Comment on Vaultwarden security update Feb 10 2026

tofu@lemmy.nocturnal.garden ⁨1⁩ ⁨month⁩ ago

• Natanox@discuss.tchncs.de ⁨1⁩ ⁨month⁩ ago

  Renovate?

  source

  • tofu@lemmy.nocturnal.garden ⁨1⁩ ⁨month⁩ ago

    I have all my compose stacks in git. They’re deployed from their git repos with Komodo.

    Renovate is a bot that checks git repos for dependencies (mostly container images in this case) and checks if there’s a newer version available. If yes, it creates a merge request to update the version. I review the requests and merge, then the updated compose stack gets deployed with Komodo. It’s a great semi automatic way to handle updates without giving up control.

    There’s a nice how to here: nickcunningh.am/…/how-to-automate-version-updates…

    source
  • qaz@lemmy.world ⁨1⁩ ⁨month⁩ ago

    It’s a bot to create PR’s with dependency updates

    source

    • Natanox@discuss.tchncs.de ⁨1⁩ ⁨month⁩ ago

      Might be a stupid question, but how are PR’s connected to your server deployment?

      source

      • tofu@lemmy.nocturnal.garden ⁨1⁩ ⁨month⁩ ago

        Copying my other comment. It opens PRs to change the tag from the docker image.

        I have all my compose stacks in git. They’re deployed from their git repos with Komodo.

        Renovate is a bot that checks git repos for dependencies (mostly container images in this case) and checks if there’s a newer version available. If yes, it creates a merge request to update the version. I review the requests and merge, then the updated compose stack gets deployed with Komodo. It’s a great semi automatic way to handle updates without giving up control.

        There’s a nice how to here: nickcunningh.am/…/how-to-automate-version-updates…

        source
• motruck@lemmy.zip ⁨1⁩ ⁨month⁩ ago

  Renovate? Hrmmmm

  source

  • tofu@lemmy.nocturnal.garden ⁨1⁩ ⁨month⁩ ago

    Hrmmm?

    source