Update all non-major dependencies #1
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/all-minor-patch"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
v1.18.2->v1.19.2v4.11.0->v4.12.1v4.3->v4.425.10.0->25.12.02025.8->2025.100.7.0->0.7.1v2.1.0->v2.3.1v2.1.0->v2.3.1v0.15.2->v0.15.30.81.0->0.89.1v4.3.3->v4.4.037.1.1->37.4.01.11.0->1.12.0Release Notes
cert-manager/cert-manager (cert-manager)
v1.19.2Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
We updated Go to fix some vulnerabilities in the standard library.
Changes since
v1.19.1Bug or Regression
CVE-2025-47914andCVE-2025-58181which were reported by Trivy. (#8283, @SgtCoDFish)v1.25.5to fixCVE-2025-61727andCVE-2025-61729(#8294, @wallrj-cyberark)global.nodeSelectorto helm chart to perform amergeand allow for a singlenodeSelectorto be set across all services. (#8233, @cert-manager-bot)Other (Cleanup or Flake)
golang/x/crypto(#8270, @SgtCoDFish)v1.19.1Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
We reverted the CRD-based API defaults for
Certificate.Spec.IssuerRefandCertificateRequest.Spec.IssuerRefafter they were found to cause unexpected certificate renewals after upgrading to 1.19.0. We will try re-introducing these API defaults in cert-manager1.20.We fixed a bug that caused certificates to be re-issued unexpectedly if the
issuerRefkind or group was changed to one of the "runtime" default values.We upgraded Go to
1.25.3to address the following security vulnerabilities:CVE-2025-61724,CVE-2025-58187,CVE-2025-47912,CVE-2025-58183,CVE-2025-61723,CVE-2025-58186,CVE-2025-58185,CVE-2025-58188, andCVE-2025-61725.Changes since
v1.19.0:Bug or Regression
issuerRefof a Certificate was omitted, upgrading to1.19.xincorrectly caused the certificate to be renewed (#8175, @cert-manager-bot)v1.19.0Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
This release focuses on expanding platform compatibility, improving deployment flexibility, enhancing observability, and addressing key reliability issues.
Changes since
v1.18.0:Feature
global.nodeSelectorto helm chart to allow for a singlenodeSelectorto be set across all services. (#7818, @StingRayZA)pathTypeExactin ACME HTTP01 Ingress challenge solvers. (#7795, @sspreitzer)applyconfigurationsallowing clients to make type-safe server-side apply requests for cert-manager resources. (#7866, @erikgb)certmanager_certificate_challenge_statusPrometheus metric. (#7736, @hjoshi123)protocolfield forrfc2136DNS01 provider (#7881, @hjoshi123)hostUsersflag to all pods. Not set by default. (#7973, @hjoshi123)--acme-http01-solver-resource-*settings. (#7972, @lunarwhite)CAInjectorMergingfeature has been promoted to BETA and is now enabled by default (#8017, @ThatsMrTalbot)certificatemetrics to the collector approach. (#7856, @hjoshi123)Bug or Regression
error waiting for authorization(#7796, @hjoshi123)class,ingressClassName,name) are specified simultaneously (#8021, @lunarwhite)global.rbac.disableHTTPChallengesRoleHelm option. (#7836, @inteon)pathlabel of core ACME client metrics and will require users to update their monitoring dashboards and alerting rules if using those metrics. (#8109, @mladen-rusev-cyberark)ingress-nginxin E2E tests to ensure compatibility (#7792, @wallrj)Other (Cleanup or Flake)
tokenrequestRoleBinding resource to improve consistency (#7761, @lunarwhite)maps.Copyfor cleaner map handling (#8092, @quantpoet)vault-client-goto the newvault/apiclient. (#8059, @armagankaratosun)v1.19.0-alpha.0Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
Changes since
v1.18.0:Feature
#7726,@jcpunk)global.nodeSelectorto helm chart to allow for a singlenodeSelectorto be set across all services. (#7818,@StingRayZA)applyconfigurationsallowing clients to make type safe server-side apply requests for cert-manager resources. (#7866,@erikgb)#7414,@erikgb)certmanager_certificate_challenge_statusPrometheus metric. (#7736,@hjoshi123)protocolfield forrfc2136DNS01 provider (#7881,@hjoshi123)CAInjectorMerginghas been promoted to BETA and is now enabled by default (#8017,@ThatsMrTalbot)ACME profiles extension. (#7777,@wallrj)--acme-http01-solver-resource-*settings. (#7972,@lunarwhite)#8072,@prasad89)certificatemetrics to the collector approach. (#7856,@hjoshi123)Bug or Regression
error waiting for authorization(#7796,@hjoshi123)#7816,@kinolaev)class,ingressClassName,name) are specified simultaneously (#8021,@lunarwhite)#7961,@SgtCoDFish)global.rbac.disableHTTPChallengesRoleHelm option. (#7836,@inteon)#7792,@wallrj)Other (Cleanup or Flake)
tokenrequestRoleBinding resource to improve consistency (#7761,@lunarwhite)#7928,@SgtCoDFish)#8003,@hjoshi123)#7786,@wallrj)maps.Copyfor cleaner map handling (#8092,@quantpoet)v1.18.4Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
We updated Go to fix some vulnerabilities in the standard library.
Changes since
v1.18.3Bug or Regression
CVE-2025-47914andCVE-2025-58181which were reported by Trivy. (#8282, @SgtCoDFish)v1.24.11to fixCVE-2025-61727andCVE-2025-61729(#8295, @wallrj-cyberark)Other (Cleanup or Flake)
golang/x/crypto(#8271, @SgtCoDFish)v1.18.3Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
We fixed a bug which caused certificates to be re-issued unexpectedly, if the issuerRef kind or group was changed to one of the "runtime" default values. We increased the size limit when parsing PEM certificate chains to handle leaf certificates with large numbers of DNS named or other identities. We upgraded Go to 1.24.9 to fix various non-critical security vulnerabilities.
Changes since
v1.18.2:Bug or Regression
Other (Cleanup or Flake)
kubernetes-csi/csi-driver-nfs (csi-driver-nfs)
v4.12.1: releaseCompare Source
What's Changed
Full Changelog: https://github.com/kubernetes-csi/csi-driver-nfs/compare/v4.12.0...v4.12.1
v4.12.0: releaseCompare Source
What's Changed
New Contributors
Full Changelog: https://github.com/kubernetes-csi/csi-driver-nfs/compare/v4.11.0...v4.12.0
GothenburgBitFactory/taskchampion-sync-server (ghcr.io/gothenburgbitfactory/taskchampion-sync-server-postgres)
v0.7.1Compare Source
immich-app/immich (ghcr.io/immich-app/immich-machine-learning)
v2.3.1Compare Source
v2.3.1
Hot fixes
Fixed an issue where the new version notification pop-up causes the web app to enter a rendering loop and freeze up.
What's Changed
🐛 Bug fixes
Full Changelog: https://github.com/immich-app/immich/compare/v2.3.0...v2.3.1
v2.3.0Compare Source
v2.3.0
Loa loa loa, the stock is running low on Retro DVD 📀! If you want to get one for yourself, you still can, but once this batch is gone, we won’t be making any more, EVER! So get one while you can from immich.store!
Highlights
Welcome to the release
v2.3.0of Immich. This version comes with enhancements to the OCR feature and many bug fixes. This release also introduces foundational support for workflows and an application restore mechanism directly in the web UI. Let’s dive into some of the highlights belowAdd/move action in mobile app
The asset viewer in the mobile app now includes an “Add to” button that lets you quickly add an asset to an album, the locked folder, or the archive. Thanks @happychriss!
OCR Improvement
This release includes several enhancements to the OCR feature. There are now language-specific OCR model variants, extending support to Greek, Korean, Russian, Belarusian, Ukrainian, Thai, and languages using the Latin script. All variants (including the existing models) support English as well. There is also an English-only model that performs better for libraries where multilingual support is not needed.
To switch to one of these models, you can navigate to the OCR settings, choose the relevant model, save, then re-run OCR on all assets through the Job Status page.
The OCR information can now be viewed by toggling a button in the web viewer. You can hover the mouse over the text and copy it.
Delete synchronization on Android.
This release restores the previous mechanism for synchronizing the deletion action between the web and the mobile app. In addition to putting the asset in Immich’s trash bin, the mechanism also puts the deleted asset in the device’s trash system when the app opens. The mechanism has been reworked to align with the new data sync mechanism in the mobile app. You can enable the mechanism in the
App Settings > Advanced > Sync Remote DeletionsNotable fixes: app freezes on resume on iOS
Previously, iOS background tasks, such as local or remote data sync and background uploads, could abruptly terminate database operations when the iOS’s background time expires, leaving the database lock unreleased. It leads to an annoying symptom: the app appears to freeze when opening from the background, requiring a hard restart (swipe up to close, then reopen) to regain access to the database. The bug happened sporadically and was incredibly hard to track down. Thanks to the relentless pursuit of the bug, we believe it has been caught through our extensive testing. Please let us know if you are still getting “bugged” by this one in the new version.
Sneak peek: Maintenance mode and workflow
We can’t contain the excitement to share two exciting items in the work, which have some portions already merged into the server, and are ready to be built upon
Maintenance mode
This mode will allow the admin to put the server into a state where no one can access it without entirely shutting it down. This paves the way for restoring the server from a previous point in time directly from the web UI, no more fidgeting with the terminal.
https://github.com/user-attachments/assets/26aa5f7f-5e5f-45b5-aa89-347325f10f41
Workflow
The foundation of workflows and plugins also made its way to the server; the UI is being worked on. This feature will enable many more custom use cases that are not available in the core application. The community can write custom plugins and share them. We are very excited to see this happening faster than anticipated. Below is a screenshot of how the feature could look.
What's Changed
🚀 Features
🌟 Enhancements
🐛 Bug fixes
📚 Documentation
🌐 Translations
New Contributors
Full Changelog: https://github.com/immich-app/immich/compare/v2.2.3...v2.3.0
v2.2.3Compare Source
v2.2.3
What's Changed
🐛 Bug fixes
New Contributors
Full Changelog: https://github.com/immich-app/immich/compare/v2.2.2...v2.2.3
v2.2.2Compare Source
What's Changed
🐛 Bug fixes
Full Changelog: https://github.com/immich-app/immich/compare/v2.2.1...v2.2.2
v2.2.1Compare Source
What's Changed
🐛 Bug fixes
📚 Documentation
🌐 Translations
New Contributors
Full Changelog: https://github.com/immich-app/immich/compare/v2.2.0...v2.2.1
v2.2.0Compare Source
v2.2.0
The month following our stable release 🎉 has flown by! We are blown away by the support from everyone around this milestone, especially for the Retro DVD 📀! If you want to get one for yourself, you still can, but once this batch is gone, we won’t be making any more, EVER! So get one while you can from immich.store!
Highlights
Welcome to version
v2.2.0of Immich. This release comes with the traditional Immich fashion, where the features and enhancements list is longer than the bug fixes list. Let’s dive right into the highlights of this exciting releasev2versionsDocker tag for
v2versionsThe
example.envfile has been updated to useIMMICH_VERSION=v2, which is a mutable Docker tag that points to the latest2.x.xrelease image.Optical Character Recognition (OCR)
OCR search has been one of the most requested features on our users' wishlists. Thanks to the fantastic work of @flipped-1121 and @mertalev, Immich can now recognize texts in images, adding a powerful capability to its already powerful search features. This will help users find lost family recipes or a crypto wallet’s passphrase more easily.
The OCR pipeline is integrated into the existing machine learning flow. For new uploads, it will run automatically with the existing machine learning flow. For existing setups, you can go to
Administration > Job > Click on “All” for OCR jobto extract OCR information for your galleryTo search for letters in photos, a new radio button has been added to the search type on the web app, and in the dropdown list on the mobile app.
OCR currently has official support for English, Chinese (Simplified), Chinese (Traditional) and Japanese text. Languages using Latin script generally work as well, but may have lower accuracy or interpret characters without the diacritics.
[Web] Wasm implementation for justified layout calculation 🦀
This release comes with a blazing-fast re-implementation of the justified layout on the web, which makes calculating the size of the thumbnails in each bucket several times faster, significantly improving the rendering performance for a large bucket, i.e., 10s of thousands of assets in a single month
[Web] UI improvement for the review duplicates screen
To help you decide which asset to keep in a group of duplicates, more information has been added to the info section below each asset, including date/time, location, and the number of albums the asset is in. The info section has been redesigned to make scanning the information faster, with different properties getting highlighted. We will keep improving on this interface to make it more intuitive
[Mobile] Show albums in the asset’s detail
You can view and navigate to the albums that the asset belongs to in the info sheet
[Mobile] Show similar photos
The popular feature “Show similar photos” has made its way to the mobile app. You can use the button in the detail sheet to find similar images to the one you are viewing.
[Mobile] Chat-style for album activity view
The album’s activity view now displays the messages and actions in a chat-style view, making it easier to follow
[Mobile] High precision seeking for video
The progress bar of the video player now has higher precision duration handling. This makes seeking much more fluid than before, as well as making position updates in the progress bar smooth, rather than jumping from second to second.
[Mobile] New UI to present server-client version mismatch
As we are now in the stable-era, we want to make the notification of a new version more subtle, less distracting. The update message and icon’s color on the mobile app have been redesigned for that purpose.
When your server version is older than the available one, a message with a clickable link is displayed, directing you to the latest release notes. When your mobile app version is older than the one available on the App Store, a message with a clickable link appears, directing you to the App Store to perform the update.
Support Immich
If you find the project helpful, you can support Immich by purchasing a product key at https://buy.immich.app or our merchandise at https://immich.store
What's Changed
🔒 Security
🚀 Features
🌟 Enhancements
🐛 Bug fixes
📚 Documentation
New Contributors
Full Changelog: https://github.com/immich-app/immich/compare/v2.1.0...v2.2.0
metallb/metallb (metallb/metallb)
v0.15.3Compare Source
bpg/terraform-provider-proxmox (proxmox)
v0.89.1Compare Source
Bug Fixes
pool_idattribute (#2405) (af3efa9)pool_membershipwithoutpool_id(#2408) (acc95bf)Miscellaneous
v0.89.0Compare Source
⚠ BREAKING CHANGES
Features
envparameter support (#2383) (ef134fc)Bug Fixes
Miscellaneous
1af3b93→8e8c483) (#2396) (a9926ca)5f858e3→9971854) (#2397) (cd63393)e7fa5ac→1e7e51e) (#2389) (6593102)v0.88.0Compare Source
Features
metricsresource (#2372) (d37a8bb)wait_for_ipconfiguration for agent/network interfaces (#2362) (f24add3)Bug Fixes
Miscellaneous
4469467→4dc6199) (#2365) (bcce7da)0a35821→e7fa5ac) (#2358) (dd416a1)e68f6a0→f60eaa8) (#2359) (b80a193)f60eaa8→6981837) (#2370) (faf56bc)v0.87.0Compare Source
Features
pool_membershipresource (#2297) (95f180b)purge_on_destroyanddelete_unreferenced_disks_on_destroyparameters (#2345) (05a59aa)Bug Fixes
groupresource missinggroup_id(#2333) (ee1c525)importcontent type (#2344) (f94e25d)Miscellaneous
6ca9eb0→e68f6a0) (#2335) (5354d6b)v0.86.0Compare Source
Features
Bug Fixes
Miscellaneous
7d73c4c→8c945d3) (#2253) (a2bb9b6)8c945d3→dd08f76) (#2270) (4c1514f)dd08f76→6bac879) (#2283) (0c9879a)v0.85.1Compare Source
Bug Fixes
dhcpfield tosimplezone datasource (#2243) (b4b8d09)nodesattribute optional (#2242) (798623b)Miscellaneous
v0.85.0Compare Source
Features
Bug Fixes
importcontent type to file datasource (#2221) (f918bed)Miscellaneous
3a9db7e→5f858e3) (#2222) (b38066b)8305f5f→ab1f5c4) (#2215) (6a1f972)v0.84.1Compare Source
Bug Fixes
Miscellaneous
v0.84.0Compare Source
Features
Miscellaneous
bb979b2→8305f5f) (#2186) (b70fa62)v0.83.2Compare Source
Bug Fixes
Miscellaneous
b773c94→bb979b2) (#2173) (7944277)v0.83.1Compare Source
Bug Fixes
Miscellaneous
a5e935d→d6bdb04) (#2161) (58d833d)d6bdb04→b773c94) (#2169) (a979850)containerdocumentation (#2160) (380fd7f)vm.initializationdocumentation (#2158) (29ef9d2)release-buildin contributing doc (#2167) (739471a)v0.83.0Compare Source
Features
sdn_*configurations (#2127) (e13d7ef)Bug Fixes
Miscellaneous
4859242→5502b0e) (#2134) (20f41e8)91e2cd4→4859242) (#2128) (9ae882e)v0.82.1Compare Source
Bug Fixes
Miscellaneous
9e56f0d→91e2cd4) (#2123) (9d179dd)v0.82.0Compare Source
Features
proxmox_virtual_environment_containersdata source (#2090) (45f2805)Bug Fixes
Miscellaneous
10a15b9→9e56f0d) (#2109) (420add8)clone-vmexample (#2094) (c7cd61a)viaduct-ai/kustomize-sops (quay.io/viaductoss/ksops)
v4.4.0Compare Source
Changelog
970918fBump sigs.k8s.io/kustomize/api from v0.16.0 to v0.19.0 (#275)97f66d0Optimize Docker image (#271)18bcac8Optimize and structure Makefile (#274)d79a6f0chore(deps): bump actions/checkout from 4 to 5 (#293)bc46d4dchore(deps): bump github.com/cloudflare/circl from 1.4.0 to 1.6.1 (#285)1ced974chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#280)487ddedchore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (#282)404363dchore(deps): bump golang.org/x/net from 0.33.0 to 0.36.0 (#281)fc21455chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 (#284)167e8abchore(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.27.0 (#287)86c8643chore(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 (#286)844d8c2chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 (#288)6f0e2a6chore: update golang version to patch CVEs (#296)ec19be6fix(build): resolve kustomize installation failures during cross-compilation (#299)5890575fix(cd): try use full path for checking kustomize installation96fb5effix(ci): ensure go bin is part of PATH, add logging for debugging release CDc58ac0bupdate(sops): 3.9.2 -> 3.10.2 (#297)01bebbdv4.4.0traefik/traefik-helm-chart (traefik)
v37.4.0Compare Source
🚀 Features
publishedServiceto be set without service being enabled #1565 by @Wieneo📦 Others
v37.3.0Compare Source
🚀 Features
🐛 Bug fixes
📦 Others
New Contributors
Full Changelog: https://github.com/traefik/traefik-helm-chart/compare/v37.2.0...v37.3.0
v37.2.0Compare Source
🚀 Features
📦 Others
v37.1.2Compare Source
🚀 Features
🐛 Bug fixes
📦 Others
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
55e417e0e2to0ce64346940ce64346944e4e33eab94e4e33eab9toea024b0481ea024b0481to5a4fbe68ee5a4fbe68ee6593b22f216593b22f21tob110f16d1cView command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.