peschmae/ansible-home-borr
1
0
Fork 0
Code Issues 5 Pull requests 38 Projects Releases Packages Wiki Activity Actions

chore(deps): update pihole/pihole docker tag to v2026.09.0 #752

Open
renovate-bot wants to merge 1 commit from renovate/pihole-pihole-2026.x into main
pull from: renovate/pihole-pihole-2026.x
merge into: peschmae:main
Conversation 0 Commits 1 Files changed 3 +3 -3
renovate-bot commented 2026-04-25 00:08:15 +00:00
Collaborator
Copy link

This PR contains the following updates:

Package Update Change
pihole/pihole minor 2026.04.0 -> 2026.09.0

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

pi-hole/docker-pi-hole (pihole/pihole)

v2026.09.0

Compare Source

Whats Changed? (Docker)

Nothing Docker specific, tagging to include FTL v6.7.1

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2026.07.1...2026.09.0

Whats Changed? (FTL v6.7.1)
Security Fixes
Behavior changes
  • misc.dnsmasq_lines and webserver.advancedOpts can no longer be changed through the API or the web interface. They can still be set in pihole.toml, through environment variables and with pihole-FTL --config.
  • Wrong-method API requests now return 405 with an Allow header, and OPTIONS names only the methods of the endpoint that fits the URI best.
  • The CAP_NET_RAW startup warning is gone, dnsmasq reports it when it actually needs the capability.
  • database.maxDBdays is an unsigned value now. A negative value kept the queries forever and is migrated to 4294967295, which continues to do so.
Fixes of note
  • pi.hole and the local host name were answered with NODATA until restart once the interface cache went stale (#​3050)
  • An infinite loop in the dnsmasq config test when debug.config is enabled
  • Webserver workers spinning at 100% CPU in the mbedTLS debug callback (#​3106)
  • Async-signal-safety in the real-time signal handler and the TCP worker terminator
  • Query indices that went stale while the shared memory lock was released, and a domain lookup that gave up at once when a list change was being committed
  • Database connection leaks and counter skew, gravity regex and search-term handling, config write races, API error paths and response correctness
  • Memory-safety hardening in the netlink parsers, get_api_string(), base64_decode_update() and arp-scan

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.7...v6.7.1

v2026.07.2

Compare Source

Missing commit from previous release which is the docker-equivalent of the fix for pi-hole/pi-hole/security/advisories/GHSA-h8w9-qx2v-wrww

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2026.07.1...2026.07.2

v2026.07.1

Compare Source

What's Changed

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2026.07.0...2026.07.1

v2026.07.0

Compare Source

What's Changed (Docker Specific)

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2026.04.1...2026.07.0

Security Fixes
What's Changed (FTL v6.7)
New Contributors

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.6.2...v6.7

What's Changed (Core v6.4.3)
New Contributors

Full Changelog: https://github.com/pi-hole/pi-hole/compare/v6.4.2...v6.4.3

What's Changed (Web v6.6)

Full Changelog: https://github.com/pi-hole/web/compare/v6.5.1...v6.6

v2026.06.0

Compare Source

What's Changed (Docker Specific)
New Contributors

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2026.04.0...2026.06.0

What's Changed (Web 6.5.1)
New Contributors

Full Changelog: https://github.com/pi-hole/web/compare/v6.5...v6.5.1

v2026.05.0

Compare Source

This tag includes the FTL v6.6.2 release which imports six upstream dnsmasq security fixes, covering all publicly disclosed CVEs against the dnsmasq 2.92/2.93 line. Patches are taken verbatim from https://thekelleys.org.uk/dnsmasq/CVE/

Details here: https://github.com/pi-hole/FTL/releases/tag/v6.6.2

Upgrade impact

All six fixes are minimal, self-contained changes to the embedded dnsmasq sources. No FTL-side configuration or API changes; users should see no observable behavior change beyond the closed vulnerabilities.

Fix dnsmasq CVE publications by @​DL6ER in https://github.com/pi-hole/FTL/pull/2888

This furthermore indirectly fixes #​2871 due to https://github.com/pi-hole/docker-base-images/pull/158

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.6.1...v6.6.2

What's Changed (Docker Specific)
New Contributors

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2026.04.0...2026.05.0

v2026.04.1

Compare Source

What's Changed
New Contributors

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2026.04.0...2026.04.1

New component versions included in this tag:
What's Changed (FTL v6.6.1)
Security advisories
New Contributors

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.6...v6.6.1

What's Changed (Core v6.4.2)
Security advisories

Full Changelog: https://github.com/pi-hole/pi-hole/compare/v6.4.1...v6.4.2

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [pihole/pihole](https://github.com/pi-hole/docker-pi-hole) | minor | `2026.04.0` -> `2026.09.0` | --- > :warning: **Warning** > > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>pi-hole/docker-pi-hole (pihole/pihole)</summary> ### [`v2026.09.0`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.09.0) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2026.07.2...2026.09.0) <!-- Release notes generated using configuration in .github/release.yml at master --> ##### Whats Changed? (Docker) Nothing Docker specific, tagging to include FTL v6.7.1 **Full Changelog**: https://github.com/pi-hole/docker-pi-hole/compare/2026.07.1...2026.09.0 ##### Whats Changed? (FTL v6.7.1) ##### Security Fixes - [pi-hole/FTL/security/advisories/GHSA-2794-hrj8-5jg9](https://github.com/pi-hole/FTL/security/advisories/GHSA-2794-hrj8-5jg9) - Remote code execution and arbitrary file read via `webserver.advancedOpts` (High) reported by [keithlinneman](https://github.com/keithlinneman) - [pi-hole/FTL/security/advisories/GHSA-ww5x-xx4x-qvjr](https://github.com/pi-hole/FTL/security/advisories/GHSA-ww5x-xx4x-qvjr) - Remote code execution via exec-capable options in `misc.dnsmasq_lines` (High) reported by [keithlinneman](https://github.com/keithlinneman) - [pi-hole/FTL/security/advisories/GHSA-gx63-h4w6-f46g](https://github.com/pi-hole/FTL/security/advisories/GHSA-gx63-h4w6-f46g) - Configuration validators can be bypassed via Teleporter import, combined changes and document-root relocation (High) - [pi-hole/FTL/security/advisories/GHSA-7997-2868-rjfg](https://github.com/pi-hole/FTL/security/advisories/GHSA-7997-2868-rjfg) - Stack buffer overflow in the blocked-answer path (Moderate) reported by [010011110](https://github.com/010011110) ##### Behavior changes - `misc.dnsmasq_lines` and `webserver.advancedOpts` can no longer be changed through the API or the web interface. They can still be set in `pihole.toml`, through environment variables and with `pihole-FTL --config`. - Wrong-method API requests now return 405 with an `Allow` header, and `OPTIONS` names only the methods of the endpoint that fits the URI best. - The `CAP_NET_RAW` startup warning is gone, dnsmasq reports it when it actually needs the capability. - `database.maxDBdays` is an unsigned value now. A negative value kept the queries forever and is migrated to `4294967295`, which continues to do so. ##### Fixes of note - `pi.hole` and the local host name were answered with NODATA until restart once the interface cache went stale ([#&#8203;3050](https://github.com/pi-hole/docker-pi-hole/issues/3050)) - An infinite loop in the dnsmasq config test when `debug.config` is enabled - Webserver workers spinning at 100% CPU in the mbedTLS debug callback ([#&#8203;3106](https://github.com/pi-hole/docker-pi-hole/issues/3106)) - Async-signal-safety in the real-time signal handler and the TCP worker terminator - Query indices that went stale while the shared memory lock was released, and a domain lookup that gave up at once when a list change was being committed - Database connection leaks and counter skew, gravity regex and search-term handling, config write races, API error paths and response correctness - Memory-safety hardening in the netlink parsers, `get_api_string()`, `base64_decode_update()` and arp-scan **Full Changelog**: https://github.com/pi-hole/FTL/compare/v6.7...v6.7.1 ### [`v2026.07.2`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.07.2) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2026.07.1...2026.07.2) <!-- Release notes generated using configuration in .github/release.yml at master --> Missing commit from previous release which is the docker-equivalent of the fix for [pi-hole/pi-hole/security/advisories/GHSA-h8w9-qx2v-wrww](https://github.com/pi-hole/pi-hole/security/advisories/GHSA-h8w9-qx2v-wrww) - Move logrotate file to /etc/logrotate.d/pihole https://github.com/pi-hole/docker-pi-hole/commit/14b661a7471d755ed63b48bd2cb9a36149ba7213 by [@&#8203;yubiuser](https://github.com/yubiuser) **Full Changelog**: https://github.com/pi-hole/docker-pi-hole/compare/2026.07.1...2026.07.2 ### [`v2026.07.1`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.07.1) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2026.07.0...2026.07.1) <!-- Release notes generated using configuration in .github/release.yml at master --> ##### What's Changed - Restore --no-cache flag for apk by [@&#8203;casperklein](https://github.com/casperklein) in https://github.com/pi-hole/docker-pi-hole/pull/2056 **Full Changelog**: https://github.com/pi-hole/docker-pi-hole/compare/2026.07.0...2026.07.1 ### [`v2026.07.0`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.07.0) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2026.06.0...2026.07.0) <!-- Release notes generated using configuration in .github/release.yml at master --> ##### What's Changed (Docker Specific) - Add ShellCheck CI and fix reported issues by [@&#8203;lightswitch05](https://github.com/lightswitch05) in https://github.com/pi-hole/docker-pi-hole/pull/2039 - Make crond and cron job output visible in "docker log" by [@&#8203;casperklein](https://github.com/casperklein) in https://github.com/pi-hole/docker-pi-hole/pull/2035 - feat: optimize Docker build caching by [@&#8203;lightswitch05](https://github.com/lightswitch05) in https://github.com/pi-hole/docker-pi-hole/pull/2038 - remove buildkit cache mount from apk add layer by [@&#8203;PromoFaux](https://github.com/PromoFaux) in https://github.com/pi-hole/docker-pi-hole/pull/2049 **Full Changelog**: https://github.com/pi-hole/docker-pi-hole/compare/2026.04.1...2026.07.0 ##### Security Fixes - [pi-hole/pi-hole/security/advisories/GHSA-h8w9-qx2v-wrww](https://github.com/pi-hole/pi-hole/security/advisories/GHSA-h8w9-qx2v-wrww) — Local privilege escalation from pihole user to root via /etc/pihole/logrotate (High) reported by [supperhellokitty20](https://github.com/supperhellokitty20) - [pi-hole/FTL/security/advisories/GHSA-q6fm-xwxf-37r5](https://github.com/pi-hole/FTL/security/advisories/GHSA-q6fm-xwxf-37r5) — WebUI (& API) DoS via lack of rate limiting (High) reported by [rrobgill](https://github.com/rrobgill) - [pi-hole/FTL/security/advisories/GHSA-w8cr-2cwg-92cg](https://github.com/pi-hole/FTL/security/advisories/GHSA-w8cr-2cwg-92cg) — Session expiration bypass (High) reported by [T0X1Cx](https://github.com/T0X1Cx) - [pi-hole/FTL/security/advisories/GHSA-8j7w-m3cr-6q6x](https://github.com/pi-hole/FTL/security/advisories/GHSA-8j7w-m3cr-6q6x) — Remote Code Execution via CivetWeb configuration injection (High) reported by [SakusenSec](https://github.com/SakusenSec) - [pi-hole/FTL/security/advisories/GHSA-g7v8-8q8f-hprp](https://github.com/pi-hole/FTL/security/advisories/GHSA-g7v8-8q8f-hprp) — Log injection in the access-log writer chaining to RCE via Lua-server-page evaluation (Moderate) - [pi-hole/FTL/security/advisories/GHSA-r5vh-5q82-jg7q](https://github.com/pi-hole/FTL/security/advisories/GHSA-r5vh-5q82-jg7q) — CRLF injection / HTTP header injection via group name (Low) reported by [T0X1Cx](https://github.com/T0X1Cx) <!-- Release notes generated using configuration in .github/release.yml at master --> ##### What's Changed (FTL v6.7) - Performance optimizations and bug fixes by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2816 - fix: check NULL returns from strdup/calloc in rotate_files() by [@&#8203;jluzzi123](https://github.com/jluzzi123) in https://github.com/pi-hole/FTL/pull/2875 - Make error messages more human friendly by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/FTL/pull/2878 - Harden API/database races in civetweb and DB threads by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2881 - Update embedded SQLite3 to v3.53.1 by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2891 - Fix build on Fedora 44 by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in https://github.com/pi-hole/FTL/pull/2893 - macvendor: resolve sub-allocated blocks (MA-M/MA-S) via longest-prefix match by [@&#8203;RamSet](https://github.com/RamSet) in https://github.com/pi-hole/FTL/pull/2907 - Update embedded dnsmasq to v2.93 by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2890 - fix OOB write in FTL_parse_pseudoheaders when optlen is 0 by [@&#8203;rdevshp](https://github.com/rdevshp) in https://github.com/pi-hole/FTL/pull/2910 - Update a single text description "PRIVATE KEY" by [@&#8203;DoctorD90](https://github.com/DoctorD90) in https://github.com/pi-hole/FTL/pull/2884 - add optional dnsmasq features to cmake by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in https://github.com/pi-hole/FTL/pull/2874 - Fix building on alpine 3.24 by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/FTL/pull/2911 - Bats by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/FTL/pull/2872 - Improve crash backtraces for non-reproducible faults by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2880 - Fix gzip.c inflate_buffer CRC signed left shift undefined behavior by [@&#8203;rdevshp](https://github.com/rdevshp) in https://github.com/pi-hole/FTL/pull/2916 - Fix for iCloud Private Relay zones by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2919 - fix tar parsing by [@&#8203;rdevshp](https://github.com/rdevshp) in https://github.com/pi-hole/FTL/pull/2914 - Allow using local `manuf`s to generate macvendor.db by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in https://github.com/pi-hole/FTL/pull/2918 - Use custom message for UNIQUE constraint error message by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/FTL/pull/2879 - Re-resolve client groups event-driven, drop periodic recheck by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2922 - Guard against invalid gzip data in gzip.c inflate_buffer by [@&#8203;rdevshp](https://github.com/rdevshp) in https://github.com/pi-hole/FTL/pull/2915 - Fix BATS test of no ERRORS in FTL.log to allow capturing the output by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/FTL/pull/2927 - fix(cli): warn when --config cannot read pihole.toml ([#&#8203;2849](https://github.com/pi-hole/docker-pi-hole/issues/2849)) by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2930 - fix(api-docs): correct three OpenAPI spec issues ([#&#8203;2867](https://github.com/pi-hole/docker-pi-hole/issues/2867)) by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2929 - fix: avoid segfault in dnsmasq-test on unreadable config file by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2928 - Fix prefix-match bug and improve fallthrough logging in redirect_root_handler by [@&#8203;slmingol](https://github.com/slmingol) in https://github.com/pi-hole/FTL/pull/2933 - Swap misaligned comments for domain-needed and expand-hosts. by [@&#8203;0xpsyduck](https://github.com/0xpsyduck) in https://github.com/pi-hole/FTL/pull/2932 - Code review July 2026 by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2935 - Pi-hole FTL v6.7 by [@&#8203;PromoFaux](https://github.com/PromoFaux) in https://github.com/pi-hole/FTL/pull/2936 ##### New Contributors - [@&#8203;jluzzi123](https://github.com/jluzzi123) made their first contribution in https://github.com/pi-hole/FTL/pull/2875 - [@&#8203;RamSet](https://github.com/RamSet) made their first contribution in https://github.com/pi-hole/FTL/pull/2907 - [@&#8203;rdevshp](https://github.com/rdevshp) made their first contribution in https://github.com/pi-hole/FTL/pull/2910 - [@&#8203;DoctorD90](https://github.com/DoctorD90) made their first contribution in https://github.com/pi-hole/FTL/pull/2884 - [@&#8203;slmingol](https://github.com/slmingol) made their first contribution in https://github.com/pi-hole/FTL/pull/2933 - [@&#8203;0xpsyduck](https://github.com/0xpsyduck) made their first contribution in https://github.com/pi-hole/FTL/pull/2932 **Full Changelog**: https://github.com/pi-hole/FTL/compare/v6.6.2...v6.7 <!-- Release notes generated using configuration in .github/release.yml at master --> ##### What's Changed (Core v6.4.3) - Also hardcode the PID file location in utils.sh to prevent `readonly variable` warning by [@&#8203;PromoFaux](https://github.com/PromoFaux) in https://github.com/pi-hole/pi-hole/pull/6613 - Use `awk` to compare curl versions by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/pi-hole/pull/6621 - Explicitly add `gawk` to APK dependencies by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6622 - Prevent double error message output in gravity run with invalid file by [@&#8203;PromoFaux](https://github.com/PromoFaux) in https://github.com/pi-hole/pi-hole/pull/6607 - Replace pytest/tox with direct in-container BATS by [@&#8203;PromoFaux](https://github.com/PromoFaux) in https://github.com/pi-hole/pi-hole/pull/6598 - Add Fedora 44 and Ubuntu 26.04 LTS to tests by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in https://github.com/pi-hole/pi-hole/pull/6623 - Add gravity tests by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6639 - Set BATS pretty output flag depending on the terminal and improve failure output by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6644 - fix: check return codes in gravity_build_tree and database_recovery() by [@&#8203;jluzzi123](https://github.com/jluzzi123) in https://github.com/pi-hole/pi-hole/pull/6630 - Include alpine 3.24 in tests by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6654 - installer: fix custom DNS entry when only one upstream server is provided by [@&#8203;Gilmoursa](https://github.com/Gilmoursa) in https://github.com/pi-hole/pi-hole/pull/6638 - Fix BATS gravity test on curl version >=8.21 by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6661 - avoid copytruncate in logrotate by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in https://github.com/pi-hole/pi-hole/pull/6642 ##### New Contributors - [@&#8203;jluzzi123](https://github.com/jluzzi123) made their first contribution in https://github.com/pi-hole/pi-hole/pull/6630 - [@&#8203;Gilmoursa](https://github.com/Gilmoursa) made their first contribution in https://github.com/pi-hole/pi-hole/pull/6638 **Full Changelog**: https://github.com/pi-hole/pi-hole/compare/v6.4.2...v6.4.3 <!-- Release notes generated using configuration in .github/release.yml at master --> ##### What's Changed (Web v6.6) - Improve DHCP static leases interface (alternative) by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/web/pull/3766 - Lists page - Improve hints and help text by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/web/pull/3798 - Update daterangepicker ranges everytime the picker is shown by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/web/pull/3793 - Better user interface to edit reverse DNS servers (dns.revServers) by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/web/pull/3769 **Full Changelog**: https://github.com/pi-hole/web/compare/v6.5.1...v6.6 ### [`v2026.06.0`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.06.0) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2026.05.0...2026.06.0) <!-- Release notes generated using configuration in .github/release.yml at master --> ##### What's Changed (Docker Specific) - docs: update capability documentation links by [@&#8203;SirRGB](https://github.com/SirRGB) in https://github.com/pi-hole/docker-pi-hole/pull/2025 ##### New Contributors - [@&#8203;SirRGB](https://github.com/SirRGB) made their first contribution in https://github.com/pi-hole/docker-pi-hole/pull/2025 **Full Changelog**: https://github.com/pi-hole/docker-pi-hole/compare/2026.04.0...2026.06.0 *** <!-- Release notes generated using configuration in .github/release.yml at master --> ##### What's Changed (Web 6.5.1) - Fix backed-up typo by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/web/pull/3759 - fix: replace ES2024 regex v flag with u for WebKit compatibility by [@&#8203;Gilmoursa](https://github.com/Gilmoursa) in https://github.com/pi-hole/web/pull/3778 - bug: multiline comments on doughnut chart by [@&#8203;vinaykulk621](https://github.com/vinaykulk621) in https://github.com/pi-hole/web/pull/3781 ##### New Contributors - [@&#8203;Gilmoursa](https://github.com/Gilmoursa) made their first contribution in https://github.com/pi-hole/web/pull/3778 - [@&#8203;vinaykulk621](https://github.com/vinaykulk621) made their first contribution in https://github.com/pi-hole/web/pull/3781 **Full Changelog**: https://github.com/pi-hole/web/compare/v6.5...v6.5.1 ### [`v2026.05.0`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.05.0) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2026.04.1...2026.05.0) <!-- Release notes generated using configuration in .github/release.yml at master --> This tag includes the FTL v6.6.2 release which imports six upstream `dnsmasq` security fixes, covering all publicly disclosed CVEs against the dnsmasq 2.92/2.93 line. Patches are taken verbatim from https://thekelleys.org.uk/dnsmasq/CVE/ Details here: https://github.com/pi-hole/FTL/releases/tag/v6.6.2 ##### Upgrade impact All six fixes are minimal, self-contained changes to the embedded dnsmasq sources. No FTL-side configuration or API changes; users should see no observable behavior change beyond the closed vulnerabilities. Fix dnsmasq CVE publications by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2888 This furthermore indirectly fixes [#&#8203;2871](https://github.com/pi-hole/docker-pi-hole/issues/2871) due to https://github.com/pi-hole/docker-base-images/pull/158 **Full Changelog**: https://github.com/pi-hole/FTL/compare/v6.6.1...v6.6.2 *** ##### What's Changed (Docker Specific) - docs: update capability documentation links by [@&#8203;SirRGB](https://github.com/SirRGB) in https://github.com/pi-hole/docker-pi-hole/pull/2025 ##### New Contributors - [@&#8203;SirRGB](https://github.com/SirRGB) made their first contribution in https://github.com/pi-hole/docker-pi-hole/pull/2025 **Full Changelog**: https://github.com/pi-hole/docker-pi-hole/compare/2026.04.0...2026.05.0 ### [`v2026.04.1`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.04.1) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2026.04.0...2026.04.1) <!-- Release notes generated using configuration in .github/release.yml at master --> ##### What's Changed - docs: update capability documentation links by [@&#8203;SirRGB](https://github.com/SirRGB) in https://github.com/pi-hole/docker-pi-hole/pull/2025 ##### New Contributors - [@&#8203;SirRGB](https://github.com/SirRGB) made their first contribution in https://github.com/pi-hole/docker-pi-hole/pull/2025 **Full Changelog**: https://github.com/pi-hole/docker-pi-hole/compare/2026.04.0...2026.04.1 ##### New component versions included in this tag: ##### What's Changed (FTL v6.6.1) - Add new `GET /api/config/_properties` endpoint by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2356 - Fix thread-safety issues causing SIGSEGV under concurrent API load by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2835 - fix: fix rare race condition for SHM strings in API handlers by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2833 - Accept punycode domains that libidn2 rejects under IDNA2008 by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2838 - Improve shutdown diagnostics to identify SIGTERM source by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2839 - Resolve empty backtraces when addr2line is not installed by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2831 - Improve thread-safety for concurrent API requests by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2847 - Don't skip device lookup when resolver.macNames is disabled by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2846 - Fix linker error when compiling w/o optimization by [@&#8203;aeolio](https://github.com/aeolio) in https://github.com/pi-hole/FTL/pull/2850 - Clarify `dns.blockESNI` wording by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in https://github.com/pi-hole/FTL/pull/2784 - Preserve log file path config when fopen fails by [@&#8203;DL6ER](https://github.com/DL6ER) in https://github.com/pi-hole/FTL/pull/2834 ##### Security advisories - https://github.com/pi-hole/pi-hole/security/advisories/GHSA-6w8x-p785-6pm4 - Fixed with : https://github.com/pi-hole/FTL/commit/88c569aa026d905d0066135bb71f36a13acf4bf4 and https://github.com/pi-hole/pi-hole/commit/7ccb8ddfb085479fa96e801886eb1cdbeaf3a720 - https://github.com/pi-hole/FTL/security/advisories/GHSA-9cqv-839p-gpq2 - Fixed with : https://github.com/pi-hole/FTL/commit/0c46e4ec7fe57f762fce261625f2cf5d43806e6d ##### New Contributors - [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) made their first contribution in https://github.com/pi-hole/FTL/pull/2784 **Full Changelog**: https://github.com/pi-hole/FTL/compare/v6.6...v6.6.1 ##### What's Changed (Core v6.4.2) - Wipe version file before creating a new one by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6538 - Fix ownership permissions for containing directories in fix_owner_per… by [@&#8203;PromoFaux](https://github.com/PromoFaux) in https://github.com/pi-hole/pi-hole/pull/6589 - Remove reference to /usr/local/bin/COL_TABLE by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in https://github.com/pi-hole/pi-hole/pull/6594 - Skip apt cache update when pihole-meta is current by [@&#8203;PromoFaux](https://github.com/PromoFaux) in https://github.com/pi-hole/pi-hole/pull/6581 - Set versions in /etc/pihole/versions to null if script fails by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6550 - Remove redundant touching of logfiles from systemd Service by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6601 - Loosen requirements for local file access for gravity by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6430 - Fix permission for \*.etag files after gravity run by [@&#8203;yubiuser](https://github.com/yubiuser) in https://github.com/pi-hole/pi-hole/pull/6353 - add logrotate to DEB and RPM dependencies by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in https://github.com/pi-hole/pi-hole/pull/6524 - Improve gravity error message including curl exit code and errormsg by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in https://github.com/pi-hole/pi-hole/pull/6605 ##### Security advisories - https://github.com/pi-hole/pi-hole/security/advisories/GHSA-6w8x-p785-6pm4 - Fixed with : https://github.com/pi-hole/pi-hole/commit/7ccb8ddfb085479fa96e801886eb1cdbeaf3a720 and https://github.com/pi-hole/FTL/commit/88c569aa026d905d0066135bb71f36a13acf4bf4 **Full Changelog**: https://github.com/pi-hole/pi-hole/compare/v6.4.1...v6.4.2 </details> --- ### Configuration :date: **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). :vertical_traffic_light: **Automerge**: Disabled by config. Please merge this manually once you are satisfied. :recycle: **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. :no_bell: **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate-bot force-pushed renovate/pihole-pihole-2026.x from c7d096dba4 to d02846d2a2 2026-05-11 22:03:22 +00:00 Compare
renovate-bot changed title from chore(deps): update pihole/pihole docker tag to v2026.04.1 to chore(deps): update pihole/pihole docker tag to v2026.05.0 2026-05-11 22:03:25 +00:00
renovate-bot force-pushed renovate/pihole-pihole-2026.x from d02846d2a2 to 57b6385088 2026-06-01 16:10:13 +00:00 Compare
renovate-bot force-pushed renovate/pihole-pihole-2026.x from 57b6385088 to a09c10028d 2026-06-14 22:03:37 +00:00 Compare
renovate-bot changed title from chore(deps): update pihole/pihole docker tag to v2026.05.0 to chore(deps): update pihole/pihole docker tag to v2026.06.0 2026-06-14 22:03:40 +00:00
renovate-bot force-pushed renovate/pihole-pihole-2026.x from a09c10028d to 6a52614fb9 2026-07-06 22:03:58 +00:00 Compare
renovate-bot changed title from chore(deps): update pihole/pihole docker tag to v2026.06.0 to chore(deps): update pihole/pihole docker tag to v2026.07.1 2026-07-06 22:04:02 +00:00
renovate-bot force-pushed renovate/pihole-pihole-2026.x from 6a52614fb9 to b65ea365a3 2026-07-07 10:04:08 +00:00 Compare
renovate-bot changed title from chore(deps): update pihole/pihole docker tag to v2026.07.1 to chore(deps): update pihole/pihole docker tag to v2026.07.2 2026-07-07 10:04:13 +00:00
renovate-bot force-pushed renovate/pihole-pihole-2026.x from b65ea365a3 to 9f989b503d 2026-07-27 22:04:50 +00:00 Compare
renovate-bot force-pushed renovate/pihole-pihole-2026.x from 9f989b503d to b7b3566392 2026-07-31 18:05:02 +00:00 Compare
renovate-bot force-pushed renovate/pihole-pihole-2026.x from b7b3566392 to 89ab7b2430 2026-08-25 18:07:15 +00:00 Compare
renovate-bot force-pushed renovate/pihole-pihole-2026.x from 89ab7b2430 to 17a4da0a2a 2026-09-20 00:14:49 +00:00 Compare
renovate-bot changed title from chore(deps): update pihole/pihole docker tag to v2026.07.2 to chore(deps): update pihole/pihole docker tag to v2026.09.0 2026-09-20 00:14:53 +00:00
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/pihole-pihole-2026.x:renovate/pihole-pihole-2026.x
git switch renovate/pihole-pihole-2026.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/pihole-pihole-2026.x
git switch renovate/pihole-pihole-2026.x
git rebase main
git switch main
git merge --ff-only renovate/pihole-pihole-2026.x
git switch renovate/pihole-pihole-2026.x
git rebase main
git switch main
git merge --no-ff renovate/pihole-pihole-2026.x
git switch main
git merge --squash renovate/pihole-pihole-2026.x
git switch main
git merge --ff-only renovate/pihole-pihole-2026.x
git switch main
git merge renovate/pihole-pihole-2026.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
peschmae
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
peschmae/ansible-home-borr!752
No description provided.