Skip to content

feat(container): update image vaultwarden/server ( 1.34.3 → 1.35.4 )#576

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/vaultwarden-server-1.x
Open

feat(container): update image vaultwarden/server ( 1.34.3 → 1.35.4 )#576
renovate[bot] wants to merge 1 commit intomainfrom
renovate/vaultwarden-server-1.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 28, 2025

This PR contains the following updates:

Package Update Change
vaultwarden/server minor 1.34.31.35.4

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

dani-garcia/vaultwarden (vaultwarden/server)

v1.35.4

Compare Source

Security Fixes

This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.

  • GHSA-w9f8-m526-h7fh. This vulnerability would allow an attacker to access a cipher from a different user (fully encrypted) if they already know its internal UUID.
  • GHSA-h4hq-rgvh-wh27. This vulnerability allows an attacker with manager-level access within an organization to modify collections they can access, even if they do not have management permissions for them.
  • GHSA-r32r-j5jq-3w4m. This vulnerability allows an attacker with manager-level access within an organization to modify collections they are not assigned.

These are private for now, pending CVE assignment.

What's Changed

New Contributors

Full Changelog: dani-garcia/vaultwarden@1.35.3...1.35.4

v1.35.3

Compare Source

Security Fixes

This release contains security fixes for the following advisory. We strongly advice to update as soon as possible if you believe it could affect you.

  • GHSA-h265-g7rm-h337 (Publication in process, waiting for CVE assignment)
    This vulnerability would allow an authenticated attacker that is part of an organization to access items from collections to which the attacker does not belong.
What's Changed

Full Changelog: dani-garcia/vaultwarden@1.35.2...1.35.3

v1.35.2

Compare Source

Notable changes

Fixed an issue with the web-vault which prevent creating an organization.

What's Changed

Full Changelog: dani-garcia/vaultwarden@1.35.1...1.35.2

v1.35.1

Compare Source

Notable changes
  • Fixed issue with applications being logged out after upgrading due to changes to refresh token parsing
  • Updated web vault to 2025.12.1
  • Correctly publish alpine tag, which was missing in 1.35.0
What's Changed

Full Changelog: dani-garcia/vaultwarden@1.35.0...1.35.1

v1.35.0

Compare Source

Notable changes
What's Changed
New Contributors

Full Changelog: dani-garcia/vaultwarden@1.34.3...1.35.0


Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link

github-actions bot commented Dec 28, 2025

--- kubernetes/apps/services/vaultwarden/app Kustomization: services/vaultwarden HelmRelease: services/vaultwarden

+++ kubernetes/apps/services/vaultwarden/app Kustomization: services/vaultwarden HelmRelease: services/vaultwarden

@@ -30,13 +30,13 @@

             envFrom:
             - secretRef:
                 name: vaultwarden-secrets
             image:
               pullPolicy: IfNotPresent
               repository: vaultwarden/server
-              tag: 1.34.3@sha256:84fd8a47f58d79a1ad824c27be0a9492750c0fa5216b35c749863093bfa3c3d7
+              tag: 1.35.4@sha256:43498a94b22f9563f2a94b53760ab3e710eefc0d0cac2efda4b12b9eb8690664
         strategy: Recreate
     ingress:
       main:
         annotations:
           error-pages.home.arpa/enabled: 'true'
           external-dns.alpha.kubernetes.io/target: external...PLACEHOLDER_SECRET_DOMAIN..

@github-actions
Copy link

github-actions bot commented Dec 28, 2025

--- HelmRelease: services/vaultwarden Deployment: services/vaultwarden

+++ HelmRelease: services/vaultwarden Deployment: services/vaultwarden

@@ -36,13 +36,13 @@

       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
       - envFrom:
         - secretRef:
             name: vaultwarden-secrets
-        image: vaultwarden/server:1.34.3@sha256:84fd8a47f58d79a1ad824c27be0a9492750c0fa5216b35c749863093bfa3c3d7
+        image: vaultwarden/server:1.35.4@sha256:43498a94b22f9563f2a94b53760ab3e710eefc0d0cac2efda4b12b9eb8690664
         imagePullPolicy: IfNotPresent
         name: main
         volumeMounts:
         - mountPath: /data
           name: data
       volumes:

@renovate renovate bot changed the title feat(container): update image vaultwarden/server ( 1.34.3 → 1.35.0 ) feat(container): update image vaultwarden/server ( 1.34.3 → 1.35.1 ) Dec 30, 2025
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 9e0ed58 to 187357f Compare December 30, 2025 18:00
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch 2 times, most recently from d54ad45 to 59ec5e4 Compare January 9, 2026 20:42
@renovate renovate bot changed the title feat(container): update image vaultwarden/server ( 1.34.3 → 1.35.1 ) feat(container): update image vaultwarden/server ( 1.34.3 → 1.35.2 ) Jan 9, 2026
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 59ec5e4 to c7773e0 Compare January 23, 2026 18:12
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from c7773e0 to cebe9a0 Compare February 2, 2026 21:43
@renovate renovate bot changed the title feat(container): update image vaultwarden/server ( 1.34.3 → 1.35.2 ) feat(container): update image vaultwarden/server ( 1.34.3 → 1.35.3 ) Feb 10, 2026
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from cebe9a0 to 1a533ee Compare February 10, 2026 21:43
@renovate renovate bot changed the title feat(container): update image vaultwarden/server ( 1.34.3 → 1.35.3 ) feat(container): update image vaultwarden/server ( 1.34.3 → 1.35.4 ) Feb 23, 2026
@renovate renovate bot force-pushed the renovate/vaultwarden-server-1.x branch from 1a533ee to b1060e4 Compare February 23, 2026 22:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants