Skip to content

feat(container)!: Update image ghcr.io/gethomepage/homepage ( v1.13.2 → v2.1.2 ) - #10026

Open
tyriis-automation[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-gethomepage-homepage-2.x
Open

feat(container)!: Update image ghcr.io/gethomepage/homepage ( v1.13.2 → v2.1.2 )#10026
tyriis-automation[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-gethomepage-homepage-2.x

Conversation

@tyriis-automation

@tyriis-automation tyriis-automation Bot commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change OpenSSF
ghcr.io/gethomepage/homepage major v1.13.2v2.1.2 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

gethomepage/homepage (ghcr.io/gethomepage/homepage)

v2.1.2

Compare Source

What's Changed
🐛 Fixes

v2.1.1

Compare Source

⚠️ Note: version 2.1.1 contains an error with parsing YAML configuration files that may affect some users, please upgrade to 2.1.2 to bypass that issue.

What's Changed
🧰 Maintenance
🌐 Translations

v2.1.0

Compare Source

What's Changed
🚀 Features
🐛 Fixes
🧰 Maintenance
🌐 Translations

v2.0.0

Compare Source

What's Changed
⚠️ Breaking Changes
🚀 Features
🐛 Fixes
🧰 Maintenance
🌐 Translations
📚 Documentation

Configuration

📅 Schedule: (in timezone Europe/Vienna)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@tyriis-automation

tyriis-automation Bot commented Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

flate diff (main)

@@ spec.values.controllers.homepage.containers.main.image.tag @@
# helm.toolkit.fluxcd.io/v2/HelmRelease/default/homepage
! ± value change
- v1.13.2@sha256:a0b71c8e757298d02560186bab9fbe3fc2d375c523a62cc1019177b37e48aa28
+ v2.1.2@sha256:da9dca9ec258c628146bed1445da0853f2b88f0b10bafd97c091de807c363d60

@@ spec.template.spec.containers.main.image @@
# apps/v1/Deployment/default/homepage
! ± value change
- ghcr.io/gethomepage/homepage:v1.13.2@sha256:a0b71c8e757298d02560186bab9fbe3fc2d375c523a62cc1019177b37e48aa28
+ ghcr.io/gethomepage/homepage:v2.1.2@sha256:da9dca9ec258c628146bed1445da0853f2b88f0b10bafd97c091de807c363d60

@tyriis-automation

tyriis-automation Bot commented Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ EDITORCONFIG editorconfig-checker 1 0 0 0.68s
✅ REPOSITORY betterleaks yes no no 1.31s
✅ YAML prettier 1 0 0 0.54s
✅ YAML yamllint 1 0 0 1.07s

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@tyriis-automation

tyriis-automation Bot commented Aug 14, 2026

Copy link
Copy Markdown
Contributor Author

konflate — summary

Note

+0 added · 2 changed · −0 removed — 2 resources · 2 apps

Tip

Routine — only container-image and chart-version changes; nothing else changed.

Image changes

image from to
ghcr.io/gethomepage/homepage sha256:a0b71c8e7572… sha256:da9dca9ec258…

View the full rendered diff →

konflate · rendered 775293a · advisory, not a gate

@jazzlyn

jazzlyn commented Aug 19, 2026

Copy link
Copy Markdown
Collaborator

What actually changed in v2.0.0

The "breaking" item is homepage auth (gethomepage/homepage#6769) — a new, opt-in authentication gate:

  • Enabled only when HOMEPAGE_AUTH_ENABLED=true is set
  • Requires HOMEPAGE_AUTH_SECRET, HOMEPAGE_EXTERNAL_URL, and either HOMEPAGE_AUTH_PASSWORD (password) or HOMEPAGE_OIDC_* (OIDC)
  • Without these, the dashboard works exactly as before

What your deployment looks like today

  • Exposed at home.techtales.io via envoy (helm-release.yaml:79-88)
  • HOMEPAGE_ALLOWED_HOSTS: home.techtales.io, no auth env vars
  • No envoy-pocketid component applied to the homepage flux-sync.yaml (unlike echo-server, which secures itself via components: ../../../../../components/envoy-pocketid + postBuild.substitute)

So homepage is currently unauthenticated.

What can be done?

A. Use homepage's new built-in auth (v2 feature) — add HOMEPAGE_AUTH_ENABLED, HOMEPAGE_AUTH_SECRET, HOMEPAGE_AUTH_PASSWORD, HOMEPAGE_EXTERNAL_URL=https://home.techtales.io, with the secret stored in OpenBao and pulled via ExternalSecret.

B. Use the repo's existing Pocket ID edge-auth — mirror echo-server: add components: envoy-pocketid + postBuild.substitute to the homepage flux-sync.yaml. No homepage config change; consistent with how the rest of the cluster is secured.

See also: #8026

@jazzlyn
jazzlyn requested a review from tyriis August 19, 2026 20:19
@jazzlyn

jazzlyn commented Aug 19, 2026

Copy link
Copy Markdown
Collaborator

safe to merge

@tyriis-automation
tyriis-automation Bot force-pushed the renovate/ghcr.io-gethomepage-homepage-2.x branch from 9030152 to cc39a89 Compare August 21, 2026 03:10
@tyriis-automation tyriis-automation Bot changed the title feat(container)!: Update image ghcr.io/gethomepage/homepage ( v1.13.2 → v2.0.0 ) feat(container)!: Update image ghcr.io/gethomepage/homepage ( v1.13.2 → v2.1.0 ) Aug 21, 2026
@tyriis-automation
tyriis-automation Bot force-pushed the renovate/ghcr.io-gethomepage-homepage-2.x branch from cc39a89 to 21f7f64 Compare August 21, 2026 16:42
@tyriis-automation tyriis-automation Bot changed the title feat(container)!: Update image ghcr.io/gethomepage/homepage ( v1.13.2 → v2.1.0 ) feat(container)!: Update image ghcr.io/gethomepage/homepage ( v1.13.2 → v2.1.1 ) Aug 21, 2026
… → v2.1.2 )

| datasource | package                      | from    | to     |
| ---------- | ---------------------------- | ------- | ------ |
| docker     | ghcr.io/gethomepage/homepage | v1.13.2 | v2.1.2 |
@tyriis-automation
tyriis-automation Bot force-pushed the renovate/ghcr.io-gethomepage-homepage-2.x branch from 21f7f64 to 775293a Compare August 21, 2026 17:34
@tyriis-automation tyriis-automation Bot changed the title feat(container)!: Update image ghcr.io/gethomepage/homepage ( v1.13.2 → v2.1.1 ) feat(container)!: Update image ghcr.io/gethomepage/homepage ( v1.13.2 → v2.1.2 ) Aug 21, 2026
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant