Update ghcr.io/pocket-id/pocket-id Docker tag to v2.13.0 #28

Merged

JuliusFreudenberger merged 1 commit from renovate/ghcr.io-pocket-id-pocket-id-2.x into main

2026-08-11 23:17:16 +02:00

renovate-bot commented

2026-07-30 01:20:33 +02:00

Collaborator

This PR contains the following updates:

Package	Update	Change
ghcr.io/pocket-id/pocket-id	minor	`v2.11.0` → `v2.13.0`

Release Notes

pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)

`v2.13.0`

Compare Source

Bug Fixes

retry qr code login polling for known transient gateway responses (7039692 by @stonith404)
decrease QR code login session duration to 5 minutes (e35be30 by @stonith404)
show more user-friendly error message if QR code has expired (27199f6 by @stonith404)
one-time-access-token CLI fails with "RuntimePSKs is required" (#1637 by @salcatroppa)
session revoke fails if orphaned session tokens exist (598895e by @stonith404)
disable api key auth for webauthn register endpoints (db64b15 by @stonith404)
explicitly set SameSite to Lax for cookies (69d55ad by @stonith404)
explicitly require JSON for request bodies (1238bf0 by @stonith404)
don't rely on content length header for optional json binding (2c7d1b6 by @stonith404)
respect log level in HTTP request logs (488c50e by @stonith404)
don't skip rate limits for loopback addresses (140b5d3 by @stonith404)
make OIDC client token lifetimes optional (#1650 by @ItalyPaleAle)
in non-HA mode, increase AlarmLeaseDuration (#1660 by @ItalyPaleAle)
separate TLS inputs and preserve certificate reloads (#1653 by @stonith404)
brotli compression ignored (#1661 by @stonith404)
align last signed in text left (c87012a by @stonith404)

Features

make oauth access tokens RFC 9068 compliant (7c55bdf by @stonith404)
implement OAuth Client ID Metadata Document (#1526 by @jfroy)
add ability to customize session duration of clients (#1641 by @stonith404)
add observability to actors (#1646 by @ItalyPaleAle)
include Francis data in Pocket ID backups (#1645 by @ItalyPaleAle)
add settings for limiting what passkeys can be used (#1662 by @stonith404)

Other

preserve tab indentation for package.json in release script (a1ebf4e by @stonith404)
Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1639 by @dependabot[bot])
use paraglide markup instead of custom implementation (b08ac7b by @stonith404)
fix wrong database version in database.json (281bea5 by @stonith404)
standardize API error handling (#1635 by @stonith404)
add deepsec to gitignore (e3e0ddc by @stonith404)
upgrade vulnerable dependencies (9320144 by @stonith404)
remove unused curl dependency from Dockerfile (98160b2 by @stonith404)
remove invalid unit test (95809dd by @stonith404)
use smaller francis.bin (4fe6f06 by @stonith404)
move GeoLite to its own package (#1647 by @ItalyPaleAle)
fix formatting (#1666 by @Copilot)

Full Changelog: https://github.com/pocket-id/pocket-id/compare/v2.12.0...v2.13.0

`v2.12.0`

Compare Source

Bug Fixes

sync group membership for users added at creation time (#1600 by @ItalyPaleAle)
relax Francis DB usage while HA is still WIP (#1602 by @ItalyPaleAle)
honor webauthn user verification setting (0983e91 by @stonith404)
horizontal shadow of cards in light mode cut off (599f7d1 by @stonith404)
datatype mismatch between postgres and sqlite causes import to fail (ad06ea6 by @stonith404)
show only accessible clients on "My Apps" page (e10f66c by @stonith404)
autofocus one time input fields (#1605 by @James18232)
enforce user verification for login assertions (4743d59 by @stonith404)
make oidc device code redemption atomic (6bd058a by @stonith404)
race condition in initial admin setup (ca28ddc by @stonith404)
fail early if webauthn session invalid (968f97f by @stonith404)

Features

add support for proxy protocol (807bd9e by @stonith404)
add declaritive user id configuration (#1622 by @schnz)
migrate one-time and signup tokens to an actor (#1611 by @ItalyPaleAle)
add support for declaritive client secret configuration (#1619 by @schnz)
add qr code alternative sign in method (#1594 by @stonith404)
migrate app locks to Francis (#1624 by @ItalyPaleAle)
drop user initiated one time access token login method (0c27f73 by @stonith404)
display country and city on qr code login approval screen (9e72bc1 by @stonith404)

Other

Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1599 by @dependabot[bot])
update AAGUIDs (#1608 by @github-actions[bot])
use actors for db configuration (#1604 by @ItalyPaleAle)
remove not used permissions (942bb3b by @stonith404)
upgrade vulnerable dependencies (f6b02ef by @stonith404)
fix missing data in database.json (6e859de by @stonith404)
Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#1621 by @dependabot[bot])
use NewTextHandler instead of NewHandler for tint (8563934 by @stonith404)
run unit tests on windows and linux (31d62c6 by @stonith404)
correctly close filesystems (6bd4679 by @stonith404)
modularize email module and use actor for email verification (#1625 by @stonith404)
pin version of fosite fork (91d3712 by @stonith404)
translations remove unused translation strings (d5eb3fe by @stonith404)
enforce eslint rules (9060291 by @stonith404)
upgrade vulnerable dependencies (0c5e014 by @stonith404)

Full Changelog: https://github.com/pocket-id/pocket-id/compare/v2.11.0...v2.12.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.11.0` → `v2.13.0` | --- ### Release Notes <details> <summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary> ### [`v2.13.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2130) [Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.12.0...v2.13.0) ##### Bug Fixes - retry qr code login polling for known transient gateway responses ([7039692](https://github.com/pocket-id/pocket-id/commit/703969278be2a6b2cae30ca89dba4b73b0c969fa) by [@stonith404](https://github.com/stonith404)) - decrease QR code login session duration to 5 minutes ([e35be30](https://github.com/pocket-id/pocket-id/commit/e35be309a3d40064617ef0ad557476c93ba983a9) by [@stonith404](https://github.com/stonith404)) - show more user-friendly error message if QR code has expired ([27199f6](https://github.com/pocket-id/pocket-id/commit/27199f61d4adaeca463db68980dae6c2a885c5b4) by [@stonith404](https://github.com/stonith404)) - one-time-access-token CLI fails with "RuntimePSKs is required" ([#1637](https://github.com/pocket-id/pocket-id/pull/1637) by [@salcatroppa](https://github.com/salcatroppa)) - session revoke fails if orphaned session tokens exist ([598895e](https://github.com/pocket-id/pocket-id/commit/598895e7c53df28598d578896f6396241e9e9ef7) by [@stonith404](https://github.com/stonith404)) - disable api key auth for webauthn register endpoints ([db64b15](https://github.com/pocket-id/pocket-id/commit/db64b150be9046ee971f520b4c30f3b3d434facf) by [@stonith404](https://github.com/stonith404)) - explicitly set SameSite to Lax for cookies ([69d55ad](https://github.com/pocket-id/pocket-id/commit/69d55ada6c695c47f764285ca9e94736e50a8103) by [@stonith404](https://github.com/stonith404)) - explicitly require JSON for request bodies ([1238bf0](https://github.com/pocket-id/pocket-id/commit/1238bf0f378340d101c90295990b514131b10fe7) by [@stonith404](https://github.com/stonith404)) - don't rely on content length header for optional json binding ([2c7d1b6](https://github.com/pocket-id/pocket-id/commit/2c7d1b63e1a366718d0c1951475e791922bb2445) by [@stonith404](https://github.com/stonith404)) - respect log level in HTTP request logs ([488c50e](https://github.com/pocket-id/pocket-id/commit/488c50ef95e3e88f3a0085a67b399819a4647c7f) by [@stonith404](https://github.com/stonith404)) - don't skip rate limits for loopback addresses ([140b5d3](https://github.com/pocket-id/pocket-id/commit/140b5d3cb440ccc7a30a3a1c9aae2f7a9d5efb4a) by [@stonith404](https://github.com/stonith404)) - make OIDC client token lifetimes optional ([#1650](https://github.com/pocket-id/pocket-id/pull/1650) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - in non-HA mode, increase AlarmLeaseDuration ([#1660](https://github.com/pocket-id/pocket-id/pull/1660) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - separate TLS inputs and preserve certificate reloads ([#1653](https://github.com/pocket-id/pocket-id/pull/1653) by [@stonith404](https://github.com/stonith404)) - brotli compression ignored ([#1661](https://github.com/pocket-id/pocket-id/pull/1661) by [@stonith404](https://github.com/stonith404)) - align last signed in text left ([c87012a](https://github.com/pocket-id/pocket-id/commit/c87012ae01cb9e85ab305fffc40347297eff6ffb) by [@stonith404](https://github.com/stonith404)) ##### Features - make oauth access tokens RFC 9068 compliant ([7c55bdf](https://github.com/pocket-id/pocket-id/commit/7c55bdf115fc5b7fea89ef5cd3c79dc926ddf5ac) by [@stonith404](https://github.com/stonith404)) - implement OAuth Client ID Metadata Document ([#1526](https://github.com/pocket-id/pocket-id/pull/1526) by [@jfroy](https://github.com/jfroy)) - add ability to customize session duration of clients ([#1641](https://github.com/pocket-id/pocket-id/pull/1641) by [@stonith404](https://github.com/stonith404)) - add observability to actors ([#1646](https://github.com/pocket-id/pocket-id/pull/1646) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - include Francis data in Pocket ID backups ([#1645](https://github.com/pocket-id/pocket-id/pull/1645) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - add settings for limiting what passkeys can be used ([#1662](https://github.com/pocket-id/pocket-id/pull/1662) by [@stonith404](https://github.com/stonith404)) ##### Other - preserve tab indentation for package.json in release script ([a1ebf4e](https://github.com/pocket-id/pocket-id/commit/a1ebf4e98b65fa465f99bfa2fb9694a903076a32) by [@stonith404](https://github.com/stonith404)) - Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#1639](https://github.com/pocket-id/pocket-id/pull/1639) by [@dependabot](https://github.com/dependabot)\[bot]) - use paraglide markup instead of custom implementation ([b08ac7b](https://github.com/pocket-id/pocket-id/commit/b08ac7bf7de04872a83913db19fc6392ecf7bd96) by [@stonith404](https://github.com/stonith404)) - fix wrong database version in `database.json` ([281bea5](https://github.com/pocket-id/pocket-id/commit/281bea54d351128e29bb2e54455a7cb2e619554a) by [@stonith404](https://github.com/stonith404)) - standardize API error handling ([#1635](https://github.com/pocket-id/pocket-id/pull/1635) by [@stonith404](https://github.com/stonith404)) - add deepsec to gitignore ([e3e0ddc](https://github.com/pocket-id/pocket-id/commit/e3e0ddc192d01de35b8f907144ac66b6b2963ac0) by [@stonith404](https://github.com/stonith404)) - upgrade vulnerable dependencies ([9320144](https://github.com/pocket-id/pocket-id/commit/9320144991fa0f9f6c1419af0c78c7e2395dc61e) by [@stonith404](https://github.com/stonith404)) - remove unused curl dependency from Dockerfile ([98160b2](https://github.com/pocket-id/pocket-id/commit/98160b20a15056535bf12d357b7d97c63a165cd0) by [@stonith404](https://github.com/stonith404)) - remove invalid unit test ([95809dd](https://github.com/pocket-id/pocket-id/commit/95809dd29cea92e30f54c34876305f7a27a595bd) by [@stonith404](https://github.com/stonith404)) - use smaller francis.bin ([4fe6f06](https://github.com/pocket-id/pocket-id/commit/4fe6f0688c2760abfe35558ffc9126f3a1e9edc0) by [@stonith404](https://github.com/stonith404)) - move GeoLite to its own package ([#1647](https://github.com/pocket-id/pocket-id/pull/1647) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - fix formatting ([#1666](https://github.com/pocket-id/pocket-id/pull/1666) by [@Copilot](https://github.com/Copilot)) **Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.12.0...v2.13.0> ### [`v2.12.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2120) [Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.11.0...v2.12.0) ##### Bug Fixes - sync group membership for users added at creation time ([#1600](https://github.com/pocket-id/pocket-id/pull/1600) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - relax Francis DB usage while HA is still WIP ([#1602](https://github.com/pocket-id/pocket-id/pull/1602) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - honor webauthn user verification setting ([0983e91](https://github.com/pocket-id/pocket-id/commit/0983e911693396d8c807331ed867be5369f501f2) by [@stonith404](https://github.com/stonith404)) - horizontal shadow of cards in light mode cut off ([599f7d1](https://github.com/pocket-id/pocket-id/commit/599f7d118df0225abf96429c42c26d7c627942a3) by [@stonith404](https://github.com/stonith404)) - datatype mismatch between postgres and sqlite causes import to fail ([ad06ea6](https://github.com/pocket-id/pocket-id/commit/ad06ea6e008ea61edd5a84df0fbab3125ff047c7) by [@stonith404](https://github.com/stonith404)) - show only accessible clients on "My Apps" page ([e10f66c](https://github.com/pocket-id/pocket-id/commit/e10f66c07a8f4a8d42a03bb7edda14d4bf9ba31d) by [@stonith404](https://github.com/stonith404)) - autofocus one time input fields ([#1605](https://github.com/pocket-id/pocket-id/pull/1605) by [@James18232](https://github.com/James18232)) - enforce user verification for login assertions ([4743d59](https://github.com/pocket-id/pocket-id/commit/4743d5967a6b7e53d6d8c670c62f0bdea3abd4af) by [@stonith404](https://github.com/stonith404)) - make oidc device code redemption atomic ([6bd058a](https://github.com/pocket-id/pocket-id/commit/6bd058ac46c771ff7dc133b72f42c6c341dba6f4) by [@stonith404](https://github.com/stonith404)) - race condition in initial admin setup ([ca28ddc](https://github.com/pocket-id/pocket-id/commit/ca28ddcb04ce2905aaad0c5255caceae723cda56) by [@stonith404](https://github.com/stonith404)) - fail early if webauthn session invalid ([968f97f](https://github.com/pocket-id/pocket-id/commit/968f97fa6174a1319bd33309bf647be3d11bd816) by [@stonith404](https://github.com/stonith404)) ##### Features - add support for proxy protocol ([807bd9e](https://github.com/pocket-id/pocket-id/commit/807bd9e037f201ba1d87c65387091a61c5e65e54) by [@stonith404](https://github.com/stonith404)) - add declaritive user id configuration ([#1622](https://github.com/pocket-id/pocket-id/pull/1622) by [@schnz](https://github.com/schnz)) - migrate one-time and signup tokens to an actor ([#1611](https://github.com/pocket-id/pocket-id/pull/1611) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - add support for declaritive client secret configuration ([#1619](https://github.com/pocket-id/pocket-id/pull/1619) by [@schnz](https://github.com/schnz)) - add qr code alternative sign in method ([#1594](https://github.com/pocket-id/pocket-id/pull/1594) by [@stonith404](https://github.com/stonith404)) - migrate app locks to Francis ([#1624](https://github.com/pocket-id/pocket-id/pull/1624) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - drop user initiated one time access token login method ([0c27f73](https://github.com/pocket-id/pocket-id/commit/0c27f733b95de63855264327443cc65cf2ccefba) by [@stonith404](https://github.com/stonith404)) - display country and city on qr code login approval screen ([9e72bc1](https://github.com/pocket-id/pocket-id/commit/9e72bc1c70506146919a21058f5e20b0f042082a) by [@stonith404](https://github.com/stonith404)) ##### Other - Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#1599](https://github.com/pocket-id/pocket-id/pull/1599) by [@dependabot](https://github.com/dependabot)\[bot]) - update AAGUIDs ([#1608](https://github.com/pocket-id/pocket-id/pull/1608) by [@github-actions](https://github.com/github-actions)\[bot]) - use actors for db configuration ([#1604](https://github.com/pocket-id/pocket-id/pull/1604) by [@ItalyPaleAle](https://github.com/ItalyPaleAle)) - remove not used permissions ([942bb3b](https://github.com/pocket-id/pocket-id/commit/942bb3be2e92bd7b6bf1d89c40cab49544194d43) by [@stonith404](https://github.com/stonith404)) - upgrade vulnerable dependencies ([f6b02ef](https://github.com/pocket-id/pocket-id/commit/f6b02efe4542cd3a57ba222c42fafe1e968a32d8) by [@stonith404](https://github.com/stonith404)) - fix missing data in `database.json` ([6e859de](https://github.com/pocket-id/pocket-id/commit/6e859de2dd55dfc59d9cde3fab5d7a9789c6aca9) by [@stonith404](https://github.com/stonith404)) - Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#1621](https://github.com/pocket-id/pocket-id/pull/1621) by [@dependabot](https://github.com/dependabot)\[bot]) - use `NewTextHandler` instead of `NewHandler` for tint ([8563934](https://github.com/pocket-id/pocket-id/commit/8563934fd5d410c13e9ff58e56a07bef0ea22726) by [@stonith404](https://github.com/stonith404)) - run unit tests on windows and linux ([31d62c6](https://github.com/pocket-id/pocket-id/commit/31d62c65e59f184d13aeef74860839665c183c78) by [@stonith404](https://github.com/stonith404)) - correctly close filesystems ([6bd4679](https://github.com/pocket-id/pocket-id/commit/6bd4679bab03e16b85a0591d2c95ebdd530cf785) by [@stonith404](https://github.com/stonith404)) - modularize email module and use actor for email verification ([#1625](https://github.com/pocket-id/pocket-id/pull/1625) by [@stonith404](https://github.com/stonith404)) - pin version of fosite fork ([91d3712](https://github.com/pocket-id/pocket-id/commit/91d37126fa916932a1097a4a60c161965aa24e50) by [@stonith404](https://github.com/stonith404)) - translations remove unused translation strings ([d5eb3fe](https://github.com/pocket-id/pocket-id/commit/d5eb3fe62c5ddbfd7f2bc5c116f755dccd40d6b4) by [@stonith404](https://github.com/stonith404)) - enforce eslint rules ([9060291](https://github.com/pocket-id/pocket-id/commit/9060291475aaadb5be2149213cfb647bb8381247) by [@stonith404](https://github.com/stonith404)) - upgrade vulnerable dependencies ([0c5e014](https://github.com/pocket-id/pocket-id/commit/0c5e0149cd070b39e5da7722471885432d5b5452) by [@stonith404](https://github.com/stonith404)) **Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.11.0...v2.12.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-07-30 01:20:34 +02:00

Update ghcr.io/pocket-id/pocket-id Docker tag to v2.12.0 172d28f622

renovate-bot changed title from ~~Update ghcr.io/pocket-id/pocket-id Docker tag to v2.12.0~~ to Update ghcr.io/pocket-id/pocket-id Docker tag to v2.13.0

2026-08-07 11:30:48 +02:00

renovate-bot force-pushed renovate/ghcr.io-pocket-id-pocket-id-2.x from 172d28f622 to 7cffba0e14

2026-08-07 11:30:50 +02:00

Compare