pihole: bump image to 2026.05.0 (dnsmasq CVE security release)

Pi-hole 2026.05.0 bundles FTL v6.6.2 which imports six upstream dnsmasq security fixes, covering all publicly disclosed CVEs against the dnsmasq 2.92/2.93 line. Per the upstream release notes the fixes are "minimal, self-contained changes to the embedded dnsmasq sources. No FTL-side configuration or API changes; users should see no observable behavior change beyond the closed vulnerabilities." Override the chart's default image.tag in helm/pihole/values.yaml (no chart version bump). The pihole ArgoCD app is intentionally MANUAL sync per Viktor's call -- after merge, sync the pihole app from the ArgoCD UI to roll the pod over. https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.05.0 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Merge pull request 'termix: manual bump 1.11.2 -> 2.3.2 (Renovate blocked by DH rate-limit)' (#80 ) from feat/termix-v2.3.2 into main
2026-06-06 12:55:58 +02:00 · 2026-06-06 09:16:02 +00:00 · 2026-06-06 11:16:00 +02:00 · 2026-06-06 09:00:33 +00:00 · 2026-06-06 09:00:24 +00:00 · 2026-06-06 09:00:21 +00:00
3 changed files with 9 additions and 2 deletions
@@ -1,4 +1,11 @@
 ---
 # Image tag override: bumps pihole/pihole to 2026.05.0 without changing
 # the chart version. The 2026.05.0 release bundles FTL v6.6.2 which
 # imports 6 upstream dnsmasq CVE fixes (covering the dnsmasq 2.92/2.93
 # disclosures). No FTL-side config or API changes per the release notes.
 # https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.05.0
 image:
  tag: "2026.05.0"
 DNS1: "1.1.1.1"   # Cloudflare
 DNS2: "8.8.8.8"   # Google
 DNS3: "9.9.9.9"   #Quad9
@@ -395,7 +395,7 @@ spec:
    spec:
      containers:
        - name: nextcloud
-          image: docker.io/library/nextcloud:33.0.4-apache
+          image: docker.io/library/nextcloud:33.0.5-apache
          imagePullPolicy: IfNotPresent
          env:
            - name: SMTP_HOST
@@ -45,7 +45,7 @@ spec:
          # Renovate handles it via a customManagers regex defined in
          # admin-system/renovate.yaml (the kubernetes manager doesn't
          # process inline `# renovate:` comments).
-          image: ghcr.io/lukegus/termix:release-1.11.2
+          image: ghcr.io/lukegus/termix:release-2.3.2
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
Author	SHA1	Message	Date
admin	9e020af94d	pihole: bump image to 2026.05.0 (dnsmasq CVE security release) Pi-hole 2026.05.0 bundles FTL v6.6.2 which imports six upstream dnsmasq security fixes, covering all publicly disclosed CVEs against the dnsmasq 2.92/2.93 line. Per the upstream release notes the fixes are "minimal, self-contained changes to the embedded dnsmasq sources. No FTL-side configuration or API changes; users should see no observable behavior change beyond the closed vulnerabilities." Override the chart's default image.tag in helm/pihole/values.yaml (no chart version bump). The pihole ArgoCD app is intentionally MANUAL sync per Viktor's call -- after merge, sync the pihole app from the ArgoCD UI to roll the pod over. https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.05.0 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-06-06 12:55:58 +02:00
admin	ec9ae43bee	Merge pull request 'termix: manual bump 1.11.2 -> 2.3.2 (Renovate blocked by DH rate-limit)' (#80 ) from feat/termix-v2.3.2 into main	2026-06-06 09:16:02 +00:00
admin	e822b76982	termix: manual bump 1.11.2 -> 2.3.2 (Renovate blocked by DH rate-limit) Renovate's `Pending Approval` checkbox for the termix v2 major was ticked on Dashboard #6, but the manual Renovate runs that should have processed it both aborted on Docker Hub's authenticated rate-limit: HTTP 429: You have reached your pull rate limit as 'kisfenyo' The free DH plan caps authenticated pulls at 100/6h; with ~270 deps in this repo and the multiple runs we've done today, we've exhausted it. Renovate's behavior on a host 429 is to abort the entire repository run (`result: external-host-error`), so no further work — including ticked dashboard approvals — gets done until the quota window resets. Rather than wait ~3-4 hours, this PR does the bump by hand. Upstream ghcr.io/lukegus/termix:release-2.3.2 is verified present (Termix-SSH GitHub Release of 2026-06-04). Termix is stateless (host/cred config stored in PocketBase but compatible across release-1 and release-2), so the rollout should be a straightforward image swap. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-06-06 11:16:00 +02:00
admin	876b044d0a	Merge pull request 'fix: roll back immich-postgres v17 -> v16 (PG major incompat) + gate postgres-family' (#79 ) from fix/immich-postgres-rollback into main	2026-06-06 09:00:33 +00:00
admin	99bbc31325	Merge pull request 'Update docker.io/library/nextcloud Docker tag to v33.0.5' (#78 ) from renovate/docker.io-library-nextcloud-33.x into main	2026-06-06 09:00:24 +00:00
Renovate Bot	fee5fafeb0	Update docker.io/library/nextcloud Docker tag to v33.0.5 renovate/stability-days Updates have not met minimum release age requirement Details	2026-06-06 09:00:21 +00:00