Comment on Vaultwarden security update Feb 10 2026

• tofu@lemmy.nocturnal.garden ⁨1⁩ ⁨month⁩ ago

  I have all my compose stacks in git. They’re deployed from their git repos with Komodo.

  Renovate is a bot that checks git repos for dependencies (mostly container images in this case) and checks if there’s a newer version available. If yes, it creates a merge request to update the version. I review the requests and merge, then the updated compose stack gets deployed with Komodo. It’s a great semi automatic way to handle updates without giving up control.

  There’s a nice how to here: nickcunningh.am/…/how-to-automate-version-updates…

  source
• qaz@lemmy.world ⁨1⁩ ⁨month⁩ ago

  It’s a bot to create PR’s with dependency updates

  source

  • Natanox@discuss.tchncs.de ⁨1⁩ ⁨month⁩ ago

    Might be a stupid question, but how are PR’s connected to your server deployment?

    source

    • tofu@lemmy.nocturnal.garden ⁨1⁩ ⁨month⁩ ago

      Copying my other comment. It opens PRs to change the tag from the docker image.

      I have all my compose stacks in git. They’re deployed from their git repos with Komodo.

      Renovate is a bot that checks git repos for dependencies (mostly container images in this case) and checks if there’s a newer version available. If yes, it creates a merge request to update the version. I review the requests and merge, then the updated compose stack gets deployed with Komodo. It’s a great semi automatic way to handle updates without giving up control.

      There’s a nice how to here: nickcunningh.am/…/how-to-automate-version-updates…

      source