Commit Graph

46 Commits

Author SHA1 Message Date
03da929d51 chore(deps): update vaultwarden/server docker tag to v1.35.3 (#3902)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 19s
renovate / renovate (push) Successful in 3m55s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [vaultwarden/server](https://github.com/dani-garcia/vaultwarden) | patch | `1.35.2` → `1.35.3` |

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden (vaultwarden/server)</summary>

### [`v1.35.3`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.3)

[Compare Source](https://github.com/dani-garcia/vaultwarden/compare/1.35.2...1.35.3)

#### Security Fixes

This release contains security fixes for the following advisory. We strongly advice to update as soon as possible if you believe it could affect you.

- [GHSA-h265-g7rm-h337](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h265-g7rm-h337) (Publication in process, waiting for CVE assignment)
  This vulnerability would allow an authenticated attacker that is part of an organization to access items from collections to which the attacker does not belong.

#### What's Changed

- Fix User API Key login by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6712](https://github.com/dani-garcia/vaultwarden/pull/6712)
- use email instead of empty name for webauhn by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6733](https://github.com/dani-garcia/vaultwarden/pull/6733)
- hide password hints via CSS by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6726](https://github.com/dani-garcia/vaultwarden/pull/6726)
- fix email as 2fa with auth requests by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6736](https://github.com/dani-garcia/vaultwarden/pull/6736)
- Update crates, web-vault, js, workflows by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6749](https://github.com/dani-garcia/vaultwarden/pull/6749)
- refactor: improve tooltips in diagnostics page by [@&#8203;tessus](https://github.com/tessus) in [#&#8203;6765](https://github.com/dani-garcia/vaultwarden/pull/6765)
- Empty AccountKeys when no private key by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6761](https://github.com/dani-garcia/vaultwarden/pull/6761)
- fix error message for purging auth requests by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6776](https://github.com/dani-garcia/vaultwarden/pull/6776)
- Misc updates, crates, rust, js, gha, vault by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6799](https://github.com/dani-garcia/vaultwarden/pull/6799)
- Update crates and web-vault by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6810](https://github.com/dani-garcia/vaultwarden/pull/6810)
- Fix org-details issue by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6811](https://github.com/dani-garcia/vaultwarden/pull/6811)

**Full Changelog**: <https://github.com/dani-garcia/vaultwarden/compare/1.35.2...1.35.3>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsImltYWdlIl19-->

Reviewed-on: #3902
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-11 04:02:24 +00:00
eaee4dc9f1 chore(deps): update dependency dani-garcia/vaultwarden to v1.35.3 (#3901)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 33s
renovate / renovate (push) Successful in 1m56s
2026-02-11 03:59:33 +00:00
fed83257e3 chore(deps): update postgres-cluster docker tag to v7.5.1 (#3824)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 23s
render-manifests-dispatch / render-manifests-dispatch (push) Successful in 20m17s
renovate / renovate (push) Successful in 4m5s
2026-02-07 02:35:51 +00:00
ebc458201a chore(deps): update cloudflared docker tag to v2.3.0 (#3820)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 22s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cloudflared](https://github.com/cloudflare/cloudflared) | minor | `2.2.2` → `2.3.0` |

---

### Release Notes

<details>
<summary>cloudflare/cloudflared (cloudflared)</summary>

### [`v2.3.0`](https://github.com/cloudflare/cloudflared/blob/HEAD/CHANGES.md#202230)

##### New Features

- It is now possible to configure Ingress Rules to point to an origin served by unix socket with either HTTP or HTTPS.
  If the origin starts with `unix:/` then we assume HTTP (existing behavior). Otherwise, the origin can start with
  `unix+tls:/` for HTTPS.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3820
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-02-07 02:23:55 +00:00
1c1eb55ce7 chore(deps): update cloudflared docker tag to v2.2.2 (#3676)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 20s
renovate / renovate (push) Successful in 2m21s
2026-02-03 03:45:39 +00:00
7f81ddbf78 chore(deps): update cloudflared docker tag to v2.2.1 (#3569)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 1m26s
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cloudflared](https://github.com/cloudflare/cloudflared) | minor | `2.1.9` → `2.2.1` |

---

### Release Notes

<details>
<summary>cloudflare/cloudflared (cloudflared)</summary>

### [`v2.2.1`](https://github.com/cloudflare/cloudflared/blob/HEAD/CHANGES.md#202221)

##### New Features

- This project now has a new LICENSE that is more compliant with open source purposes.

##### Bug Fixes

- Various fixes to the reliability of `quic` protocol.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #3569
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-01-28 18:46:47 +00:00
f46ac98970 chore(deps): update appVersions
All checks were successful
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Successful in 11m40s
render-manifests-push / render-manifests-push (push) Successful in 12m20s
2026-01-23 17:05:18 -06:00
914dd14c81 fix: align renovate custom manager to appVersion updates on Chart
All checks were successful
lint-test-helm / lint-helm (push) Successful in 12s
render-manifests-push / render-manifests-push (push) Successful in 49m21s
renovate / renovate (push) Successful in 13m16s
2026-01-23 14:49:38 -06:00
3ff0d4dc3f chore(deps): update postgres-cluster docker tag to v7.5.0 (#3377)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 15s
renovate / renovate (push) Successful in 1m34s
render-manifests-dispatch / render-manifests-dispatch (push) Successful in 47m38s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [postgres-cluster](https://github.com/cloudnative-pg/cloudnative-pg) | minor | `7.4.5` → `7.5.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiLCJpbWFnZSJdfQ==-->

Reviewed-on: #3377
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-01-23 00:57:31 +00:00
3d4d631bd4 Update cloudflared Docker tag to v2.1.9 (#3294)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2026-01-17 17:34:04 +00:00
285e17717f Update Helm release app-template to v4.6.2 (#3266)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 17s
renovate / renovate (push) Successful in 1m24s
2026-01-16 18:57:33 +00:00
cf9a2773c3 Update vaultwarden/server Docker tag to v1.35.2 (#3158)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 40s
renovate / renovate (push) Successful in 4m46s
2026-01-10 19:02:12 +00:00
f837d89595 Update cloudflared Docker tag to v2.1.6 (#3132)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 33s
renovate / renovate (push) Has been cancelled
2026-01-08 23:05:37 +00:00
a100fc174a Update Helm release app-template to v4.6.0 (#3094)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 24s
renovate / renovate (push) Successful in 2m15s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [app-template](https://github.com/bjw-s-labs/helm-charts) | minor | `4.5.0` → `4.6.0` |

---

### Release Notes

<details>
<summary>bjw-s-labs/helm-charts (app-template)</summary>

### [`v4.6.0`](https://github.com/bjw-s-labs/helm-charts/releases/tag/app-template-4.6.0)

[Compare Source](https://github.com/bjw-s-labs/helm-charts/compare/app-template-4.5.0...app-template-4.6.0)

##### Changelog:

##### Changed

- Upgraded the common library to v4.6.0
  - [Upgrade notes](https://bjw-s-labs.github.io/helm-charts/docs/app-template/upgrade-instructions/)
  - [Detailed release notes](https://github.com/bjw-s-labs/helm-charts/releases/tag/common-4.6.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #3094
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-01-07 23:03:02 +00:00
f4243ec768 Update vaultwarden/server Docker tag to v1.35.1 (#3000)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 13s
renovate / renovate (push) Successful in 1m34s
2025-12-31 16:01:31 +00:00
e4c65bf156 fix sso
Some checks failed
renovate / renovate (push) Failing after 2s
lint-test-helm / lint-helm (push) Successful in 15s
render-manifests-push / render-manifests-push (push) Successful in 27s
2025-12-29 17:31:42 -06:00
422e3c1fc2 enable oidc
Some checks failed
renovate / renovate (push) Failing after 3s
lint-test-helm / lint-helm (push) Successful in 40s
render-manifests-push / render-manifests-push (push) Successful in 1m2s
2025-12-29 17:23:45 -06:00
867b6bcb77 Update vaultwarden/server Docker tag to v1.35.0 (#2946)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 25s
renovate / renovate (push) Successful in 1m22s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [vaultwarden/server](https://github.com/dani-garcia/vaultwarden) | minor | `1.34.3` → `1.35.0` |

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden (vaultwarden/server)</summary>

### [`v1.35.0`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.0)

[Compare Source](https://github.com/dani-garcia/vaultwarden/compare/1.34.3...1.35.0)

#### Notable changes

- Implemented support for SSO with OpenID Connect, <https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect>
- Updated web vault to 2025.12.0
- Added support for future mobile apps with versions 2026.1.0+
- This is the first vaultwarden release using [immutable releases](https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases) and release attestation!

#### What's Changed

- Fix multi delete slowdown by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6144](https://github.com/dani-garcia/vaultwarden/pull/6144)
- Perform same checks when setting kdf by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6141](https://github.com/dani-garcia/vaultwarden/pull/6141)
- SSO using OpenID Connect by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;3899](https://github.com/dani-garcia/vaultwarden/pull/3899)
- Delete SSO.md by [@&#8203;dani-garcia](https://github.com/dani-garcia) in [#&#8203;6152](https://github.com/dani-garcia/vaultwarden/pull/6152)
- Update webauthn-rs to 0.5.x by [@&#8203;zUnixorn](https://github.com/zUnixorn) in [#&#8203;5934](https://github.com/dani-garcia/vaultwarden/pull/5934)
- a little cleanup after SSO merge by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6153](https://github.com/dani-garcia/vaultwarden/pull/6153)
- Fix link to point to the wiki by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6157](https://github.com/dani-garcia/vaultwarden/pull/6157)
- Fix Email 2FA for mobile apps by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;6156](https://github.com/dani-garcia/vaultwarden/pull/6156)
- Update Rust to 1.89.0 by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;6150](https://github.com/dani-garcia/vaultwarden/pull/6150)
- Fix several more multi select push issues by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6151](https://github.com/dani-garcia/vaultwarden/pull/6151)
- Fix minor typo by [@&#8203;ncguk](https://github.com/ncguk) in [#&#8203;6165](https://github.com/dani-garcia/vaultwarden/pull/6165)
- Update crates, fixes some yanked crates by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6167](https://github.com/dani-garcia/vaultwarden/pull/6167)
- Fix WebauthN issue with Software Keys by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6168](https://github.com/dani-garcia/vaultwarden/pull/6168)
- Fix Playwright test conf and update deps by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6176](https://github.com/dani-garcia/vaultwarden/pull/6176)
- Misc updates by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6185](https://github.com/dani-garcia/vaultwarden/pull/6185)
- fix typo in description of helo\_name by [@&#8203;Flottegurke](https://github.com/Flottegurke) in [#&#8203;6194](https://github.com/dani-garcia/vaultwarden/pull/6194)
- Fix Playwright by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6206](https://github.com/dani-garcia/vaultwarden/pull/6206)
- Switch to GHA's concurrency control by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;6164](https://github.com/dani-garcia/vaultwarden/pull/6164)
- Make database connection pool dynamic by [@&#8203;Samoth69](https://github.com/Samoth69) in [#&#8203;6166](https://github.com/dani-garcia/vaultwarden/pull/6166)
- Re-add `if` check to release workflow by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;6227](https://github.com/dani-garcia/vaultwarden/pull/6227)
- Fix Webauthn/Passkey 2FA migration/validation issues by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6190](https://github.com/dani-garcia/vaultwarden/pull/6190)
- refactor(config): update template, add validation by [@&#8203;tessus](https://github.com/tessus) in [#&#8203;6229](https://github.com/dani-garcia/vaultwarden/pull/6229)
- Show SSO\_ALLOW\_UNKNOWN\_EMAIL\_VERIFICATION in admin by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6235](https://github.com/dani-garcia/vaultwarden/pull/6235)
- Update crates, gha and web-vault by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6234](https://github.com/dani-garcia/vaultwarden/pull/6234)
- Fix panic around sso\_master\_password\_policy by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6233](https://github.com/dani-garcia/vaultwarden/pull/6233)
- make webauthn more optional by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6160](https://github.com/dani-garcia/vaultwarden/pull/6160)
- Fix 2fa recovery endpoint by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6240](https://github.com/dani-garcia/vaultwarden/pull/6240)
- update trivy-action to v0.33.0 by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6248](https://github.com/dani-garcia/vaultwarden/pull/6248)
- update web vault to v2025.9.1 and allow new policy by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6340](https://github.com/dani-garcia/vaultwarden/pull/6340)
- prevent changing collections when hide\_passwords is true by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6278](https://github.com/dani-garcia/vaultwarden/pull/6278)
- Fix `sso_user` dropped on `User::save` by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6262](https://github.com/dani-garcia/vaultwarden/pull/6262)
- Change OIDC dummy identifier by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6263](https://github.com/dani-garcia/vaultwarden/pull/6263)
- add new billing warnings endpoint by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6369](https://github.com/dani-garcia/vaultwarden/pull/6369)
- Add auth\_request pending endpoint by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6368](https://github.com/dani-garcia/vaultwarden/pull/6368)
- Fix Org identifier by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6364](https://github.com/dani-garcia/vaultwarden/pull/6364)
- add mail address change warning for invited accounts by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6377](https://github.com/dani-garcia/vaultwarden/pull/6377)
- add missing media-src directive by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6381](https://github.com/dani-garcia/vaultwarden/pull/6381)
- add seat limit for the invite dialog by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6371](https://github.com/dani-garcia/vaultwarden/pull/6371)
- \[Playwright] Improvements around node by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6321](https://github.com/dani-garcia/vaultwarden/pull/6321)
- Use Diesels MultiConnections Derive by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6279](https://github.com/dani-garcia/vaultwarden/pull/6279)
- Improve protected actions by [@&#8203;dani-garcia](https://github.com/dani-garcia) in [#&#8203;6411](https://github.com/dani-garcia/vaultwarden/pull/6411)
- Fix issue with key-rotation and emergency-access by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6421](https://github.com/dani-garcia/vaultwarden/pull/6421)
- Optimizations and build speedup by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6339](https://github.com/dani-garcia/vaultwarden/pull/6339)
- Use an older version of mariadb to prevent a panic by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6453](https://github.com/dani-garcia/vaultwarden/pull/6453)
- Playwright against abitrary web-vault by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6380](https://github.com/dani-garcia/vaultwarden/pull/6380)
- Fix KDF Change with new web-vault by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6458](https://github.com/dani-garcia/vaultwarden/pull/6458)
- Fix: admin theme emoji alignment by [@&#8203;joepduin](https://github.com/joepduin) in [#&#8203;6459](https://github.com/dani-garcia/vaultwarden/pull/6459)
- remove invalid emergency access dummy value by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6463](https://github.com/dani-garcia/vaultwarden/pull/6463)
- Add `pm-25373-windows-biometrics-v2` feature flag by [@&#8203;Ephemera42](https://github.com/Ephemera42) in [#&#8203;6468](https://github.com/dani-garcia/vaultwarden/pull/6468)
- Switch to multiple runners per arch by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;6472](https://github.com/dani-garcia/vaultwarden/pull/6472)
- Fix icon redirect caching by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6487](https://github.com/dani-garcia/vaultwarden/pull/6487)
- Fix around singleorg policy by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6247](https://github.com/dani-garcia/vaultwarden/pull/6247)
- fix email as 2fa provider by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6473](https://github.com/dani-garcia/vaultwarden/pull/6473)
- Update crates and Rust version by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6485](https://github.com/dani-garcia/vaultwarden/pull/6485)
- Add option to prefer IPv6 resolving by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6494](https://github.com/dani-garcia/vaultwarden/pull/6494)
- Some small admin js/css updates by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6501](https://github.com/dani-garcia/vaultwarden/pull/6501)
- Update crates and workflows and some fixes by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6508](https://github.com/dani-garcia/vaultwarden/pull/6508)
- Fixed a typo in the default TTL value by [@&#8203;k725](https://github.com/k725) in [#&#8203;6528](https://github.com/dani-garcia/vaultwarden/pull/6528)
- Iterate over tags on release by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6518](https://github.com/dani-garcia/vaultwarden/pull/6518)
- Org.put\_policy type not in body anymore by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6514](https://github.com/dani-garcia/vaultwarden/pull/6514)
- Android want response property in camelCase by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6513](https://github.com/dani-garcia/vaultwarden/pull/6513)
- Fix admin invite with SSO by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6498](https://github.com/dani-garcia/vaultwarden/pull/6498)
- Improve sso auth flow by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6205](https://github.com/dani-garcia/vaultwarden/pull/6205)
- fix email as 2fa for sso by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6495](https://github.com/dani-garcia/vaultwarden/pull/6495)
- Fix release workflow by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6532](https://github.com/dani-garcia/vaultwarden/pull/6532)
- Further fixes for the release workflow by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;6533](https://github.com/dani-garcia/vaultwarden/pull/6533)
- add empty /api/tasks endpoint by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6557](https://github.com/dani-garcia/vaultwarden/pull/6557)
- Revert to gzip compression by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;6566](https://github.com/dani-garcia/vaultwarden/pull/6566)
- support UriMatchDefaults policy by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6570](https://github.com/dani-garcia/vaultwarden/pull/6570)
- Add new accountKeys and masterPasswordUnlock fields by [@&#8203;dani-garcia](https://github.com/dani-garcia) in [#&#8203;6572](https://github.com/dani-garcia/vaultwarden/pull/6572)
- Update crates and Rust by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6551](https://github.com/dani-garcia/vaultwarden/pull/6551)
- Add UserDecryption on /sync too by [@&#8203;dani-garcia](https://github.com/dani-garcia) in [#&#8203;6574](https://github.com/dani-garcia/vaultwarden/pull/6574)
- Update web-vault to v2025.12.0 by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6577](https://github.com/dani-garcia/vaultwarden/pull/6577)
- Fix posting cipher with readonly collections by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6578](https://github.com/dani-garcia/vaultwarden/pull/6578)
- Update crates by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6585](https://github.com/dani-garcia/vaultwarden/pull/6585)
- Simplify binary extraction by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;6554](https://github.com/dani-garcia/vaultwarden/pull/6554)
- Remove unnecessary output sharing between jobs by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;6555](https://github.com/dani-garcia/vaultwarden/pull/6555)
- Add wrapped named variants to UserDecryptionOptions by [@&#8203;dani-garcia](https://github.com/dani-garcia) in [#&#8203;6598](https://github.com/dani-garcia/vaultwarden/pull/6598)

#### New Contributors

- [@&#8203;zUnixorn](https://github.com/zUnixorn) made their first contribution in [#&#8203;5934](https://github.com/dani-garcia/vaultwarden/pull/5934)
- [@&#8203;ncguk](https://github.com/ncguk) made their first contribution in [#&#8203;6165](https://github.com/dani-garcia/vaultwarden/pull/6165)
- [@&#8203;Flottegurke](https://github.com/Flottegurke) made their first contribution in [#&#8203;6194](https://github.com/dani-garcia/vaultwarden/pull/6194)
- [@&#8203;Samoth69](https://github.com/Samoth69) made their first contribution in [#&#8203;6166](https://github.com/dani-garcia/vaultwarden/pull/6166)
- [@&#8203;joepduin](https://github.com/joepduin) made their first contribution in [#&#8203;6459](https://github.com/dani-garcia/vaultwarden/pull/6459)
- [@&#8203;k725](https://github.com/k725) made their first contribution in [#&#8203;6528](https://github.com/dani-garcia/vaultwarden/pull/6528)

**Full Changelog**: <https://github.com/dani-garcia/vaultwarden/compare/1.34.3...1.35.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42Ni45IiwidXBkYXRlZEluVmVyIjoiNDIuNjYuOSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #2946
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-12-29 23:08:34 +00:00
e4138a7994 add local
Some checks failed
lint-test-helm / lint-helm (push) Successful in 13s
render-manifests-push / render-manifests-push (push) Successful in 53s
renovate / renovate (push) Failing after 13m5s
2025-12-27 18:36:14 -06:00
f1eb78a0f8 Update postgres-cluster Docker tag to v7.4.5 (#2892)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 22s
renovate / renovate (push) Successful in 56s
2025-12-27 19:50:33 +00:00
b67d15cdfc change schedule
Some checks failed
lint-test-helm / lint-helm (push) Successful in 23s
renovate / renovate (push) Has been cancelled
render-manifests-push / render-manifests-push (push) Successful in 4m23s
2025-12-27 13:40:57 -06:00
7a2938a142 upgrade chart 2025-12-26 17:18:18 -06:00
efd9c725aa update chart
All checks were successful
lint-test-helm / lint-helm (push) Successful in 9s
render-manifests-push / render-manifests-push (push) Successful in 1m31s
renovate / renovate (push) Successful in 1m40s
2025-12-24 00:26:20 -06:00
5495c30990 Update postgres-cluster Docker tag to v7.1.4 (#2778)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 10s
renovate / renovate (push) Successful in 1m38s
2025-12-21 19:08:40 +00:00
451793e158 Update volsync-target Docker tag to v0.6.0 (#2695)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 35s
renovate / renovate (push) Successful in 1m24s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [volsync-target](https://github.com/backube/volsync) | minor | `0.5.0` -> `0.6.0` |

---

### Release Notes

<details>
<summary>backube/volsync (volsync-target)</summary>

### [`v0.6.0`](https://github.com/backube/volsync/blob/HEAD/CHANGELOG.md#060)

[Compare Source](https://github.com/backube/volsync/compare/v0.5.0...v0.6.0)

##### Added

- restic - allow passing in GOOGLE\_APPLICATION\_CREDENTIALS as a file

##### Changed

- ⚠️ Breaking change ⚠️ - Helm chart now manages VolSync CRDs
  directly.\
  Upgrading the VolSync Helm chart from an earlier version will produce the
  following error:

  ```
  Error: UPGRADE FAILED: rendered manifests contain a resource that already exists. Unable to continue with update: CustomResourceDefinition "replicationdestinations.volsync.backube" in namespace "" exists and cannot be imported into the current release: invalid ownership metadata; label validation error: missing key "app.kubernetes.io/managed-by": must be set to "Helm"; annotation validation error: missing key "meta.helm.sh/release-name": must be set to "volsync"; annotation validation error: missing key "meta.helm.sh/release-namespace": must be set to "volsync-system"
  ```

  To fix, apply the missing labels and annotations as mentioned in the error
  message (your values may differ), then retry the upgrade:

  ```console
  $ kubectl label crd/replicationdestinations.volsync.backube app.kubernetes.io/managed-by=Helm
  customresourcedefinition.apiextensions.k8s.io/replicationdestinations.volsync.backube labeled
  $ kubectl label crd/replicationsources.volsync.backube app.kubernetes.io/managed-by=Helm
  customresourcedefinition.apiextensions.k8s.io/replicationsources.volsync.backube labeled
  $ kubectl annotate crd/replicationdestinations.volsync.backube meta.helm.sh/release-name=volsync
  customresourcedefinition.apiextensions.k8s.io/replicationdestinations.volsync.backube annotated
  $ kubectl annotate crd/replicationsources.volsync.backube meta.helm.sh/release-name=volsync
  customresourcedefinition.apiextensions.k8s.io/replicationsources.volsync.backube annotated
  $ kubectl annotate crd/replicationdestinations.volsync.backube meta.helm.sh/release-namespace=volsync-system
  customresourcedefinition.apiextensions.k8s.io/replicationdestinations.volsync.backube annotated
  $ kubectl annotate crd/replicationsources.volsync.backube meta.helm.sh/release-namespace=volsync-system
  customresourcedefinition.apiextensions.k8s.io/replicationsources.volsync.backube annotated
  ```

- VolSync privileged mover SCC installed at startup on OpenShift

- Syncthing upgraded to 1.22.1

- Updates to build with golang 1.19

##### Fixed

- ReplicationSource fixes for rsync, rclone and restic to enable mounting
  ROX source PVCs as read-only

##### Security

- rclone mover updated to run with reduced privileges by default
- restic mover updated to run with reduced privileges by default
- syncthing mover updated to run with reduced privileges by default
- kube-rbac-proxy upgraded to 0.13.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #2695
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-12-18 03:21:13 +00:00
7104bc3e9a update chart
All checks were successful
lint-test-helm / lint-helm (push) Successful in 12s
render-manifests-push / render-manifests-push (push) Successful in 1m8s
renovate / renovate (push) Successful in 2m33s
2025-12-17 19:11:14 -06:00
735d4eb442 update chart
All checks were successful
lint-test-helm / lint-helm (push) Successful in 11s
render-manifests-push / render-manifests-push (push) Successful in 1m26s
renovate / renovate (push) Successful in 2m48s
2025-12-17 18:59:01 -06:00
b062b07c83 update chart
All checks were successful
lint-test-helm / lint-helm (push) Successful in 23s
render-manifests-push / render-manifests-push (push) Successful in 2m1s
renovate / renovate (push) Successful in 2m52s
2025-12-17 18:02:53 -06:00
501e8a09a3 update chart
All checks were successful
lint-test-helm / lint-helm (push) Successful in 9s
render-manifests-push / render-manifests-push (push) Successful in 1m16s
renovate / renovate (push) Successful in 3m29s
2025-12-17 17:55:05 -06:00
ac5ca95fa5 update lock
All checks were successful
lint-test-helm / lint-helm (push) Successful in 11s
render-manifests-push / render-manifests-push (push) Successful in 59s
renovate / renovate (push) Successful in 2m14s
2025-12-17 17:18:41 -06:00
5252e5ae22 update chart
Some checks failed
lint-test-helm / lint-helm (push) Successful in 11s
render-manifests-push / render-manifests-push (push) Failing after 30s
renovate / renovate (push) Successful in 2m7s
2025-12-17 17:08:51 -06:00
feb8ae9e0b migrate to new chart
All checks were successful
lint-test-helm / lint-helm (push) Successful in 19s
render-manifests-push / render-manifests-push (push) Successful in 2m40s
renovate / renovate (push) Successful in 1m12s
2025-12-17 16:45:48 -06:00
24a97d65e9 move volsync to chart 2025-12-17 13:29:14 -06:00
e271c72649 Update postgres-cluster Docker tag to v7.1.3 (#2657)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 20s
renovate / renovate (push) Has been cancelled
2025-12-17 16:14:03 +00:00
92b1b22c1e update chart
All checks were successful
lint-test-helm / lint-helm (push) Successful in 35s
renovate / renovate (push) Successful in 1m21s
render-manifests-push / render-manifests-push (push) Successful in 2m28s
2025-12-15 15:42:08 -06:00
cee59d07fb remove cluster 2025-12-14 20:32:18 -06:00
46e69207ac switchover
All checks were successful
lint-test-helm / lint-helm (push) Successful in 16s
render-manifests-push / render-manifests-push (push) Successful in 30s
renovate / renovate (push) Successful in 2m37s
2025-12-14 20:30:32 -06:00
b03dffb86c create cluster
Some checks failed
lint-test-helm / lint-helm (push) Successful in 21s
render-manifests-push / render-manifests-push (push) Successful in 37s
renovate / renovate (push) Has been cancelled
2025-12-14 20:30:05 -06:00
73f1546b58 Update cloudflared Docker tag to v1.23.2 (#2288)
Some checks failed
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 17s
renovate / renovate (push) Has been cancelled
2025-12-07 02:56:45 +00:00
2cf3152190 Update Helm release app-template to v4.5.0 (#2270)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / lint-helm (push) Successful in 16s
renovate / renovate (push) Successful in 1m5s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [app-template](https://github.com/bjw-s-labs/helm-charts) | minor | `4.4.0` -> `4.5.0` |

---

### Release Notes

<details>
<summary>bjw-s-labs/helm-charts (app-template)</summary>

### [`v4.5.0`](https://github.com/bjw-s-labs/helm-charts/releases/tag/app-template-4.5.0)

[Compare Source](https://github.com/bjw-s-labs/helm-charts/compare/app-template-4.4.0...app-template-4.5.0)

##### Changelog:

##### Changed

- Upgraded the common library to v4.5.0
  - [Upgrade notes](https://bjw-s-labs.github.io/helm-charts/docs/app-template/upgrade-instructions/)
  - [Detailed release notes](https://github.com/bjw-s-labs/helm-charts/releases/tag/common-4.5.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41LjAiLCJ1cGRhdGVkSW5WZXIiOiI0Mi41LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #2270
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-12-05 21:07:08 +00:00
bb1e86a9ce Update postgres-cluster Docker tag to v6.16.1 (#2237)
All checks were successful
render-manifests-push / render-manifests-push (push) Has been skipped
lint-test-helm / helm-lint (push) Successful in 10s
renovate / renovate (push) Successful in 2m0s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [postgres-cluster](https://github.com/cloudnative-pg/cloudnative-pg) | patch | `6.16.0` -> `6.16.1` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41LjAiLCJ1cGRhdGVkSW5WZXIiOiI0Mi41LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsImltYWdlIl19-->

Reviewed-on: #2237
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2025-12-04 00:28:30 +00:00
8bd90bf506 Update cloudflared Docker tag to v1.23.1 (#2191)
Some checks failed
lint-test-helm / helm-lint (push) Successful in 10s
render-manifests / render-manifests (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2025-12-03 06:05:58 +00:00
3e90af0eb5 migrate
All checks were successful
lint-test-helm / helm-lint (push) Successful in 10s
render-manifests / render-manifests-helm (push) Successful in 1m18s
renovate / renovate (push) Successful in 1m19s
2025-12-01 19:47:11 -06:00
4a30f53bd2 remove charts to prep for migration
Some checks failed
lint-test-helm / helm-lint (push) Successful in 28s
renovate / renovate (push) Has been cancelled
2025-12-01 15:05:25 -06:00
6e613e1e65 add chart lock
Some checks failed
lint-test-helm / helm-lint (push) Successful in 7s
render-manifests / render-manifests-helm (push) Failing after 36s
renovate / renovate (push) Successful in 1m13s
2025-11-30 21:14:57 -06:00
e102d910bc add render manifest workflow
Some checks failed
lint-test-helm / helm-lint (push) Successful in 9s
render-manifests / render-manifests-helm (push) Failing after 30s
renovate / renovate (push) Successful in 2m6s
2025-11-29 21:41:00 -06:00