-bump PRs in checks ([#​381](https://redirect.github.com/home-operations/konflate/issues/381)) ([5b9bb26](https://redirect.github.com/home-operations/konflate/commit/5b9bb26d992a41736a84f144a3cca0bc59959d36)) - wire govulncheck into mise and CI ([#​417](https://redirect.github.com/home-operations/konflate/issues/417)) ([2f01466](https://redirect.github.com/home-operations/konflate/commit/2f01466785c671af980fd02f18ad98cd203b6db4)) ##### Miscellaneous Chores - **mise:** Lock file maintenance tool (mise) ([#​408](https://redirect.github.com/home-operations/konflate/issues/408)) ([5d15a49](https://redirect.github.com/home-operations/konflate/commit/5d15a49de39145fc2943c2fe4a7c2cd050ff0cd2)) - **mise:** prune lockfile to used platforms ([#​416](https://redirect.github.com/home-operations/konflate/issues/416)) ([0b4c5a4](https://redirect.github.com/home-operations/konflate/commit/0b4c5a4d07d5f6461f73be1f1d16f4ffdcc3ae74)) - **mise:** Update tool node (24.18.0 → v24.18.1) ([#​399](https://redirect.github.com/home-operations/konflate/issues/399)) ([7372e8f](https://redirect.github.com/home-operations/konflate/commit/7372e8f4629c442fd263fe66d7ea53ff48bf36b7)) - **mise:** Update tool node (24.18.1 → v24.19.0) ([#​424](https://redirect.github.com/home-operations/konflate/issues/424)) ([1a504d7](https://redirect.github.com/home-operations/konflate/commit/1a504d7b33c831493e3ed327ad368096093eb3be)) - **mise:** Update tool oxfmt (0.60.0 → 0.61.0) ([#​392](https://redirect.github.com/home-operations/konflate/issues/392)) ([4345ecd](https://redirect.github.com/home-operations/konflate/commit/4345ecd1e55fc2008d4588bf16b9913df225ddf4)) - **mise:** Update tool oxfmt (0.61.0 → 0.62.0) ([#​426](https://redirect.github.com/home-operations/konflate/issues/426)) ([ae5dfd3](https://redirect.github.com/home-operations/konflate/commit/ae5dfd3913deec03e338990950589b1d717ec353)) - **mise:** Update tool zizmor (1.28.0 → 1.29.0) ([#​413](https://redirect.github.com/home-operations/konflate/issues/413)) ([cc0e88c](https://redirect.github.com/home-operations/konflate/commit/cc0e88c10ea9a4bcef9d66c9c26644769308b079)) - **npm:** lock file maintenance dependency (npm) ([#​409](https://redirect.github.com/home-operations/konflate/issues/409)) ([10def60](https://redirect.github.com/home-operations/konflate/commit/10def60f515cf34559f314e549c4d1148616fd03)) - **release-please:** standardize the release pull request title pattern ([#​410](https://redirect.github.com/home-operations/konflate/issues/410)) ([2a8f541](https://redirect.github.com/home-operations/konflate/commit/2a8f5410e333b4355d52a0b5e35e5303d4026ebe)) - standardize release-please changelog sections ([#​395](https://redirect.github.com/home-operations/konflate/issues/395)) ([b32ce06](https://redirect.github.com/home-operations/konflate/commit/b32ce06d04735cbdf85cb429df20693927c8dbf2)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…(0.3.3 ➔ 0.4.0) (#4207) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/charts/chaski](https://redirect.github.com/home-operations/chaski) | minor | `0.3.3` → `0.4.0` | --- ### Release Notes <details> <summary>home-operations/chaski (ghcr.io/home-operations/charts/chaski)</summary> ### [`v0.4.0`](https://redirect.github.com/home-operations/chaski/blob/HEAD/CHANGELOG.md#040-2026-08-08) [Compare Source](https://redirect.github.com/home-operations/chaski/compare/0.3.3...0.4.0) ##### ⚠ BREAKING CHANGES - **go:** Update module github.com/google/cel-go (v0.30.0 → v0.31.0) ([#​105](https://redirect.github.com/home-operations/chaski/issues/105)) - **go:** Update module github.com/unraid/apprise-go (v0.2.8 → v0.3.0) ([#​104](https://redirect.github.com/home-operations/chaski/issues/104)) ##### Features - **go:** update module github.com/google/cel-go (v0.29.2 → v0.30.0) ([#​79](https://redirect.github.com/home-operations/chaski/issues/79)) ([cc231b1](https://redirect.github.com/home-operations/chaski/commit/cc231b1439d5191e401e9216565a61d3c879366a)) - **go:** Update module github.com/google/cel-go (v0.30.0 → v0.31.0) ([#​105](https://redirect.github.com/home-operations/chaski/issues/105)) ([5157d9d](https://redirect.github.com/home-operations/chaski/commit/5157d9d8c47e57580014f5a365ffd7aacdfc4d87)) - **go:** Update module github.com/unraid/apprise-go (v0.2.8 → v0.3.0) ([#​104](https://redirect.github.com/home-operations/chaski/issues/104)) ([842f9f3](https://redirect.github.com/home-operations/chaski/commit/842f9f384465b35f81996b867c78904a4f13a815)) ##### Bug Fixes - **ci:** fail the merge gate on cancelled jobs, and key the lint cache on the toolchain ([#​89](https://redirect.github.com/home-operations/chaski/issues/89)) ([52fe071](https://redirect.github.com/home-operations/chaski/commit/52fe0719f77ec8f3d5280000ad4642bdadf17626)) - **go:** update module go (1.26.4 → 1.26.5) ([#​101](https://redirect.github.com/home-operations/chaski/issues/101)) ([da3e713](https://redirect.github.com/home-operations/chaski/commit/da3e713096527610f4b21c37a8414bd237d67d9b)) - **release:** strip cask quarantine bit in preflight ([#​107](https://redirect.github.com/home-operations/chaski/issues/107)) ([5c04446](https://redirect.github.com/home-operations/chaski/commit/5c044466d77bac243e8ecbfd9831d9ade7027486)) ##### Documentation - add AGENTS.md with Go conventions ([#​93](https://redirect.github.com/home-operations/chaski/issues/93)) ([fd03879](https://redirect.github.com/home-operations/chaski/commit/fd0387943b531a043372de1dd1afc190d46c4539)) - make AGENTS.md a generic, drift-resistant template ([#​95](https://redirect.github.com/home-operations/chaski/issues/95)) ([df2abb6](https://redirect.github.com/home-operations/chaski/commit/df2abb664cef4b7e272357b592c871d8001f3129)) ##### Build System - **mise:** add actionlint and refresh the lockfile ([#​80](https://redirect.github.com/home-operations/chaski/issues/80)) ([b4ef618](https://redirect.github.com/home-operations/chaski/commit/b4ef61852e9e711b27a64e1bfa144ee5c8ddb90b)) ##### Continuous Integration - gate pull requests on a single Build Success check ([#​78](https://redirect.github.com/home-operations/chaski/issues/78)) ([fcdeb66](https://redirect.github.com/home-operations/chaski/commit/fcdeb665fc79920b4c174a70dc92996172e315ef)) - **github-action:** Update action actions/stale (v10.4.0 → v11.0.0) ([#​90](https://redirect.github.com/home-operations/chaski/issues/90)) ([c98db57](https://redirect.github.com/home-operations/chaski/commit/c98db57022418b0c53f5df2f85dfbc0d65f8aaa8)) - **github-action:** Update action docker/github-builder (v1.14.0 → v1.15.0) ([#​88](https://redirect.github.com/home-operations/chaski/issues/88)) ([1fad7d8](https://redirect.github.com/home-operations/chaski/commit/1fad7d850c25184f789af0f4d6f579d7668562ca)) - **github-action:** Update action docker/github-builder (v1.15.0 → v1.16.0) ([#​106](https://redirect.github.com/home-operations/chaski/issues/106)) ([28c41c0](https://redirect.github.com/home-operations/chaski/commit/28c41c0a3cb3d6480c3cb4d2c8d63ce9c7767116)) - **github-action:** Update action docker/login-action (v4.5.0 → v4.5.1) ([#​84](https://redirect.github.com/home-operations/chaski/issues/84)) ([7c1b828](https://redirect.github.com/home-operations/chaski/commit/7c1b828eb152b124e04ce89d15fd5bb7d73807e6)) - **github-action:** Update action docker/login-action (v4.5.1 → v4.5.2) ([#​91](https://redirect.github.com/home-operations/chaski/issues/91)) ([f6dee03](https://redirect.github.com/home-operations/chaski/commit/f6dee03032a5844660cad347a28f9587fd529fdb)) - **github-action:** Update action docker/login-action (v4.5.2 → v4.6.0) ([#​94](https://redirect.github.com/home-operations/chaski/issues/94)) ([5e179f2](https://redirect.github.com/home-operations/chaski/commit/5e179f2e2f96d8c503a2bdb70a7335365439345d)) - **github-action:** Update action home-operations/.github/actions/workflow-lint (v1.0.2 → v1.0.3) ([#​100](https://redirect.github.com/home-operations/chaski/issues/100)) ([711a7cd](https://redirect.github.com/home-operations/chaski/commit/711a7cd72ae1f5a595843291fe8f334287a0a7e9)) - **github-action:** Update action jdx/mise-action (v4.2.1 → v4.2.2) ([#​82](https://redirect.github.com/home-operations/chaski/issues/82)) ([9606982](https://redirect.github.com/home-operations/chaski/commit/96069823c167c24fa0803596d971b2e74a049cdf)) - **github-action:** Update action jdx/mise-action (v4.2.2 → v4.2.3) ([#​86](https://redirect.github.com/home-operations/chaski/issues/86)) ([192672b](https://redirect.github.com/home-operations/chaski/commit/192672b80dc60022460e2d42b2dd5d95f6061fa3)) - **github-action:** Update action jdx/mise-action (v4.2.3 → v4.2.4) ([#​102](https://redirect.github.com/home-operations/chaski/issues/102)) ([ae1601d](https://redirect.github.com/home-operations/chaski/commit/ae1601df662009e27807ec1a5c62953e2f30add4)) - lint workflows with the shared composite action ([#​81](https://redirect.github.com/home-operations/chaski/issues/81)) ([3501a65](https://redirect.github.com/home-operations/chaski/commit/3501a6554ea1fd5879c2912d5f99f9be656df52d)) - skip release-please version-bump PRs in checks ([#​77](https://redirect.github.com/home-operations/chaski/issues/77)) ([7112ad9](https://redirect.github.com/home-operations/chaski/commit/7112ad9e15feff19754f92b473c74d1eee0e6b47)) - update workflow-lint and use self-repository syntax ([#​97](https://redirect.github.com/home-operations/chaski/issues/97)) ([4054f8c](https://redirect.github.com/home-operations/chaski/commit/4054f8c7f129daa347c5350f3105575a4434d474)) - wire govulncheck into mise and CI ([#​99](https://redirect.github.com/home-operations/chaski/issues/99)) ([adfe251](https://redirect.github.com/home-operations/chaski/commit/adfe251929ec65ab1b4d1dc91048e40f49388a1b)) ##### Miscellaneous Chores - **mise:** prune lockfile to used platforms ([#​98](https://redirect.github.com/home-operations/chaski/issues/98)) ([769fd79](https://redirect.github.com/home-operations/chaski/commit/769fd79e53a4848d9bfd8ca5973f5a9031d45abd)) - **mise:** Update tool oxfmt (0.60.0 → 0.61.0) ([#​85](https://redirect.github.com/home-operations/chaski/issues/85)) ([a36dda1](https://redirect.github.com/home-operations/chaski/commit/a36dda1ebdcfae59ca9bb8af7b9e7d072f4a0e61)) - **mise:** Update tool oxfmt (0.61.0 → 0.62.0) ([#​103](https://redirect.github.com/home-operations/chaski/issues/103)) ([9d412ea](https://redirect.github.com/home-operations/chaski/commit/9d412eae559aa041b0a5a97687a49214635d3950)) - **mise:** Update tool zizmor (1.28.0 → 1.29.0) ([#​96](https://redirect.github.com/home-operations/chaski/issues/96)) ([18b5b4b](https://redirect.github.com/home-operations/chaski/commit/18b5b4baebffec6aa7a060524edaca9b6c767b12)) - **release-please:** standardize the release pull request title pattern ([#​92](https://redirect.github.com/home-operations/chaski/issues/92)) ([498dca2](https://redirect.github.com/home-operations/chaski/commit/498dca258bd12569b1773818efdcd8ce78efb59a)) - standardize release-please changelog sections ([#​87](https://redirect.github.com/home-operations/chaski/issues/87)) ([f413ad0](https://redirect.github.com/home-operations/chaski/commit/f413ad02892ca0d9846c9b754c78cf5a5bfef8b5)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
…(0.9.3 ➔ 0.10.0) (#4209) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/home-operations/charts/kopiur](https://redirect.github.com/home-operations/kopiur) | minor | `0.9.3` → `0.10.0` | --- ### Release Notes <details> <summary>home-operations/kopiur (ghcr.io/home-operations/charts/kopiur)</summary> ### [`v0.10.0`](https://redirect.github.com/home-operations/kopiur/blob/HEAD/CHANGELOG.md#0100-2026-08-09) [Compare Source](https://redirect.github.com/home-operations/kopiur/compare/0.9.5...0.10.0) ##### ⚠ BREAKING CHANGES - **rust:** Update crate base64 (0.22.1 → 0.23.1) ([#​366](https://redirect.github.com/home-operations/kopiur/issues/366)) ##### Features - **rust:** Update crate base64 (0.22.1 → 0.23.1) ([#​366](https://redirect.github.com/home-operations/kopiur/issues/366)) ([2c6e3e7](https://redirect.github.com/home-operations/kopiur/commit/2c6e3e7cb53706fd20d1096342292f583930e671)) - SnapshotReplication (logical snapshot-level replication) + SnapshotPolicy multi-repository fan-out ([#​370](https://redirect.github.com/home-operations/kopiur/issues/370)) ([4e06e42](https://redirect.github.com/home-operations/kopiur/commit/4e06e42f2f9eb8711c17c443d0e51deead45c55d)) ##### Continuous Integration - **github-action:** Update action Swatinem/rust-cache (v2.9.1 → v2.9.2) ([#​372](https://redirect.github.com/home-operations/kopiur/issues/372)) ([e4ce173](https://redirect.github.com/home-operations/kopiur/commit/e4ce173b44b37fd0f5bfb5fbc98892d67ccff63f)) ##### Miscellaneous Chores - **mise:** Update mise tools ([#​367](https://redirect.github.com/home-operations/kopiur/issues/367)) ([d6f82f4](https://redirect.github.com/home-operations/kopiur/commit/d6f82f488883a0fecb7b41888d216ae8cfe4b3a4)) - **mise:** Update tool cosign (3.1.2 → 3.1.3) ([#​371](https://redirect.github.com/home-operations/kopiur/issues/371)) ([558b9f4](https://redirect.github.com/home-operations/kopiur/commit/558b9f4d487e93e75d7d42ffa59d3e68eea8ed48)) ### [`v0.9.5`](https://redirect.github.com/home-operations/kopiur/blob/HEAD/CHANGELOG.md#095-2026-08-08) [Compare Source](https://redirect.github.com/home-operations/kopiur/compare/0.9.4...0.9.5) ##### Bug Fixes - deliver s3 tls.caBundleRef to every kopia invocation ([#​365](https://redirect.github.com/home-operations/kopiur/issues/365)) ([cda0237](https://redirect.github.com/home-operations/kopiur/commit/cda0237d3ed9d6b980c79125c521ece5a618b79f)) - doctor misses structurally-blocked work ([#​359](https://redirect.github.com/home-operations/kopiur/issues/359)) + phase/gate exhaustiveness ratchet ([#​363](https://redirect.github.com/home-operations/kopiur/issues/363)) ([b844974](https://redirect.github.com/home-operations/kopiur/commit/b844974fd2f4d899a54315bef990d96146607d91)) - **rust:** update crate thiserror (2.0.19 → 2.0.20) ([#​360](https://redirect.github.com/home-operations/kopiur/issues/360)) ([4aa646d](https://redirect.github.com/home-operations/kopiur/commit/4aa646d9578c1406593769a6ae2db33894e15a22)) ##### Continuous Integration - **github-action:** Update action docker/github-builder (v1.15.0 → v1.16.0) ([#​362](https://redirect.github.com/home-operations/kopiur/issues/362)) ([db32818](https://redirect.github.com/home-operations/kopiur/commit/db32818586c75de393c7285fd0204be5ddfa8c5e)) ### [`v0.9.4`](https://redirect.github.com/home-operations/kopiur/blob/HEAD/CHANGELOG.md#094-2026-08-08) [Compare Source](https://redirect.github.com/home-operations/kopiur/compare/0.9.3...0.9.4) ##### Features - **docs:** Update README.md ([#​358](https://redirect.github.com/home-operations/kopiur/issues/358)) ([05d2506](https://redirect.github.com/home-operations/kopiur/commit/05d2506fb7e5a81d4db22abdb68cf78037150e70)) ##### Bug Fixes - implement pvcSelector/groupBy ([#​346](https://redirect.github.com/home-operations/kopiur/issues/346)) and model deduped backups as Unchanged ([#​351](https://redirect.github.com/home-operations/kopiur/issues/351)) ([#​354](https://redirect.github.com/home-operations/kopiur/issues/354)) ([a2b9ae6](https://redirect.github.com/home-operations/kopiur/commit/a2b9ae6ee5e6de729108a2f7b88894a027b61d95)) - **rust:** update crate clap (4.6.5 → 4.6.6) ([#​357](https://redirect.github.com/home-operations/kopiur/issues/357)) ([e9ca396](https://redirect.github.com/home-operations/kopiur/commit/e9ca3969fdc746b6b1f96f72e7668fab2c2117be)) ##### Miscellaneous Chores - **mise:** Update tool node (24.18.1 → v24.19.0) ([#​353](https://redirect.github.com/home-operations/kopiur/issues/353)) ([2f28c6d](https://redirect.github.com/home-operations/kopiur/commit/2f28c6d8daa4f90eb4fc213c0ababdf3b65730ce)) - **mise:** Update tool oxfmt (0.61.0 → 0.62.0) ([#​356](https://redirect.github.com/home-operations/kopiur/issues/356)) ([e95df6b](https://redirect.github.com/home-operations/kopiur/commit/e95df6bade7327bc8ad238e3466e030a08de8082)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/stacklok/toolhive/toolhive-operator | minor | `0.41.0` → `0.42.0` | | ghcr.io/stacklok/toolhive/toolhive-operator-crds | minor | `0.41.0` → `0.42.0` | --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/LukeEvansTech/talos-cluster). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Super-linter summary
All files and directories linted successfully For more information, see the GitHub Actions workflow run Powered by Super-linter |
Owner
|
Holding at 5.0.0 (deliberate). The gate's finding stands: 5.1.0's nightly orphaned-resources cleanup cannot be disabled ( |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.0.0→5.1.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
rommapp/romm (ghcr.io/rommapp/romm)
v5.1.0Compare Source
Highlights
Emulator streaming
Launches a game into a native emulator running in a separate container and streams the picture, sound, and input back to your browser. Unlike EmulatorJS, the emulation runs server-side on real emulator binaries (PCSX2, Dolphin, Xemu), so the heavy lifting happens on the host rather than in the client. #3211
Per-field artwork priority overrides
Optional per-field artwork priority to prioritize metadata sources differently for covers, screenshots, and manuals, which fall back to the shared
scan.priority.artwork. #3838Scan settings UI
Brand new UI to edit the whole
scan.*section ofconfig.yml. #3854Manual cover search filters
Client-side filters to the manual cover-search dialog to quickly narrow SteamGridDB results instead of scrolling through dozens of community covers. #3857
Minor changes
scan.priority.region_modeto let config regions drive media selection by @gantoihttps://github.com/rommapp/romm/pull/3917l/3917Fixes
Other changes
New Contributors
Full Changelog: rommapp/romm@5.0.0...5.1.0
Configuration
📅 Schedule: (in timezone Europe/London)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.