nix-config

Author	SHA1	Message	Date
JuliusFreudenberger	a15134e32b	Remove i3 module inclusion	2026-07-19 16:01:05 +02:00
JuliusFreudenberger	b81f215198	Add vlc and libreoffice as gui app for home-manager	2026-07-19 16:00:21 +02:00
JuliusFreudenberger	41741a2449	Add jujutsu as cli tool	2026-07-19 16:00:00 +02:00
JuliusFreudenberger	9d2f9e9bba	Add and configure gram-editor Add nix-gram-extensions for building extensions as derivations. Switch to own home-manager fork until wrapping of other editors is possible upstream.	2026-07-19 15:58:57 +02:00
JuliusFreudenberger	4343a3d231	Add access to traefik dashboard with basic auth	2026-07-19 00:07:02 +02:00
JuliusFreudenberger	377c7dd09a	Disable password auth for beszel This allows login only using OIDC.	2026-07-18 22:38:50 +02:00
JuliusFreudenberger	74803e409c	Update flake.lock	2026-07-17 01:08:46 +02:00
JuliusFreudenberger	b626bebd02	Add styling for urgent workspaces in waybar	2026-07-17 01:08:35 +02:00
JuliusFreudenberger	f3ff18b347	Use rofi-rbw-wayland reference on key	2026-07-17 01:08:35 +02:00
Renovate Bot	2931b74afd	Update netbird (#22 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [netbirdio/dashboard](https://github.com/netbirdio/dashboard) \| patch \| `v2.90.3` → `v2.90.4` \| \| netbirdio/netbird \| patch \| `v0.74.1-rootless` → `v0.74.6-rootless` \| \| netbirdio/netbird-server \| patch \| `0.74.1` → `0.74.6` \| \| netbirdio/reverse-proxy \| patch \| `0.74.1` → `0.74.6` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>netbirdio/dashboard (netbirdio/dashboard)</summary> ### [`v2.90.4`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.4) [Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.3...v2.90.4) #### What's Changed - Fix Skip TLS doc link and model pricing format by [@braginini](https://github.com/braginini) in [#699](https://github.com/netbirdio/dashboard/pull/699) - aggregated traffic events by [@pascal-fischer](https://github.com/pascal-fischer) in [#693](https://github.com/netbirdio/dashboard/pull/693) - Show management API request id in error notifications by [@mlsmaycon](https://github.com/mlsmaycon) in [#698](https://github.com/netbirdio/dashboard/pull/698) - Improve RDP connection error handling and retry flow by [@lixmal](https://github.com/lixmal) in [#701](https://github.com/netbirdio/dashboard/pull/701) - Default billing to EUR, preserve USD for active subscribers by [@SunsetDrifter](https://github.com/SunsetDrifter) in [#702](https://github.com/netbirdio/dashboard/pull/702) - Revert using tenants own currency and instead use MSP currency by [@heisbrot](https://github.com/heisbrot) in [#703](https://github.com/netbirdio/dashboard/pull/703) - new traffic filters by [@pascal-fischer](https://github.com/pascal-fischer) in [#704](https://github.com/netbirdio/dashboard/pull/704) - Remove experimental flag from lazy connections by [@heisbrot](https://github.com/heisbrot) in [#706](https://github.com/netbirdio/dashboard/pull/706) - \[reverse proxy] Feature/cluster one click deploy by [@mlsmaycon](https://github.com/mlsmaycon) in [#707](https://github.com/netbirdio/dashboard/pull/707) - Focus dashboard on Agent Network for netbird.ai signups by [@mlsmaycon](https://github.com/mlsmaycon) in [#708](https://github.com/netbirdio/dashboard/pull/708) - Make Agent Network menu available via dashboard\_features by [@mlsmaycon](https://github.com/mlsmaycon) in [#709](https://github.com/netbirdio/dashboard/pull/709) #### New Contributors - [@SunsetDrifter](https://github.com/SunsetDrifter) made their first contribution in [#702](https://github.com/netbirdio/dashboard/pull/702) Full Changelog: <https://github.com/netbirdio/dashboard/compare/v2.90.3...v2.90.4> </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 Immortal: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #22 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-07-17 01:04:03 +02:00
Renovate Bot	42793ffb92	Update traefik Docker tag to v3.7.8 (#23 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [traefik](https://github.com/containous/traefik) \| patch \| `v3.7.7` → `v3.7.8` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.7.8`](https://github.com/traefik/traefik/releases/tag/v3.7.8) [Compare Source](https://github.com/containous/traefik/compare/v3.7.8...v3.7.8) Bug fixes: - \[middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs ([#13498](https://github.com/traefik/traefik/pull/13498) [@kevinpollet](https://github.com/kevinpollet)) - \[k8s/ingress-nginx] Sanitize rewritten target on ingress-nginx provider ([#13506](https://github.com/traefik/traefik/pull/13506) [@gndz07](https://github.com/gndz07)) - \[logs] Remove unrelated error from nonexistent cert resolver log ([#13469](https://github.com/traefik/traefik/pull/13469) [@ArthurHlt](https://github.com/ArthurHlt)) - \[middleware] Fix panic in retry middleware with Websockets ([#13520](https://github.com/traefik/traefik/pull/13520) [@juliens](https://github.com/juliens)) Documentation: - \[k8s] Align certificateRef and indicate ports ([#13473](https://github.com/traefik/traefik/pull/13473) [@veenoise](https://github.com/veenoise)) - \[rules] Fix syntax notes in routing rule documentation ([#13501](https://github.com/traefik/traefik/pull/13501) [@stevenlele](https://github.com/stevenlele)) - \[k8s/crd] Fix duplicated options table in ServersTransport CRD reference ([#13518](https://github.com/traefik/traefik/pull/13518) [@rachana5](https://github.com/rachana5)) ### [`v3.7.8`](https://github.com/traefik/traefik/releases/tag/v3.7.8) [Compare Source](https://github.com/containous/traefik/compare/v3.7.7...v3.7.8) Bug fixes: - \[middleware, k8s/crd] Add missing ErrorRequestHeaders field to CRDs ([#13498](https://github.com/traefik/traefik/pull/13498) [@kevinpollet](https://github.com/kevinpollet)) - \[k8s/ingress-nginx] Sanitize rewritten target on ingress-nginx provider ([#13506](https://github.com/traefik/traefik/pull/13506) [@gndz07](https://github.com/gndz07)) - \[logs] Remove unrelated error from nonexistent cert resolver log ([#13469](https://github.com/traefik/traefik/pull/13469) [@ArthurHlt](https://github.com/ArthurHlt)) - \[middleware] Fix panic in retry middleware with Websockets ([#13520](https://github.com/traefik/traefik/pull/13520) [@juliens](https://github.com/juliens)) Documentation: - \[k8s] Align certificateRef and indicate ports ([#13473](https://github.com/traefik/traefik/pull/13473) [@veenoise](https://github.com/veenoise)) - \[rules] Fix syntax notes in routing rule documentation ([#13501](https://github.com/traefik/traefik/pull/13501) [@stevenlele](https://github.com/stevenlele)) - \[k8s/crd] Fix duplicated options table in ServersTransport CRD reference ([#13518](https://github.com/traefik/traefik/pull/13518) [@rachana5](https://github.com/rachana5)) </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #23 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-07-17 01:02:43 +02:00
Renovate Bot	3540050284	Update ghcr.io/pocket-id/pocket-id Docker tag to v2.11.0 (#21 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) \| minor \| `v2.10.0` → `v2.11.0` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary> ### [`v2.11.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2110) [Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.10.0...v2.11.0) ##### Bug Fixes - postgres migration [`2025082`](`20250822`) remove public schema references ([#1582](https://github.com/pocket-id/pocket-id/pull/1582) by [@MarcoScabbiolo](https://github.com/MarcoScabbiolo)) - allow insecure callback URLs by default until next major release ([d9ead47](`d9ead47d19`) by [@stonith404](https://github.com/stonith404)) - sort signup tokens by creation date explicitly ([77398a5](`77398a558d`) by [@stonith404](https://github.com/stonith404)) - login code mobile ux ([#1584](https://github.com/pocket-id/pocket-id/pull/1584) by [@James18232](https://github.com/James18232)) - `INTERNAL_APP_URL` not reflected in UI URLs ([316cf47](`316cf47ceb`) by [@stonith404](https://github.com/stonith404)) - ignore tab URL hashes in navigation history ([a3f27ec](`a3f27ec2ec`) by [@stonith404](https://github.com/stonith404)) - block link-local addresses in SSRF protection ([9714296](`9714296efb`) by [@stonith404](https://github.com/stonith404)) ##### Documentation - update README ([ff5e565](`ff5e565eeb`) by [@stonith404](https://github.com/stonith404)) ##### Features - add support for CIDR and IP address lists in `TRUST_PROXY` ([187cd8d](`187cd8ddcd`) by [@stonith404](https://github.com/stonith404)) ##### Other - manage instance ID in the KV table ([#1579](https://github.com/pocket-id/pocket-id/pull/1579) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#1578](https://github.com/pocket-id/pocket-id/pull/1578) by [@dependabot](https://github.com/dependabot)\[bot]) - remove low demand issue closer ([bb03660](`bb03660bd7`) by [@stonith404](https://github.com/stonith404)) Full Changelog: <https://github.com/pocket-id/pocket-id/compare/v2.10.0...v2.11.0> </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #21 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-07-13 13:13:51 +02:00
JuliusFreudenberger	e4b4f8c0b8	Disable nix-private updates by renovate	2026-07-12 19:18:02 +02:00
Renovate Bot	b88ad7be39	Update fnsys/dockhand Docker tag to v1.0.37 (#20 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [fnsys/dockhand](https://dockhand.pro) ([source](https://github.com/Finsys/dockhand)) \| patch \| `v1.0.36` → `v1.0.37` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>Finsys/dockhand (fnsys/dockhand)</summary> ### [`v1.0.37`](https://github.com/Finsys/dockhand/releases/tag/v1.0.37) [Compare Source](https://github.com/Finsys/dockhand/compare/v1.0.36...v1.0.37) #### What's new in v1.0.37 - ✨ Prometheus metrics at /metrics for env state and internals, gated by EXPORT\_METRICS ([#339](https://github.com/Finsys/dockhand/issues/339)) - ✨ export scan results as SARIF 2.1.0, manual export and API for DefectDojo/Dependency-Track/GitHub ([#415](https://github.com/Finsys/dockhand/issues/415)) - ✨ bump bundled docker-compose to 5.2.0-r0 to clear known CVEs - ✨ Vulnerabilities dashboard: aggregated CVE findings ([#1038](https://github.com/Finsys/dockhand/issues/1038)) - ✨ update container images directly from the Stack view ([#1073](https://github.com/Finsys/dockhand/issues/1073)) - ✨ stacks list shows an update indicator for stacks with image updates ([#504](https://github.com/Finsys/dockhand/issues/504)) - 🐛 copying an image to another registry keeps its tag instead of defaulting to latest ([#1243](https://github.com/Finsys/dockhand/issues/1243)) - 🐛 `more-than-current image` re-scans the current image so a stale cached scan doesn't block ([#1022](https://github.com/Finsys/dockhand/issues/1022)) - ✨ application logs now include the log level (INFO/WARN/ERROR) in the prefix ([#1166](https://github.com/Finsys/dockhand/issues/1166)) - ✨ option to suppress the "What's New" popup ([#1235](https://github.com/Finsys/dockhand/issues/1235)) - 🐛 ntfy notifications now forward the `email` query parameter so ntfy can send email ([#1231](https://github.com/Finsys/dockhand/issues/1231)) - ✨ default scanner images bumped to grype v0.115.0 and trivy 0.71.2 ([#1241](https://github.com/Finsys/dockhand/issues/1241)) - 🐛 the "Latest" update-check result now stays visible and doesn't revert ([#1019](https://github.com/Finsys/dockhand/issues/1019)) - ✨ a stack with container label `dockhand.adopt=false` excluded from adoption ([#998](https://github.com/Finsys/dockhand/issues/998)) - 🐛 dashboard daemon info shows the real host hostname, not Dockhand's container id ([#1265](https://github.com/Finsys/dockhand/issues/1265)) - ✨ file editor prompts to save/discard unsaved changes before closing ([#1264](https://github.com/Finsys/dockhand/issues/1264)) - 🐛 `GET /api/containers/check-updates` now lists pending updates (POST still triggers a check) ([#1266](https://github.com/Finsys/dockhand/issues/1266)) - ✨ sidebar menu customizable (order and visibility of items) ([#1252](https://github.com/Finsys/dockhand/issues/1252)) - 🐛 activity and audit date filters respect the configured timezone instead of UTC ([#1269](https://github.com/Finsys/dockhand/issues/1269)) - ✨ git deploy progress shows the changed files before the deploy starts ([#1260](https://github.com/Finsys/dockhand/issues/1260)) #### Docker image ```bash docker pull fnsys/dockhand:v1.0.37 ``` Also available as `fnsys/dockhand:latest` [View on Docker Hub](https://hub.docker.com/r/fnsys/dockhand) </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #20 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-07-12 19:11:57 +02:00
Renovate Bot	624ff9e2ed	Update ghcr.io/pocket-id/pocket-id Docker tag to v2.10.0 (#19 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) \| minor \| `v2.9.0` → `v2.10.0` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary> ### [`v2.10.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2100) [Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.9.0...v2.10.0) ##### Bug Fixes - login code null submission and login code length check ([#1512](https://github.com/pocket-id/pocket-id/pull/1512) by [@James18232](https://github.com/James18232)) - don't reject `offline_access`scope ([2ed7035](`2ed703540d`) by [@stonith404](https://github.com/stonith404)) - CSP error with `response_mode=form_post` ([16b5c16](`16b5c16a66`) by [@stonith404](https://github.com/stonith404)) - various bugs in observability / OTel ([#1564](https://github.com/pocket-id/pocket-id/pull/1564) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - restore behavior that unknown scopes get ignored ([34e9a6d](`34e9a6d198`) by [@stonith404](https://github.com/stonith404)) - re-check api permissions on access token refresh ([e8cb0c8](`e8cb0c831c`) by [@stonith404](https://github.com/stonith404)) - merge requested scopes instead of replacing them ([5e2cc6f](`5e2cc6f40e`) by [@stonith404](https://github.com/stonith404)) - device authorization resolve resource creating device\_code ([2f55b7c](`2f55b7cbc3`) by [@stonith404](https://github.com/stonith404)) - add missing burst to rate limit ([f3b6ceb](`f3b6ceb876`) by [@stonith404](https://github.com/stonith404)) - disable one time access token exchange for disabled users ([c85a4e6](`c85a4e63da`) by [@stonith404](https://github.com/stonith404)) - /authorize endpoint crashes when list of scopes is empty ([#1575](https://github.com/pocket-id/pocket-id/pull/1575) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - mobile layout improvements ([2910c51](`2910c517bb`) by [@stonith404](https://github.com/stonith404)) ##### Documentation - add link to API docs ([968d072](`968d07229e`) by [@stonith404](https://github.com/stonith404)) - fix wrong OpenAPI documentation ([da3677f](`da3677f33d`) by [@stonith404](https://github.com/stonith404)) ##### Features - upgrade shadcn components ([80509c8](`80509c83ee`) by [@stonith404](https://github.com/stonith404)) - improve error handling on authorize page ([8689ddd](`8689ddd72b`) by [@stonith404](https://github.com/stonith404)) - add ability to skip consent for client ([d467855](`d467855870`) by [@stonith404](https://github.com/stonith404)) - prompt admin with PKCE client support hint ([#1499](https://github.com/pocket-id/pocket-id/pull/1499) by [@James18232](https://github.com/James18232)) - login code input boxes ([#1545](https://github.com/pocket-id/pocket-id/pull/1545) by [@James18232](https://github.com/James18232)) - drop TOFU support for callback URL ([931a6c2](`931a6c2adb`) by [@stonith404](https://github.com/stonith404)) - add OAuth APIs with scoped permissions ([#1542](https://github.com/pocket-id/pocket-id/pull/1542) by [@stonith404](https://github.com/stonith404)) - add support for unencrypted OIDC request parameter ([25dcad7](`25dcad757a`) by [@stonith404](https://github.com/stonith404)) - add description field to oidc clients ([#1547](https://github.com/pocket-id/pocket-id/pull/1547) by [@seanmckenzie428](https://github.com/seanmckenzie428)) - add tab bar navigation for crowded pages ([28a553f](`28a553f63b`) by [@stonith404](https://github.com/stonith404)) ##### Other - close low-demand feature requests ([35987b9](`35987b9c8d`) by [@stonith404](https://github.com/stonith404)) - Bump the "all-dependencies" group with 2 updates across multiple ecosystems ([#1528](https://github.com/pocket-id/pocket-id/pull/1528) by [@dependabot](https://github.com/dependabot)\[bot]) - fix locators after shadcn upgrade ([dbbe2a4](`dbbe2a403a`) by [@stonith404](https://github.com/stonith404)) - use fosite for OAuth 2.0 logic ([#1520](https://github.com/pocket-id/pocket-id/pull/1520) by [@stonith404](https://github.com/stonith404)) - wrap last two migrations into transaction ([cf9a319](`cf9a31986f`) by [@stonith404](https://github.com/stonith404)) - remove dead code ([519cda0](`519cda0eef`) by [@stonith404](https://github.com/stonith404)) - update vulnerable dependencies ([e538ea0](`e538ea0bf1`) by [@stonith404](https://github.com/stonith404)) - fix flaky test ([7eaaea7](`7eaaea717b`) by [@stonith404](https://github.com/stonith404)) - add AGENTS.md ([d0243fe](`d0243fe396`) by [@stonith404](https://github.com/stonith404)) - use goreleaser for binaries and static image builds ([#1478](https://github.com/pocket-id/pocket-id/pull/1478) by [@kmendell](https://github.com/kmendell)) - add support for Docker Hub ([99ab38d](`99ab38dc79`) by [@stonith404](https://github.com/stonith404)) - remove static next image tag ([49305ed](`49305ed1f9`) by [@stonith404](https://github.com/stonith404)) - don't build unnecessary binaries for `next` image ([4b957a0](`4b957a0106`) by [@stonith404](https://github.com/stonith404)) - change Depot project ([cdc2374](`cdc23744ae`) by [@stonith404](https://github.com/stonith404)) - don't tag `next` image with current version ([cf54786](`cf54786cc3`) by [@stonith404](https://github.com/stonith404)) - add exempt user to PR quality checks ([254ae88](`254ae88cda`) by [@stonith404](https://github.com/stonith404)) - migrate API key functionality to single `apikey` module ([9fce987](`9fce987106`) by [@stonith404](https://github.com/stonith404)) - migrate Webauthn functionality to single `webauthn` module ([58fcf7c](`58fcf7cbe6`) by [@stonith404](https://github.com/stonith404)) - migrate signup functionality to single `usersignup` module ([ecad31c](`ecad31cae2`) by [@stonith404](https://github.com/stonith404)) - make API key renewal date picker navigation date-independent ([#1560](https://github.com/pocket-id/pocket-id/pull/1560) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ([#1556](https://github.com/pocket-id/pocket-id/pull/1556) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#1563](https://github.com/pocket-id/pocket-id/pull/1563) by [@dependabot](https://github.com/dependabot)\[bot]) - use go-kit for sending emails ([#1565](https://github.com/pocket-id/pocket-id/pull/1565) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - update AAGUIDs ([#1567](https://github.com/pocket-id/pocket-id/pull/1567) by [@github-actions](https://github.com/github-actions)\[bot]) - move Pocket ID specific logic from Fosite into Pocket ID repo ([9a94aa0](`9a94aa0694`) by [@stonith404](https://github.com/stonith404)) - update Fosite version ([337fc6f](`337fc6fd1e`) by [@stonith404](https://github.com/stonith404)) - pass transaction to `resolveResource` ([7667377](`7667377c98`) by [@stonith404](https://github.com/stonith404)) - remove redundant dtos ([fa2d08c](`fa2d08cb6d`) by [@stonith404](https://github.com/stonith404)) - rename migrations ([c72da58](`c72da58eaf`) by [@stonith404](https://github.com/stonith404)) - remove duplicate fosite config properties ([190914f](`190914fd72`) by [@stonith404](https://github.com/stonith404)) - fix migration version in `database.json` ([a5f2192](`a5f2192d67`) by [@stonith404](https://github.com/stonith404)) - fix wrong migration name ([ce7d3a7](`ce7d3a7e1d`) by [@stonith404](https://github.com/stonith404)) - run formatter ([59a6868](`59a6868ecd`) by [@stonith404](https://github.com/stonith404)) - upgrade go version ([f62d476](`f62d476c56`) by [@stonith404](https://github.com/stonith404)) ##### Performance Improvements - include permissions in api list response ([8035a4c](`8035a4c8d5`) by [@stonith404](https://github.com/stonith404)) Full Changelog: <https://github.com/pocket-id/pocket-id/compare/v2.9.0...v2.10.0> </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #19 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-07-12 19:11:30 +02:00
JuliusFreudenberger	eca13ae292	Add gvfs and udisks2 to sway module	2026-07-10 22:08:01 +02:00
JuliusFreudenberger	4e76a2e10d	Add Dell to kanshi configuration	2026-07-10 22:06:53 +02:00
JuliusFreudenberger	7e8c60c28d	Migrate to waybar	2026-07-10 10:06:13 +02:00
Renovate Bot	00728571d6	Update traefik Docker tag to v3.7.7 (#18 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [traefik](https://github.com/containous/traefik) \| patch \| `v3.7.6` → `v3.7.7` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.7.7`](https://github.com/traefik/traefik/releases/tag/v3.7.7) [Compare Source](https://github.com/containous/traefik/compare/v3.7.7...v3.7.7) Important: Please read the [migration guide](https://doc.traefik.io/traefik/v3.7/migrate/v3/#v377). Bug fixes: - \[middleware, k8s/ingress-nginx] Add app-root middleware with nginx variable interpolation ([#13398](https://github.com/traefik/traefik/pull/13398) [@dfeinblatt](https://github.com/dfeinblatt)) - \[rules] Fix consistency between HostSNI() and Host() ([#13460](https://github.com/traefik/traefik/pull/13460) [@juliens](https://github.com/juliens)) - \[k8s, k8s/gatewayapi] Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace ([#13462](https://github.com/traefik/traefik/pull/13462) [@gndz07](https://github.com/gndz07)) - \[middleware] Fix handle empty unknown-length bodies in mirroring ([#13399](https://github.com/traefik/traefik/pull/13399) [@amazon7737](https://github.com/amazon7737)) - \[k8s/crd] Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider ([#13458](https://github.com/traefik/traefik/pull/13458) [@gndz07](https://github.com/gndz07)) - \[middleware] Sanitize replaced path in ReplacePathRegex middleware ([#13466](https://github.com/traefik/traefik/pull/13466) [@kevinpollet](https://github.com/kevinpollet)) - \[acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#13477](https://github.com/traefik/traefik/pull/13477) [@rtribotte](https://github.com/rtribotte)) - \[otel] Bump go.opentelemetry.io/otel to v1.44.0 ([#13478](https://github.com/traefik/traefik/pull/13478) [@rtribotte](https://github.com/rtribotte)) - \[k8s] Fix panic when endpointslice port value or name is nil ([#13481](https://github.com/traefik/traefik/pull/13481) [@kevinpollet](https://github.com/kevinpollet)) Documentation: - Fix version in migration guide ([#13434](https://github.com/traefik/traefik/pull/13434) [@kevinpollet](https://github.com/kevinpollet)) - Fix changelog v2.11.51 ([#13430](https://github.com/traefik/traefik/pull/13430) [@mmatur](https://github.com/mmatur)) - Add v3.7 to supported version docs ([#13118](https://github.com/traefik/traefik/pull/13118) [@jnoordsij](https://github.com/jnoordsij)) - Fix some function names in comments ([#13443](https://github.com/traefik/traefik/pull/13443) [@blackflytech](https://github.com/blackflytech)) - Add [@nandorKollar](https://github.com/nandorKollar) as a current maintainer ([#13451](https://github.com/traefik/traefik/pull/13451) [@emilevauge](https://github.com/emilevauge)) - Add [@amazon7737](https://github.com/amazon7737) as a current maintainer ([#13450](https://github.com/traefik/traefik/pull/13450) [@emilevauge](https://github.com/emilevauge)) - \[middleware] Clarify buffering middleware defaults ([#13401](https://github.com/traefik/traefik/pull/13401) [@amazon7737](https://github.com/amazon7737)) - Fix grammar in TLS, TCP service, and routing reference docs ([#13461](https://github.com/traefik/traefik/pull/13461) [@almightymoon](https://github.com/almightymoon)) - Fix X-Forwarded-Prefix documentation for dashboard redirection ([#13472](https://github.com/traefik/traefik/pull/13472) [@kevinpollet](https://github.com/kevinpollet)) ### [`v3.7.7`](https://github.com/traefik/traefik/releases/tag/v3.7.7) [Compare Source](https://github.com/containous/traefik/compare/v3.7.6...v3.7.7) Important: Please read the [migration guide](https://doc.traefik.io/traefik/v3.7/migrate/v3/#v377). Bug fixes: - \[middleware, k8s/ingress-nginx] Add app-root middleware with nginx variable interpolation ([#13398](https://github.com/traefik/traefik/pull/13398) [@dfeinblatt](https://github.com/dfeinblatt)) - \[rules] Fix consistency between HostSNI() and Host() ([#13460](https://github.com/traefik/traefik/pull/13460) [@juliens](https://github.com/juliens)) - \[k8s, k8s/gatewayapi] Fix ExtensionRef filters on backendRefs to resolve against the HTTPRoute namespace ([#13462](https://github.com/traefik/traefik/pull/13462) [@gndz07](https://github.com/gndz07)) - \[middleware] Fix handle empty unknown-length bodies in mirroring ([#13399](https://github.com/traefik/traefik/pull/13399) [@amazon7737](https://github.com/amazon7737)) - \[k8s/crd] Fix cross-provider ref check for TCP ServersTransport in Kubernetes CRD provider ([#13458](https://github.com/traefik/traefik/pull/13458) [@gndz07](https://github.com/gndz07)) - \[middleware] Sanitize replaced path in ReplacePathRegex middleware ([#13466](https://github.com/traefik/traefik/pull/13466) [@kevinpollet](https://github.com/kevinpollet)) - \[acme] Bump software.sslmate.com/src/go-pkcs12 to v0.7.3 ([#13477](https://github.com/traefik/traefik/pull/13477) [@rtribotte](https://github.com/rtribotte)) - \[otel] Bump go.opentelemetry.io/otel to v1.44.0 ([#13478](https://github.com/traefik/traefik/pull/13478) [@rtribotte](https://github.com/rtribotte)) - \[k8s] Fix panic when endpointslice port value or name is nil ([#13481](https://github.com/traefik/traefik/pull/13481) [@kevinpollet](https://github.com/kevinpollet)) Documentation: - Fix version in migration guide ([#13434](https://github.com/traefik/traefik/pull/13434) [@kevinpollet](https://github.com/kevinpollet)) - Fix changelog v2.11.51 ([#13430](https://github.com/traefik/traefik/pull/13430) [@mmatur](https://github.com/mmatur)) - Add v3.7 to supported version docs ([#13118](https://github.com/traefik/traefik/pull/13118) [@jnoordsij](https://github.com/jnoordsij)) - Fix some function names in comments ([#13443](https://github.com/traefik/traefik/pull/13443) [@blackflytech](https://github.com/blackflytech)) - Add [@nandorKollar](https://github.com/nandorKollar) as a current maintainer ([#13451](https://github.com/traefik/traefik/pull/13451) [@emilevauge](https://github.com/emilevauge)) - Add [@amazon7737](https://github.com/amazon7737) as a current maintainer ([#13450](https://github.com/traefik/traefik/pull/13450) [@emilevauge](https://github.com/emilevauge)) - \[middleware] Clarify buffering middleware defaults ([#13401](https://github.com/traefik/traefik/pull/13401) [@amazon7737](https://github.com/amazon7737)) - Fix grammar in TLS, TCP service, and routing reference docs ([#13461](https://github.com/traefik/traefik/pull/13461) [@almightymoon](https://github.com/almightymoon)) - Fix X-Forwarded-Prefix documentation for dashboard redirection ([#13472](https://github.com/traefik/traefik/pull/13472) [@kevinpollet](https://github.com/kevinpollet)) </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #18 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-07-09 13:27:39 +02:00
JuliusFreudenberger	e7d2ace6ef	Update flake.lock	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	cb8bf9a66b	Migrate lightdm module to new options The old services.xserver.displayManager are moved out of xserver	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	d0bc33fbf9	Add networkmanager_dmenu keybinding	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	bb8559f665	Use greetd and regreet instead of lightdm LightDM brings problems with setting up the session which leads to kanshi, swayidle and such services to not get the correct environment variables like `WAYLAND_DISPLAY`.	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	ddc717a6c0	Use correct command for shutdown from sway	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	ea4841403a	Set default sway workspace	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	c7fb1dd4ce	Use same broker as os for sway	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	b6909c162b	Add screen dimming and switching off displays on idle	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	81a4822e2d	Reorder pam swaylock rules This enables entering a password in swaylock without providing fingerprint.	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	74581599cd	Lowercase app_id of Element	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	25139ece89	Configure swaylock and swayidle	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	30207ec5f0	Remove dependency on i3exit Configure commands directly in sway.	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	3e3dff15f7	Migrate floating modifiers `class` is an X11 attribute, sway uses `app_id`.	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	0458bdcced	Add focus wrapping in sway This enables cycling through tabbed windows endlessly.	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	591f8f4da7	Use rofi as output chooser for screencast Slurp does not allow for selecting windows.	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	c2d242301c	Add m15 configuration to kanshi	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	f46b9ab129	Configure vmVariant for more cores and memory When testing the config in a vm, have more ressources available. Otherwise oom errors can occur.	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	0c605d9684	Set default session to sway	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	716e54dd12	Add custom lightdm-gtk module for default session The upstream module does not allow for setting a default session, although this is possible in lightdm-gtk-greeter for more than two years now.	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	531ae9b443	Start solaar minimized on startup	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	89eff861f3	Enable base and gtk wrapper features for sway	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	479ccf3fc3	Fix path for nixos wallpaper	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	cb17bea00c	Configure xdg portals for sway	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	2ff0164960	Add initial sway configuration Still misses configuration for login screen, lock screen and idle management.	2026-07-02 19:56:43 +02:00
JuliusFreudenberger	5fdf5b5d9d	Update flake.lock	2026-07-02 19:56:43 +02:00
Renovate Bot	626ab7adfc	Update netbird (#10 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [netbirdio/dashboard](https://github.com/netbirdio/dashboard) \| minor \| `v2.39.0` → `v2.90.3` \| \| netbirdio/netbird \| minor \| `v0.73.2-rootless` → `v0.74.1-rootless` \| \| netbirdio/netbird-server \| minor \| `0.73.2` → `0.74.1` \| \| netbirdio/reverse-proxy \| minor \| `0.73.2` → `0.74.1` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>netbirdio/dashboard (netbirdio/dashboard)</summary> ### [`v2.90.3`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.3) [Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.2...v2.90.3) #### What's Changed - Show reason for peer login expiration events by [@bcmmbaga](https://github.com/bcmmbaga) in [#694](https://github.com/netbirdio/dashboard/pull/694) - Reload nginx after patching CSP header by [@pappz](https://github.com/pappz) in [#687](https://github.com/netbirdio/dashboard/pull/687) - Fix peer table page reset when switching kind by [@braginini](https://github.com/braginini) in [#696](https://github.com/netbirdio/dashboard/pull/696) - Feature/add provider session by [@braginini](https://github.com/braginini) in [#695](https://github.com/netbirdio/dashboard/pull/695) - Add Metrics settings tab with metrics push toggle by [@pappz](https://github.com/pappz) in [#613](https://github.com/netbirdio/dashboard/pull/613) - Feature/add skip tls verification by [@braginini](https://github.com/braginini) in [#697](https://github.com/netbirdio/dashboard/pull/697) Full Changelog: <https://github.com/netbirdio/dashboard/compare/v2.90.2...v2.90.3> ### [`v2.90.2`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.2) [Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.1...v2.90.2) #### What's Changed - Add Claude provider selector and Bedrock by [@braginini](https://github.com/braginini) in [#691](https://github.com/netbirdio/dashboard/pull/691) - Prevent gated useFetchApi hooks from overwriting shared cache entries by [@bcmmbaga](https://github.com/bcmmbaga) in [#692](https://github.com/netbirdio/dashboard/pull/692) Full Changelog: <https://github.com/netbirdio/dashboard/compare/v2.90.1...v2.90.2> ### [`v2.90.1`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.1) [Compare Source](https://github.com/netbirdio/dashboard/compare/v2.90.0...v2.90.1) #### What's Changed - The empty-state peer card now renders AddPeerDropdown by [@braginini](https://github.com/braginini) in [#686](https://github.com/netbirdio/dashboard/pull/686) - Support Vertex keyfile upload and agent config by [@braginini](https://github.com/braginini) in [#688](https://github.com/netbirdio/dashboard/pull/688) - Prefill Vertex endpoint by [@braginini](https://github.com/braginini) in [#689](https://github.com/netbirdio/dashboard/pull/689) Full Changelog: <https://github.com/netbirdio/dashboard/compare/v2.90.0...v2.90.1> ### [`v2.90.0`](https://github.com/netbirdio/dashboard/releases/tag/v2.90.0) [Compare Source](https://github.com/netbirdio/dashboard/compare/v2.80.0...v2.90.0) #### What's Changed - Fix CSP blocking OIDC token endpoint by [@maxbrc](https://github.com/maxbrc) in [#680](https://github.com/netbirdio/dashboard/pull/680) - Agent Network by [@braginini](https://github.com/braginini) in [#684](https://github.com/netbirdio/dashboard/pull/684) #### New Contributors - [@maxbrc](https://github.com/maxbrc) made their first contribution in [#680](https://github.com/netbirdio/dashboard/pull/680) Full Changelog: <https://github.com/netbirdio/dashboard/compare/v2.80.0...v2.90.0> ### [`v2.80.0`](https://github.com/netbirdio/dashboard/releases/tag/v2.80.0) [Compare Source](https://github.com/netbirdio/dashboard/compare/v2.39.0...v2.80.0) #### What's Changed - Add Logout URL to the Identity Provider dialog by [@TechHutTV](https://github.com/TechHutTV) in [#657](https://github.com/netbirdio/dashboard/pull/657) - Edit banner to IPv6 kh link by [@TechHutTV](https://github.com/TechHutTV) in [#662](https://github.com/netbirdio/dashboard/pull/662) - Insert link to remote jobs documentation by [@semp26](https://github.com/semp26) in [#664](https://github.com/netbirdio/dashboard/pull/664) - DNS Zones & Setup modal improvements by [@braginini](https://github.com/braginini) in [#669](https://github.com/netbirdio/dashboard/pull/669) - Update banner by [@heisbrot](https://github.com/heisbrot) in [#672](https://github.com/netbirdio/dashboard/pull/672) - Update announcements.json by [@mlsmaycon](https://github.com/mlsmaycon) in [#673](https://github.com/netbirdio/dashboard/pull/673) - Merge NetBird cloud edition into the dashboard by [@mlsmaycon](https://github.com/mlsmaycon) in [#674](https://github.com/netbirdio/dashboard/pull/674) - Restrict cloud/licensed-only API calls in open-source mode by [@mlsmaycon](https://github.com/mlsmaycon) in [#675](https://github.com/netbirdio/dashboard/pull/675) - Preserve inactivity expiration on partial peer updates by [@bcmmbaga](https://github.com/bcmmbaga) in [#676](https://github.com/netbirdio/dashboard/pull/676) #### New Contributors - [@TechHutTV](https://github.com/TechHutTV) made their first contribution in [#657](https://github.com/netbirdio/dashboard/pull/657) - [@semp26](https://github.com/semp26) made their first contribution in [#664](https://github.com/netbirdio/dashboard/pull/664) Full Changelog: <https://github.com/netbirdio/dashboard/compare/v2.39.0...v2.80.0> </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 Immortal: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #10 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-07-02 19:40:00 +02:00
Renovate Bot	d486dc7e6b	Update traefik Docker tag to v3.7.6 (#16 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [traefik](https://github.com/containous/traefik) \| patch \| `v3.7.5` → `v3.7.6` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>containous/traefik (traefik)</summary> ### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30) [Compare Source](https://github.com/containous/traefik/compare/v3.7.6...v3.7.6) [All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6) Bug fixes: - \[acme, logs] Bump github.com/go-acme/lego/v5 ([#13154](https://github.com/traefik/traefik/pull/13154) [@ldez](https://github.com/ldez)) - \[acme] Bump github.com/go-acme/lego/v5 ([#13359](https://github.com/traefik/traefik/pull/13359) [@juliens](https://github.com/juliens)) - \[k8s, k8s/ingress-nginx] Fix ingress-nginx ssl passthrough status updates ([#13212](https://github.com/traefik/traefik/pull/13212) [@nickmnt](https://github.com/nickmnt)) - \[k8s/gatewayapi] Add missing Gateway API features in conformance tests ([#13356](https://github.com/traefik/traefik/pull/13356) [@AnatoleLucet](https://github.com/AnatoleLucet)) - \[k8s/gatewayapi] Avoid collisions for Gateway API services names ([#13367](https://github.com/traefik/traefik/pull/13367) [@rtribotte](https://github.com/rtribotte)) - \[k8s/gatewayapi] Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#13397](https://github.com/traefik/traefik/pull/13397) [@rtribotte](https://github.com/rtribotte)) - \[k8s/ingress-nginx] Configure retry according to buffering configuration ([#13039](https://github.com/traefik/traefik/pull/13039) [@rtribotte](https://github.com/rtribotte)) - \[k8s/ingress-nginx] Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#13386](https://github.com/traefik/traefik/pull/13386) [@carloslima](https://github.com/carloslima)) - \[k8s] Detect EndpointSlice condition changes ([#13405](https://github.com/traefik/traefik/pull/13405) [@kevinpollet](https://github.com/kevinpollet)) - \[k8s] Index Kubernetes EndpointSlice by service name ([#13395](https://github.com/traefik/traefik/pull/13395) [@kevinpollet](https://github.com/kevinpollet)) - \[k8s] Sort endpointslices to keep backend IPs consistent across rebuilds ([#13406](https://github.com/traefik/traefik/pull/13406) [@kevinpollet](https://github.com/kevinpollet)) - \[kv] Bump kvtools/redis to v1.2.1 ([#13403](https://github.com/traefik/traefik/pull/13403) [@ldez](https://github.com/ldez)) - \[middleware, authentication] Fix x-forwarded-port in forward-auth ([#13344](https://github.com/traefik/traefik/pull/13344) [@juliens](https://github.com/juliens)) - \[middleware, k8s/gatewayapi] Fix Gateway API redirect missing statuses ([#13360](https://github.com/traefik/traefik/pull/13360) [@AnatoleLucet](https://github.com/AnatoleLucet)) - \[middleware, k8s/gatewayapi] Fix Host header not being modified by RequestHeaderModifier ([#12805](https://github.com/traefik/traefik/pull/12805) [@mihuross](https://github.com/mihuross)) - \[middleware, k8s/gatewayapi] Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#13347](https://github.com/traefik/traefik/pull/13347) [@gndz07](https://github.com/gndz07)) - \[middleware] Fix CORS Max-Age set to 0 by default ([#13371](https://github.com/traefik/traefik/pull/13371) [@AnatoleLucet](https://github.com/AnatoleLucet)) - \[middleware] Fix CORS wildcard when allow-credentials is true ([#13368](https://github.com/traefik/traefik/pull/13368) [@AnatoleLucet](https://github.com/AnatoleLucet)) - \[server] Add an option to remove request headers with underscores ([#13262](https://github.com/traefik/traefik/pull/13262) [@youkoulayley](https://github.com/youkoulayley)) - \[server] Configurable max request header size ([#13353](https://github.com/traefik/traefik/pull/13353) [@juliens](https://github.com/juliens)) - \[tls] Fix nondeterministic TLS certificate selection on shared SAN ([#13348](https://github.com/traefik/traefik/pull/13348) [@rtribotte](https://github.com/rtribotte)) - \[webui] Bump axios to v1.18.0 ([#13380](https://github.com/traefik/traefik/pull/13380) [@gndz07](https://github.com/gndz07)) - \[websocket] Fix connection upgrades when backend server is using h2c scheme ([#12967](https://github.com/traefik/traefik/pull/12967) [@stffabi](https://github.com/stffabi)) Documentation: - \[k8s/crd] Fix broken CRD reference links in IngressRoute page ([#13375](https://github.com/traefik/traefik/pull/13375) [@s3onghyun](https://github.com/s3onghyun)) - \[k8s/gatewayapi] Remove experimental note for Gateway API/TLSRoute documentation ([#13392](https://github.com/traefik/traefik/pull/13392) [@jnoordsij](https://github.com/jnoordsij)) - \[k8s/ingress-nginx] Add Kubernetes Ingress NGINX to the providers list ([#13372](https://github.com/traefik/traefik/pull/13372) [@nmengin](https://github.com/nmengin)) - \[k8s] Align Helm chart documented values with chart v41 ([#13366](https://github.com/traefik/traefik/pull/13366) [@mloiseleur](https://github.com/mloiseleur)) - \[middleware, authentication, k8s/ingress-nginx] Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#13342](https://github.com/traefik/traefik/pull/13342) [@rtribotte](https://github.com/rtribotte)) - \[middleware] Clarify entryPoint middleware reference format ([#13364](https://github.com/traefik/traefik/pull/13364) [@mloiseleur](https://github.com/mloiseleur)) - \[security] Add HTTP/2 header memory exhaustion security documentation ([#13381](https://github.com/traefik/traefik/pull/13381) [@emilevauge](https://github.com/emilevauge)) - Adds documentations on maxHeaderBytes ([#13363](https://github.com/traefik/traefik/pull/13363) [@juliens](https://github.com/juliens)) - Fix inaccuracies in reference documentation ([#13304](https://github.com/traefik/traefik/pull/13304) [@sheddy-traefik](https://github.com/sheddy-traefik)) ### [`v3.7.6`](https://github.com/containous/traefik/blob/HEAD/CHANGELOG.md#v376-2026-06-30) [Compare Source](https://github.com/containous/traefik/compare/v3.7.5...v3.7.6) [All Commits](https://github.com/traefik/traefik/compare/v3.7.5...v3.7.6) Bug fixes: - \[acme, logs] Bump github.com/go-acme/lego/v5 ([#13154](https://github.com/traefik/traefik/pull/13154) [@ldez](https://github.com/ldez)) - \[acme] Bump github.com/go-acme/lego/v5 ([#13359](https://github.com/traefik/traefik/pull/13359) [@juliens](https://github.com/juliens)) - \[k8s, k8s/ingress-nginx] Fix ingress-nginx ssl passthrough status updates ([#13212](https://github.com/traefik/traefik/pull/13212) [@nickmnt](https://github.com/nickmnt)) - \[k8s/gatewayapi] Add missing Gateway API features in conformance tests ([#13356](https://github.com/traefik/traefik/pull/13356) [@AnatoleLucet](https://github.com/AnatoleLucet)) - \[k8s/gatewayapi] Avoid collisions for Gateway API services names ([#13367](https://github.com/traefik/traefik/pull/13367) [@rtribotte](https://github.com/rtribotte)) - \[k8s/gatewayapi] Ignore other gateways parentRefs and update route parent statuses only for managed gateways ([#13397](https://github.com/traefik/traefik/pull/13397) [@rtribotte](https://github.com/rtribotte)) - \[k8s/ingress-nginx] Configure retry according to buffering configuration ([#13039](https://github.com/traefik/traefik/pull/13039) [@rtribotte](https://github.com/rtribotte)) - \[k8s/ingress-nginx] Fix force-ssl-redirect routing 418 when TLS is terminated upstream ([#13386](https://github.com/traefik/traefik/pull/13386) [@carloslima](https://github.com/carloslima)) - \[k8s] Detect EndpointSlice condition changes ([#13405](https://github.com/traefik/traefik/pull/13405) [@kevinpollet](https://github.com/kevinpollet)) - \[k8s] Index Kubernetes EndpointSlice by service name ([#13395](https://github.com/traefik/traefik/pull/13395) [@kevinpollet](https://github.com/kevinpollet)) - \[k8s] Sort endpointslices to keep backend IPs consistent across rebuilds ([#13406](https://github.com/traefik/traefik/pull/13406) [@kevinpollet](https://github.com/kevinpollet)) - \[kv] Bump kvtools/redis to v1.2.1 ([#13403](https://github.com/traefik/traefik/pull/13403) [@ldez](https://github.com/ldez)) - \[middleware, authentication] Fix x-forwarded-port in forward-auth ([#13344](https://github.com/traefik/traefik/pull/13344) [@juliens](https://github.com/juliens)) - \[middleware, k8s/gatewayapi] Fix Gateway API redirect missing statuses ([#13360](https://github.com/traefik/traefik/pull/13360) [@AnatoleLucet](https://github.com/AnatoleLucet)) - \[middleware, k8s/gatewayapi] Fix Host header not being modified by RequestHeaderModifier ([#12805](https://github.com/traefik/traefik/pull/12805) [@mihuross](https://github.com/mihuross)) - \[middleware, k8s/gatewayapi] Fix request scheme derivation when Gateway API RequestRedirect omits scheme ([#13347](https://github.com/traefik/traefik/pull/13347) [@gndz07](https://github.com/gndz07)) - \[middleware] Fix CORS Max-Age set to 0 by default ([#13371](https://github.com/traefik/traefik/pull/13371) [@AnatoleLucet](https://github.com/AnatoleLucet)) - \[middleware] Fix CORS wildcard when allow-credentials is true ([#13368](https://github.com/traefik/traefik/pull/13368) [@AnatoleLucet](https://github.com/AnatoleLucet)) - \[server] Add an option to remove request headers with underscores ([#13262](https://github.com/traefik/traefik/pull/13262) [@youkoulayley](https://github.com/youkoulayley)) - \[server] Configurable max request header size ([#13353](https://github.com/traefik/traefik/pull/13353) [@juliens](https://github.com/juliens)) - \[tls] Fix nondeterministic TLS certificate selection on shared SAN ([#13348](https://github.com/traefik/traefik/pull/13348) [@rtribotte](https://github.com/rtribotte)) - \[webui] Bump axios to v1.18.0 ([#13380](https://github.com/traefik/traefik/pull/13380) [@gndz07](https://github.com/gndz07)) - \[websocket] Fix connection upgrades when backend server is using h2c scheme ([#12967](https://github.com/traefik/traefik/pull/12967) [@stffabi](https://github.com/stffabi)) Documentation: - \[k8s/crd] Fix broken CRD reference links in IngressRoute page ([#13375](https://github.com/traefik/traefik/pull/13375) [@s3onghyun](https://github.com/s3onghyun)) - \[k8s/gatewayapi] Remove experimental note for Gateway API/TLSRoute documentation ([#13392](https://github.com/traefik/traefik/pull/13392) [@jnoordsij](https://github.com/jnoordsij)) - \[k8s/ingress-nginx] Add Kubernetes Ingress NGINX to the providers list ([#13372](https://github.com/traefik/traefik/pull/13372) [@nmengin](https://github.com/nmengin)) - \[k8s] Align Helm chart documented values with chart v41 ([#13366](https://github.com/traefik/traefik/pull/13366) [@mloiseleur](https://github.com/mloiseleur)) - \[middleware, authentication, k8s/ingress-nginx] Clarify intentional auth-response-headers gating and absence of stripping incoming X-Forwarded-\* headers ([#13342](https://github.com/traefik/traefik/pull/13342) [@rtribotte](https://github.com/rtribotte)) - \[middleware] Clarify entryPoint middleware reference format ([#13364](https://github.com/traefik/traefik/pull/13364) [@mloiseleur](https://github.com/mloiseleur)) - \[security] Add HTTP/2 header memory exhaustion security documentation ([#13381](https://github.com/traefik/traefik/pull/13381) [@emilevauge](https://github.com/emilevauge)) - Adds documentations on maxHeaderBytes ([#13363](https://github.com/traefik/traefik/pull/13363) [@juliens](https://github.com/juliens)) - Fix inaccuracies in reference documentation ([#13304](https://github.com/traefik/traefik/pull/13304) [@sheddy-traefik](https://github.com/sheddy-traefik)) </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #16 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-07-02 19:36:17 +02:00
Renovate Bot	1c73483c13	Update ghcr.io/finsys/hawser Docker tag to v0.2.46 (#15 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/finsys/hawser](https://github.com/Finsys/hawser) \| patch \| `0.2.45` → `0.2.46` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>Finsys/hawser (ghcr.io/finsys/hawser)</summary> ### [`v0.2.46`](https://github.com/Finsys/hawser/compare/v0.2.45...v0.2.46) [Compare Source](https://github.com/Finsys/hawser/compare/v0.2.45...v0.2.46) </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #15 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-06-29 22:46:57 +02:00
Renovate Bot	2348ba1d59	Update fnsys/dockhand Docker tag to v1.0.36 (#14 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [fnsys/dockhand](https://dockhand.pro) ([source](https://github.com/Finsys/dockhand)) \| patch \| `v1.0.35` → `v1.0.36` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. --- ### Release Notes <details> <summary>Finsys/dockhand (fnsys/dockhand)</summary> ### [`v1.0.36`](https://github.com/Finsys/dockhand/releases/tag/v1.0.36) [Compare Source](https://github.com/Finsys/dockhand/compare/v1.0.35...v1.0.36) #### What's new in v1.0.36 - ✨ sidebar shows an amber update indicator when a newer Dockhand image is available ([#1146](https://github.com/Finsys/dockhand/issues/1146)) - 🐛 Tag image modal too narrow for images identified only by SHA ([#1205](https://github.com/Finsys/dockhand/issues/1205)) - 🐛 self-hosted ntfy: accept raw `tk_...` access tokens in `?auth=` ([#1209](https://github.com/Finsys/dockhand/issues/1209)) - 🐛 dashboard: a single failed DB stats query no longer poisons the whole environment tile ([#1210](https://github.com/Finsys/dockhand/issues/1210)) - 🐛 UI dates and times now honor the configured default timezone instead of the browser's timezone ([#1183](https://github.com/Finsys/dockhand/issues/1183)) - 🐛 add missing `reset-mfa.sh` emergency script referenced by the manual ([#1214](https://github.com/Finsys/dockhand/issues/1214)) - 🐛 registry browser: copy between registries no longer duplicates the host ([#1220](https://github.com/Finsys/dockhand/issues/1220)) - ⚡ published image carries standard OCI annotations (source, url, title, description, vendor, licenses) ([#1217](https://github.com/Finsys/dockhand/issues/1217)) - ✨ scanner: configurable network mode and DNS servers for vulnerability scans ([#1219](https://github.com/Finsys/dockhand/issues/1219)) - ✨ template tiles now show a `Project` link that opens the upstream project page ([#1211](https://github.com/Finsys/dockhand/issues/1211)) - ⚡ cron picker: hour shows just `HH` (was `HH:00`), minute granularity bumped from 15 to 5 ([#1198](https://github.com/Finsys/dockhand/issues/1198)) - ✨ grid buttons: configurable size and optional semantic colors ([#1072](https://github.com/Finsys/dockhand/issues/1072)) - 🐛 copy buttons (git deploy logs, API tokens) now work over plain HTTP ([#1222](https://github.com/Finsys/dockhand/issues/1222)) - 🐛 Podman pod-infra containers no longer trigger update-check warnings ([#1221](https://github.com/Finsys/dockhand/issues/1221)) - 🐛 terminal exec works even when the browser sends a cookie with stray `%` characters ([#1224](https://github.com/Finsys/dockhand/issues/1224)) #### Docker image ```bash docker pull fnsys/dockhand:v1.0.36 ``` Also available as `fnsys/dockhand:latest` [View on Docker Hub](https://hub.docker.com/r/fnsys/dockhand) </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #14 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-06-29 22:46:53 +02:00
Renovate Bot	edd26dc18f	Migrate Renovate config (#11 ) The Renovate config in this repository needs migrating. Typically this is because one or more configuration options you are using have been renamed. You don't need to merge this PR right away, because Renovate will continue to migrate these fields internally each time it runs. But later some of these fields may be fully deprecated and the migrations removed. So it's a good idea to merge this migration PR soon. 🔕 Ignore: Close this PR and you won't be reminded about config migration again, but one day your current config may no longer be valid. ❓ Got questions? Does something look wrong to you? Please don't hesitate to [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). Reviewed-on: #11 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-06-24 19:11:13 +02:00
Renovate Bot	d07800b183	Update traefik:v3.7.5 Docker digest to e4d9815 (#9 ) This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [traefik](https://github.com/containous/traefik) \| digest \| `d685879` → `e4d9815` \| --- > ⚠️ Warning > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: #9 Co-authored-by: Renovate Bot <renovate@jfreudenberger.de> Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>	2026-06-24 19:08:48 +02:00

1 2 3 4 5

243 commits