Commit graph

238 commits

Author SHA1 Message Date
377c7dd09a Disable password auth for beszel
This allows login only using OIDC.
2026-07-18 22:38:50 +02:00
74803e409c Update flake.lock 2026-07-17 01:08:46 +02:00
b626bebd02 Add styling for urgent workspaces in waybar 2026-07-17 01:08:35 +02:00
f3ff18b347 Use rofi-rbw-wayland reference on key 2026-07-17 01:08:35 +02:00
2931b74afd Update netbird (#22)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [netbirdio/dashboard](https://github.com/netbirdio/dashboard) | patch | `v2.90.3` → `v2.90.4` |
| netbirdio/netbird | patch | `v0.74.1-rootless` → `v0.74.6-rootless` |
| netbirdio/netbird-server | patch | `0.74.1` → `0.74.6` |
| netbirdio/reverse-proxy | patch | `0.74.1` → `0.74.6` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>netbirdio/dashboard (netbirdio/dashboard)</summary>

### [`v2.90.4`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.4)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.3...v2.90.4)

#### What's Changed

- Fix Skip TLS doc link and model pricing format by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;699](https://github.com/netbirdio/dashboard/pull/699)
- aggregated traffic events by [@&#8203;pascal-fischer](https://github.com/pascal-fischer) in [#&#8203;693](https://github.com/netbirdio/dashboard/pull/693)
- Show management API request id in error notifications by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;698](https://github.com/netbirdio/dashboard/pull/698)
- Improve RDP connection error handling and retry flow by [@&#8203;lixmal](https://github.com/lixmal) in [#&#8203;701](https://github.com/netbirdio/dashboard/pull/701)
- Default billing to EUR, preserve USD for active subscribers by [@&#8203;SunsetDrifter](https://github.com/SunsetDrifter) in [#&#8203;702](https://github.com/netbirdio/dashboard/pull/702)
- Revert using tenants own currency and instead use MSP currency by [@&#8203;heisbrot](https://github.com/heisbrot) in [#&#8203;703](https://github.com/netbirdio/dashboard/pull/703)
- new traffic filters by [@&#8203;pascal-fischer](https://github.com/pascal-fischer) in [#&#8203;704](https://github.com/netbirdio/dashboard/pull/704)
- Remove experimental flag from lazy connections by [@&#8203;heisbrot](https://github.com/heisbrot) in [#&#8203;706](https://github.com/netbirdio/dashboard/pull/706)
- \[reverse proxy] Feature/cluster one click deploy by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;707](https://github.com/netbirdio/dashboard/pull/707)
- Focus dashboard on Agent Network for netbird.ai signups by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;708](https://github.com/netbirdio/dashboard/pull/708)
- Make Agent Network menu available via dashboard\_features by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;709](https://github.com/netbirdio/dashboard/pull/709)

#### New Contributors

- [@&#8203;SunsetDrifter](https://github.com/SunsetDrifter) made their first contribution in [#&#8203;702](https://github.com/netbirdio/dashboard/pull/702)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.3...v2.90.4>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #22
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-17 01:04:03 +02:00
42793ffb92 Update traefik Docker tag to v3.7.8 (#23)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | patch | `v3.7.7` → `v3.7.8` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>containous/traefik (traefik)</summary>

### [`v3.7.8`](https://github.com/traefik/traefik/releases/tag/v3.7.8)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.8...v3.7.8)

**Bug fixes:**

- **\[middleware, k8s/crd]** Add missing ErrorRequestHeaders field to CRDs ([#&#8203;13498](https://github.com/traefik/traefik/pull/13498) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s/ingress-nginx]** Sanitize rewritten target on ingress-nginx provider ([#&#8203;13506](https://github.com/traefik/traefik/pull/13506) [@&#8203;gndz07](https://github.com/gndz07))
- **\[logs]** Remove unrelated error from nonexistent cert resolver log ([#&#8203;13469](https://github.com/traefik/traefik/pull/13469) [@&#8203;ArthurHlt](https://github.com/ArthurHlt))
- **\[middleware]** Fix panic in retry middleware with Websockets ([#&#8203;13520](https://github.com/traefik/traefik/pull/13520) [@&#8203;juliens](https://github.com/juliens))

**Documentation:**

- **\[k8s]** Align certificateRef and indicate ports ([#&#8203;13473](https://github.com/traefik/traefik/pull/13473) [@&#8203;veenoise](https://github.com/veenoise))
- **\[rules]** Fix syntax notes in routing rule documentation ([#&#8203;13501](https://github.com/traefik/traefik/pull/13501) [@&#8203;stevenlele](https://github.com/stevenlele))
- **\[k8s/crd]** Fix duplicated options table in ServersTransport CRD reference ([#&#8203;13518](https://github.com/traefik/traefik/pull/13518) [@&#8203;rachana5](https://github.com/rachana5))

### [`v3.7.8`](https://github.com/traefik/traefik/releases/tag/v3.7.8)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.7...v3.7.8)

**Bug fixes:**

- **\[middleware, k8s/crd]** Add missing ErrorRequestHeaders field to CRDs ([#&#8203;13498](https://github.com/traefik/traefik/pull/13498) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s/ingress-nginx]** Sanitize rewritten target on ingress-nginx provider ([#&#8203;13506](https://github.com/traefik/traefik/pull/13506) [@&#8203;gndz07](https://github.com/gndz07))
- **\[logs]** Remove unrelated error from nonexistent cert resolver log ([#&#8203;13469](https://github.com/traefik/traefik/pull/13469) [@&#8203;ArthurHlt](https://github.com/ArthurHlt))
- **\[middleware]** Fix panic in retry middleware with Websockets ([#&#8203;13520](https://github.com/traefik/traefik/pull/13520) [@&#8203;juliens](https://github.com/juliens))

**Documentation:**

- **\[k8s]** Align certificateRef and indicate ports ([#&#8203;13473](https://github.com/traefik/traefik/pull/13473) [@&#8203;veenoise](https://github.com/veenoise))
- **\[rules]** Fix syntax notes in routing rule documentation ([#&#8203;13501](https://github.com/traefik/traefik/pull/13501) [@&#8203;stevenlele](https://github.com/stevenlele))
- **\[k8s/crd]** Fix duplicated options table in ServersTransport CRD reference ([#&#8203;13518](https://github.com/traefik/traefik/pull/13518) [@&#8203;rachana5](https://github.com/rachana5))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #23
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-17 01:02:43 +02:00
3540050284 Update ghcr.io/pocket-id/pocket-id Docker tag to v2.11.0 (#21)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.10.0` → `v2.11.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.11.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2110)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.10.0...v2.11.0)

##### Bug Fixes

- postgres migration [`2025082`](20250822) remove public schema references ([#&#8203;1582](https://github.com/pocket-id/pocket-id/pull/1582) by [@&#8203;MarcoScabbiolo](https://github.com/MarcoScabbiolo))
- allow insecure callback URLs by default until next major release ([d9ead47](d9ead47d19) by [@&#8203;stonith404](https://github.com/stonith404))
- sort signup tokens by creation date explicitly ([77398a5](77398a558d) by [@&#8203;stonith404](https://github.com/stonith404))
- login code mobile ux ([#&#8203;1584](https://github.com/pocket-id/pocket-id/pull/1584) by [@&#8203;James18232](https://github.com/James18232))
- `INTERNAL_APP_URL` not reflected in UI URLs ([316cf47](316cf47ceb) by [@&#8203;stonith404](https://github.com/stonith404))
- ignore tab URL hashes in navigation history ([a3f27ec](a3f27ec2ec) by [@&#8203;stonith404](https://github.com/stonith404))
- block link-local addresses in SSRF protection ([9714296](9714296efb) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- update README ([ff5e565](ff5e565eeb) by [@&#8203;stonith404](https://github.com/stonith404))

##### Features

- add support for CIDR and IP address lists in `TRUST_PROXY` ([187cd8d](187cd8ddcd) by [@&#8203;stonith404](https://github.com/stonith404))

##### Other

- manage instance ID in the KV table ([#&#8203;1579](https://github.com/pocket-id/pocket-id/pull/1579) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#&#8203;1578](https://github.com/pocket-id/pocket-id/pull/1578) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- remove low demand issue closer ([bb03660](bb03660bd7) by [@&#8203;stonith404](https://github.com/stonith404))

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.10.0...v2.11.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #21
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-13 13:13:51 +02:00
e4b4f8c0b8 Disable nix-private updates by renovate 2026-07-12 19:18:02 +02:00
b88ad7be39 Update fnsys/dockhand Docker tag to v1.0.37 (#20)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [fnsys/dockhand](https://dockhand.pro) ([source](https://github.com/Finsys/dockhand)) | patch | `v1.0.36` → `v1.0.37` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>Finsys/dockhand (fnsys/dockhand)</summary>

### [`v1.0.37`](https://github.com/Finsys/dockhand/releases/tag/v1.0.37)

[Compare Source](https://github.com/Finsys/dockhand/compare/v1.0.36...v1.0.37)

#### What's new in v1.0.37

-  Prometheus metrics at /metrics for env state and internals, gated by EXPORT\_METRICS ([#&#8203;339](https://github.com/Finsys/dockhand/issues/339))
-  export scan results as SARIF 2.1.0, manual export and API for DefectDojo/Dependency-Track/GitHub ([#&#8203;415](https://github.com/Finsys/dockhand/issues/415))
-  bump bundled docker-compose to 5.2.0-r0 to clear known CVEs
-  Vulnerabilities dashboard: aggregated CVE findings ([#&#8203;1038](https://github.com/Finsys/dockhand/issues/1038))
-  update container images directly from the Stack view ([#&#8203;1073](https://github.com/Finsys/dockhand/issues/1073))
-  stacks list shows an update indicator for stacks with image updates ([#&#8203;504](https://github.com/Finsys/dockhand/issues/504))
- 🐛 copying an image to another registry keeps its tag instead of defaulting to latest ([#&#8203;1243](https://github.com/Finsys/dockhand/issues/1243))
- 🐛 `more-than-current image` re-scans the current image so a stale cached scan doesn't block ([#&#8203;1022](https://github.com/Finsys/dockhand/issues/1022))
-  application logs now include the log level (INFO/WARN/ERROR) in the prefix ([#&#8203;1166](https://github.com/Finsys/dockhand/issues/1166))
-  option to suppress the "What's New" popup ([#&#8203;1235](https://github.com/Finsys/dockhand/issues/1235))
- 🐛 ntfy notifications now forward the `email` query parameter so ntfy can send email ([#&#8203;1231](https://github.com/Finsys/dockhand/issues/1231))
-  default scanner images bumped to grype v0.115.0 and trivy 0.71.2 ([#&#8203;1241](https://github.com/Finsys/dockhand/issues/1241))
- 🐛 the "Latest" update-check result now stays visible and doesn't revert ([#&#8203;1019](https://github.com/Finsys/dockhand/issues/1019))
-  a stack with container label `dockhand.adopt=false` excluded from adoption ([#&#8203;998](https://github.com/Finsys/dockhand/issues/998))
- 🐛 dashboard daemon info shows the real host hostname, not Dockhand's container id ([#&#8203;1265](https://github.com/Finsys/dockhand/issues/1265))
-  file editor prompts to save/discard unsaved changes before closing ([#&#8203;1264](https://github.com/Finsys/dockhand/issues/1264))
- 🐛 `GET /api/containers/check-updates` now lists pending updates (POST still triggers a check) ([#&#8203;1266](https://github.com/Finsys/dockhand/issues/1266))
-  sidebar menu customizable (order and visibility of items) ([#&#8203;1252](https://github.com/Finsys/dockhand/issues/1252))
- 🐛 activity and audit date filters respect the configured timezone instead of UTC ([#&#8203;1269](https://github.com/Finsys/dockhand/issues/1269))
-  git deploy progress shows the changed files before the deploy starts ([#&#8203;1260](https://github.com/Finsys/dockhand/issues/1260))

#### Docker image

```bash
docker pull fnsys/dockhand:v1.0.37
```

Also available as `fnsys/dockhand:latest`

[View on Docker Hub](https://hub.docker.com/r/fnsys/dockhand)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #20
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-12 19:11:57 +02:00
624ff9e2ed Update ghcr.io/pocket-id/pocket-id Docker tag to v2.10.0 (#19)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.9.0` → `v2.10.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.10.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2100)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.9.0...v2.10.0)

##### Bug Fixes

- login code null submission and login code length check ([#&#8203;1512](https://github.com/pocket-id/pocket-id/pull/1512) by [@&#8203;James18232](https://github.com/James18232))
- don't reject `offline_access`scope ([2ed7035](2ed703540d) by [@&#8203;stonith404](https://github.com/stonith404))
- CSP error with `response_mode=form_post` ([16b5c16](16b5c16a66) by [@&#8203;stonith404](https://github.com/stonith404))
- various bugs in observability / OTel ([#&#8203;1564](https://github.com/pocket-id/pocket-id/pull/1564) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- restore behavior that unknown scopes get ignored ([34e9a6d](34e9a6d198) by [@&#8203;stonith404](https://github.com/stonith404))
- re-check api permissions on access token refresh ([e8cb0c8](e8cb0c831c) by [@&#8203;stonith404](https://github.com/stonith404))
- merge requested scopes instead of replacing them ([5e2cc6f](5e2cc6f40e) by [@&#8203;stonith404](https://github.com/stonith404))
- device authorization resolve resource creating device\_code ([2f55b7c](2f55b7cbc3) by [@&#8203;stonith404](https://github.com/stonith404))
- add missing burst to rate limit ([f3b6ceb](f3b6ceb876) by [@&#8203;stonith404](https://github.com/stonith404))
- disable one time access token exchange for disabled users ([c85a4e6](c85a4e63da) by [@&#8203;stonith404](https://github.com/stonith404))
- /authorize endpoint crashes when list of scopes is empty ([#&#8203;1575](https://github.com/pocket-id/pocket-id/pull/1575) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- mobile layout improvements ([2910c51](2910c517bb) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- add link to API docs ([968d072](968d07229e) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong OpenAPI documentation ([da3677f](da3677f33d) by [@&#8203;stonith404](https://github.com/stonith404))

##### Features

- upgrade shadcn components ([80509c8](80509c83ee) by [@&#8203;stonith404](https://github.com/stonith404))
- improve error handling on authorize page ([8689ddd](8689ddd72b) by [@&#8203;stonith404](https://github.com/stonith404))
- add ability to skip consent for client ([d467855](d467855870) by [@&#8203;stonith404](https://github.com/stonith404))
- prompt admin with PKCE client support hint ([#&#8203;1499](https://github.com/pocket-id/pocket-id/pull/1499) by [@&#8203;James18232](https://github.com/James18232))
- login code input boxes ([#&#8203;1545](https://github.com/pocket-id/pocket-id/pull/1545) by [@&#8203;James18232](https://github.com/James18232))
- drop TOFU support for callback URL ([931a6c2](931a6c2adb) by [@&#8203;stonith404](https://github.com/stonith404))
- add OAuth APIs with scoped permissions ([#&#8203;1542](https://github.com/pocket-id/pocket-id/pull/1542) by [@&#8203;stonith404](https://github.com/stonith404))
- add support for unencrypted OIDC request parameter ([25dcad7](25dcad757a) by [@&#8203;stonith404](https://github.com/stonith404))
- add description field to oidc clients ([#&#8203;1547](https://github.com/pocket-id/pocket-id/pull/1547) by [@&#8203;seanmckenzie428](https://github.com/seanmckenzie428))
- add tab bar navigation for crowded pages ([28a553f](28a553f63b) by [@&#8203;stonith404](https://github.com/stonith404))

##### Other

- close low-demand feature requests ([35987b9](35987b9c8d) by [@&#8203;stonith404](https://github.com/stonith404))
- Bump the "all-dependencies" group with 2 updates across multiple ecosystems ([#&#8203;1528](https://github.com/pocket-id/pocket-id/pull/1528) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- fix locators after shadcn upgrade ([dbbe2a4](dbbe2a403a) by [@&#8203;stonith404](https://github.com/stonith404))
- use fosite for OAuth 2.0 logic ([#&#8203;1520](https://github.com/pocket-id/pocket-id/pull/1520) by [@&#8203;stonith404](https://github.com/stonith404))
- wrap last two migrations into transaction ([cf9a319](cf9a31986f) by [@&#8203;stonith404](https://github.com/stonith404))
- remove dead code ([519cda0](519cda0eef) by [@&#8203;stonith404](https://github.com/stonith404))
- update vulnerable dependencies ([e538ea0](e538ea0bf1) by [@&#8203;stonith404](https://github.com/stonith404))
- fix flaky test ([7eaaea7](7eaaea717b) by [@&#8203;stonith404](https://github.com/stonith404))
- add AGENTS.md ([d0243fe](d0243fe396) by [@&#8203;stonith404](https://github.com/stonith404))
- use goreleaser for binaries and static image builds ([#&#8203;1478](https://github.com/pocket-id/pocket-id/pull/1478) by [@&#8203;kmendell](https://github.com/kmendell))
- add support for Docker Hub ([99ab38d](99ab38dc79) by [@&#8203;stonith404](https://github.com/stonith404))
- remove static next image tag ([49305ed](49305ed1f9) by [@&#8203;stonith404](https://github.com/stonith404))
- don't build unnecessary binaries for `next` image ([4b957a0](4b957a0106) by [@&#8203;stonith404](https://github.com/stonith404))
- change Depot project ([cdc2374](cdc23744ae) by [@&#8203;stonith404](https://github.com/stonith404))
- don't tag `next` image with current version ([cf54786](cf54786cc3) by [@&#8203;stonith404](https://github.com/stonith404))
- add exempt user to PR quality checks ([254ae88](254ae88cda) by [@&#8203;stonith404](https://github.com/stonith404))
- migrate API key functionality to single `apikey` module ([9fce987](9fce987106) by [@&#8203;stonith404](https://github.com/stonith404))
- migrate Webauthn functionality to single `webauthn` module ([58fcf7c](58fcf7cbe6) by [@&#8203;stonith404](https://github.com/stonith404))
- migrate signup functionality to single `usersignup` module ([ecad31c](ecad31cae2) by [@&#8203;stonith404](https://github.com/stonith404))
- make API key renewal date picker navigation date-independent ([#&#8203;1560](https://github.com/pocket-id/pocket-id/pull/1560) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ([#&#8203;1556](https://github.com/pocket-id/pocket-id/pull/1556) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#&#8203;1563](https://github.com/pocket-id/pocket-id/pull/1563) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- use go-kit for sending emails ([#&#8203;1565](https://github.com/pocket-id/pocket-id/pull/1565) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- update AAGUIDs ([#&#8203;1567](https://github.com/pocket-id/pocket-id/pull/1567) by [@&#8203;github-actions](https://github.com/github-actions)\[bot])
- move Pocket ID specific logic from Fosite into Pocket ID repo ([9a94aa0](9a94aa0694) by [@&#8203;stonith404](https://github.com/stonith404))
- update Fosite version ([337fc6f](337fc6fd1e) by [@&#8203;stonith404](https://github.com/stonith404))
- pass transaction to `resolveResource` ([7667377](7667377c98) by [@&#8203;stonith404](https://github.com/stonith404))
- remove redundant dtos ([fa2d08c](fa2d08cb6d) by [@&#8203;stonith404](https://github.com/stonith404))
- rename migrations ([c72da58](c72da58eaf) by [@&#8203;stonith404](https://github.com/stonith404))
- remove duplicate fosite config properties ([190914f](190914fd72) by [@&#8203;stonith404](https://github.com/stonith404))
- fix migration version in `database.json` ([a5f2192](a5f2192d67) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong migration name ([ce7d3a7](ce7d3a7e1d) by [@&#8203;stonith404](https://github.com/stonith404))
- run formatter ([59a6868](59a6868ecd) by [@&#8203;stonith404](https://github.com/stonith404))
- upgrade go version ([f62d476](f62d476c56) by [@&#8203;stonith404](https://github.com/stonith404))

##### Performance Improvements

- include permissions in api list response ([8035a4c](8035a4c8d5) by [@&#8203;stonith404](https://github.com/stonith404))

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.9.0...v2.10.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #19
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-12 19:11:30 +02:00
eca13ae292 Add gvfs and udisks2 to sway module 2026-07-10 22:08:01 +02:00
4e76a2e10d Add Dell to kanshi configuration 2026-07-10 22:06:53 +02:00
7e8c60c28d Migrate to waybar 2026-07-10 10:06:13 +02:00
00728571d6 Update traefik Docker tag to v3.7.7 (#18)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | patch | `v3.7.6` → `v3.7.7` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>containous/traefik (traefik)</summary>

### [`v3.7.7`](https://github.com/traefik/traefik/releases/tag/v3.7.7)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.7...v3.7.7)

**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.7/migrate/v3/#v377).

**Bug fixes:**

- **\[middleware, k8s/ingress-nginx]** Add app-root middleware with nginx variable interpolation ([#&#8203;13398](https://github.com/traefik/traefik/pull/13398) [@&#8203;dfeinblatt](https://github.com/dfeinblatt))
- **\[rules]** Fix consistency between HostSNI(*) and Host(*) ([#&#8203;13460](https://github.com/traefik/traefik/pull/13460) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/gatewayapi]** Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace ([#&#8203;13462](https://github.com/traefik/traefik/pull/13462) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix handle empty unknown-length bodies in mirroring ([#&#8203;13399](https://github.com/traefik/traefik/pull/13399) [@&#8203;amazon7737](https://github.com/amazon7737))
- **\[k8s/crd]** Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider ([#&#8203;13458](https://github.com/traefik/traefik/pull/13458) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Sanitize replaced path in ReplacePathRegex middleware ([#&#8203;13466](https://github.com/traefik/traefik/pull/13466) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[acme]** Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#&#8203;13477](https://github.com/traefik/traefik/pull/13477) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[otel]** Bump go.opentelemetry.io/otel to v1.44.0 ([#&#8203;13478](https://github.com/traefik/traefik/pull/13478) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s]** Fix panic when endpointslice port value or name is nil ([#&#8203;13481](https://github.com/traefik/traefik/pull/13481) [@&#8203;kevinpollet](https://github.com/kevinpollet))

**Documentation:**

- Fix version in migration guide ([#&#8203;13434](https://github.com/traefik/traefik/pull/13434) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- Fix changelog v2.11.51 ([#&#8203;13430](https://github.com/traefik/traefik/pull/13430) [@&#8203;mmatur](https://github.com/mmatur))
- Add v3.7 to supported version docs ([#&#8203;13118](https://github.com/traefik/traefik/pull/13118) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- Fix some function names in comments ([#&#8203;13443](https://github.com/traefik/traefik/pull/13443) [@&#8203;blackflytech](https://github.com/blackflytech))
- Add [@&#8203;nandorKollar](https://github.com/nandorKollar) as a current maintainer ([#&#8203;13451](https://github.com/traefik/traefik/pull/13451) [@&#8203;emilevauge](https://github.com/emilevauge))
- Add [@&#8203;amazon7737](https://github.com/amazon7737) as a current maintainer ([#&#8203;13450](https://github.com/traefik/traefik/pull/13450) [@&#8203;emilevauge](https://github.com/emilevauge))
- **\[middleware]** Clarify buffering middleware defaults ([#&#8203;13401](https://github.com/traefik/traefik/pull/13401) [@&#8203;amazon7737](https://github.com/amazon7737))
- Fix grammar in TLS, TCP service, and routing reference docs ([#&#8203;13461](https://github.com/traefik/traefik/pull/13461) [@&#8203;almightymoon](https://github.com/almightymoon))
- Fix X-Forwarded-Prefix documentation for dashboard redirection ([#&#8203;13472](https://github.com/traefik/traefik/pull/13472) [@&#8203;kevinpollet](https://github.com/kevinpollet))

### [`v3.7.7`](https://github.com/traefik/traefik/releases/tag/v3.7.7)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.6...v3.7.7)

**Important:** Please read the [migration guide](https://doc.traefik.io/traefik/v3.7/migrate/v3/#v377).

**Bug fixes:**

- **\[middleware, k8s/ingress-nginx]** Add app-root middleware with nginx variable interpolation ([#&#8203;13398](https://github.com/traefik/traefik/pull/13398) [@&#8203;dfeinblatt](https://github.com/dfeinblatt))
- **\[rules]** Fix consistency between HostSNI(*) and Host(*) ([#&#8203;13460](https://github.com/traefik/traefik/pull/13460) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/gatewayapi]** Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace ([#&#8203;13462](https://github.com/traefik/traefik/pull/13462) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix handle empty unknown-length bodies in mirroring ([#&#8203;13399](https://github.com/traefik/traefik/pull/13399) [@&#8203;amazon7737](https://github.com/amazon7737))
- **\[k8s/crd]** Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider ([#&#8203;13458](https://github.com/traefik/traefik/pull/13458) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Sanitize replaced path in ReplacePathRegex middleware ([#&#8203;13466](https://github.com/traefik/traefik/pull/13466) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[acme]** Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#&#8203;13477](https://github.com/traefik/traefik/pull/13477) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[otel]** Bump go.opentelemetry.io/otel to v1.44.0 ([#&#8203;13478](https://github.com/traefik/traefik/pull/13478) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s]** Fix panic when endpointslice port value or name is nil ([#&#8203;13481](https://github.com/traefik/traefik/pull/13481) [@&#8203;kevinpollet](https://github.com/kevinpollet))

**Documentation:**

- Fix version in migration guide ([#&#8203;13434](https://github.com/traefik/traefik/pull/13434) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- Fix changelog v2.11.51 ([#&#8203;13430](https://github.com/traefik/traefik/pull/13430) [@&#8203;mmatur](https://github.com/mmatur))
- Add v3.7 to supported version docs ([#&#8203;13118](https://github.com/traefik/traefik/pull/13118) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- Fix some function names in comments ([#&#8203;13443](https://github.com/traefik/traefik/pull/13443) [@&#8203;blackflytech](https://github.com/blackflytech))
- Add [@&#8203;nandorKollar](https://github.com/nandorKollar) as a current maintainer ([#&#8203;13451](https://github.com/traefik/traefik/pull/13451) [@&#8203;emilevauge](https://github.com/emilevauge))
- Add [@&#8203;amazon7737](https://github.com/amazon7737) as a current maintainer ([#&#8203;13450](https://github.com/traefik/traefik/pull/13450) [@&#8203;emilevauge](https://github.com/emilevauge))
- **\[middleware]** Clarify buffering middleware defaults ([#&#8203;13401](https://github.com/traefik/traefik/pull/13401) [@&#8203;amazon7737](https://github.com/amazon7737))
- Fix grammar in TLS, TCP service, and routing reference docs ([#&#8203;13461](https://github.com/traefik/traefik/pull/13461) [@&#8203;almightymoon](https://github.com/almightymoon))
- Fix X-Forwarded-Prefix documentation for dashboard redirection ([#&#8203;13472](https://github.com/traefik/traefik/pull/13472) [@&#8203;kevinpollet](https://github.com/kevinpollet))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #18
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-09 13:27:39 +02:00
e7d2ace6ef Update flake.lock 2026-07-02 19:56:43 +02:00
cb8bf9a66b Migrate lightdm module to new options
The old services.xserver.displayManager are moved out of xserver
2026-07-02 19:56:43 +02:00
d0bc33fbf9 Add networkmanager_dmenu keybinding 2026-07-02 19:56:43 +02:00
bb8559f665 Use greetd and regreet instead of lightdm
LightDM brings problems with setting up the session which leads to
kanshi, swayidle and such services to not get the correct environment
variables like `WAYLAND_DISPLAY`.
2026-07-02 19:56:43 +02:00
ddc717a6c0 Use correct command for shutdown from sway 2026-07-02 19:56:43 +02:00
ea4841403a Set default sway workspace 2026-07-02 19:56:43 +02:00
c7fb1dd4ce Use same broker as os for sway 2026-07-02 19:56:43 +02:00
b6909c162b Add screen dimming and switching off displays on idle 2026-07-02 19:56:43 +02:00
81a4822e2d Reorder pam swaylock rules
This enables entering a password in swaylock without providing
fingerprint.
2026-07-02 19:56:43 +02:00
74581599cd Lowercase app_id of Element 2026-07-02 19:56:43 +02:00
25139ece89 Configure swaylock and swayidle 2026-07-02 19:56:43 +02:00
30207ec5f0 Remove dependency on i3exit
Configure commands directly in sway.
2026-07-02 19:56:43 +02:00
3e3dff15f7 Migrate floating modifiers
`class` is an X11 attribute, sway uses `app_id`.
2026-07-02 19:56:43 +02:00
0458bdcced Add focus wrapping in sway
This enables cycling through tabbed windows endlessly.
2026-07-02 19:56:43 +02:00
591f8f4da7 Use rofi as output chooser for screencast
Slurp does not allow for selecting windows.
2026-07-02 19:56:43 +02:00
c2d242301c Add m15 configuration to kanshi 2026-07-02 19:56:43 +02:00
f46b9ab129 Configure vmVariant for more cores and memory
When testing the config in a vm, have more ressources available.
Otherwise oom errors can occur.
2026-07-02 19:56:43 +02:00
0c605d9684 Set default session to sway 2026-07-02 19:56:43 +02:00
716e54dd12 Add custom lightdm-gtk module for default session
The upstream module does not allow for setting a default session,
although this is possible in lightdm-gtk-greeter for more than two years
now.
2026-07-02 19:56:43 +02:00
531ae9b443 Start solaar minimized on startup 2026-07-02 19:56:43 +02:00
89eff861f3 Enable base and gtk wrapper features for sway 2026-07-02 19:56:43 +02:00
479ccf3fc3 Fix path for nixos wallpaper 2026-07-02 19:56:43 +02:00
cb17bea00c Configure xdg portals for sway 2026-07-02 19:56:43 +02:00
2ff0164960 Add initial sway configuration
Still misses configuration for login screen, lock screen and idle
management.
2026-07-02 19:56:43 +02:00
5fdf5b5d9d Update flake.lock 2026-07-02 19:56:43 +02:00
626ab7adfc Update netbird (#10)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [netbirdio/dashboard](https://github.com/netbirdio/dashboard) | minor | `v2.39.0` → `v2.90.3` |
| netbirdio/netbird | minor | `v0.73.2-rootless` → `v0.74.1-rootless` |
| netbirdio/netbird-server | minor | `0.73.2` → `0.74.1` |
| netbirdio/reverse-proxy | minor | `0.73.2` → `0.74.1` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>netbirdio/dashboard (netbirdio/dashboard)</summary>

### [`v2.90.3`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.3)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.2...v2.90.3)

#### What's Changed

- Show reason for peer login expiration events by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;694](https://github.com/netbirdio/dashboard/pull/694)
- Reload nginx after patching CSP header by [@&#8203;pappz](https://github.com/pappz) in [#&#8203;687](https://github.com/netbirdio/dashboard/pull/687)
- Fix peer table page reset when switching kind by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;696](https://github.com/netbirdio/dashboard/pull/696)
- Feature/add provider session by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;695](https://github.com/netbirdio/dashboard/pull/695)
- Add Metrics settings tab with metrics push toggle by [@&#8203;pappz](https://github.com/pappz) in [#&#8203;613](https://github.com/netbirdio/dashboard/pull/613)
- Feature/add skip tls verification by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;697](https://github.com/netbirdio/dashboard/pull/697)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.2...v2.90.3>

### [`v2.90.2`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.2)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.1...v2.90.2)

#### What's Changed

- Add Claude provider selector and Bedrock by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;691](https://github.com/netbirdio/dashboard/pull/691)
- Prevent gated useFetchApi hooks from overwriting shared cache entries by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;692](https://github.com/netbirdio/dashboard/pull/692)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.1...v2.90.2>

### [`v2.90.1`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.1)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.0...v2.90.1)

#### What's Changed

- The empty-state peer card now renders AddPeerDropdown by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;686](https://github.com/netbirdio/dashboard/pull/686)
- Support Vertex keyfile upload and agent config by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;688](https://github.com/netbirdio/dashboard/pull/688)
- Prefill Vertex endpoint by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;689](https://github.com/netbirdio/dashboard/pull/689)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.90.0...v2.90.1>

### [`v2.90.0`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.0)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.80.0...v2.90.0)

#### What's Changed

- Fix CSP blocking OIDC token endpoint by [@&#8203;maxbrc](https://github.com/maxbrc) in [#&#8203;680](https://github.com/netbirdio/dashboard/pull/680)
- Agent Network by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;684](https://github.com/netbirdio/dashboard/pull/684)

#### New Contributors

- [@&#8203;maxbrc](https://github.com/maxbrc) made their first contribution in [#&#8203;680](https://github.com/netbirdio/dashboard/pull/680)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.80.0...v2.90.0>

### [`v2.80.0`](https://github.com/netbirdio/dashboard/releases/tag/v2.80.0)

[Compare Source](https://github.com/netbirdio/dashboard/compare/v2.39.0...v2.80.0)

#### What's Changed

- Add Logout URL to the Identity Provider dialog by [@&#8203;TechHutTV](https://github.com/TechHutTV) in [#&#8203;657](https://github.com/netbirdio/dashboard/pull/657)
- Edit banner to IPv6 kh link by [@&#8203;TechHutTV](https://github.com/TechHutTV) in [#&#8203;662](https://github.com/netbirdio/dashboard/pull/662)
- Insert link to remote jobs documentation by [@&#8203;semp26](https://github.com/semp26) in [#&#8203;664](https://github.com/netbirdio/dashboard/pull/664)
- DNS Zones & Setup modal improvements by [@&#8203;braginini](https://github.com/braginini) in [#&#8203;669](https://github.com/netbirdio/dashboard/pull/669)
- Update banner by [@&#8203;heisbrot](https://github.com/heisbrot) in [#&#8203;672](https://github.com/netbirdio/dashboard/pull/672)
- Update announcements.json by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;673](https://github.com/netbirdio/dashboard/pull/673)
- Merge NetBird cloud edition into the dashboard by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;674](https://github.com/netbirdio/dashboard/pull/674)
- Restrict cloud/licensed-only API calls in open-source mode by [@&#8203;mlsmaycon](https://github.com/mlsmaycon) in [#&#8203;675](https://github.com/netbirdio/dashboard/pull/675)
- Preserve inactivity expiration on partial peer updates by [@&#8203;bcmmbaga](https://github.com/bcmmbaga) in [#&#8203;676](https://github.com/netbirdio/dashboard/pull/676)

#### New Contributors

- [@&#8203;TechHutTV](https://github.com/TechHutTV) made their first contribution in [#&#8203;657](https://github.com/netbirdio/dashboard/pull/657)
- [@&#8203;semp26](https://github.com/semp26) made their first contribution in [#&#8203;664](https://github.com/netbirdio/dashboard/pull/664)

**Full Changelog**: <https://github.com/netbirdio/dashboard/compare/v2.39.0...v2.80.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #10
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-02 19:40:00 +02:00
d486dc7e6b Update traefik Docker tag to v3.7.6 (#16)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | patch | `v3.7.5` → `v3.7.6` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>containous/traefik (traefik)</summary>

### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.6...v3.7.6)

[All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6)

**Bug fixes:**

- **\[acme, logs]** Bump github.com/go-acme/lego/v5 ([#&#8203;13154](https://github.com/traefik/traefik/pull/13154) [@&#8203;ldez](https://github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 ([#&#8203;13359](https://github.com/traefik/traefik/pull/13359) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/ingress-nginx]** Fix ingress-nginx ssl passthrough status updates ([#&#8203;13212](https://github.com/traefik/traefik/pull/13212) [@&#8203;nickmnt](https://github.com/nickmnt))
- **\[k8s/gatewayapi]** Add missing Gateway API features in conformance tests ([#&#8203;13356](https://github.com/traefik/traefik/pull/13356) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Avoid collisions for Gateway API services names ([#&#8203;13367](https://github.com/traefik/traefik/pull/13367) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/gatewayapi]** Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#&#8203;13397](https://github.com/traefik/traefik/pull/13397) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Configure retry according to buffering configuration ([#&#8203;13039](https://github.com/traefik/traefik/pull/13039) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#&#8203;13386](https://github.com/traefik/traefik/pull/13386) [@&#8203;carloslima](https://github.com/carloslima))
- **\[k8s]** Detect EndpointSlice condition changes ([#&#8203;13405](https://github.com/traefik/traefik/pull/13405) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Index Kubernetes EndpointSlice by service name ([#&#8203;13395](https://github.com/traefik/traefik/pull/13395) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Sort endpointslices to keep backend IPs consistent across rebuilds ([#&#8203;13406](https://github.com/traefik/traefik/pull/13406) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[kv]** Bump kvtools/redis to v1.2.1 ([#&#8203;13403](https://github.com/traefik/traefik/pull/13403) [@&#8203;ldez](https://github.com/ldez))
- **\[middleware, authentication]** Fix x-forwarded-port in forward-auth ([#&#8203;13344](https://github.com/traefik/traefik/pull/13344) [@&#8203;juliens](https://github.com/juliens))
- **\[middleware, k8s/gatewayapi]** Fix Gateway API redirect missing statuses ([#&#8203;13360](https://github.com/traefik/traefik/pull/13360) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware, k8s/gatewayapi]** Fix Host header not being modified by RequestHeaderModifier ([#&#8203;12805](https://github.com/traefik/traefik/pull/12805) [@&#8203;mihuross](https://github.com/mihuross))
- **\[middleware, k8s/gatewayapi]** Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#&#8203;13347](https://github.com/traefik/traefik/pull/13347) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix CORS Max-Age set to 0 by default ([#&#8203;13371](https://github.com/traefik/traefik/pull/13371) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware]** Fix CORS wildcard when allow-credentials is true ([#&#8203;13368](https://github.com/traefik/traefik/pull/13368) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[server]** Add an option to remove request headers with underscores ([#&#8203;13262](https://github.com/traefik/traefik/pull/13262) [@&#8203;youkoulayley](https://github.com/youkoulayley))
- **\[server]** Configurable max request header size ([#&#8203;13353](https://github.com/traefik/traefik/pull/13353) [@&#8203;juliens](https://github.com/juliens))
- **\[tls]** Fix nondeterministic TLS certificate selection on shared SAN ([#&#8203;13348](https://github.com/traefik/traefik/pull/13348) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[webui]** Bump axios to v1.18.0 ([#&#8203;13380](https://github.com/traefik/traefik/pull/13380) [@&#8203;gndz07](https://github.com/gndz07))
- **\[websocket]** Fix connection upgrades when backend server is using h2c scheme ([#&#8203;12967](https://github.com/traefik/traefik/pull/12967) [@&#8203;stffabi](https://github.com/stffabi))

**Documentation:**

- **\[k8s/crd]** Fix broken CRD reference links in IngressRoute page ([#&#8203;13375](https://github.com/traefik/traefik/pull/13375) [@&#8203;s3onghyun](https://github.com/s3onghyun))
- **\[k8s/gatewayapi]** Remove experimental note for Gateway API/TLSRoute documentation ([#&#8203;13392](https://github.com/traefik/traefik/pull/13392) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- **\[k8s/ingress-nginx]** Add Kubernetes Ingress NGINX to the providers list ([#&#8203;13372](https://github.com/traefik/traefik/pull/13372) [@&#8203;nmengin](https://github.com/nmengin))
- **\[k8s]** Align Helm chart documented values with chart v41 ([#&#8203;13366](https://github.com/traefik/traefik/pull/13366) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[middleware, authentication, k8s/ingress-nginx]** Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#&#8203;13342](https://github.com/traefik/traefik/pull/13342) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[middleware]** Clarify entryPoint middleware reference format ([#&#8203;13364](https://github.com/traefik/traefik/pull/13364) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[security]** Add HTTP/2 header memory exhaustion security documentation ([#&#8203;13381](https://github.com/traefik/traefik/pull/13381) [@&#8203;emilevauge](https://github.com/emilevauge))
- Adds documentations on maxHeaderBytes ([#&#8203;13363](https://github.com/traefik/traefik/pull/13363) [@&#8203;juliens](https://github.com/juliens))
- Fix inaccuracies in reference documentation ([#&#8203;13304](https://github.com/traefik/traefik/pull/13304) [@&#8203;sheddy-traefik](https://github.com/sheddy-traefik))

### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30)

[Compare Source](https://github.com/containous/traefik/compare/v3.7.5...v3.7.6)

[All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6)

**Bug fixes:**

- **\[acme, logs]** Bump github.com/go-acme/lego/v5 ([#&#8203;13154](https://github.com/traefik/traefik/pull/13154) [@&#8203;ldez](https://github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 ([#&#8203;13359](https://github.com/traefik/traefik/pull/13359) [@&#8203;juliens](https://github.com/juliens))
- **\[k8s, k8s/ingress-nginx]** Fix ingress-nginx ssl passthrough status updates ([#&#8203;13212](https://github.com/traefik/traefik/pull/13212) [@&#8203;nickmnt](https://github.com/nickmnt))
- **\[k8s/gatewayapi]** Add missing Gateway API features in conformance tests ([#&#8203;13356](https://github.com/traefik/traefik/pull/13356) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Avoid collisions for Gateway API services names ([#&#8203;13367](https://github.com/traefik/traefik/pull/13367) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/gatewayapi]** Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#&#8203;13397](https://github.com/traefik/traefik/pull/13397) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Configure retry according to buffering configuration ([#&#8203;13039](https://github.com/traefik/traefik/pull/13039) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[k8s/ingress-nginx]** Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#&#8203;13386](https://github.com/traefik/traefik/pull/13386) [@&#8203;carloslima](https://github.com/carloslima))
- **\[k8s]** Detect EndpointSlice condition changes ([#&#8203;13405](https://github.com/traefik/traefik/pull/13405) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Index Kubernetes EndpointSlice by service name ([#&#8203;13395](https://github.com/traefik/traefik/pull/13395) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[k8s]** Sort endpointslices to keep backend IPs consistent across rebuilds ([#&#8203;13406](https://github.com/traefik/traefik/pull/13406) [@&#8203;kevinpollet](https://github.com/kevinpollet))
- **\[kv]** Bump kvtools/redis to v1.2.1 ([#&#8203;13403](https://github.com/traefik/traefik/pull/13403) [@&#8203;ldez](https://github.com/ldez))
- **\[middleware, authentication]** Fix x-forwarded-port in forward-auth ([#&#8203;13344](https://github.com/traefik/traefik/pull/13344) [@&#8203;juliens](https://github.com/juliens))
- **\[middleware, k8s/gatewayapi]** Fix Gateway API redirect missing statuses ([#&#8203;13360](https://github.com/traefik/traefik/pull/13360) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware, k8s/gatewayapi]** Fix Host header not being modified by RequestHeaderModifier ([#&#8203;12805](https://github.com/traefik/traefik/pull/12805) [@&#8203;mihuross](https://github.com/mihuross))
- **\[middleware, k8s/gatewayapi]** Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#&#8203;13347](https://github.com/traefik/traefik/pull/13347) [@&#8203;gndz07](https://github.com/gndz07))
- **\[middleware]** Fix CORS Max-Age set to 0 by default ([#&#8203;13371](https://github.com/traefik/traefik/pull/13371) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[middleware]** Fix CORS wildcard when allow-credentials is true ([#&#8203;13368](https://github.com/traefik/traefik/pull/13368) [@&#8203;AnatoleLucet](https://github.com/AnatoleLucet))
- **\[server]** Add an option to remove request headers with underscores ([#&#8203;13262](https://github.com/traefik/traefik/pull/13262) [@&#8203;youkoulayley](https://github.com/youkoulayley))
- **\[server]** Configurable max request header size ([#&#8203;13353](https://github.com/traefik/traefik/pull/13353) [@&#8203;juliens](https://github.com/juliens))
- **\[tls]** Fix nondeterministic TLS certificate selection on shared SAN ([#&#8203;13348](https://github.com/traefik/traefik/pull/13348) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[webui]** Bump axios to v1.18.0 ([#&#8203;13380](https://github.com/traefik/traefik/pull/13380) [@&#8203;gndz07](https://github.com/gndz07))
- **\[websocket]** Fix connection upgrades when backend server is using h2c scheme ([#&#8203;12967](https://github.com/traefik/traefik/pull/12967) [@&#8203;stffabi](https://github.com/stffabi))

**Documentation:**

- **\[k8s/crd]** Fix broken CRD reference links in IngressRoute page ([#&#8203;13375](https://github.com/traefik/traefik/pull/13375) [@&#8203;s3onghyun](https://github.com/s3onghyun))
- **\[k8s/gatewayapi]** Remove experimental note for Gateway API/TLSRoute documentation ([#&#8203;13392](https://github.com/traefik/traefik/pull/13392) [@&#8203;jnoordsij](https://github.com/jnoordsij))
- **\[k8s/ingress-nginx]** Add Kubernetes Ingress NGINX to the providers list ([#&#8203;13372](https://github.com/traefik/traefik/pull/13372) [@&#8203;nmengin](https://github.com/nmengin))
- **\[k8s]** Align Helm chart documented values with chart v41 ([#&#8203;13366](https://github.com/traefik/traefik/pull/13366) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[middleware, authentication, k8s/ingress-nginx]** Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#&#8203;13342](https://github.com/traefik/traefik/pull/13342) [@&#8203;rtribotte](https://github.com/rtribotte))
- **\[middleware]** Clarify entryPoint middleware reference format ([#&#8203;13364](https://github.com/traefik/traefik/pull/13364) [@&#8203;mloiseleur](https://github.com/mloiseleur))
- **\[security]** Add HTTP/2 header memory exhaustion security documentation ([#&#8203;13381](https://github.com/traefik/traefik/pull/13381) [@&#8203;emilevauge](https://github.com/emilevauge))
- Adds documentations on maxHeaderBytes ([#&#8203;13363](https://github.com/traefik/traefik/pull/13363) [@&#8203;juliens](https://github.com/juliens))
- Fix inaccuracies in reference documentation ([#&#8203;13304](https://github.com/traefik/traefik/pull/13304) [@&#8203;sheddy-traefik](https://github.com/sheddy-traefik))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #16
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-02 19:36:17 +02:00
1c73483c13 Update ghcr.io/finsys/hawser Docker tag to v0.2.46 (#15)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/finsys/hawser](https://github.com/Finsys/hawser) | patch | `0.2.45` → `0.2.46` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>Finsys/hawser (ghcr.io/finsys/hawser)</summary>

### [`v0.2.46`](https://github.com/Finsys/hawser/compare/v0.2.45...v0.2.46)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.45...v0.2.46)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #15
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-29 22:46:57 +02:00
2348ba1d59 Update fnsys/dockhand Docker tag to v1.0.36 (#14)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [fnsys/dockhand](https://dockhand.pro) ([source](https://github.com/Finsys/dockhand)) | patch | `v1.0.35` → `v1.0.36` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>Finsys/dockhand (fnsys/dockhand)</summary>

### [`v1.0.36`](https://github.com/Finsys/dockhand/releases/tag/v1.0.36)

[Compare Source](https://github.com/Finsys/dockhand/compare/v1.0.35...v1.0.36)

#### What's new in v1.0.36

-  sidebar shows an amber update indicator when a newer Dockhand image is available ([#&#8203;1146](https://github.com/Finsys/dockhand/issues/1146))
- 🐛 Tag image modal too narrow for images identified only by SHA ([#&#8203;1205](https://github.com/Finsys/dockhand/issues/1205))
- 🐛 self-hosted ntfy: accept raw `tk_...` access tokens in `?auth=` ([#&#8203;1209](https://github.com/Finsys/dockhand/issues/1209))
- 🐛 dashboard: a single failed DB stats query no longer poisons the whole environment tile ([#&#8203;1210](https://github.com/Finsys/dockhand/issues/1210))
- 🐛 UI dates and times now honor the configured default timezone instead of the browser's timezone ([#&#8203;1183](https://github.com/Finsys/dockhand/issues/1183))
- 🐛 add missing `reset-mfa.sh` emergency script referenced by the manual ([#&#8203;1214](https://github.com/Finsys/dockhand/issues/1214))
- 🐛 registry browser: copy between registries no longer duplicates the host ([#&#8203;1220](https://github.com/Finsys/dockhand/issues/1220))
-  published image carries standard OCI annotations (source, url, title, description, vendor, licenses) ([#&#8203;1217](https://github.com/Finsys/dockhand/issues/1217))
-  scanner: configurable network mode and DNS servers for vulnerability scans ([#&#8203;1219](https://github.com/Finsys/dockhand/issues/1219))
-  template tiles now show a `Project` link that opens the upstream project page ([#&#8203;1211](https://github.com/Finsys/dockhand/issues/1211))
-  cron picker: hour shows just `HH` (was `HH:00`), minute granularity bumped from 15 to 5 ([#&#8203;1198](https://github.com/Finsys/dockhand/issues/1198))
-  grid buttons: configurable size and optional semantic colors ([#&#8203;1072](https://github.com/Finsys/dockhand/issues/1072))
- 🐛 copy buttons (git deploy logs, API tokens) now work over plain HTTP ([#&#8203;1222](https://github.com/Finsys/dockhand/issues/1222))
- 🐛 Podman pod-infra containers no longer trigger update-check warnings ([#&#8203;1221](https://github.com/Finsys/dockhand/issues/1221))
- 🐛 terminal exec works even when the browser sends a cookie with stray `%` characters ([#&#8203;1224](https://github.com/Finsys/dockhand/issues/1224))

#### Docker image

```bash
docker pull fnsys/dockhand:v1.0.36
```

Also available as `fnsys/dockhand:latest`

[View on Docker Hub](https://hub.docker.com/r/fnsys/dockhand)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #14
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-29 22:46:53 +02:00
edd26dc18f Migrate Renovate config (#11)
The Renovate config in this repository needs migrating. Typically this is because one or more configuration options you are using have been renamed.

  You don't need to merge this PR right away, because Renovate will continue to migrate these fields internally each time it runs. But later some of these fields may be fully deprecated and the migrations removed. So it's a good idea to merge this migration PR soon.

🔕 **Ignore**: Close this PR and you won't be reminded about config migration again, but one day your current config may no longer be valid.

 Got questions? Does something look wrong to you? Please don't hesitate to [request help here](https://github.com/renovatebot/renovate/discussions).

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

Reviewed-on: #11
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-24 19:11:13 +02:00
d07800b183 Update traefik:v3.7.5 Docker digest to e4d9815 (#9)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://github.com/containous/traefik) | digest | `d685879` → `e4d9815` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #9
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-24 19:08:48 +02:00
71b29125f8 Switch to fastfetch and use top-level engrampa for home-config 2026-06-24 19:07:05 +02:00
2d7cff9743 Add best-practices to renovate config 2026-06-24 19:06:30 +02:00
9881eb04c3 Update fnsys/dockhand Docker tag to v1.0.35 (#2)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| fnsys/dockhand | patch | `v1.0.32` → `v1.0.35` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #2
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-22 22:26:50 +02:00
0b10a3ddc3 Update ghcr.io/finsys/hawser Docker tag to v0.2.45 (#3)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/finsys/hawser](https://github.com/Finsys/hawser) | patch | `0.2.42` → `0.2.45` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>Finsys/hawser (ghcr.io/finsys/hawser)</summary>

### [`v0.2.45`](https://github.com/Finsys/hawser/releases/tag/v0.2.45)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.44...v0.2.45)

#### Changelog

- [`82a86a1`](82a86a16e3) feat: hash-verified file deletion sync and stack dir cleanup ([#&#8203;966](https://github.com/Finsys/hawser/issues/966), [#&#8203;1162](https://github.com/Finsys/hawser/issues/1162))
- [`0997f71`](0997f7161d) fix: log client disconnect in events stream at debug level
- [`f38f847`](f38f847ca8) fix: stack removal deletes only files explicitly listed by dockhand
- [`2c1675f`](2c1675f16b) fix: use ln -sf so newer docker-compose packages work

### [`v0.2.44`](https://github.com/Finsys/hawser/releases/tag/v0.2.44)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.43...v0.2.44)

#### Changelog

- [`3cbc419`](3cbc419eee) fix: use clean env for compose subprocess to prevent inherited .env override ([#&#8203;1113](https://github.com/Finsys/hawser/issues/1113))

### [`v0.2.43`](https://github.com/Finsys/hawser/releases/tag/v0.2.43)

[Compare Source](https://github.com/Finsys/hawser/compare/v0.2.42...v0.2.43)

#### Changelog

- Bump Go to 1.26 in go.mod, CI workflows, and Dockerfile.dev
- Bump docker-compose to 5.1.4-r0 in Dockerfile
- Expand token security documentation with generation examples ([#&#8203;60](https://github.com/Finsys/hawser/issues/60))
- Remove unused edge /info endpoint

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #3
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-22 22:26:31 +02:00
5de6a829e6 Update netbird to v0.73.2 (#8)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| netbirdio/netbird | minor | `0.72.4-rootless` → `v0.73.2-rootless` |
| netbirdio/netbird-server | minor | `0.72.4` → `0.73.2` |
| netbirdio/reverse-proxy | minor | `0.72.4` → `0.73.2` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #8
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-22 22:26:00 +02:00