chore(deps): update ghcr.io/sysadminsmedia/homebox docker tag to v0.27.0 #9

Open
renovate-bot wants to merge 1 commit from renovate/ghcr.io-sysadminsmedia-homebox-0.x into main
Member

This PR contains the following updates:

Package Update Change
ghcr.io/sysadminsmedia/homebox minor 0.26.1 → 0.27.0

Release Notes

sysadminsmedia/homebox (ghcr.io/sysadminsmedia/homebox)

v0.27.0

Compare Source

[!CAUTION]
Homebox now defaults to blocking notifiers to all internal IP addresses, if you have internal services with RFC1918 IPs that Homebox needs access to for webhooks or otherwise, please review our documentation on notifier security configuration: https://homebox.software/en/user-guide/notifiers/#network-security-for-notifiers

What's New

Security Issues Patched

This release fixes 15 security issues:

As usual, we thank all security researchers who reported issues.

What's Changed

New Contributors

Full Changelog: https://github.com/sysadminsmedia/homebox/compare/v0.26.2...v0.27.0

v0.26.2

Compare Source

What's Changed

Full Changelog: https://github.com/sysadminsmedia/homebox/compare/v0.26.1...v0.26.2


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/sysadminsmedia/homebox](https://github.com/sysadminsmedia/homebox) | minor | `0.26.1` → `0.27.0` | --- ### Release Notes <details> <summary>sysadminsmedia/homebox (ghcr.io/sysadminsmedia/homebox)</summary> ### [`v0.27.0`](https://github.com/sysadminsmedia/homebox/releases/tag/v0.27.0) [Compare Source](https://github.com/sysadminsmedia/homebox/compare/v0.26.2...v0.27.0) > \[!CAUTION] > Homebox now defaults to blocking notifiers to all internal IP addresses, if you have internal services with RFC1918 IPs that Homebox needs access to for webhooks or otherwise, please review our documentation on notifier security configuration: <https://homebox.software/en/user-guide/notifiers/#network-security-for-notifiers> #### What's New - This release includes significant improvements to search, including tokenization for database-based searching, and the ability to use Meilisearch as a backend. See our documentation for configuration: <https://homebox.software/en/quick-start/configure/search/> #### Security Issues Patched This release fixes 15 security issues: - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-mw9p-fhpj-jf82> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-h7wm-wjr6-cfxh> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-mgw9-qw3h-224m> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-58m4-m8xj-v3j2> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-754m-5j7m-8wfv> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-59cq-p2m6-hh23> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-j935-m3f2-frrj> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-4gp5-59x3-vhhg> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-4p8r-vm9v-c9pm> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-wxcf-4p4j-vhvg> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-g3p9-jfjj-pqgw> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-xqg9-6xxv-3452> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-h4x5-6587-jpwp> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-jm28-2xm3-m6m5> - <https://github.com/sysadminsmedia/homebox/security/advisories/GHSA-rhfm-x4x2-p3qr> As usual, we thank all security researchers who reported issues. #### What's Changed - flake.lock: Update by [@&#8203;6543](https://github.com/6543) in [#&#8203;1558](https://github.com/sysadminsmedia/homebox/pull/1558) - chore: more consistent css by [@&#8203;andrewhong04](https://github.com/andrewhong04) in [#&#8203;1559](https://github.com/sysadminsmedia/homebox/pull/1559) - fix: various other issues with v0.26.x by [@&#8203;tankerkiller125](https://github.com/tankerkiller125) in [#&#8203;1564](https://github.com/sysadminsmedia/homebox/pull/1564) - linting improvements and apply formatting fixes by [@&#8203;harrisony](https://github.com/harrisony) in [#&#8203;1567](https://github.com/sysadminsmedia/homebox/pull/1567) - Fix update-currencies CI job: restcountries API `name` field returns string instead of object by [@&#8203;tankerkiller125](https://github.com/tankerkiller125) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1570](https://github.com/sysadminsmedia/homebox/pull/1570) - chore(deps): bump the npm\_and\_yarn group across 1 directory with 2 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1568](https://github.com/sysadminsmedia/homebox/pull/1568) - fix: backup memory usage by [@&#8203;lpiepiora](https://github.com/lpiepiora) in [#&#8203;1582](https://github.com/sysadminsmedia/homebox/pull/1582) - fix: various bugs by [@&#8203;tankerkiller125](https://github.com/tankerkiller125) in [#&#8203;1596](https://github.com/sysadminsmedia/homebox/pull/1596) - feat: replace the deprecated countries API with v5 by [@&#8203;ydkmlt84](https://github.com/ydkmlt84) in [#&#8203;1622](https://github.com/sysadminsmedia/homebox/pull/1622) - Update currencies.json by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;1638](https://github.com/sysadminsmedia/homebox/pull/1638) - Fix/currency krone labels by [@&#8203;JacosVerksted](https://github.com/JacosVerksted) in [#&#8203;1640](https://github.com/sysadminsmedia/homebox/pull/1640) - fix: a few random crash fixes by [@&#8203;harrisony](https://github.com/harrisony) in [#&#8203;1628](https://github.com/sysadminsmedia/homebox/pull/1628) - Fix item detail photo grid to load thumbnails instead of originals by [@&#8203;WangLeto](https://github.com/WangLeto) in [#&#8203;1607](https://github.com/sysadminsmedia/homebox/pull/1607) - fix: clamp processedChars before slicing in wrapText by [@&#8203;SAY-5](https://github.com/SAY-5) in [#&#8203;1658](https://github.com/sysadminsmedia/homebox/pull/1658) - fix: preserve asset ID when re-importing items by import ref ([#&#8203;1100](https://github.com/sysadminsmedia/homebox/issues/1100)) by [@&#8203;TowyTowy](https://github.com/TowyTowy) in [#&#8203;1610](https://github.com/sysadminsmedia/homebox/pull/1610) - fix: resolve golangci-lint failures in Go CI by [@&#8203;harrisony](https://github.com/harrisony) in [#&#8203;1629](https://github.com/sysadminsmedia/homebox/pull/1629) - fix: use standard Cross-Origin header names in SecurityHeaders by [@&#8203;Ajithkumar003-dev](https://github.com/Ajithkumar003-dev) in [#&#8203;1682](https://github.com/sysadminsmedia/homebox/pull/1682) - fix(ci): attest the published manifest list digest instead of a copied source manifest by [@&#8203;Datastream-x86](https://github.com/Datastream-x86) in [#&#8203;1685](https://github.com/sysadminsmedia/homebox/pull/1685) - fix broken internal links in contribute docs by [@&#8203;Gorghs](https://github.com/Gorghs) in [#&#8203;1689](https://github.com/sysadminsmedia/homebox/pull/1689) - Fixed bug in Quickstart instructions by [@&#8203;stephenlf](https://github.com/stephenlf) in [#&#8203;1687](https://github.com/sysadminsmedia/homebox/pull/1687) - feat: use full path in location search by [@&#8203;lpiepiora](https://github.com/lpiepiora) in [#&#8203;1511](https://github.com/sysadminsmedia/homebox/pull/1511) - fix: infinite preference sync feedback loop and default item page size by [@&#8203;IceeAn](https://github.com/IceeAn) in [#&#8203;1632](https://github.com/sysadminsmedia/homebox/pull/1632) - Update currencies.json by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;1695](https://github.com/sysadminsmedia/homebox/pull/1695) - docs: fix typo extenal -> external by [@&#8203;vaibhav8a](https://github.com/vaibhav8a) in [#&#8203;1705](https://github.com/sysadminsmedia/homebox/pull/1705) - fix: dates (hopefully) by [@&#8203;tankerkiller125](https://github.com/tankerkiller125) in [#&#8203;1708](https://github.com/sysadminsmedia/homebox/pull/1708) - fix(devcontainer): bump Go feature to 1.26 to match go.mod by [@&#8203;lonerockz](https://github.com/lonerockz) in [#&#8203;1710](https://github.com/sysadminsmedia/homebox/pull/1710) - fix: make repo docker-compose.yml startable by [@&#8203;lonerockz](https://github.com/lonerockz) in [#&#8203;1711](https://github.com/sysadminsmedia/homebox/pull/1711) - fix(lint): extract repeated notifier URL fixture into a constant by [@&#8203;landscapejohn](https://github.com/landscapejohn) in [#&#8203;1722](https://github.com/sysadminsmedia/homebox/pull/1722) - Return barcode results when one provider fails by [@&#8203;justadityaraj](https://github.com/justadityaraj) in [#&#8203;1727](https://github.com/sysadminsmedia/homebox/pull/1727) - Fix Traditional Chinese label generator crash by [@&#8203;justadityaraj](https://github.com/justadityaraj) in [#&#8203;1728](https://github.com/sysadminsmedia/homebox/pull/1728) - your -> you are / you're by [@&#8203;Some1withgithub](https://github.com/Some1withgithub) in [#&#8203;1724](https://github.com/sysadminsmedia/homebox/pull/1724) - fix(scanner): guard AR overlay against locations with no children by [@&#8203;costajohnt](https://github.com/costajohnt) in [#&#8203;1741](https://github.com/sysadminsmedia/homebox/pull/1741) - docs: explain how Ensure Asset IDs treats an ID of 0 versus an empty one by [@&#8203;costajohnt](https://github.com/costajohnt) in [#&#8203;1743](https://github.com/sysadminsmedia/homebox/pull/1743) - fix: redirect back to tags list after deleting a tag by [@&#8203;costajohnt](https://github.com/costajohnt) in [#&#8203;1744](https://github.com/sysadminsmedia/homebox/pull/1744) - docs: publish the Entity Types page the user guide already links to by [@&#8203;vaibhav8a](https://github.com/vaibhav8a) in [#&#8203;1748](https://github.com/sysadminsmedia/homebox/pull/1748) - feat: better search by [@&#8203;tankerkiller125](https://github.com/tankerkiller125) in [#&#8203;1550](https://github.com/sysadminsmedia/homebox/pull/1550) - fix: child item seperate location by [@&#8203;tankerkiller125](https://github.com/tankerkiller125) in [#&#8203;1696](https://github.com/sysadminsmedia/homebox/pull/1696) - fix: roll back thumbnail transaction on all errors to prevent DB lockups by [@&#8203;marazmarci](https://github.com/marazmarci) in [#&#8203;1761](https://github.com/sysadminsmedia/homebox/pull/1761) - Update currencies.json by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;1793](https://github.com/sysadminsmedia/homebox/pull/1793) #### New Contributors - [@&#8203;andrewhong04](https://github.com/andrewhong04) made their first contribution in [#&#8203;1559](https://github.com/sysadminsmedia/homebox/pull/1559) - [@&#8203;ydkmlt84](https://github.com/ydkmlt84) made their first contribution in [#&#8203;1622](https://github.com/sysadminsmedia/homebox/pull/1622) - [@&#8203;JacosVerksted](https://github.com/JacosVerksted) made their first contribution in [#&#8203;1640](https://github.com/sysadminsmedia/homebox/pull/1640) - [@&#8203;WangLeto](https://github.com/WangLeto) made their first contribution in [#&#8203;1607](https://github.com/sysadminsmedia/homebox/pull/1607) - [@&#8203;SAY-5](https://github.com/SAY-5) made their first contribution in [#&#8203;1658](https://github.com/sysadminsmedia/homebox/pull/1658) - [@&#8203;TowyTowy](https://github.com/TowyTowy) made their first contribution in [#&#8203;1610](https://github.com/sysadminsmedia/homebox/pull/1610) - [@&#8203;Ajithkumar003-dev](https://github.com/Ajithkumar003-dev) made their first contribution in [#&#8203;1682](https://github.com/sysadminsmedia/homebox/pull/1682) - [@&#8203;Datastream-x86](https://github.com/Datastream-x86) made their first contribution in [#&#8203;1685](https://github.com/sysadminsmedia/homebox/pull/1685) - [@&#8203;Gorghs](https://github.com/Gorghs) made their first contribution in [#&#8203;1689](https://github.com/sysadminsmedia/homebox/pull/1689) - [@&#8203;stephenlf](https://github.com/stephenlf) made their first contribution in [#&#8203;1687](https://github.com/sysadminsmedia/homebox/pull/1687) - [@&#8203;vaibhav8a](https://github.com/vaibhav8a) made their first contribution in [#&#8203;1705](https://github.com/sysadminsmedia/homebox/pull/1705) - [@&#8203;lonerockz](https://github.com/lonerockz) made their first contribution in [#&#8203;1710](https://github.com/sysadminsmedia/homebox/pull/1710) - [@&#8203;landscapejohn](https://github.com/landscapejohn) made their first contribution in [#&#8203;1722](https://github.com/sysadminsmedia/homebox/pull/1722) - [@&#8203;justadityaraj](https://github.com/justadityaraj) made their first contribution in [#&#8203;1727](https://github.com/sysadminsmedia/homebox/pull/1727) - [@&#8203;Some1withgithub](https://github.com/Some1withgithub) made their first contribution in [#&#8203;1724](https://github.com/sysadminsmedia/homebox/pull/1724) - [@&#8203;costajohnt](https://github.com/costajohnt) made their first contribution in [#&#8203;1741](https://github.com/sysadminsmedia/homebox/pull/1741) - [@&#8203;marazmarci](https://github.com/marazmarci) made their first contribution in [#&#8203;1761](https://github.com/sysadminsmedia/homebox/pull/1761) **Full Changelog**: <https://github.com/sysadminsmedia/homebox/compare/v0.26.2...v0.27.0> ### [`v0.26.2`](https://github.com/sysadminsmedia/homebox/releases/tag/v0.26.2) [Compare Source](https://github.com/sysadminsmedia/homebox/compare/v0.26.1...v0.26.2) #### What's Changed - fix: various new bugs by [@&#8203;tankerkiller125](https://github.com/tankerkiller125) in [#&#8203;1553](https://github.com/sysadminsmedia/homebox/pull/1553) **Full Changelog**: <https://github.com/sysadminsmedia/homebox/compare/v0.26.1...v0.26.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTMuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI1My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Update ghcr.io/sysadminsmedia/homebox Docker tag to v0.26.2
Some checks failed
ci/crow/push/dns-test Pipeline failed
ci/crow/push/tanka-test Pipeline failed
ci/crow/pr/dns-test Pipeline failed
ci/crow/pr/tanka-test Pipeline failed
ebdeb4bd2a
renovate-bot changed title from Update ghcr.io/sysadminsmedia/homebox Docker tag to v0.26.2 to chore(deps): update ghcr.io/sysadminsmedia/homebox docker tag to v0.26.2 2026-07-17 23:08:22 +00:00
renovate-bot force-pushed renovate/ghcr.io-sysadminsmedia-homebox-0.x from ebdeb4bd2a
Some checks failed
ci/crow/push/tanka-test Pipeline failed
ci/crow/pr/dns-test Pipeline failed
ci/crow/push/dns-test Pipeline failed
ci/crow/pr/tanka-test Pipeline failed
to 2924af8049
Some checks failed
ci/crow/pr/dns-test Pipeline was successful
ci/crow/push/dns-test Pipeline was successful
ci/crow/pr/tanka-diff Pipeline failed
ci/crow/push/tanka-test Pipeline was successful
ci/crow/pr/tanka-test Pipeline was successful
2026-07-20 16:05:45 +00:00
Compare
renovate-bot changed title from chore(deps): update ghcr.io/sysadminsmedia/homebox docker tag to v0.26.2 to Update ghcr.io/sysadminsmedia/homebox Docker tag to v0.26.2 2026-07-21 01:06:21 +00:00
renovate-bot changed title from Update ghcr.io/sysadminsmedia/homebox Docker tag to v0.26.2 to chore(deps): update ghcr.io/sysadminsmedia/homebox docker tag to v0.26.2 2026-07-21 02:06:33 +00:00
renovate-bot force-pushed renovate/ghcr.io-sysadminsmedia-homebox-0.x from 2924af8049
Some checks failed
ci/crow/pr/dns-test Pipeline was successful
ci/crow/push/dns-test Pipeline was successful
ci/crow/pr/tanka-diff Pipeline failed
ci/crow/push/tanka-test Pipeline was successful
ci/crow/pr/tanka-test Pipeline was successful
to 8b87b55025
Some checks failed
ci/crow/push/dns-test Pipeline was successful
ci/crow/pr/dns-test Pipeline was successful
ci/crow/pr/tanka-test Pipeline was successful
ci/crow/pr/tanka-diff Pipeline was successful
ci/crow/push/tanka-test Pipeline failed
2026-10-19 20:11:26 +00:00
Compare
renovate-bot changed title from chore(deps): update ghcr.io/sysadminsmedia/homebox docker tag to v0.26.2 to chore(deps): update ghcr.io/sysadminsmedia/homebox docker tag to v0.27.0 2026-10-19 20:11:28 +00:00
Member

flate diff

No differences detected.

Pipeline

## flate diff No differences detected. [Pipeline](https://ci.aether.earth/repos/4/pipeline/635)
Some checks failed
ci/crow/push/dns-test Pipeline was successful
ci/crow/pr/dns-test Pipeline was successful
ci/crow/pr/tanka-test Pipeline was successful
ci/crow/pr/tanka-diff Pipeline was successful
ci/crow/push/tanka-test Pipeline failed
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/ghcr.io-sysadminsmedia-homebox-0.x:renovate/ghcr.io-sysadminsmedia-homebox-0.x
git switch renovate/ghcr.io-sysadminsmedia-homebox-0.x

Merge

Merge the changes and update on Forgejo.
git switch main
git merge --no-ff renovate/ghcr.io-sysadminsmedia-homebox-0.x
git switch renovate/ghcr.io-sysadminsmedia-homebox-0.x
git rebase main
git switch main
git merge --ff-only renovate/ghcr.io-sysadminsmedia-homebox-0.x
git switch renovate/ghcr.io-sysadminsmedia-homebox-0.x
git rebase main
git switch main
git merge --no-ff renovate/ghcr.io-sysadminsmedia-homebox-0.x
git switch main
git merge --squash renovate/ghcr.io-sysadminsmedia-homebox-0.x
git switch main
git merge --ff-only renovate/ghcr.io-sysadminsmedia-homebox-0.x
git switch main
git merge renovate/ghcr.io-sysadminsmedia-homebox-0.x
git push origin main
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ops/homelab!9
No description provided.