krautit/containers
4
0
Fork 0
Code Issues 1 Pull requests Activity

Update dependency pixelfed/pixelfed to v0.15.2 #18

Merged
renovate merged 1 commit from renovate/pixelfed-pixelfed-0.x into main 2026-10-22 23:07:17 +00:00
Conversation 1 Commits 1 Files changed 1 +2 -2
renovate commented 2026-10-22 23:00:34 +00:00
Member
Copy link

This PR contains the following updates:

Package Update Change
pixelfed/pixelfed minor v0.14.4 → v0.15.2

Release Notes

pixelfed/pixelfed

v0.15.2: - Security Update: PHP RCE + CA Update Compromise

Compare Source

Security and Notes

Please update your local packages for non-docker instances. ASAP!

image
What's Changed
Upgrade Notes
Official Docker upgrade guide

For people coming from git checkout v0.15.1

git fetch
git checkout v0.15.2
docker compose build --pull
docker compose up -d

# Recommended
docker compose exec pixelfed php artisan app:home-feed-rebuild --active 7 --local --network
Stand alone upgrade guide

This is not complete because everybody has their own snowflake of a server.


# Update your local PHP to PHP 8.5.12 / 8.4.27 at a minimum
# Update your ca-certificates package

git fetch
git checkout v0.15.2
composer install
php artisan config:cache
php artisan route:cache
php artisan migrate --force

# Recommended
php artisan app:home-feed-rebuild --active 7 --local --network

This will boot into the latest stable image and complete any outstanding database migrations. No additional commands required for this release.

PLEASE BACKUP YOUR SERVER/DATABASE BEFORE UPGRADING.

v0.15.1: - Fix Languages regression

Compare Source

What's Changed
  • Updated the language files based on the latest updates from Crowdin.
  • Update dependency laravel/framework to v13.37.0 by @​renovate[bot] in #​7726
Upgrade Notes
Official Docker upgrade guide

For people coming from git checkout v0.15.0

git fetch
git checkout v0.15.1
docker compose build --pull
docker compose up -d

This will boot into the latest stable image and complete any outstanding database migrations. No additional commands required for this release.

PLEASE BACKUP YOUR SERVER/DATABASE BEFORE UPGRADING.

v0.15.0

Compare Source

BREAKING CHANGES AND NOTES
  • Dropped PHP 8.3 - 8.4.1 is now the minimum version - We have updated every major PHP (Laravel) package via composer. Laravel, Symphony, Guzzle http, phpseclib, PEST, Math and many of them dropped PHP 8.3.
  • Package management has been moved from Dependabot to Renovate Bot.
  • Refactoring will continue as we work towards the new Nuxt based WebUI.
  • Please continue to submit issues and bugs to us, and make noise for any regressions!
New Contributors
What's Changed
Upgrade Notes
  • Includes DB migrations. Please make sure you run the php artisan migrate or similar (updates automatically in docker).
Official Docker upgrade guide

for people coming from git checkout v0.14.4

git fetch
git checkout v0.15.0
docker compose build --pull
docker compose up -d

This will boot into the latest stable Dockerfile and complete any outstanding database migrations. No additional commands required for this release.

PLEASE BACKUP YOUR SERVER/DATABASE BEFORE UPGRADING.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [pixelfed/pixelfed](https://github.com/pixelfed/pixelfed) | minor | `v0.14.4` → `v0.15.2` | --- ### Release Notes <details> <summary>pixelfed/pixelfed</summary> ### [`v0.15.2`](https://github.com/pixelfed/pixelfed/releases/tag/v0.15.2): - Security Update: PHP RCE + CA Update Compromise [Compare Source](https://github.com/pixelfed/pixelfed/compare/v0.15.1...v0.15.2) ##### Security and Notes - Our primary docker image was updated to 5.0.2 - <https://github.com/serversideup/docker-php/releases/tag/v5.0.2> (this includes the PHP security patching for 2 CVEs). - Details here: <https://www.php.net/archive/2026.php#2026-10-21-5> - Rebuilt release images with updated CAs - Details here: <https://emudhra.we-have-a-problem.com/> - Major refactoring will continue as we work towards the new Nuxt based WebUI. - Please continue to submit issues and bugs to us, and make noise for any regressions! > Please update your local packages for non-docker instances. ASAP! <img width="590" height="371" alt="image" src="https://github.com/user-attachments/assets/d651cf53-9ad5-4df8-955f-6a903e2064fa" /> ##### What's Changed * Remove EXP_CPT & EXP_CHT, and enabled cached timelines by default by @&#8203;shleeable in https://github.com/pixelfed/pixelfed/pull/7728 * A bunch of timeline related bug fixes and improvements * A bunch of non-timeline related bug fixes and improvements * Update dependency pestphp/pest to v5.3.3 by @&#8203;renovate[bot] in https://github.com/pixelfed/pixelfed/pull/7789 * Update dependency guzzlehttp/guzzle to v8.3.0 by @&#8203;renovate[bot] in https://github.com/pixelfed/pixelfed/pull/7790 * Update Helpers, improve webfinger handling by @&#8203;dansup in https://github.com/pixelfed/pixelfed/pull/7792 * Fix names by @&#8203;dansup in https://github.com/pixelfed/pixelfed/pull/7793 * Update 2026_10_07_000001_normalize_legacy_user_filter_morph_types.php by @&#8203;dansup in https://github.com/pixelfed/pixelfed/pull/7853 * ServerSideUp PHP v5 Upgrade by @&#8203;shleeable in https://github.com/pixelfed/pixelfed/pull/7880 ##### Upgrade Notes ##### Official Docker upgrade guide For people coming from `git checkout v0.15.1` ``` git fetch git checkout v0.15.2 docker compose build --pull docker compose up -d # Recommended docker compose exec pixelfed php artisan app:home-feed-rebuild --active 7 --local --network ``` ##### Stand alone upgrade guide This is not complete because everybody has their own snowflake of a server. ``` # Update your local PHP to PHP 8.5.12 / 8.4.27 at a minimum # Update your ca-certificates package git fetch git checkout v0.15.2 composer install php artisan config:cache php artisan route:cache php artisan migrate --force # Recommended php artisan app:home-feed-rebuild --active 7 --local --network ``` This will boot into the latest stable image and complete any outstanding database migrations. No additional commands required for this release. > PLEASE BACKUP YOUR SERVER/DATABASE BEFORE UPGRADING. ### [`v0.15.1`](https://github.com/pixelfed/pixelfed/releases/tag/v0.15.1): - Fix Languages regression [Compare Source](https://github.com/pixelfed/pixelfed/compare/v0.15.0...v0.15.1) ##### What's Changed - Updated the language files based on the latest updates from Crowdin. - Update dependency laravel/framework to v13.37.0 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;7726](https://github.com/pixelfed/pixelfed/pull/7726) ##### Upgrade Notes ##### Official Docker upgrade guide For people coming from `git checkout v0.15.0` ``` git fetch git checkout v0.15.1 docker compose build --pull docker compose up -d ``` This will boot into the latest stable image and complete any outstanding database migrations. No additional commands required for this release. > PLEASE BACKUP YOUR SERVER/DATABASE BEFORE UPGRADING. ### [`v0.15.0`](https://github.com/pixelfed/pixelfed/releases/tag/v0.15.0) [Compare Source](https://github.com/pixelfed/pixelfed/compare/v0.14.4...v0.15.0) ##### BREAKING CHANGES AND NOTES - Dropped PHP 8.3 - 8.4.1 is now the minimum version - We have updated every major PHP (Laravel) package via composer. Laravel, Symphony, Guzzle http, phpseclib, PEST, Math and many of them dropped PHP 8.3. - Package management has been moved from Dependabot to Renovate Bot. - Refactoring will continue as we work towards the new Nuxt based WebUI. - Please continue to submit issues and bugs to us, and make noise for any regressions! ##### New Contributors - [@&#8203;aalexanderdev](https://github.com/aalexanderdev) made their first contribution in [#&#8203;7677](https://github.com/pixelfed/pixelfed/pull/7677) - [@&#8203;dmathieu](https://github.com/dmathieu) made their first contribution in [#&#8203;7709](https://github.com/pixelfed/pixelfed/pull/7709) ##### What's Changed - Fix boost federation by sending the ActivityPub object id by [@&#8203;lilithmooncohen](https://github.com/lilithmooncohen) in [#&#8203;7591](https://github.com/pixelfed/pixelfed/pull/7591) - Update Dockerfile - ffmpeg v9.0.2 + libvips v8.18.7 by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7595](https://github.com/pixelfed/pixelfed/pull/7595) - Add FEP-6757 support. Fixes [#&#8203;7597](https://github.com/pixelfed/pixelfed/issues/7597) by [@&#8203;dansup](https://github.com/dansup) in [#&#8203;7598](https://github.com/pixelfed/pixelfed/pull/7598) - chore(deps): bump laravel/framework from 13.33.0 to 13.34.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;7611](https://github.com/pixelfed/pixelfed/pull/7611) - fix bug in StatusReplyPipeline.php + Add missing factories by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7619](https://github.com/pixelfed/pixelfed/pull/7619) - Enforce profile CW flag on local status edits by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7620](https://github.com/pixelfed/pixelfed/pull/7620) - Fix inReplyToUri permalink fallback for remote parents by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7621](https://github.com/pixelfed/pixelfed/pull/7621) - Fix locale by Normalizing changeLocale method by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7627](https://github.com/pixelfed/pixelfed/pull/7627) - Preserve ICC color profile across image resize re-encode by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7629](https://github.com/pixelfed/pixelfed/pull/7629) - Add Renovate configuration for dependency management by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7630](https://github.com/pixelfed/pixelfed/pull/7630) - Update max hashtag follow limit from 25 to 100 by [@&#8203;dansup](https://github.com/dansup) in [#&#8203;7674](https://github.com/pixelfed/pixelfed/pull/7674) - Fix update activity by [@&#8203;dansup](https://github.com/dansup) in [#&#8203;7683](https://github.com/pixelfed/pixelfed/pull/7683) - Enforce profile CW flag on compose media attachments and preserve spo… by [@&#8203;aalexanderdev](https://github.com/aalexanderdev) in [#&#8203;7677](https://github.com/pixelfed/pixelfed/pull/7677) - Update HandlesFollows, reject follows for moved accounts by [@&#8203;dansup](https://github.com/dansup) in [#&#8203;7685](https://github.com/pixelfed/pixelfed/pull/7685) - Fix Story View count hydration/sync bug by [@&#8203;dansup](https://github.com/dansup) in [#&#8203;7687](https://github.com/pixelfed/pixelfed/pull/7687) - Fix bookmarks endpoint by [@&#8203;dansup](https://github.com/dansup) in [#&#8203;7688](https://github.com/pixelfed/pixelfed/pull/7688) - Fix account lookup endpoint to properly support local accounts by [@&#8203;dansup](https://github.com/dansup) in [#&#8203;7689](https://github.com/pixelfed/pixelfed/pull/7689) - Fix undefined array key access in compose media handling by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7692](https://github.com/pixelfed/pixelfed/pull/7692) - Upgrade Pest to v5 by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7693](https://github.com/pixelfed/pixelfed/pull/7693) - Update phpseclib v4 and Laravel Passport v13.9 by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7691](https://github.com/pixelfed/pixelfed/pull/7691) - Update dependency guzzlehttp/guzzle to v8 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;7649](https://github.com/pixelfed/pixelfed/pull/7649) - Add account fields to reblogs to fix timeline view for mastodon clients by [@&#8203;intentionally-left-nil](https://github.com/intentionally-left-nil) in [#&#8203;7695](https://github.com/pixelfed/pixelfed/pull/7695) - Drop php 8.3 support by [@&#8203;dansup](https://github.com/dansup) in [#&#8203;7697](https://github.com/pixelfed/pixelfed/pull/7697) - Add account delete api route by [@&#8203;dansup](https://github.com/dansup) in [#&#8203;7698](https://github.com/pixelfed/pixelfed/pull/7698) - Update symfony packages to v8 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;7653](https://github.com/pixelfed/pixelfed/pull/7653) - Update dependency laravel/framework to v13.36.0 by [@&#8203;renovate](https://github.com/renovate)\[bot] in [#&#8203;7704](https://github.com/pixelfed/pixelfed/pull/7704) - Use the object id in like and undo like activities by [@&#8203;dmathieu](https://github.com/dmathieu) in [#&#8203;7709](https://github.com/pixelfed/pixelfed/pull/7709) - chore: upgrade brick/math to ^1.0 by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7720](https://github.com/pixelfed/pixelfed/pull/7720) - Use instance locale on guest pages by [@&#8203;shleeable](https://github.com/shleeable) in [#&#8203;7722](https://github.com/pixelfed/pixelfed/pull/7722) ##### Upgrade Notes - Includes DB migrations. Please make sure you run the php artisan migrate or similar (updates automatically in docker). ##### Official Docker upgrade guide for people coming from `git checkout v0.14.4` ``` git fetch git checkout v0.15.0 docker compose build --pull docker compose up -d ``` This will boot into the latest stable Dockerfile and complete any outstanding database migrations. No additional commands required for this release. > PLEASE BACKUP YOUR SERVER/DATABASE BEFORE UPGRADING. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzguMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE3OC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Update dependency pixelfed/pixelfed to v0.15.2
Some checks failed
ci/woodpecker/push/ci Pipeline failed
Details
ci/woodpecker/push/alpine Pipeline failed
Details
ci/woodpecker/push/cnpg-postgresql-immich Pipeline failed
Details
ci/woodpecker/push/pixelfed Pipeline failed
Details
ci/woodpecker/pr/pixelfed Pipeline failed
Details
8d7a7f294d
renovate scheduled this pull request to auto merge when all checks succeed 2026-10-22 23:00:34 +00:00
renovate commented 2026-10-22 23:00:34 +00:00
Author
Member
Copy link

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

  • Branch has one or more failed status checks
### Branch automerge failure This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead. ___ * Branch has one or more failed status checks
renovate deleted branch renovate/pixelfed-pixelfed-0.x 2026-10-22 23:07:17 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
krautit/containers!18
No description provided.