Update all stable non-major dependencies #73

Open
renovate wants to merge 1 commit from renovate/all-stable-minor-patch into main
Member

This PR contains the following updates:

Package Update Change
docker.io/binwiederhier/ntfy (source) minor v2.17.0v2.19.2
docker.io/grafana/grafana patch 12.4.012.4.1
docker.io/library/nginx patch 1.29.51.29.6
docker.io/matrixdotorg/mjolnir patch v1.12.0v1.12.1
netbox patch v4.5.4v4.5.5
quay.io/oauth2-proxy/oauth2-proxy (source) minor v7.14.3v7.15.0

Release Notes

binwiederhier/ntfy (docker.io/binwiederhier/ntfy)

v2.19.2

Compare Source

This is another small bugfix release for PostgreSQL, avoiding races between primary and read replica, as well as to further reduce primary load.

Bug fixes + maintenance:

  • Fix race condition in web push subscription causing FK constraint violation when concurrent requests hit the same endpoint
  • Route authorization query to read-only database replica to reduce primary database load

v2.19.1

Compare Source

This is a bugfix release to avoid PostgreSQL insert failures due to invalid UTF-8 messages. It also fixes database-url validation incorrectly rejecting postgresql:// connection strings.

Bug fixes + maintenance:

  • Fix invalid UTF-8 in HTTP headers (e.g. Latin-1 encoded text) causing PostgreSQL insert failures and dropping entire message batches
  • Fix database-url validation rejecting postgresql:// connection strings (#​1657/#​1658)

v2.19.0

Compare Source

This is a fast-follow release that enables Postgres read replica support.

To offload read-heavy queries from the primary database, you can optionally configure one or more read replicas using the database-replica-urls option. When configured, non-critical read-only queries (e.g. fetching messages, checking access permissions, etc) are distributed across the replicas using round-robin, while all writes and correctness-critical reads continue to go to the primary. If a replica becomes unhealthy, ntfy automatically falls back to the primary until the replica recovers.

Features:

Bug fixes + maintenance:

  • Web: Throttle notification sound in web app to play at most once every 2 seconds (similar to #​1550, thanks to @​jlaffaye for reporting)
  • Web: Add hover tooltips to icon buttons in web app account and preferences pages (#​1565, thanks to @​jermanuts for reporting)

v2.18.0

Compare Source

This is the biggest release I've ever done on the server. It's 14,997 added lines of code, and 10,202 lines removed, all from one pull request that adds PostgreSQL support.

The code was written by Cursor and Claude, but reviewed and heavily tested over 2-3 weeks by me. I created comparison documents, went through all queries multiple times and reviewed the logic over and over again. I also did load tests and manual regression tests, which took lots of evenings.

ntfy.sh was successfully upgraded to 2.18.0 (though not with Postgres backend yet, as per the rollout plan).

I'm kindly asking the community to test the Postgres support and report back to me if things are working (or not working). There is a one-off migration tool (entirely written by AI) that you can use to migrate.

Features:

Bug fixes + maintenance:

grafana/grafana (docker.io/grafana/grafana)

v12.4.1

Compare Source

Features and enhancements
Bug fixes
  • AccessControl: Fix test utility for datasource deletion permissions cleanup (Enterprise)
  • Alerting: Change scope for testing new receivers to use supported resource type. #​118495, @​yuri-tceretian
  • Alerting: Fix CollateAlertRuleGroup migration for MariaDB compatibility #​119028, @​alexander-akhmetov
netbox-community/netbox (netbox)

v4.5.5: - 2026-03-17

Compare Source

Enhancements
  • #​21114 - Support path exclusions for data source synchronization
  • #​21578 - Support identifying scope object by name or slug when bulk importing scoped objects
Performance Improvements
  • #​21330 - Optimize the assignment of tags when saving objects
  • #​21402 - Avoid excessive database queries when rendering unnamed devices via the REST API
  • #​21611 - Replace inefficient calls to .count() with .exists()
Bug Fixes
  • #​19867 - Preserve the "per page" pagination setting when returning from object edit forms
  • #​20077 - Fix form field focus bug in Microsoft Edge
  • #​20385 - Enforce MAX_PAGE_SIZE limit for GraphQL API requests
  • #​20468 - Fix range-based filter lookups for integer fields in GraphQL API
  • #​20915 - Restore user language preference after login via social authentication
  • #​20934 - Fix dark mode flicker on page load
  • #​21012 - Add pagination for VLAN table on interface view to prevent silent truncation at 100 entries
  • #​21380 - Fix display of the background tasks table on mobile
  • #​21440 - Avoid erroneously clearing primary/OOB IP assignments during bulk import/update
  • #​21468 - Preserve safe custom HTTP headers when copying requests for background job processing
  • #​21486 - Fix AttributeError exception caused by missing COOKIES attribute on NetBoxFakeRequest
  • #​21512 - Fix GraphQL filter field name mismatch for device component types (e.g. console_ports)
  • #​21531 - Fix search functionality for location when combined with other filters
  • #​21556 - Avoid clearing the platform field when changing device type in the device edit form
  • #​21579 - Hide the script "Add" button for users lacking the required permission
  • #​21580 - Hide the virtual machine "Add components" dropdown for users lacking change permission
  • #​21586 - Fix broken "Add child group" link in site group view (was pointing to the region endpoint)
  • #​21618 - Fix cable termination points being lost when bulk-editing the cable profile
  • #​21651 - Disable sorting by the is_primary column in the MAC address list view
  • #​21653 - Fix profile-based cable tracing when a single origin carries multiple positions
  • #​21673 - Fix display of primary IP address with associated NAT IP on virtual machine view
  • #​21686 - Clean up cached circuit attributes when reassigning a circuit termination
oauth2-proxy/oauth2-proxy (quay.io/oauth2-proxy/oauth2-proxy)

v7.15.0

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/binwiederhier/ntfy](https://ntfy.sh/) ([source](https://github.com/binwiederhier/ntfy)) | minor | `v2.17.0` → `v2.19.2` | | [docker.io/grafana/grafana](https://github.com/grafana/grafana) | patch | `12.4.0` → `12.4.1` | | docker.io/library/nginx | patch | `1.29.5` → `1.29.6` | | docker.io/matrixdotorg/mjolnir | patch | `v1.12.0` → `v1.12.1` | | [netbox](https://github.com/netbox-community/netbox) | patch | `v4.5.4` → `v4.5.5` | | [quay.io/oauth2-proxy/oauth2-proxy](https://quay.io/oauth2-proxy/oauth2-proxy) ([source](https://github.com/oauth2-proxy/oauth2-proxy)) | minor | `v7.14.3` → `v7.15.0` | --- ### Release Notes <details> <summary>binwiederhier/ntfy (docker.io/binwiederhier/ntfy)</summary> ### [`v2.19.2`](https://github.com/binwiederhier/ntfy/releases/tag/v2.19.2) [Compare Source](https://github.com/binwiederhier/ntfy/compare/v2.19.1...v2.19.2) This is another small bugfix release for PostgreSQL, avoiding races between primary and read replica, as well as to further reduce primary load. **Bug fixes + maintenance:** - Fix race condition in web push subscription causing FK constraint violation when concurrent requests hit the same endpoint - Route authorization query to read-only database replica to reduce primary database load ### [`v2.19.1`](https://github.com/binwiederhier/ntfy/releases/tag/v2.19.1) [Compare Source](https://github.com/binwiederhier/ntfy/compare/v2.19.0...v2.19.1) This is a bugfix release to avoid PostgreSQL insert failures due to invalid UTF-8 messages. It also fixes `database-url` validation incorrectly rejecting `postgresql://` connection strings. **Bug fixes + maintenance:** - Fix invalid UTF-8 in HTTP headers (e.g. Latin-1 encoded text) causing PostgreSQL insert failures and dropping entire message batches - Fix `database-url` validation rejecting `postgresql://` connection strings ([#&#8203;1657](https://github.com/binwiederhier/ntfy/issues/1657)/[#&#8203;1658](https://github.com/binwiederhier/ntfy/pull/1658)) ### [`v2.19.0`](https://github.com/binwiederhier/ntfy/releases/tag/v2.19.0) [Compare Source](https://github.com/binwiederhier/ntfy/compare/v2.18.0...v2.19.0) This is a fast-follow release that enables Postgres read replica support. To offload read-heavy queries from the primary database, you can optionally configure one or more read replicas using the `database-replica-urls` option. When configured, non-critical read-only queries (e.g. fetching messages, checking access permissions, etc) are distributed across the replicas using round-robin, while all writes and correctness-critical reads continue to go to the primary. If a replica becomes unhealthy, ntfy automatically falls back to the primary until the replica recovers. **Features:** - Support [PostgreSQL read replicas](https://docs.ntfy.sh/config/#postgresql-experimental) for offloading non-critical read queries via `database-replica-urls` config option ([#&#8203;1648](https://github.com/binwiederhier/ntfy/pull/1648)) - Add interactive [config generator](https://docs.ntfy.sh/config/#config-generator) to the documentation to help create server configuration files ([#&#8203;1654](https://github.com/binwiederhier/ntfy/pull/1654)) **Bug fixes + maintenance:** - Web: Throttle notification sound in web app to play at most once every 2 seconds (similar to [#&#8203;1550](https://github.com/binwiederhier/ntfy/issues/1550), thanks to [@&#8203;jlaffaye](https://github.com/jlaffaye) for reporting) - Web: Add hover tooltips to icon buttons in web app account and preferences pages ([#&#8203;1565](https://github.com/binwiederhier/ntfy/issues/1565), thanks to [@&#8203;jermanuts](https://github.com/jermanuts) for reporting) ### [`v2.18.0`](https://github.com/binwiederhier/ntfy/releases/tag/v2.18.0) [Compare Source](https://github.com/binwiederhier/ntfy/compare/v2.17.0...v2.18.0) This is the biggest release I've ever done on the server. It's 14,997 added lines of code, and 10,202 lines removed, all from one [pull request](https://github.com/binwiederhier/ntfy/pull/1619) that adds [PostgreSQL support](https://docs.ntfy.sh/config/#postgresql-experimental). The code was written by Cursor and Claude, but reviewed and heavily tested over 2-3 weeks by me. I created comparison documents, went through all queries multiple times and reviewed the logic over and over again. I also did load tests and manual regression tests, which took lots of evenings. ntfy.sh was successfully upgraded to 2.18.0 (though not with Postgres backend yet, as per the [rollout plan](https://github.com/binwiederhier/ntfy/issues/1114#issuecomment-3991245185)). I'm kindly asking the community to test the Postgres support and report back to me if things are working (or not working). There is a [one-off migration tool](https://github.com/binwiederhier/ntfy/tree/main/tools/pgimport) (entirely written by AI) that you can use to migrate. **Features:** - Add experimental [PostgreSQL support](https://docs.ntfy.sh/config/#postgresql-experimental) as an alternative database backend (message cache, user manager, web push subscriptions) via `database-url` config option ([#&#8203;1114](https://github.com/binwiederhier/ntfy/issues/1114)/[#&#8203;1619](https://github.com/binwiederhier/ntfy/pull/1619), thanks to [@&#8203;brettinternet](https://github.com/brettinternet) for reporting) **Bug fixes + maintenance:** - Preserve `<br>` line breaks in HTML-only emails received via SMTP ([#&#8203;690](https://github.com/binwiederhier/ntfy/issues/690), [#&#8203;1620](https://github.com/binwiederhier/ntfy/pull/1620), thanks to [@&#8203;uzkikh](https://github.com/uzkikh) for the fix and to [@&#8203;teastrainer](https://github.com/teastrainer) for reporting) </details> <details> <summary>grafana/grafana (docker.io/grafana/grafana)</summary> ### [`v12.4.1`](https://github.com/grafana/grafana/blob/HEAD/CHANGELOG.md#1241-2026-03-09) [Compare Source](https://github.com/grafana/grafana/compare/v12.4.0...v12.4.1) ##### Features and enhancements - **AccessControl:** Invalidate scope resolver cache on datasource deletion [#&#8203;118741](https://github.com/grafana/grafana/pull/118741), [@&#8203;mihai-turdean](https://github.com/mihai-turdean) - **Go:** Update to 1.25.8 [#&#8203;119693](https://github.com/grafana/grafana/pull/119693), [@&#8203;macabu](https://github.com/macabu) - **Rendering:** Add support for custom CA certs in Image Renderer [#&#8203;118859](https://github.com/grafana/grafana/pull/118859), [@&#8203;mrevutskyi](https://github.com/mrevutskyi) ##### Bug fixes - **AccessControl:** Fix test utility for datasource deletion permissions cleanup (Enterprise) - **Alerting:** Change scope for testing new receivers to use supported resource type. [#&#8203;118495](https://github.com/grafana/grafana/pull/118495), [@&#8203;yuri-tceretian](https://github.com/yuri-tceretian) - **Alerting:** Fix CollateAlertRuleGroup migration for MariaDB compatibility [#&#8203;119028](https://github.com/grafana/grafana/pull/119028), [@&#8203;alexander-akhmetov](https://github.com/alexander-akhmetov) <!-- 12.4.1 END --> <!-- 12.3.5 START --> </details> <details> <summary>netbox-community/netbox (netbox)</summary> ### [`v4.5.5`](https://github.com/netbox-community/netbox/releases/tag/v4.5.5): - 2026-03-17 [Compare Source](https://github.com/netbox-community/netbox/compare/v4.5.4...v4.5.5) ##### Enhancements - [#&#8203;21114](https://github.com/netbox-community/netbox/issues/21114) - Support path exclusions for data source synchronization - [#&#8203;21578](https://github.com/netbox-community/netbox/issues/21578) - Support identifying scope object by name or slug when bulk importing scoped objects ##### Performance Improvements - [#&#8203;21330](https://github.com/netbox-community/netbox/issues/21330) - Optimize the assignment of tags when saving objects - [#&#8203;21402](https://github.com/netbox-community/netbox/issues/21402) - Avoid excessive database queries when rendering unnamed devices via the REST API - [#&#8203;21611](https://github.com/netbox-community/netbox/issues/21611) - Replace inefficient calls to `.count()` with `.exists()` ##### Bug Fixes - [#&#8203;19867](https://github.com/netbox-community/netbox/issues/19867) - Preserve the "per page" pagination setting when returning from object edit forms - [#&#8203;20077](https://github.com/netbox-community/netbox/issues/20077) - Fix form field focus bug in Microsoft Edge - [#&#8203;20385](https://github.com/netbox-community/netbox/issues/20385) - Enforce `MAX_PAGE_SIZE` limit for GraphQL API requests - [#&#8203;20468](https://github.com/netbox-community/netbox/issues/20468) - Fix range-based filter lookups for integer fields in GraphQL API - [#&#8203;20915](https://github.com/netbox-community/netbox/issues/20915) - Restore user language preference after login via social authentication - [#&#8203;20934](https://github.com/netbox-community/netbox/issues/20934) - Fix dark mode flicker on page load - [#&#8203;21012](https://github.com/netbox-community/netbox/issues/21012) - Add pagination for VLAN table on interface view to prevent silent truncation at 100 entries - [#&#8203;21380](https://github.com/netbox-community/netbox/issues/21380) - Fix display of the background tasks table on mobile - [#&#8203;21440](https://github.com/netbox-community/netbox/issues/21440) - Avoid erroneously clearing primary/OOB IP assignments during bulk import/update - [#&#8203;21468](https://github.com/netbox-community/netbox/issues/21468) - Preserve safe custom HTTP headers when copying requests for background job processing - [#&#8203;21486](https://github.com/netbox-community/netbox/issues/21486) - Fix `AttributeError` exception caused by missing `COOKIES` attribute on `NetBoxFakeRequest` - [#&#8203;21512](https://github.com/netbox-community/netbox/issues/21512) - Fix GraphQL filter field name mismatch for device component types (e.g. `console_ports`) - [#&#8203;21531](https://github.com/netbox-community/netbox/issues/21531) - Fix search functionality for location when combined with other filters - [#&#8203;21556](https://github.com/netbox-community/netbox/issues/21556) - Avoid clearing the platform field when changing device type in the device edit form - [#&#8203;21579](https://github.com/netbox-community/netbox/issues/21579) - Hide the script "Add" button for users lacking the required permission - [#&#8203;21580](https://github.com/netbox-community/netbox/issues/21580) - Hide the virtual machine "Add components" dropdown for users lacking change permission - [#&#8203;21586](https://github.com/netbox-community/netbox/issues/21586) - Fix broken "Add child group" link in site group view (was pointing to the region endpoint) - [#&#8203;21618](https://github.com/netbox-community/netbox/issues/21618) - Fix cable termination points being lost when bulk-editing the cable profile - [#&#8203;21651](https://github.com/netbox-community/netbox/issues/21651) - Disable sorting by the `is_primary` column in the MAC address list view - [#&#8203;21653](https://github.com/netbox-community/netbox/issues/21653) - Fix profile-based cable tracing when a single origin carries multiple positions - [#&#8203;21673](https://github.com/netbox-community/netbox/issues/21673) - Fix display of primary IP address with associated NAT IP on virtual machine view - [#&#8203;21686](https://github.com/netbox-community/netbox/issues/21686) - Clean up cached circuit attributes when reassigning a circuit termination </details> <details> <summary>oauth2-proxy/oauth2-proxy (quay.io/oauth2-proxy/oauth2-proxy)</summary> ### [`v7.15.0`](https://github.com/oauth2-proxy/oauth2-proxy/blob/HEAD/CHANGELOG.md#Changes-since-v7150) [Compare Source](https://github.com/oauth2-proxy/oauth2-proxy/compare/v7.14.3...v7.15.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNzcuOCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->
Update docker.io/binwiederhier/ntfy Docker tag to v2.18.0
All checks were successful
/ Ansible Lint (pull_request) Successful in 2m26s
/ Ansible Lint (push) Successful in 2m29s
ac74db2919
renovate force-pushed renovate/all-stable-minor-patch from ac74db2919
All checks were successful
/ Ansible Lint (pull_request) Successful in 2m26s
/ Ansible Lint (push) Successful in 2m29s
to 2c7220d944
All checks were successful
/ Ansible Lint (pull_request) Successful in 8m39s
/ Ansible Lint (push) Successful in 15m45s
2026-03-09 16:30:52 +01:00
Compare
renovate changed title from Update docker.io/binwiederhier/ntfy Docker tag to v2.18.0 to Update all stable non-major dependencies 2026-03-09 16:30:54 +01:00
renovate force-pushed renovate/all-stable-minor-patch from 2c7220d944
All checks were successful
/ Ansible Lint (pull_request) Successful in 8m39s
/ Ansible Lint (push) Successful in 15m45s
to d98f5365b1
All checks were successful
/ Ansible Lint (push) Successful in 3m0s
/ Ansible Lint (pull_request) Successful in 3m4s
2026-03-10 01:31:30 +01:00
Compare
renovate force-pushed renovate/all-stable-minor-patch from d98f5365b1
All checks were successful
/ Ansible Lint (push) Successful in 3m0s
/ Ansible Lint (pull_request) Successful in 3m4s
to 4c99da8ab9
All checks were successful
/ Ansible Lint (push) Successful in 2m56s
/ Ansible Lint (pull_request) Successful in 2m58s
2026-03-11 01:16:44 +01:00
Compare
renovate force-pushed renovate/all-stable-minor-patch from 4c99da8ab9
All checks were successful
/ Ansible Lint (push) Successful in 2m56s
/ Ansible Lint (pull_request) Successful in 2m58s
to 662688f7dc
All checks were successful
/ Ansible Lint (push) Successful in 2m31s
/ Ansible Lint (pull_request) Successful in 2m34s
2026-03-16 01:31:34 +01:00
Compare
renovate force-pushed renovate/all-stable-minor-patch from 662688f7dc
All checks were successful
/ Ansible Lint (push) Successful in 2m31s
/ Ansible Lint (pull_request) Successful in 2m34s
to b52f5c0e68
All checks were successful
/ Ansible Lint (pull_request) Successful in 2m33s
/ Ansible Lint (push) Successful in 2m36s
2026-03-16 03:03:25 +01:00
Compare
renovate force-pushed renovate/all-stable-minor-patch from b52f5c0e68
All checks were successful
/ Ansible Lint (pull_request) Successful in 2m33s
/ Ansible Lint (push) Successful in 2m36s
to b29514430b
All checks were successful
/ Ansible Lint (push) Successful in 2m45s
/ Ansible Lint (pull_request) Successful in 2m44s
2026-03-17 02:01:36 +01:00
Compare
renovate force-pushed renovate/all-stable-minor-patch from b29514430b
All checks were successful
/ Ansible Lint (push) Successful in 2m45s
/ Ansible Lint (pull_request) Successful in 2m44s
to 98213073a8
All checks were successful
/ Ansible Lint (pull_request) Successful in 2m28s
/ Ansible Lint (push) Successful in 2m30s
2026-03-18 02:16:43 +01:00
Compare
renovate force-pushed renovate/all-stable-minor-patch from 98213073a8
All checks were successful
/ Ansible Lint (pull_request) Successful in 2m28s
/ Ansible Lint (push) Successful in 2m30s
to 814b0b046c
All checks were successful
/ Ansible Lint (pull_request) Successful in 3m19s
/ Ansible Lint (push) Successful in 4m5s
2026-03-18 19:00:53 +01:00
Compare
All checks were successful
/ Ansible Lint (pull_request) Successful in 3m19s
/ Ansible Lint (push) Successful in 4m5s
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/all-stable-minor-patch:renovate/all-stable-minor-patch
git switch renovate/all-stable-minor-patch

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/all-stable-minor-patch
git switch renovate/all-stable-minor-patch
git rebase main
git switch main
git merge --ff-only renovate/all-stable-minor-patch
git switch renovate/all-stable-minor-patch
git rebase main
git switch main
git merge --no-ff renovate/all-stable-minor-patch
git switch main
git merge --squash renovate/all-stable-minor-patch
git switch main
git merge --ff-only renovate/all-stable-minor-patch
git switch main
git merge renovate/all-stable-minor-patch
git push origin main
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
CCCHH/ansible-infra!73
No description provided.