alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Activity

chore(deps): update vaultwarden to v1.35.6 #5864

Merged
alexlebens merged 1 commits from renovate/unified-vaultwarden into main 2026-04-13 22:23:17 +00:00
Conversation 0 Commits 1 Files Changed 2 +2 -2
renovate-bot commented 2026-04-13 20:38:17 +00:00
Collaborator
Copy Link

This PR contains the following updates:

Package Update Change
dani-garcia/vaultwarden patch 1.35.4 → 1.35.6
ghcr.io/dani-garcia/vaultwarden patch 1.35.4 → 1.35.6

Release Notes

dani-garcia/vaultwarden (dani-garcia/vaultwarden)

v1.35.6

Compare Source

Notes

The previous release contained an issue where Two Factor Remember Tokens and Recovery Tokens were not accepted at all.
This has been fixed now in this release.

What's Changed

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.35.5...1.35.6

v1.35.5

Compare Source

Security Fixes

This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.

These are private for now, pending CVE assignment.

Notes
  • The admin templates have changed, please update them if you override these via templates.
  • Two Factor Remember Tokens are now valid for max 30 days. Old tokens are invalid directly after upgrading.
What's Changed
New Contributors

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.35.4...1.35.5

Configuration

📅 Schedule: (in timezone America/Chicago)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [dani-garcia/vaultwarden](https://github.com/dani-garcia/vaultwarden) | patch | `1.35.4` → `1.35.6` | | [ghcr.io/dani-garcia/vaultwarden](https://github.com/dani-garcia/vaultwarden) | patch | `1.35.4` → `1.35.6` | --- ### Release Notes <details> <summary>dani-garcia/vaultwarden (dani-garcia/vaultwarden)</summary> ### [`v1.35.6`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.6) [Compare Source](https://github.com/dani-garcia/vaultwarden/compare/1.35.5...1.35.6) ##### Notes The previous release contained an issue where Two Factor Remember Tokens and Recovery Tokens were not accepted at all. This has been fixed now in this release. ##### What's Changed - Fix MFA Remember by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;7085](https://github.com/dani-garcia/vaultwarden/pull/7085) **Full Changelog**: <https://github.com/dani-garcia/vaultwarden/compare/1.35.5...1.35.6> ### [`v1.35.5`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.5) [Compare Source](https://github.com/dani-garcia/vaultwarden/compare/1.35.4...1.35.5) ##### Security Fixes This release contains security fixes for the following advisories. We strongly advice to update as soon as possible. - [GHSA-937x-3j8m-7w7p](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-937x-3j8m-7w7p) Unconfirmed Owner Can Purge Entire Organization Vault. - [GHSA-569v-845w-g82p](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-569v-845w-g82p) Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization - [GHSA-6j4w-g4jh-xjfx](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6j4w-g4jh-xjfx) Refresh tokens not invalidated on security stamp rotation These are private for now, pending CVE assignment. ##### Notes - The admin templates have changed, please update them if you override these via templates. - Two Factor Remember Tokens are now valid for max 30 days. Old tokens are invalid directly after upgrading. ##### What's Changed - apply policies only to confirmed members by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6892](https://github.com/dani-garcia/vaultwarden/pull/6892) - Feat(config): add feature flag for Safari account switching by [@&#8203;DerPlayer2001](https://github.com/DerPlayer2001) in [#&#8203;6891](https://github.com/dani-garcia/vaultwarden/pull/6891) - fix: add ForcePasswordReset to api key login by [@&#8203;montdidier](https://github.com/montdidier) in [#&#8203;6904](https://github.com/dani-garcia/vaultwarden/pull/6904) - Add Webauthn related origins flag to known flags. by [@&#8203;pasarenicu](https://github.com/pasarenicu) in [#&#8203;6900](https://github.com/dani-garcia/vaultwarden/pull/6900) - Add 30s cache to SSO exchange\_refresh\_token by [@&#8203;Timshel](https://github.com/Timshel) in [#&#8203;6866](https://github.com/dani-garcia/vaultwarden/pull/6866) - Add cxp-import-mobile and cxp-export-mobile: feature flags on mobile by [@&#8203;phoeagon](https://github.com/phoeagon) in [#&#8203;6853](https://github.com/dani-garcia/vaultwarden/pull/6853) - Misc updates and fixes by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6910](https://github.com/dani-garcia/vaultwarden/pull/6910) - Support new desktop origin on CORS by [@&#8203;dani-garcia](https://github.com/dani-garcia) in [#&#8203;6920](https://github.com/dani-garcia/vaultwarden/pull/6920) - Fix `checkout` action version by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;6921](https://github.com/dani-garcia/vaultwarden/pull/6921) - Fix apikey login by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6922](https://github.com/dani-garcia/vaultwarden/pull/6922) - Fix email header base64 padding by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6961](https://github.com/dani-garcia/vaultwarden/pull/6961) - Update Feature Flags by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6981](https://github.com/dani-garcia/vaultwarden/pull/6981) - Update crates and GHA by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6980](https://github.com/dani-garcia/vaultwarden/pull/6980) - Use protected CI environment by [@&#8203;dani-garcia](https://github.com/dani-garcia) in [#&#8203;7004](https://github.com/dani-garcia/vaultwarden/pull/7004) - Fix 2FA Remember to actually be 30 days by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;6929](https://github.com/dani-garcia/vaultwarden/pull/6929) - Misc Updates by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;7027](https://github.com/dani-garcia/vaultwarden/pull/7027) - Switch to `attest` action by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;7017](https://github.com/dani-garcia/vaultwarden/pull/7017) - Rotate refresh-tokens on sstamp reset by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;7031](https://github.com/dani-garcia/vaultwarden/pull/7031) - Misc org fixes by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;7032](https://github.com/dani-garcia/vaultwarden/pull/7032) - Fix empty string FolderId by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;7048](https://github.com/dani-garcia/vaultwarden/pull/7048) - Disable deployments for release env by [@&#8203;dfunkt](https://github.com/dfunkt) in [#&#8203;7033](https://github.com/dani-garcia/vaultwarden/pull/7033) - Fix Send icons by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;7051](https://github.com/dani-garcia/vaultwarden/pull/7051) - prevent managers from creating collections by [@&#8203;stefan0xC](https://github.com/stefan0xC) in [#&#8203;6890](https://github.com/dani-garcia/vaultwarden/pull/6890) - Change SQLite backup to use VACUUM INTO query by [@&#8203;getaaron](https://github.com/getaaron) in [#&#8203;6989](https://github.com/dani-garcia/vaultwarden/pull/6989) - Handle `SIGTERM` and `SIGQUIT` shutdown signals. by [@&#8203;0x484558](https://github.com/0x484558) in [#&#8203;7008](https://github.com/dani-garcia/vaultwarden/pull/7008) - Do not display unavailable 2FA options by [@&#8203;0x484558](https://github.com/0x484558) in [#&#8203;7013](https://github.com/dani-garcia/vaultwarden/pull/7013) - Fix logout push identifiers and send logout before clearing devices by [@&#8203;qaz741wsd856](https://github.com/qaz741wsd856) in [#&#8203;7047](https://github.com/dani-garcia/vaultwarden/pull/7047) - Fix windows build issues by [@&#8203;idontneedonetho](https://github.com/idontneedonetho) in [#&#8203;7065](https://github.com/dani-garcia/vaultwarden/pull/7065) - Crate and GHA updates by [@&#8203;BlackDex](https://github.com/BlackDex) in [#&#8203;7081](https://github.com/dani-garcia/vaultwarden/pull/7081) ##### New Contributors - [@&#8203;DerPlayer2001](https://github.com/DerPlayer2001) made their first contribution in [#&#8203;6891](https://github.com/dani-garcia/vaultwarden/pull/6891) - [@&#8203;montdidier](https://github.com/montdidier) made their first contribution in [#&#8203;6904](https://github.com/dani-garcia/vaultwarden/pull/6904) - [@&#8203;pasarenicu](https://github.com/pasarenicu) made their first contribution in [#&#8203;6900](https://github.com/dani-garcia/vaultwarden/pull/6900) - [@&#8203;phoeagon](https://github.com/phoeagon) made their first contribution in [#&#8203;6853](https://github.com/dani-garcia/vaultwarden/pull/6853) - [@&#8203;getaaron](https://github.com/getaaron) made their first contribution in [#&#8203;6989](https://github.com/dani-garcia/vaultwarden/pull/6989) - [@&#8203;0x484558](https://github.com/0x484558) made their first contribution in [#&#8203;7008](https://github.com/dani-garcia/vaultwarden/pull/7008) - [@&#8203;qaz741wsd856](https://github.com/qaz741wsd856) made their first contribution in [#&#8203;7047](https://github.com/dani-garcia/vaultwarden/pull/7047) - [@&#8203;idontneedonetho](https://github.com/idontneedonetho) made their first contribution in [#&#8203;7065](https://github.com/dani-garcia/vaultwarden/pull/7065) **Full Changelog**: <https://github.com/dani-garcia/vaultwarden/compare/1.35.4...1.35.5> </details> --- ### Configuration 📅 **Schedule**: (in timezone America/Chicago) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTEuMCIsInVwZGF0ZWRJblZlciI6IjQzLjExMS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJkb2NrZXIiLCJnaXRodWItcmVsZWFzZXMiXX0=-->
renovate-bot added the automergedocker labels 2026-04-13 20:38:17 +00:00
renovate-bot added 1 commit 2026-04-13 20:38:19 +00:00
chore(deps): update vaultwarden to v1.35.6
Some checks are pending
renovate/stability-days Updates have not met minimum release age requirement
Details
lint-test-helm / lint-helm (pull_request) Successful in 2m53s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 3m29s
Details
render-manifests / render-manifests (pull_request) Successful in 1m3s
Details
658daafda4
alexlebens merged commit a0d8a11e9c into main 2026-04-13 22:23:17 +00:00
alexlebens deleted branch renovate/unified-vaultwarden 2026-04-13 22:23:22 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Renovate
Issue generated by Renovate.
 automerge
This PR will be automerged by Renovate.
 chart
Chart update generated by Renovate.
 docker
Docker update generated by Renovate.
github-actions
Github Action update generated by Renovate.
helm
Helm update generated by Renovate.
image
Image update generated by Renovate.
 stale
PR or Issue that has not been updated recently.
No Label automerge docker
Milestone
No items
No Milestone
Assignees
Clear assignees
gitea-bot renovate-bot alexlebens
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: alexlebens/infrastructure#5864
Delete Branch "renovate/unified-vaultwarden"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?