chore(deps): update vaultwarden/server docker tag to v1.35.3 #3902

renovate-bot · 2026-02-11T03:59:34Z

renovate-bot commented

2026-02-11 03:59:34 +00:00

This PR contains the following updates:

Package	Update	Change
vaultwarden/server	patch	`1.35.2` → `1.35.3`

Release Notes

dani-garcia/vaultwarden (vaultwarden/server)

`v1.35.3`

Compare Source

Security Fixes

This release contains security fixes for the following advisory. We strongly advice to update as soon as possible if you believe it could affect you.

GHSA-h265-g7rm-h337 (Publication in process, waiting for CVE assignment)
This vulnerability would allow an authenticated attacker that is part of an organization to access items from collections to which the attacker does not belong.

What's Changed

Fix User API Key login by @BlackDex in #6712
use email instead of empty name for webauhn by @stefan0xC in #6733
hide password hints via CSS by @stefan0xC in #6726
fix email as 2fa with auth requests by @stefan0xC in #6736
Update crates, web-vault, js, workflows by @BlackDex in #6749
refactor: improve tooltips in diagnostics page by @tessus in #6765
Empty AccountKeys when no private key by @Timshel in #6761
fix error message for purging auth requests by @stefan0xC in #6776
Misc updates, crates, rust, js, gha, vault by @BlackDex in #6799
Update crates and web-vault by @BlackDex in #6810
Fix org-details issue by @BlackDex in #6811

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.35.2...1.35.3

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [vaultwarden/server](https://github.com/dani-garcia/vaultwarden) | patch | `1.35.2` → `1.35.3` | --- ### Release Notes <details> <summary>dani-garcia/vaultwarden (vaultwarden/server)</summary> ### [`v1.35.3`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.3) [Compare Source](https://github.com/dani-garcia/vaultwarden/compare/1.35.2...1.35.3) #### Security Fixes This release contains security fixes for the following advisory. We strongly advice to update as soon as possible if you believe it could affect you. - [GHSA-h265-g7rm-h337](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h265-g7rm-h337) (Publication in process, waiting for CVE assignment) This vulnerability would allow an authenticated attacker that is part of an organization to access items from collections to which the attacker does not belong. #### What's Changed - Fix User API Key login by [@BlackDex](https://github.com/BlackDex) in [#6712](https://github.com/dani-garcia/vaultwarden/pull/6712) - use email instead of empty name for webauhn by [@stefan0xC](https://github.com/stefan0xC) in [#6733](https://github.com/dani-garcia/vaultwarden/pull/6733) - hide password hints via CSS by [@stefan0xC](https://github.com/stefan0xC) in [#6726](https://github.com/dani-garcia/vaultwarden/pull/6726) - fix email as 2fa with auth requests by [@stefan0xC](https://github.com/stefan0xC) in [#6736](https://github.com/dani-garcia/vaultwarden/pull/6736) - Update crates, web-vault, js, workflows by [@BlackDex](https://github.com/BlackDex) in [#6749](https://github.com/dani-garcia/vaultwarden/pull/6749) - refactor: improve tooltips in diagnostics page by [@tessus](https://github.com/tessus) in [#6765](https://github.com/dani-garcia/vaultwarden/pull/6765) - Empty AccountKeys when no private key by [@Timshel](https://github.com/Timshel) in [#6761](https://github.com/dani-garcia/vaultwarden/pull/6761) - fix error message for purging auth requests by [@stefan0xC](https://github.com/stefan0xC) in [#6776](https://github.com/dani-garcia/vaultwarden/pull/6776) - Misc updates, crates, rust, js, gha, vault by [@BlackDex](https://github.com/BlackDex) in [#6799](https://github.com/dani-garcia/vaultwarden/pull/6799) - Update crates and web-vault by [@BlackDex](https://github.com/BlackDex) in [#6810](https://github.com/dani-garcia/vaultwarden/pull/6810) - Fix org-details issue by [@BlackDex](https://github.com/BlackDex) in [#6811](https://github.com/dani-garcia/vaultwarden/pull/6811) **Full Changelog**: <https://github.com/dani-garcia/vaultwarden/compare/1.35.2...1.35.3> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added the automerge image labels 2026-02-11 03:59:34 +00:00

renovate-bot added 1 commit 2026-02-11 03:59:36 +00:00

chore(deps): update vaultwarden/server docker tag to v1.35.3

renovate/stability-days Updates have not met minimum release age requirement

Details

lint-test-helm / lint-helm (pull_request) Successful in 17s

Details

render-manifests-merge / render-manifests-merge (pull_request) Has been skipped

Details

render-manifests-automerge / render-manifests-automerge (pull_request) Successful in 2m0s

Details

a8774b8348

alexlebens merged commit 03da929d51 into main

2026-02-11 04:02:31 +00:00

alexlebens referenced this issue from a commit

2026-02-11 04:02:33 +00:00

chore(deps): update vaultwarden/server docker tag to v1.35.3 (#3902)

alexlebens deleted branch renovate/unified-vaultwardenserver

2026-02-11 04:02:41 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: alexlebens/infrastructure#3902