chore(deps): update pihole/pihole docker tag to v2026 #703

Open
renovate-bot wants to merge 1 commit from renovate/pihole-pihole-2026.x into main
Collaborator

This PR contains the following updates:

Package Update Change
pihole/pihole major 2025.11.1 -> 2026.04.0

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

pi-hole/docker-pi-hole (pihole/pihole)

v2026.04.0

Compare Source

New Contributors

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2026.02.0...2026.04.0

Component Release Notes
What's Changed (FTL v6.6)
Security Advisories
New Contributors

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.5...v6.6

What's Changed (Web v6.5)
Security Advisories
New Contributors

Full Changelog: https://github.com/pi-hole/web/compare/v6.4.1...v6.5

What's Changed (Core v6.4.1)
Security Advisories
New Contributors

Full Changelog: https://github.com/pi-hole/pi-hole/compare/v6.4...v6.4.1

v2026.02.0

Compare Source

What's Changed (Docker Specific)

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2025.11.1...2026.02.0


What's Changed (FTL v6.5)
New Contributors

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.4.1...v6.5

What's Changed (Web v6.4.1)

Also fixes two security advisories:

Full Changelog: https://github.com/pi-hole/web/compare/v6.4...v6.4.1

What's Changed (Core v6.4)

Full Changelog: https://github.com/pi-hole/pi-hole/compare/v6.3...v6.4


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [pihole/pihole](https://github.com/pi-hole/docker-pi-hole) | major | `2025.11.1` -> `2026.04.0` | --- > :warning: **Warning** > > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pi-hole/docker-pi-hole (pihole/pihole)</summary> ### [`v2026.04.0`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.04.0) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2026.02.0...2026.04.0) <!-- Release notes generated using configuration in .github/release.yml at master --> ##### What's Changed (Docker Specific - all related to CI/build) - Group dependabot PRs to reduce PR spam by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/docker-pi-hole/pull/2004 - ci: switch image publishing to docker/github-builder by [@&#8203;crazy-max](https://github.com/crazy-max) in https://github.com/pi-hole/docker-pi-hole/pull/2008 - Readme Rework by [@&#8203;PromoFaux](https://github.com/PromoFaux) in https://github.com/pi-hole/docker-pi-hole/pull/1958 - Replace Python test suite with BATS and consolidate workflows by [@&#8203;PromoFaux](https://github.com/PromoFaux) in https://github.com/pi-hole/docker-pi-hole/pull/2009 - Add timeout to curl command in branch validation by [@&#8203;RynoCODE](https://github.com/RynoCODE) in https://github.com/pi-hole/docker-pi-hole/pull/2011 - Use bats-assert library functions in BATS test suite by [@&#8203;Copilot](https://github.com/Copilot) in https://github.com/pi-hole/docker-pi-hole/pull/2018 - ci: run build job on pull request event by [@&#8203;crazy-max](https://github.com/crazy-max) in https://github.com/pi-hole/docker-pi-hole/pull/2021 - Update github-builder to v1.5.0 and enable fail-fast by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/docker-pi-hole/pull/2022 ##### New Contributors - [@&#8203;crazy-max](https://github.com/crazy-max) made their first contribution in https://github.com/pi-hole/docker-pi-hole/pull/2008 - [@&#8203;RynoCODE](https://github.com/RynoCODE) made their first contribution in https://github.com/pi-hole/docker-pi-hole/pull/2011 - [@&#8203;Copilot](https://github.com/Copilot) made their first contribution in https://github.com/pi-hole/docker-pi-hole/pull/2018 **Full Changelog**: https://github.com/pi-hole/docker-pi-hole/compare/2026.02.0...2026.04.0 ##### Component Release Notes <!-- Release notes generated using configuration in .github/release.yml at development --> ##### What's Changed (FTL v6.6) - Fix possible resolver issue on armv5tel by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2781 - Introduce CMake options for optional dependencies by [@&#8203;aeolio](https://github.com/aeolio) in https://github.com/pi-hole/FTL/pull/2795 - Fix build without mbedtls \[v2] by [@&#8203;aeolio](https://github.com/aeolio) in https://github.com/pi-hole/FTL/pull/2796 - Fix overTime data when database.DBimport = false by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2788 - Fix cross-compilation issues w/ custom toolchain by [@&#8203;aeolio](https://github.com/aeolio) in https://github.com/pi-hole/FTL/pull/2797 - Add new option for controling name resolution via MAC address by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2790 - Fix obtaining client groups by name by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2791 - Ensure API sessions are restored before starting the HTTP server by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2803 - Add form-action 'self' to Content-Security-Policy by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/FTL/pull/2804 - Add query_frequency to /padd endpoint by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/FTL/pull/2806 - Guard query-count counters against unsigned underflow by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2815 - Add universal crash backtrace via \_Unwind_Backtrace by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2811 - config: show totp_secret presence in CLI output by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2813 - Fix client count inflation for rate-limited queries by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2814 - Fix stack buffer overflow in get_process_name() by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2821 - Do not restart FTL while `pihole -g` is still ongoing by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2419 ##### Security Advisories - [GHSA-r7g8-3fj7-m5qq - Authorization bypass: CLI API sessions can import Teleporter archives and modify configuration](https://github.com/pi-hole/FTL/security/advisories/GHSA-r7g8-3fj7-m5qq) reported by [@&#8203;mzalzahrani](https://github.com/mzalzahrani) - Remote Code Execution (RCE) via Newline Injection in Multiple Configuration Parameters reported by [@&#8203;T0X1Cx](https://github.com/T0X1Cx) - [pi-hole/FTL/security/advisories/GHSA-vfmq-jrx3-wv3c](https://github.com/pi-hole/FTL/security/advisories/GHSA-vfmq-jrx3-wv3c) - [pi-hole/FTL/security/advisories/GHSA-wxhv-w77q-6qwp](https://github.com/pi-hole/FTL/security/advisories/GHSA-wxhv-w77q-6qwp) - [pi-hole/FTL/security/advisories/GHSA-28g5-gg88-wh5m](https://github.com/pi-hole/FTL/security/advisories/GHSA-28g5-gg88-wh5m) - [pi-hole/FTL/security/advisories/GHSA-fqv2-qhfh-ghcj](https://github.com/pi-hole/FTL/security/advisories/GHSA-fqv2-qhfh-ghcj) - [pi-hole/FTL/security/advisories/GHSA-23w8-7333-p9fj](https://github.com/pi-hole/FTL/security/advisories/GHSA-23w8-7333-p9fj) ##### New Contributors - [@&#8203;aeolio](https://github.com/aeolio) made their first contribution in https://github.com/pi-hole/FTL/pull/2795 **Full Changelog**: https://github.com/pi-hole/FTL/compare/v6.5...v6.6 <!-- Release notes generated using configuration in .github/release.yml at development --> ##### What's Changed (Web v6.5) - Amend teleporter help text that the long-term data is not included by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/web/pull/3721 - Do not use 3 columns when boxed layout is used by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/web/pull/3722 - Use <kbd>ENTER</kbd> instead of <kbd>⏎</kbd> by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/web/pull/3727 - Don't link to github releases if docker tag is nightly by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/web/pull/3718 - Do not try to compare component version when remote version info is not available by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/web/pull/3729 - Show loading overlay when adding/removing CNAME records as it requires a FTL restart by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/web/pull/3742 - fix: check on responseJSON when wrong password by [@&#8203;guybrush2105](https://github.com/guybrush2105) in https://github.com/pi-hole/web/pull/3693 - Remove the loggingButton from Settings > System > Actions by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/web/pull/3747 ##### Security Advisories - Multiple Stored HTML Injections and XSS in different web interface pages reported by [@&#8203;andrejtomci](https://github.com/andrejtomci) - [GHSA-jx8x-mj2r-62vq - Stored HTML Injection in queries.js](https://github.com/pi-hole/web/security/advisories/GHSA-jx8x-mj2r-62vq) - [GHSA-9rfm-c5g6-538p - Stored HTML attribute injection](https://github.com/pi-hole/web/security/advisories/GHSA-9rfm-c5g6-538p) - [GHSA-px6w-85wp-ww9v - Stored XSS / HTML injection in the Network page/Dashboard](https://github.com/pi-hole/web/security/advisories/GHSA-px6w-85wp-ww9v) - [GHSA-7xqw-r9pr-qv59 - Reflected XSS / HTML injection in taillog.js](https://github.com/pi-hole/web/security/advisories/GHSA-7xqw-r9pr-qv59) (Also reported by [@&#8203;n1rwhex](https://github.com/n1rwhex) and [@&#8203;mzalzahrani](https://github.com/mzalzahrani)) ##### New Contributors - [@&#8203;guybrush2105](https://github.com/guybrush2105) made their first contribution in https://github.com/pi-hole/web/pull/3693 **Full Changelog**: https://github.com/pi-hole/web/compare/v6.4.1...v6.5 <!-- Release notes generated using configuration in .github/release.yml at development --> ##### What's Changed (Core v6.4.1) - Remove additional ':' from debug log system time output by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6551 - Remove `readonly` from piholeNetworkFlush.sh to avoid error message by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/pi-hole/pull/6554 - Add antigravity index by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/pi-hole/pull/6573 - Fix return status capture of FTL check_download exists by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6572 - Remove misleading TODO comment for SetWebPassword by [@&#8203;10adnan75](https://github.com/10adnan75) in https://github.com/pi-hole/pi-hole/pull/6531 ##### Security Advisories - [GHSA-c935-8g63-qp74 – Local Privilege Escalation](https://github.com/pi-hole/pi-hole/security/advisories/GHSA-c935-8g63-qp74) reported by [@&#8203;smittix](https://github.com/smittix) ##### New Contributors - [@&#8203;10adnan75](https://github.com/10adnan75) made their first contribution in https://github.com/pi-hole/pi-hole/pull/6531 - [@&#8203;Copilot](https://github.com/Copilot) made their first contribution in https://github.com/pi-hole/pi-hole/pull/6580 **Full Changelog**: https://github.com/pi-hole/pi-hole/compare/v6.4...v6.4.1 ### [`v2026.02.0`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.02.0) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2025.11.1...2026.02.0) <!-- Release notes generated using configuration in .github/release.yml at master --> ##### What's Changed (Docker Specific) - Pin base image by sha to catch silent rebuilds by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/docker-pi-hole/pull/1965 - Set fixed buildx version to mitigate issues with buildx version 0.31.1 by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/docker-pi-hole/pull/1987 **Full Changelog**: https://github.com/pi-hole/docker-pi-hole/compare/2025.11.1...2026.02.0 *** <!-- Release notes generated using configuration in .github/release.yml at development --> ##### What's Changed (FTL v6.5) - Tweak undocumented wait-for option subtly by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2707 - update gravity - improve domain validation processing speed by [@&#8203;rrobgill](https://github.com/rrobgill) in https://github.com/pi-hole/FTL/pull/2710 - Update embedded SQLite3 to 3.51.1 by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2731 - Update embedded dnsmasq to 2.92rc1 by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2730 - Fix documentation - Do not use equal sign with `pihole-FTL --config` command by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/FTL/pull/2736 - Add dns.cache.rrtype by [@&#8203;Manakuremati](https://github.com/Manakuremati) in https://github.com/pi-hole/FTL/pull/2740 - Enhancements to the documentation markdown generator by [@&#8203;PromoFaux](https://github.com/PromoFaux) in https://github.com/pi-hole/FTL/pull/2741 - Network Overview - obtain MAC and hostname from dhcp.leases by [@&#8203;rrobgill](https://github.com/rrobgill) in https://github.com/pi-hole/FTL/pull/2727 - fix: make `get_domains` parameters optional by [@&#8203;tien](https://github.com/tien) in https://github.com/pi-hole/FTL/pull/2278 - Escape unprintable characters in invalid host names by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2601 - Implement better allOf handling in API verifier by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2745 - Update build containers to Alpine 3.23 by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2743 - Add option to hide network connection errors by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2749 - Harden default Content Security Policy (CSP) by [@&#8203;Erasure5959](https://github.com/Erasure5959) in https://github.com/pi-hole/FTL/pull/2754 - Fix computation of NTP server's root delay by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2760 - Teleporter: Fix for custom gravity.db path by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2758 - Upgrade embedded Lua to 5.5 by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2626 - Add missing \[forwarded] property in GET /api/history/database by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2750 - Update SQLite3 to 3.51.2 by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2761 - Low-memory hardware optimizations by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2757 - Reduce startup delay by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2725 - home.arpa and internal TLDs may be non-local without revServer by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2772 ##### New Contributors - [@&#8203;Erasure5959](https://github.com/Erasure5959) made their first contribution in https://github.com/pi-hole/FTL/pull/2754 **Full Changelog**: https://github.com/pi-hole/FTL/compare/v6.4.1...v6.5 <!-- Release notes generated using configuration in .github/release.yml at development --> ##### What's Changed (Web v6.4.1) - Set the end date for live query update to end of epoch by [@&#8203;rrobgill](https://github.com/rrobgill) in https://github.com/pi-hole/web/pull/3677 - Improve initial loading of Query Log by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/web/pull/3715 Also fixes two security advisories: - https://github.com/pi-hole/web/security/advisories/GHSA-6xp4-jw73-f4qp: fixed with https://github.com/pi-hole/web/commit/d328f143718022d82dc94c8751121ca41be3b996 - https://github.com/pi-hole/web/security/advisories/GHSA-8rw8-vjgp-rwj6: fixed with https://github.com/pi-hole/web/commit/1a0c6f4fe6d0116fd2846b2adaae95996b7f194d **Full Changelog**: https://github.com/pi-hole/web/compare/v6.4...v6.4.1 <!-- Release notes generated using configuration in .github/release.yml at development --> ##### What's Changed (Core v6.4) - Remove wget from alpine dependencies by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in https://github.com/pi-hole/pi-hole/pull/6484 - Remove custom FTL FirewallD zone checks from debug log by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/pi-hole/pull/6481 - Add Alpine 3.23 to test suite by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6488 - Debug log - Add colors to gravity tables by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/pi-hole/pull/6485 - Use configured location for web repo when updating or repairing by [@&#8203;rrobgill](https://github.com/rrobgill) in https://github.com/pi-hole/pi-hole/pull/6470 - Add missing `-g` to the message in gravity recovery command by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/pi-hole/pull/6513 - Don't install unused /usr/local/share/man/man5 by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in https://github.com/pi-hole/pi-hole/pull/6526 **Full Changelog**: https://github.com/pi-hole/pi-hole/compare/v6.3...v6.4 </details> --- ### Configuration :date: **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). :vertical_traffic_light: **Automerge**: Disabled by config. Please merge this manually once you are satisfied. :recycle: **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. :no_bell: **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate-bot force-pushed renovate/pihole-pihole-2026.x from 6dfedf4cf7 to c4753665d1 2026-02-21 20:02:56 +00:00 Compare
renovate-bot force-pushed renovate/pihole-pihole-2026.x from c4753665d1 to 2cd74e8b51 2026-02-21 22:02:51 +00:00 Compare
renovate-bot force-pushed renovate/pihole-pihole-2026.x from 2cd74e8b51 to 4824671ad0 2026-02-21 23:09:32 +00:00 Compare
renovate-bot force-pushed renovate/pihole-pihole-2026.x from 4824671ad0 to 3c554722d0 2026-02-23 08:03:00 +00:00 Compare
renovate-bot force-pushed renovate/pihole-pihole-2026.x from 3c554722d0 to 8c9b6605b4 2026-02-23 12:02:44 +00:00 Compare
renovate-bot force-pushed renovate/pihole-pihole-2026.x from 8c9b6605b4 to 992592e3e5 2026-04-03 18:03:38 +00:00 Compare
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/pihole-pihole-2026.x:renovate/pihole-pihole-2026.x
git switch renovate/pihole-pihole-2026.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/pihole-pihole-2026.x
git switch renovate/pihole-pihole-2026.x
git rebase main
git switch main
git merge --ff-only renovate/pihole-pihole-2026.x
git switch renovate/pihole-pihole-2026.x
git rebase main
git switch main
git merge --no-ff renovate/pihole-pihole-2026.x
git switch main
git merge --squash renovate/pihole-pihole-2026.x
git switch main
git merge --ff-only renovate/pihole-pihole-2026.x
git switch main
git merge renovate/pihole-pihole-2026.x
git push origin main
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
peschmae/ansible-home-borr!703
No description provided.