Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update vaultwarden/server Docker tag to v1.33.0 #9

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 14, 2022

This PR contains the following updates:

Package Update Change
vaultwarden/server minor 1.25.2-alpine -> 1.33.0-alpine

Release Notes

dani-garcia/vaultwarden (vaultwarden/server)

v1.33.0

Compare Source

Security Fixes

This release contains security fixes for the following advisories.
And we strongly advice to update as soon as possible.

  • GHSA-f7r5-w49x-gxm3
    This vulnerability is only possible if you do not have an ADMIN_TOKEN configured and open links or pages you should not trust anyway. Ensure you have an ADMIN_TOKEN configured to keep your admin environment save.
  • GHSA-h6cc-rc6q-23j4
    This vulnerability is only possible if someone was able to gain access to your Vaultwarden Admin Backend. The attacker could then change some settings to use sendmail as mail agent but adjust the settings in such a way that it would use a shell command. It then also needed to craft a special favicon image which would have the commands embedded to run during for example sending a test email.
  • GHSA-j4h8-vch3-f797
    This vulnerability affects all users who have multiple Organizations and users which are able to create a new organization or have admin or owner rights on at least one organization. The attacker does need to know the Organization UUID of the Organization it want's to attack or compromise though.

Notable changes

  • Updated web-vault to v2025.1.1
  • Added partial manage role support for collections
  • Manager role is converted to a Custom role with either Manage All Collections or per collection.
    Admins and Owners probably want to check and verify if the rights are still correct.
  • The OCI containers and binaries are signed via GitHub Attestations
    This allows you to verify an OCI image or even the vaultwarden binary located within the OCI image.

These vulnerabilities affects

What's Changed

New Contributors

Full Changelog: dani-garcia/vaultwarden@1.32.7...1.33.0

v1.32.7

Compare Source

Security Fixes

This release contains a security fix for the following CVE GHSA-g65h-982x-4m5m.

This vulnerability affects any installations that have the ORG_GROUPS_ENABLED setting enabled, and we urge anyone doing so to update as soon as possible.

What's Changed

Full Changelog: dani-garcia/vaultwarden@1.32.6...1.32.7

v1.32.6

Compare Source

What's Changed
New Contributors

Full Changelog: dani-garcia/vaultwarden@1.32.5...1.32.6

v1.32.5

Compare Source

Security Fixes

This release further fixed some CVE Reports reported by a third party security auditor and we recommend everybody to update to the latest version as soon as possible. The contents of these reports will be disclosed publicly in the future.

Notable changes
  • Added SSH-Key storage support. Currently only usable with Bitwarden Desktop v2024.12.0 and newer.
    You need to enable this feature by adding ssh-key-vault-item,ssh-agent to the EXPERIMENTAL_CLIENT_FEATURE_FLAGS config option. See .env.template
What's Changed

Full Changelog: dani-garcia/vaultwarden@1.32.4...1.32.5

v1.32.4

Compare Source

Security Fixes

This release has fixed some CVE Reports reported by a third party security auditor and we recommend everybody to update to the latest version as soon as possible. The contents of these reports will be disclosed publicly in the future.

Notable changes
  • Added more compatibility fixes for the native mobile apps, datetimes are now formatted without too many decimals.
  • Email Template changes to the send emergency access invite. If you have modified this template, make sure to update it with the new changes.
What's Changed

Full Changelog: dani-garcia/vaultwarden@1.32.3...1.32.4

v1.32.3

Compare Source

Notable changes
  • Email template for org invites was updated again. The URL got HTML Encoded which resulted in a sometimes non-working URL (#​5100)
  • Fixed SMTP issues with some providers which send erroneous response to QUIT messages (Like QQ) (Thanks to @​paolobarbolini)
  • Fixed a long standing collection management issue where collections were not able to be managed via the Password Manager overview
What's Changed

Full Changelog: dani-garcia/vaultwarden@1.32.2...1.32.3

v1.32.2

Compare Source

Notable changes
  • Fixed collection management for managers
What's Changed

Full Changelog: dani-garcia/vaultwarden@1.32.1...1.32.2

v1.32.1

Compare Source

Notable changes
  • Fixed syncing/login with native mobile clients
  • Added CLI option to backup SQLite database
  • Email Template changes regarding invites, 2FA Incomplete logins, and new logins
What's Changed
New Contributors

Full Changelog: dani-garcia/vaultwarden@1.32.0...1.32.1

v1.32.0

Compare Source

Security Fixes

This release has several CVE Reports fixed and we recommend everybody to update to the latest version as soon as possible.

Other changes
  • Updated web-vault to v2024.6.2
  • Fixed issues with password reset enrollment by rolling back a web-vault commit
What's Changed
New Contributors

Full Changelog: dani-garcia/vaultwarden@1.31.0...1.32.0

v1.31.0

Compare Source

Major changes and New Features
  • Initial support for the beta releases of the new native mobile apps
  • Removed support for WebSocket traffic on port 3012, as it's been integrated on the main HTTP port for a few releases
  • Updated included web vault to 2024.5.1
General mention

Bitwarden has changed the push API endpoints which affects the EU region endpoint users.
So if you use the push functionality and use the EU region you need to make some changes.
You have to update push.bitwarden.eu to api.bitwarden.eu.
This is also an issue with any previous version of Vaultwarden.

What's Changed
New Contributors

Full Changelog: dani-garcia/vaultwarden@1.30.5...1.31.0

v1.30.5

Compare Source

What's Changed
New Contributors

Full Changelog: dani-garcia/vaultwarden@1.30.4...1.30.5

v1.30.4

Compare Source

⚠️ Note: The WebSockets service for live sync has been integrated in the main HTTP server, which means simpler proxy setups that don't require a separate rule to redirect WS traffic to port 3012. Please check the updated examples in the wiki. It's recommended to migrate to this new setup as using the old server on port 3012 is deprecated, won't receive new features and will be removed in the next release.

What's Changed
New Contributors

Full Changelog: dani-garcia/vaultwarden@1.30.3...1.30.4

v1.30.3

Compare Source

This is a minor release to fix some issues with push notification device registration and docker healthcheck.

⚠️ Note: The WebSockets service for live sync has been integrated in the main HTTP server, which means simpler proxy setups that don't require a separate rule to redirect WS traffic to port 3012. Please check the updated examples in the wiki. It's recommended to migrate to this new setup as using the old server on port 3012 is deprecated, won't receive new features and will be removed in the next release.

What's Changed

Full Changelog: dani-garcia/vaultwarden@1.30.2...1.30.3

v1.30.2

Compare Source

⚠️ Note: The WebSockets service for live sync has been integrated in the main HTTP server, which means simpler proxy setups that don't require a separate rule to redirect WS traffic to port 3012. Please check the updated examples in the wiki. It's recommended to migrate to this new setup as using the old server on port 3012 is deprecated, won't receive new features and will be removed in the next release.

What's Changed

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 3fc6e4f to 71f8cc4 Compare March 17, 2023 05:48
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.26.0 Update vaultwarden/server Docker tag to v1.27.0 Mar 17, 2023
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.27.0 Update vaultwarden/server Docker tag to v1.28.1 Apr 3, 2023
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 71f8cc4 to 7c00af2 Compare April 3, 2023 16:10
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.28.1 Update vaultwarden/server Docker tag to v1.29.0 Jul 10, 2023
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 7c00af2 to b0ae6e1 Compare July 10, 2023 02:46
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.29.0 Update vaultwarden/server Docker tag to v1.29.1 Jul 27, 2023
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from b0ae6e1 to a90f173 Compare July 27, 2023 02:41
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from a90f173 to 93174e1 Compare September 1, 2023 02:59
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.29.1 Update vaultwarden/server Docker tag to v1.29.2 Sep 1, 2023
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 93174e1 to 84dce7d Compare November 6, 2023 05:34
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.29.2 Update vaultwarden/server Docker tag to v1.30.0 Nov 6, 2023
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.30.0 Update vaultwarden/server Docker tag to v1.30.1 Nov 20, 2023
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 84dce7d to b0eb171 Compare November 20, 2023 08:37
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.30.1 Update vaultwarden/server Docker tag to v1.30.2 Jan 30, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch 2 times, most recently from f3e6f0a to 264539d Compare February 2, 2024 02:53
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.30.2 Update vaultwarden/server Docker tag to v1.30.3 Feb 2, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 264539d to 1535786 Compare March 3, 2024 02:00
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.30.3 Update vaultwarden/server Docker tag to v1.30.5 Mar 3, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 1535786 to 44a972b Compare July 9, 2024 02:30
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.30.5 Update vaultwarden/server Docker tag to v1.31.0 Jul 9, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 44a972b to 3c89e75 Compare August 12, 2024 08:51
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.31.0 Update vaultwarden/server Docker tag to v1.32.0 Aug 12, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 3c89e75 to 466c449 Compare October 4, 2024 08:11
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.32.0 Update vaultwarden/server Docker tag to v1.32.1 Oct 4, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 466c449 to bab4e7a Compare October 19, 2024 02:39
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.32.1 Update vaultwarden/server Docker tag to v1.32.2 Oct 19, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from bab4e7a to c2b1d65 Compare October 28, 2024 02:49
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.32.2 Update vaultwarden/server Docker tag to v1.32.3 Oct 28, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from c2b1d65 to a3ce32d Compare November 11, 2024 05:48
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.32.3 Update vaultwarden/server Docker tag to v1.32.4 Nov 11, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from a3ce32d to 14d04a9 Compare November 19, 2024 08:40
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.32.4 Update vaultwarden/server Docker tag to v1.32.5 Nov 19, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 14d04a9 to c26caba Compare December 11, 2024 08:52
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.32.5 Update vaultwarden/server Docker tag to v1.32.6 Dec 11, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from c26caba to 8487f0b Compare December 21, 2024 02:55
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.32.6 Update vaultwarden/server Docker tag to v1.32.7 Dec 21, 2024
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 8487f0b to 3402138 Compare January 26, 2025 07:19
@renovate renovate bot changed the title Update vaultwarden/server Docker tag to v1.32.7 Update vaultwarden/server Docker tag to v1.33.0 Jan 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants