chore(deps): update all non-major updates - autoclosed #39

Closed

renovate-bot wants to merge 1 commit from renovate/all-non-major-updates into main

pull from: renovate/all-non-major-updates

merge into: mitch:main

mitch:main

mitch:renovate/major-torrent-clients

mitch:add-sabnzbd-minio

mitch:renovate/postgres-18.x

Conversation 0 Commits 1 Files changed 10 +13 -13

renovate-bot commented 2026-06-16 06:01:42 +00:00

Collaborator

Copy link

This PR contains the following updates:

Package	Type	Update	Change
binwiederhier/ntfy (source)		minor	v2.24.0 → v2.25.0
dbeaver/cloudbeaver		patch	26.1.0 → 26.1.1
elasticsearch		patch	8.19.16 → 8.19.17
ghcr.io/alexta69/metube		patch	2026.06.13 → 2026.06.20
ghcr.io/coder/coder		patch	v2.34.2 → v2.34.4
ghcr.io/mastodon/mastodon		minor	v4.5.11 → v4.6.2
nvcr.io/nvidia/k8s-device-plugin		patch	v0.19.2 → v0.19.3
proxmox (source)	required_provider	minor	~> 0.109 → ~> 0.111
stalwartlabs/stalwart		patch	v0.16.8 → v0.16.11
vectorim/element-web		patch	v1.12.21 → v1.12.22

---

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

binwiederhier/ntfy (binwiederhier/ntfy)

v2.25.0

Compare Source

This release adds password reset via email, and reworks email verification to use durable, link-based magic links (replacing the old in-memory 6-digit codes). Email stays optional at signup; a user can reset their password only once they have a verified "primary" (recovery)email.

All of this work is probably not useful for self-hosters, but it hopefully will be useful for me, since I do have to reset accounts on a regular basis.

Security issues:

• Generate access tokens, IDs, and magic-link tokens with a cryptographically secure RNG (crypto/rand) instead of a clock-seeded PRNG

Features:

• Add password reset via emailed magic link, with a "Forgot password" link on the login page and a ntfy user reset-pass CLI command for admins
• Rework email verification to use durable, single-use, expiring magic links instead of in-memory 6-digit codes, and add a "primary" email (used for account recovery and as the X-Email: yes target) with verified/unverified state in the account UI
• You can now clear/read messages and delete messages with a GET request (#​1771, thanks to @​lemmi for reporting and to @​wunter8 for implementing)
• Add a reload button to the web app's action bar when running as an installed PWA, which clears the service worker caches and hard-refreshes the app
• Add a "Back to app" link to the web app's login, signup, and password-reset pages (alongside the existing links), which previously had no way back to the app

Bug fixes + maintenance:

• X-Email: yes (also true/1) now sends to your primary verified email regardless of the smtp-sender-verify setting (previously it was rejected unless verification was enabled); it requires being logged in with a verified address
• Grant users full access to their own sync topic (st_...) so cross-device subscription sync works under auth-default-access: deny-all (#​733, #​1795, thanks to @​lmorchard for the contribution)
• Support HTTP (non-TLS) S3-compatible endpoints by preserving the endpoint scheme, e.g. for a local MinIO instance (#​1794, #​1734, thanks to @​sskender for the contribution, and @​Kernald for reporting)
• Stop silently stripping spaces from passwords while typing in the web app's login, signup, and password-reset forms (#​1246, thanks to @​aldem for reporting)
• Update web app dependencies, including major-version upgrades to Vite (6 -> 8, now Rolldown-based), Material UI (5 -> 9), and Dexie (3 -> 4) (#​1800, #​1764, #​1767, #​1762, #​1766, #​1765, thanks Dependabot)
• Play notification sounds in the web app even when the Notification API is unavailable, e.g. over plain HTTP or in browsers without notification support (#​1772, thanks to @​mitya12342 for the contribution)
• Stop escaping <, >, and & as \u003c/\u003e/\u0026 in JSON responses (#​1511, #​1512, thanks to @​wunter8 for the contribution)
• Fix the web app navbar not reflecting a topic reservation (lock icon, and "Reserve topic" -> "Change reservation"/"Remove reservation" menu) until a page reload, by persisting reservation and display-name changes onto already-subscribed topics during account sync
• Reduce the web app's initial bundle size by ~300 KB (~50 KB gzipped) by lazy-loading the emoji picker dataset and the Markdown renderer, and by importing Material UI icons individually

coder/coder (ghcr.io/coder/coder)

v2.34.4

Compare Source

Changelog

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Bug fixes

• Pin workspace agent API client to intended agent (#​26600, ec3ba84) (@​ethanndickson)
• Dashboard: Set external auth provider polling status individually (#​26313, c1d261c)
• Server: Only send prebuild claim reinit for the claim build (#​26644, ea21e3b)
• Server: Let admins change their own workspace sharing role (#​26559, 7fdfc7e)
• Dashboard: Add bottom padding to create workspace page (#​26431, f770406) (@​aslilac)
• fix(aibridge): support Bedrock Opus 4.8 adaptive thinking (#​26691, 1c08896) (@​ericpaulsen)
• Enterprise: Stop injecting default port into forwarded Host header (#​26656, e436efc) (@​ssncferreira)
• Dashboard: Keep TemplateVersionEditor file tree in sync (#​25068, 19d9274) (@​aslilac)

Chores

• Skip failing azureidentity test while under investigation (#​26545, d607e1f)

Compare: v2.34.3...v2.34.4

Container image

• docker pull ghcr.io/coder/coder:2.34.4

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

v2.34.3

Compare Source

Changelog

[!NOTE]
This is a mainline Coder release. We advise enterprise customers without a staging environment to install our latest stable release while we refine this version. Learn more about our Release Schedule.

Features

• Implement package and cli tool for repairing oidc links (#​26418, 404ecb1)
• Deployment flag to auto handle changed oidc providers (#​26419, 1e4aabb)

Bug fixes

• Dashboard: Allow Bedrock IAM-role setup (#​26400, 33c5b8b)
• Server: Honor fixed lifetime for CLI API tokens (#​26376, bcb3057)
• Backfill legacy Bedrock AI provider rows and stale model config strings (#​26155, da215b3)
• fix(scripts/check_emdash.sh): skip emdash check when no diff base is available (#​26490, 81654c6)

Documentation

• Document VS Code local telemetry (#​26215, 4653f32)

Chores

• Provisioner: Preserve existing AWS_SDK_UA_APP_ID (#​24606, a8ff5b2)

Compare: v2.34.2...v2.34.3

Container image

• docker pull ghcr.io/coder/coder:2.34.3

Install/upgrade

Refer to our docs to install or upgrade Coder, or use a release asset below.

bpg/terraform-provider-proxmox (proxmox)

v0.111.0

Compare Source

Features

• acme: add write-only data_wo argument to proxmox_acme_dns_plugin (#​2962) (cd4ecd7)
• disk: add support for ZFS disk/zpool creation with proxmox_node_disk_zfs (#​2952) (087b1d0)
• openid: add write-only client_key_wo to proxmox_realm_openid (#​2964) (0ef7bdc)

Miscellaneous

• ci: Update actions/checkout action (v6.0.3 → v7.0.0) (#​2958) (0a5bf04)
• docs: update README.md (5fd272a)

v0.110.0

Compare Source

Features

• cluster: add dynamic crs ha scheduler and auto-rebalance options (#​2940) (1b14b39)
• file: add ImportState to proxmox_virtual_environment_download_file (#​2938) (e7a1032)
• storage: add options parameter for proxmox_storage_cifs resource (#​2947) (e152990)
• storage: add create_base_path and create_subdirs base options for cifs,nfs,dir storage resources (#​2949) (c1262fd)

Bug Fixes

• core: surface underlying error on SSH file transfer failure (#​2956) (45d73a6)
• node: accept string-typed startall-onboot-delay in node config (#​2957) (87b7992)

Miscellaneous

• deps: update image golang (68cb6d6 → 87a41d2) (#​2941) (b5dafd8)
• deps: update module golang.org/x/crypto (v0.52.0 → v0.53.0) (#​2942) (5bedef1)
• deps: update module golang.org/x/net (v0.55.0 → v0.56.0) (#​2943) (804860f)

stalwartlabs/stalwart (stalwartlabs/stalwart)

v0.16.11

Compare Source

[0.16.11] - 2026-06-25

If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

• Encryption-at-rest: Support for AES-256-GCM and ChaCha20-Poly1305 for S/MIME (#​161).
• S3: Support for allowInvalidCerts option to allow connecting to S3 endpoints with invalid TLS certificates.
• Redis Sentinel support as an in-memory store and cluster coordinator backend (#​2430).

Changed

Fixed

• DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records.
• TLS: Update search index when file-backed certificates are refreshed.
• JMAP: Principal/query returns broad results when a name or email filter cannot be resolved.
• Webhooks: event IDs collide for same event type emitted in the same second.

---

Check binary attestation here

v0.16.10

Compare Source

[0.16.10] - 2026-06-21

If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

• International Domain Names (IDN) support (#​207).
• OAuth:
  • OAuth Profile for Open Public Clients (draft-ietf-mailmaint-oauth-public)
  • Client secret verification for confidential clients.
• HTTP: Add redirectRoot option to Http object to allow redirecting requests to the root path to a different path (e.g. /account).
• ACME: reuseKey option to allow reusing private keys in renewals.
• IMAP:
  • IMAP Extension for Object Identifiers (draft-ietf-mailmaint-imap-objectid-bis)
  • GETJMAPACCESS command to discover the JMAP session resource URL (#​2736).

Changed

Fixed

• JMAP conformance (pass the jmap-test-suite tests):
  • Methods are only available if their capability is in using.
  • Reject requests that do not specify application/json in the Content-Type header.
  • Require accountId argument on requests.
  • Return unparsable ids in notFound / notUpdated / notDestroyed / notCopied instead of dropping them.
  • Default calendars and address books are not subscribed by default.
  • */set: Unchanged immutable id property is rejected on update.
  • */query and */queryChanges: nullrejected asnotRequest`.
  • Email/query:
    • Improper anchor handling.
    • Total miscount when collapseThreads is enabled.
    • Wrong sort order on hasKeyword, allInThreadHaveKeyword, and someInThreadHaveKeyword conditions.
    • Non-standard header values are not searchable.
  • Email/copy: Take the source message id from the value's id property.
  • Email/set: Bump reference-resolution max_depth from 1 to 2.
  • Email/import: Reject blobs that do not contain valid messages.
  • EmailSubmission/set: return sendAt and undoStatus in the created response.
  • Mailbox/set: Return alreadyExists instead of invalidProperties when creating a mailbox with an existing name.
  • SearchSnippet/get: incorrect response structure.
  • Thread/changes: emit a container delete when a thread becomes empty.
  • VacationResponse/set: incorrect singleton handling.
• IMAP: Discard oversized non-synchronizing literals (#​2768).
• DANE: Improper TLSA record validation (#​2328 - credits to @​vdukhovni).
• OIDC: Add default domain name to groups that are not email addresses.
• RocksDB: Enable blob garbage collection to reclaim disk space from deleted blobs.
• Sieve: include statements ignore capitalisation of sub-script names (#​1643)
• Cache: Invalidate negative email caches when an account is created.
• Troubleshoot tool: Use the configured source IP address when connecting to remote servers (#​2867).

---

Check binary attestation here

v0.16.9

Compare Source

[0.16.9] - 2026-06-15

If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.

Added

• ACME: Allow specifying a preferred certificate chain.

Changed

Fixed

• JMAP: */changes methods leak ids of non-shared objects (reported by @​5ud0er).
• Sieve: Do not allow invalid certs in http_header function.
• FoundationDB: Fix read version cache expiration logic.
• MTA: Re-scheduling or editing a queued message reports success but persists nothing for recipients in a non-default virtual queue.
• CardDAV: Version requests included in address-data are ignored.
• ACME: Add freshness check when renewing certificates.
• Autodiscover v2: Read email address from query parameters.
• Sieve: Do not keep copies of redirected messages when keep is not specified.
• Registry: Object ids are parsed as numbers.

---

Check binary attestation here

element-hq/element-web (vectorim/element-web)

v1.12.22

Compare Source

✨ Features

• User status in user menu (#​33797). Contributed by @​dbkr.
• Room list: add notifications to section headers (#​33826). Contributed by @​florianduros.
• Room list: remove logic to expand a section when a filter is selected (#​33785). Contributed by @​florianduros.
• Add mechanism to locally enforce MSC1763 retention rules (#​33772). Contributed by @​Half-Shot.
• Disable URL previews per-message when the message provides a hint (#​33775). Contributed by @​Half-Shot.
• Room list: improve section in room list context menu (#​33733). Contributed by @​florianduros.
• Room list: remove "Sections are only for you” in edition section dialog (#​33780). Contributed by @​florianduros.
• Room list: remove checkmark in section toast (#​33779). Contributed by @​florianduros.
• Room list: add fade effect to room list item being dragged (#​33696). Contributed by @​florianduros.
• Add user status on user profile icon (#​33653). Contributed by @​dbkr.
• [Labs] Sign in with QR on new EW using generated QR for MSC4108 v2024 (#​33184). Contributed by @​t3chguy.
• Room list: add expand all icon to room list header (#​33732). Contributed by @​florianduros.
• Implement new separator design (#​33599). Contributed by @​MidhunSureshR.

🐛 Bug Fixes

• [Backport staging] Fix broken scrollbar introduced by separator redesign (#​33947). Contributed by @​RiotRobot.
• Apply html utils sanitiser to embedded page (#​33842). Contributed by @​t3chguy.
• Room list: fix keyboard navigation on sections (#​33809). Contributed by @​florianduros.
• Room list: hide the empty/collapse icon when the room list is empty (#​33814). Contributed by @​florianduros.
• Handle unknown screens better (#​33793). Contributed by @​t3chguy.
• Make presence icons & colours consistent throughout the app (#​33764). Contributed by @​dbkr.
• Add padding to account for input outline in devtools (#​33766). Contributed by @​Johennes.
• Limit width of the display name in user menu (#​33746). Contributed by @​dbkr.
• Room list: hide empty section when a filter is enabled (#​33747). Contributed by @​florianduros.
• Room list: display compose menu when sections are enabled (#​33725). Contributed by @​florianduros.

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • "after 10pm every weekday,every weekend,before 7am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [binwiederhier/ntfy](https://ntfy.sh/) ([source](https://github.com/binwiederhier/ntfy)) | | minor | `v2.24.0` → `v2.25.0` | | dbeaver/cloudbeaver | | patch | `26.1.0` → `26.1.1` | | elasticsearch | | patch | `8.19.16` → `8.19.17` | | ghcr.io/alexta69/metube | | patch | `2026.06.13` → `2026.06.20` | | [ghcr.io/coder/coder](https://github.com/coder/coder) | | patch | `v2.34.2` → `v2.34.4` | | ghcr.io/mastodon/mastodon | | minor | `v4.5.11` → `v4.6.2` | | nvcr.io/nvidia/k8s-device-plugin | | patch | `v0.19.2` → `v0.19.3` | | [proxmox](https://registry.terraform.io/providers/bpg/proxmox) ([source](https://github.com/bpg/terraform-provider-proxmox)) | required_provider | minor | `~> 0.109` → `~> 0.111` | | [stalwartlabs/stalwart](https://github.com/stalwartlabs/stalwart) | | patch | `v0.16.8` → `v0.16.11` | | [vectorim/element-web](https://github.com/element-hq/element-web) | | patch | `v1.12.21` → `v1.12.22` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/15) for more information. --- ### Release Notes <details> <summary>binwiederhier/ntfy (binwiederhier/ntfy)</summary> ### [`v2.25.0`](https://github.com/binwiederhier/ntfy/releases/tag/v2.25.0) [Compare Source](https://github.com/binwiederhier/ntfy/compare/v2.24.0...v2.25.0) This release adds **password reset** via email, and reworks email verification to use durable, link-based magic links (replacing the old in-memory 6-digit codes). Email stays optional at signup; a user can reset their password only once they have a verified "primary" (recovery)email. All of this work is probably not useful for self-hosters, but it hopefully will be useful for me, since I do have to reset accounts on a regular basis. **Security issues:** - Generate access tokens, IDs, and magic-link tokens with a cryptographically secure RNG (`crypto/rand`) instead of a clock-seeded PRNG **Features:** - Add password reset via emailed magic link, with a "Forgot password" link on the login page and a `ntfy user reset-pass` CLI command for admins - Rework email verification to use durable, single-use, expiring magic links instead of in-memory 6-digit codes, and add a "primary" email (used for account recovery and as the `X-Email: yes` target) with verified/unverified state in the account UI - You can now clear/read messages and delete messages with a GET request ([#&#8203;1771](https://github.com/binwiederhier/ntfy/issues/1771), thanks to [@&#8203;lemmi](https://github.com/lemmi) for reporting and to [@&#8203;wunter8](https://github.com/wunter8) for implementing) - Add a reload button to the web app's action bar when running as an installed PWA, which clears the service worker caches and hard-refreshes the app - Add a "Back to app" link to the web app's login, signup, and password-reset pages (alongside the existing links), which previously had no way back to the app **Bug fixes + maintenance:** - `X-Email: yes` (also `true`/`1`) now sends to your primary verified email regardless of the `smtp-sender-verify` setting (previously it was rejected unless verification was enabled); it requires being logged in with a verified address - Grant users full access to their own sync topic (`st_...`) so cross-device subscription sync works under `auth-default-access: deny-all` ([#&#8203;733](https://github.com/binwiederhier/ntfy/issues/733), [#&#8203;1795](https://github.com/binwiederhier/ntfy/pull/1795), thanks to [@&#8203;lmorchard](https://github.com/lmorchard) for the contribution) - Support HTTP (non-TLS) S3-compatible endpoints by preserving the endpoint scheme, e.g. for a local MinIO instance ([#&#8203;1794](https://github.com/binwiederhier/ntfy/pull/1794), [#&#8203;1734](https://github.com/binwiederhier/ntfy/issues/1734), thanks to [@&#8203;sskender](https://github.com/sskender) for the contribution, and [@&#8203;Kernald](https://github.com/Kernald) for reporting) - Stop silently stripping spaces from passwords while typing in the web app's login, signup, and password-reset forms ([#&#8203;1246](https://github.com/binwiederhier/ntfy/issues/1246), thanks to [@&#8203;aldem](https://github.com/aldem) for reporting) - Update web app dependencies, including major-version upgrades to Vite (6 -> 8, now Rolldown-based), Material UI (5 -> 9), and Dexie (3 -> 4) ([#&#8203;1800](https://github.com/binwiederhier/ntfy/pull/1800), [#&#8203;1764](https://github.com/binwiederhier/ntfy/pull/1764), [#&#8203;1767](https://github.com/binwiederhier/ntfy/pull/1767), [#&#8203;1762](https://github.com/binwiederhier/ntfy/pull/1762), [#&#8203;1766](https://github.com/binwiederhier/ntfy/pull/1766), [#&#8203;1765](https://github.com/binwiederhier/ntfy/pull/1765), thanks Dependabot) - Play notification sounds in the web app even when the Notification API is unavailable, e.g. over plain HTTP or in browsers without notification support ([#&#8203;1772](https://github.com/binwiederhier/ntfy/pull/1772), thanks to [@&#8203;mitya12342](https://github.com/mitya12342) for the contribution) - Stop escaping `<`, `>`, and `&` as `\u003c`/`\u003e`/`\u0026` in JSON responses ([#&#8203;1511](https://github.com/binwiederhier/ntfy/issues/1511), [#&#8203;1512](https://github.com/binwiederhier/ntfy/pull/1512), thanks to [@&#8203;wunter8](https://github.com/wunter8) for the contribution) - Fix the web app navbar not reflecting a topic reservation (lock icon, and "Reserve topic" -> "Change reservation"/"Remove reservation" menu) until a page reload, by persisting reservation and display-name changes onto already-subscribed topics during account sync - Reduce the web app's initial bundle size by \~300 KB (\~50 KB gzipped) by lazy-loading the emoji picker dataset and the Markdown renderer, and by importing Material UI icons individually </details> <details> <summary>coder/coder (ghcr.io/coder/coder)</summary> ### [`v2.34.4`](https://github.com/coder/coder/releases/tag/v2.34.4) [Compare Source](https://github.com/coder/coder/compare/v2.34.3...v2.34.4) #### Changelog > \[!NOTE] > This is a mainline Coder release. We advise enterprise customers without a staging environment to install our [latest stable release](https://github.com/coder/coder/releases/latest) while we refine this version. Learn more about our [Release Schedule](https://coder.com/docs/install/releases). ##### Bug fixes - Pin workspace agent API client to intended agent ([#&#8203;26600](https://github.com/coder/coder/issues/26600), [`ec3ba84`](https://github.com/coder/coder/commit/ec3ba84c00)) ([@&#8203;ethanndickson](https://github.com/ethanndickson)) - Dashboard: Set external auth provider polling status individually ([#&#8203;26313](https://github.com/coder/coder/issues/26313), [`c1d261c`](https://github.com/coder/coder/commit/c1d261c36e)) - Server: Only send prebuild claim reinit for the claim build ([#&#8203;26644](https://github.com/coder/coder/issues/26644), [`ea21e3b`](https://github.com/coder/coder/commit/ea21e3b960)) - Server: Let admins change their own workspace sharing role ([#&#8203;26559](https://github.com/coder/coder/issues/26559), [`7fdfc7e`](https://github.com/coder/coder/commit/7fdfc7e1c9)) - Dashboard: Add bottom padding to create workspace page ([#&#8203;26431](https://github.com/coder/coder/issues/26431), [`f770406`](https://github.com/coder/coder/commit/f770406858)) ([@&#8203;aslilac](https://github.com/aslilac)) - fix(aibridge): support Bedrock Opus 4.8 adaptive thinking ([#&#8203;26691](https://github.com/coder/coder/issues/26691), [`1c08896`](https://github.com/coder/coder/commit/1c08896e4f)) ([@&#8203;ericpaulsen](https://github.com/ericpaulsen)) - Enterprise: Stop injecting default port into forwarded Host header ([#&#8203;26656](https://github.com/coder/coder/issues/26656), [`e436efc`](https://github.com/coder/coder/commit/e436efccf4)) ([@&#8203;ssncferreira](https://github.com/ssncferreira)) - Dashboard: Keep TemplateVersionEditor file tree in sync ([#&#8203;25068](https://github.com/coder/coder/issues/25068), [`19d9274`](https://github.com/coder/coder/commit/19d9274d2a)) ([@&#8203;aslilac](https://github.com/aslilac)) ##### Chores - Skip failing azureidentity test while under investigation ([#&#8203;26545](https://github.com/coder/coder/issues/26545), [`d607e1f`](https://github.com/coder/coder/commit/d607e1f9d9)) Compare: [`v2.34.3...v2.34.4`](https://github.com/coder/coder/compare/v2.34.3...v2.34.4) #### Container image - `docker pull ghcr.io/coder/coder:2.34.4` #### Install/upgrade Refer to our docs to [install](https://coder.com/docs/install) or [upgrade](https://coder.com/docs/install/upgrade) Coder, or use a release asset below. ### [`v2.34.3`](https://github.com/coder/coder/releases/tag/v2.34.3) [Compare Source](https://github.com/coder/coder/compare/v2.34.2...v2.34.3) #### Changelog > \[!NOTE] > This is a mainline Coder release. We advise enterprise customers without a staging environment to install our [latest stable release](https://github.com/coder/coder/releases/latest) while we refine this version. Learn more about our [Release Schedule](https://coder.com/docs/install/releases). ##### Features - Implement package and cli tool for repairing oidc links ([#&#8203;26418](https://github.com/coder/coder/issues/26418), [`404ecb1`](https://github.com/coder/coder/commit/404ecb1589)) - Deployment flag to auto handle changed oidc providers ([#&#8203;26419](https://github.com/coder/coder/issues/26419), [`1e4aabb`](https://github.com/coder/coder/commit/1e4aabb178)) ##### Bug fixes - Dashboard: Allow Bedrock IAM-role setup ([#&#8203;26400](https://github.com/coder/coder/issues/26400), [`33c5b8b`](https://github.com/coder/coder/commit/33c5b8bc49)) - Server: Honor fixed lifetime for CLI API tokens ([#&#8203;26376](https://github.com/coder/coder/issues/26376), [`bcb3057`](https://github.com/coder/coder/commit/bcb305753d)) - Backfill legacy Bedrock AI provider rows and stale model config strings ([#&#8203;26155](https://github.com/coder/coder/issues/26155), [`da215b3`](https://github.com/coder/coder/commit/da215b3b75)) - fix(scripts/check\_emdash.sh): skip emdash check when no diff base is available ([#&#8203;26490](https://github.com/coder/coder/issues/26490), [`81654c6`](https://github.com/coder/coder/commit/81654c67c7)) ##### Documentation - Document VS Code local telemetry ([#&#8203;26215](https://github.com/coder/coder/issues/26215), [`4653f32`](https://github.com/coder/coder/commit/4653f32eb4)) ##### Chores - Provisioner: Preserve existing AWS\_SDK\_UA\_APP\_ID ([#&#8203;24606](https://github.com/coder/coder/issues/24606), [`a8ff5b2`](https://github.com/coder/coder/commit/a8ff5b2e08)) Compare: [`v2.34.2...v2.34.3`](https://github.com/coder/coder/compare/v2.34.2...v2.34.3) #### Container image - `docker pull ghcr.io/coder/coder:2.34.3` #### Install/upgrade Refer to our docs to [install](https://coder.com/docs/install) or [upgrade](https://coder.com/docs/install/upgrade) Coder, or use a release asset below. </details> <details> <summary>bpg/terraform-provider-proxmox (proxmox)</summary> ### [`v0.111.0`](https://github.com/bpg/terraform-provider-proxmox/blob/HEAD/CHANGELOG.md#01110-2026-06-23) [Compare Source](https://github.com/bpg/terraform-provider-proxmox/compare/v0.110.0...v0.111.0) ##### Features - **acme:** add write-only data\_wo argument to proxmox\_acme\_dns\_plugin ([#&#8203;2962](https://github.com/bpg/terraform-provider-proxmox/issues/2962)) ([cd4ecd7](https://github.com/bpg/terraform-provider-proxmox/commit/cd4ecd7156f6ff6df610a79c586e5d15eb6da8a6)) - **disk:** add support for ZFS disk/zpool creation with `proxmox_node_disk_zfs` ([#&#8203;2952](https://github.com/bpg/terraform-provider-proxmox/issues/2952)) ([087b1d0](https://github.com/bpg/terraform-provider-proxmox/commit/087b1d0a7a034d1935a0f9d976cd43806483dbfa)) - **openid:** add write-only client\_key\_wo to proxmox\_realm\_openid ([#&#8203;2964](https://github.com/bpg/terraform-provider-proxmox/issues/2964)) ([0ef7bdc](https://github.com/bpg/terraform-provider-proxmox/commit/0ef7bdcc258cf01e05f2d5609356171641eb02f5)) ##### Miscellaneous - **ci:** Update actions/checkout action (v6.0.3 → v7.0.0) ([#&#8203;2958](https://github.com/bpg/terraform-provider-proxmox/issues/2958)) ([0a5bf04](https://github.com/bpg/terraform-provider-proxmox/commit/0a5bf04053200e99446409dd813ee66ad4b19163)) - **docs:** update README.md ([5fd272a](https://github.com/bpg/terraform-provider-proxmox/commit/5fd272a4d6439a6f33be1fecef9b0e1080d5d407)) ### [`v0.110.0`](https://github.com/bpg/terraform-provider-proxmox/blob/HEAD/CHANGELOG.md#01100-2026-06-18) [Compare Source](https://github.com/bpg/terraform-provider-proxmox/compare/v0.109.0...v0.110.0) ##### Features - **cluster:** add dynamic crs ha scheduler and auto-rebalance options ([#&#8203;2940](https://github.com/bpg/terraform-provider-proxmox/issues/2940)) ([1b14b39](https://github.com/bpg/terraform-provider-proxmox/commit/1b14b39de0c174cf9b9f11bf9322b2ab61b64cee)) - **file:** add ImportState to `proxmox_virtual_environment_download_file` ([#&#8203;2938](https://github.com/bpg/terraform-provider-proxmox/issues/2938)) ([e7a1032](https://github.com/bpg/terraform-provider-proxmox/commit/e7a1032ca8340597c027fe3ea0b479035b3409a3)) - **storage:** add `options` parameter for proxmox\_storage\_cifs resource ([#&#8203;2947](https://github.com/bpg/terraform-provider-proxmox/issues/2947)) ([e152990](https://github.com/bpg/terraform-provider-proxmox/commit/e152990cdea28898c0055d77fd06ee356d162d97)) - **storage:** add create\_base\_path and create\_subdirs base options for cifs,nfs,dir storage resources ([#&#8203;2949](https://github.com/bpg/terraform-provider-proxmox/issues/2949)) ([c1262fd](https://github.com/bpg/terraform-provider-proxmox/commit/c1262fd3c73dd326de42b67a459d9b86f70b8a34)) ##### Bug Fixes - **core:** surface underlying error on SSH file transfer failure ([#&#8203;2956](https://github.com/bpg/terraform-provider-proxmox/issues/2956)) ([45d73a6](https://github.com/bpg/terraform-provider-proxmox/commit/45d73a6e3511de6ea82d8e97b6bc9a0ac7cc7dab)) - **node:** accept string-typed startall-onboot-delay in node config ([#&#8203;2957](https://github.com/bpg/terraform-provider-proxmox/issues/2957)) ([87b7992](https://github.com/bpg/terraform-provider-proxmox/commit/87b7992cbb73ddf28cf532e528601ec2ee5b9a34)) ##### Miscellaneous - **deps:** update image golang ([`68cb6d6`](https://github.com/bpg/terraform-provider-proxmox/commit/68cb6d6) → [`87a41d2`](https://github.com/bpg/terraform-provider-proxmox/commit/87a41d2)) ([#&#8203;2941](https://github.com/bpg/terraform-provider-proxmox/issues/2941)) ([b5dafd8](https://github.com/bpg/terraform-provider-proxmox/commit/b5dafd84c96e45c6ff573faf8339f1bc4d82c731)) - **deps:** update module golang.org/x/crypto (v0.52.0 → v0.53.0) ([#&#8203;2942](https://github.com/bpg/terraform-provider-proxmox/issues/2942)) ([5bedef1](https://github.com/bpg/terraform-provider-proxmox/commit/5bedef142033fb8112dca06fcd983931f6a7daa1)) - **deps:** update module golang.org/x/net (v0.55.0 → v0.56.0) ([#&#8203;2943](https://github.com/bpg/terraform-provider-proxmox/issues/2943)) ([804860f](https://github.com/bpg/terraform-provider-proxmox/commit/804860f6252a27d9d032517235589c0283d18cb8)) </details> <details> <summary>stalwartlabs/stalwart (stalwartlabs/stalwart)</summary> ### [`v0.16.11`](https://github.com/stalwartlabs/stalwart/releases/tag/v0.16.11) [Compare Source](https://github.com/stalwartlabs/stalwart/compare/v0.16.10...v0.16.11) #### \[0.16.11] - 2026-06-25 If you are upgrading from v0.16.x, replace the binary (or run `docker pull`). If you are upgrading from v0.15.x and below, please read the [upgrading documentation](https://github.com/stalwartlabs/stalwart/blob/main/UPGRADING/v0_16.md) for more information on how to upgrade from previous versions. #### Added - Encryption-at-rest: Support for `AES-256-GCM` and `ChaCha20-Poly1305` for S/MIME ([#&#8203;161](https://github.com/stalwartlabs/stalwart/issues/161)). - S3: Support for `allowInvalidCerts` option to allow connecting to S3 endpoints with invalid TLS certificates. - Redis Sentinel support as an in-memory store and cluster coordinator backend ([#&#8203;2430](https://github.com/stalwartlabs/stalwart/issues/2430)). #### Changed #### Fixed - DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records. - TLS: Update search index when file-backed certificates are refreshed. - JMAP: `Principal/query` returns broad results when a `name` or `email` filter cannot be resolved. - Webhooks: event IDs collide for same event type emitted in the same second. <hr /> ##### Check binary attestation [here](https://github.com/stalwartlabs/stalwart/attestations/32653276) ### [`v0.16.10`](https://github.com/stalwartlabs/stalwart/releases/tag/v0.16.10) [Compare Source](https://github.com/stalwartlabs/stalwart/compare/v0.16.9...v0.16.10) #### \[0.16.10] - 2026-06-21 If you are upgrading from v0.16.x, replace the binary (or run `docker pull`). If you are upgrading from v0.15.x and below, please read the [upgrading documentation](https://github.com/stalwartlabs/stalwart/blob/main/UPGRADING/v0_16.md) for more information on how to upgrade from previous versions. #### Added - International Domain Names (IDN) support ([#&#8203;207](https://github.com/stalwartlabs/stalwart/issues/207)). - OAuth: - OAuth Profile for Open Public Clients ([draft-ietf-mailmaint-oauth-public](https://datatracker.ietf.org/doc/draft-ietf-mailmaint-oauth-public/)) - Client secret verification for confidential clients. - HTTP: Add `redirectRoot` option to `Http` object to allow redirecting requests to the root path to a different path (e.g. `/account`). - ACME: `reuseKey` option to allow reusing private keys in renewals. - IMAP: - IMAP Extension for Object Identifiers ([draft-ietf-mailmaint-imap-objectid-bis](https://datatracker.ietf.org/doc/draft-ietf-mailmaint-imap-objectid-bis/)) - `GETJMAPACCESS` command to discover the JMAP session resource URL ([#&#8203;2736](https://github.com/stalwartlabs/stalwart/issues/2736)). #### Changed #### Fixed - JMAP conformance (pass the [jmap-test-suite](https://github.com/jmapio/jmap-test-suite) tests): - Methods are only available if their capability is in `using`. - Reject requests that do not specify `application/json` in the `Content-Type` header. - Require `accountId` argument on requests. - Return unparsable ids in `notFound` / `notUpdated` / `notDestroyed` / `notCopied` instead of dropping them. - Default calendars and address books are not subscribed by default. - `*/set`: Unchanged immutable `id` property is rejected on update. - `*/query` and `*/queryChanges`: null`rejected as`notRequest\`. - `Email/query`: - Improper `anchor` handling. - Total miscount when `collapseThreads` is enabled. - Wrong sort order on `hasKeyword`, `allInThreadHaveKeyword`, and `someInThreadHaveKeyword` conditions. - Non-standard header values are not searchable. - `Email/copy`: Take the source message id from the value's `id` property. - `Email/set`: Bump reference-resolution max\_depth from 1 to 2. - `Email/import`: Reject blobs that do not contain valid messages. - `EmailSubmission/set`: return `sendAt` and `undoStatus` in the created response. - `Mailbox/set`: Return `alreadyExists` instead of `invalidProperties` when creating a mailbox with an existing name. - `SearchSnippet/get`: incorrect response structure. - `Thread/changes`: emit a container delete when a thread becomes empty. - `VacationResponse/set`: incorrect singleton handling. - IMAP: Discard oversized non-synchronizing literals ([#&#8203;2768](https://github.com/stalwartlabs/stalwart/issues/2768)). - DANE: Improper `TLSA` record validation ([#&#8203;2328](https://github.com/stalwartlabs/stalwart/issues/2328) - credits to [@&#8203;vdukhovni](https://github.com/vdukhovni)). - OIDC: Add default domain name to groups that are not email addresses. - RocksDB: Enable blob garbage collection to reclaim disk space from deleted blobs. - Sieve: `include` statements ignore capitalisation of sub-script names ([#&#8203;1643](https://github.com/stalwartlabs/stalwart/issues/1643)) - Cache: Invalidate negative email caches when an account is created. - Troubleshoot tool: Use the configured source IP address when connecting to remote servers ([#&#8203;2867](https://github.com/stalwartlabs/stalwart/issues/2867)). <hr /> ##### Check binary attestation [here](https://github.com/stalwartlabs/stalwart/attestations/32044689) ### [`v0.16.9`](https://github.com/stalwartlabs/stalwart/releases/tag/v0.16.9) [Compare Source](https://github.com/stalwartlabs/stalwart/compare/v0.16.8...v0.16.9) #### \[0.16.9] - 2026-06-15 If you are upgrading from v0.16.x, replace the binary (or run `docker pull`). If you are upgrading from v0.15.x and below, please read the [upgrading documentation](https://github.com/stalwartlabs/stalwart/blob/main/UPGRADING/v0_16.md) for more information on how to upgrade from previous versions. #### Added - ACME: Allow specifying a preferred certificate chain. #### Changed #### Fixed - JMAP: `*/changes` methods leak ids of non-shared objects (reported by [@&#8203;5ud0er](https://github.com/5ud0er)). - Sieve: Do not allow invalid certs in `http_header` function. - FoundationDB: Fix read version cache expiration logic. - MTA: Re-scheduling or editing a queued message reports success but persists nothing for recipients in a non-`default` virtual queue. - CardDAV: Version requests included in `address-data` are ignored. - ACME: Add freshness check when renewing certificates. - Autodiscover v2: Read email address from query parameters. - Sieve: Do not keep copies of redirected messages when `keep` is not specified. - Registry: Object ids are parsed as numbers. <hr /> ##### Check binary attestation [here](https://github.com/stalwartlabs/stalwart/attestations/31329451) </details> <details> <summary>element-hq/element-web (vectorim/element-web)</summary> ### [`v1.12.22`](https://github.com/element-hq/element-web/releases/tag/v1.12.22) [Compare Source](https://github.com/element-hq/element-web/compare/v1.12.21...v1.12.22) #### ✨ Features - User status in user menu ([#&#8203;33797](https://github.com/element-hq/element-web/pull/33797)). Contributed by [@&#8203;dbkr](https://github.com/dbkr). - Room list: add notifications to section headers ([#&#8203;33826](https://github.com/element-hq/element-web/pull/33826)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). - Room list: remove logic to expand a section when a filter is selected ([#&#8203;33785](https://github.com/element-hq/element-web/pull/33785)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). - Add mechanism to locally enforce MSC1763 retention rules ([#&#8203;33772](https://github.com/element-hq/element-web/pull/33772)). Contributed by [@&#8203;Half-Shot](https://github.com/Half-Shot). - Disable URL previews per-message when the message provides a hint ([#&#8203;33775](https://github.com/element-hq/element-web/pull/33775)). Contributed by [@&#8203;Half-Shot](https://github.com/Half-Shot). - Room list: improve section in room list context menu ([#&#8203;33733](https://github.com/element-hq/element-web/pull/33733)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). - Room list: remove "Sections are only for you” in edition section dialog ([#&#8203;33780](https://github.com/element-hq/element-web/pull/33780)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). - Room list: remove checkmark in section toast ([#&#8203;33779](https://github.com/element-hq/element-web/pull/33779)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). - Room list: add fade effect to room list item being dragged ([#&#8203;33696](https://github.com/element-hq/element-web/pull/33696)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). - Add user status on user profile icon ([#&#8203;33653](https://github.com/element-hq/element-web/pull/33653)). Contributed by [@&#8203;dbkr](https://github.com/dbkr). - \[Labs] Sign in with QR on new EW using generated QR for MSC4108 v2024 ([#&#8203;33184](https://github.com/element-hq/element-web/pull/33184)). Contributed by [@&#8203;t3chguy](https://github.com/t3chguy). - Room list: add expand all icon to room list header ([#&#8203;33732](https://github.com/element-hq/element-web/pull/33732)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). - Implement new separator design ([#&#8203;33599](https://github.com/element-hq/element-web/pull/33599)). Contributed by [@&#8203;MidhunSureshR](https://github.com/MidhunSureshR). #### 🐛 Bug Fixes - \[Backport staging] Fix broken scrollbar introduced by separator redesign ([#&#8203;33947](https://github.com/element-hq/element-web/pull/33947)). Contributed by [@&#8203;RiotRobot](https://github.com/RiotRobot). - Apply html utils sanitiser to embedded page ([#&#8203;33842](https://github.com/element-hq/element-web/pull/33842)). Contributed by [@&#8203;t3chguy](https://github.com/t3chguy). - Room list: fix keyboard navigation on sections ([#&#8203;33809](https://github.com/element-hq/element-web/pull/33809)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). - Room list: hide the empty/collapse icon when the room list is empty ([#&#8203;33814](https://github.com/element-hq/element-web/pull/33814)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). - Handle unknown screens better ([#&#8203;33793](https://github.com/element-hq/element-web/pull/33793)). Contributed by [@&#8203;t3chguy](https://github.com/t3chguy). - Make presence icons & colours consistent throughout the app ([#&#8203;33764](https://github.com/element-hq/element-web/pull/33764)). Contributed by [@&#8203;dbkr](https://github.com/dbkr). - Add padding to account for input outline in devtools ([#&#8203;33766](https://github.com/element-hq/element-web/pull/33766)). Contributed by [@&#8203;Johennes](https://github.com/Johennes). - Limit width of the display name in user menu ([#&#8203;33746](https://github.com/element-hq/element-web/pull/33746)). Contributed by [@&#8203;dbkr](https://github.com/dbkr). - Room list: hide empty section when a filter is enabled ([#&#8203;33747](https://github.com/element-hq/element-web/pull/33747)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). - Room list: display compose menu when sections are enabled ([#&#8203;33725](https://github.com/element-hq/element-web/pull/33725)). Contributed by [@&#8203;florianduros](https://github.com/florianduros). </details> --- ### Configuration 📅 **Schedule**: (in timezone America/Los_Angeles) - Branch creation - "after 10pm every weekday,every weekend,before 7am every weekday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjQuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI0NS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->

renovate-bot added 1 commit 2026-06-16 06:01:42 +00:00

chore(deps): update all non-major updates to v0.16.9 b55bd553ac

renovate-bot changed title from chore(deps): update all non-major updates to v0.16.9 to chore(deps): update all non-major updates 2026-06-17 06:04:59 +00:00

renovate-bot force-pushed renovate/all-non-major-updates from b55bd553ac to e8d6408f1c 2026-06-17 06:05:01 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from e8d6408f1c to a24f9eb8e2 2026-06-17 18:01:39 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from a24f9eb8e2 to c4bc2f1f01 2026-06-18 00:02:42 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from c4bc2f1f01 to 5a94eb2342 2026-06-18 06:04:16 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from 5a94eb2342 to f56ef09a55 2026-06-20 12:01:36 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from f56ef09a55 to 721f974acd 2026-06-21 18:02:32 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from 721f974acd to fda88ff12e 2026-06-22 12:03:30 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from fda88ff12e to 9933f7b425 2026-06-23 00:03:27 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from 9933f7b425 to 35e42de3c0 2026-06-23 18:03:28 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from 35e42de3c0 to d3652f272a 2026-06-24 00:02:48 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from d3652f272a to e3a575baa3 2026-06-24 18:01:39 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from e3a575baa3 to a0a11c8617 2026-06-25 00:01:45 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from a0a11c8617 to 2eed49abb4 2026-06-25 12:03:24 +00:00 Compare

renovate-bot force-pushed renovate/all-non-major-updates from 2eed49abb4 to 784ce67ebb 2026-06-27 18:02:46 +00:00 Compare

mitch referenced this pull request from a commit 2026-06-28 08:30:54 +00:00

chore(deps): non-major image bumps from #39 (excl. Mastodon)

renovate-bot changed title from chore(deps): update all non-major updates to chore(deps): update all non-major updates - autoclosed 2026-06-28 12:02:08 +00:00

renovate-bot closed this pull request 2026-06-28 12:02:08 +00:00

Some checks failed

Hide all checks

Terraform / plan (pull_request) Failing after 1m16s

Details

Terraform / apply (pull_request) Has been skipped

Details

Validate / Kubernetes manifests (pull_request) Failing after 31s

Details

Validate / Terraform format + validate (pull_request) Successful in 1m24s

Details

Validate / Ansible lint (pull_request) Successful in 1m57s

Details

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

mitch/homelab!39

No description provided.