Skip to content

feat(container)!: Update ghcr.io/gethomepage/homepage ( v0.10.9 → v1 )#627

Merged
jlengelbrecht merged 2 commits intomainfrom
renovate/ghcr.io-gethomepage-homepage-1.x
Feb 5, 2026
Merged

feat(container)!: Update ghcr.io/gethomepage/homepage ( v0.10.9 → v1 )#627
jlengelbrecht merged 2 commits intomainfrom
renovate/ghcr.io-gethomepage-homepage-1.x

Conversation

@homebot-0
Copy link
Contributor

@homebot-0 homebot-0 bot commented Dec 20, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
ghcr.io/gethomepage/homepage major v0.10.9v1.10.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

🐄 Talos CATTLE: Major/minor version requires manual approval. Full VM rebuild via Terraform.


Release Notes

gethomepage/homepage (ghcr.io/gethomepage/homepage)

v1.10.0

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.9.0...v1.10.0

v1.9.0

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.8.0...v1.9.0

v1.8.0

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.7.0...v1.8.0

v1.7.0

Compare Source

What's Changed

Full Changelog: gethomepage/homepage@v1.6.1...v1.7.0

v1.6.1

Compare Source

What's Changed

Full Changelog: gethomepage/homepage@v1.6.0...v1.6.1

v1.6.0

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.5.0...v1.6.0

v1.5.0

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.4.6...v1.5.0

v1.4.6

Compare Source

What's Changed

Full Changelog: gethomepage/homepage@v1.4.5...v1.4.6

v1.4.5

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.4.4...v1.4.5

v1.4.4

Compare Source

What's Changed

Full Changelog: gethomepage/homepage@v1.4.3...v1.4.4

v1.4.3

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.4.2...v1.4.3

v1.4.2

Compare Source

What's Changed

Full Changelog: gethomepage/homepage@v1.4.1...v1.4.2

v1.4.1

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.4.0...v1.4.1

v1.4.0

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.3.2...v1.4.0

v1.3.2

Compare Source

What's Changed

Full Changelog: gethomepage/homepage@v1.3.0...v1.3.2

v1.3.1

Compare Source

v1.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.2.0...v1.3.0

v1.2.0

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.1.1...v1.2.0

v1.1.1

Compare Source

What's Changed

Full Changelog: gethomepage/homepage@v1.1.0...v1.1.1

v1.1.0

Compare Source

What's Changed
Enhancements
Fixes
Updates
New Contributors

Full Changelog: gethomepage/homepage@v1.0.4...v1.1.0

v1.0.4

Compare Source

What's Changed

Full Changelog: gethomepage/homepage@v1.0.3...v1.0.4

v1.0.3

Compare Source

What's Changed
New Contributors

Full Changelog: gethomepage/homepage@v1.0.2...v1.0.3

v1.0.2

Compare Source

This small bug fix fixes a couple of layout issues in v1.0.0 and reverts a change to networking that was in v1.0.1

Please also check out the v1.0 release notes

Full Changelog: gethomepage/homepage@v1.0.0...v1.0.2

v1.0.0

Compare Source

Homepage v1.0! 🎉

We're excited to announce the release of homepage v1.0! This release contains a bunch of new widgets, fixes and other improvements, but if you're curious why the major version bump, it's because of the breaking changes included:

  • [BREAKING] Enhancement: require host validatio

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@homebot-0 homebot-0 bot added renovate Dependency update by Renovate update/major Major version update - breaking changes possible labels Dec 20, 2025
@coderabbitai
Copy link

coderabbitai bot commented Dec 20, 2025

Walkthrough

Image tag updated for the homepage HelmRelease from v0.10.9 to v1.10.0. No other changes to image, environment, probes, resources, or configuration.

Changes

Cohort / File(s) Summary
Homepage HelmRelease
kubernetes/apps/tools/homepage/app/helmrelease.yaml
Image tag changed: values.controllers.homepage.containers.app.image.tag bumped from v0.10.9 to v1.10.0. Review areas: verify breaking changes between 0.x and 1.x, validate image runtime/config compatibility, confirm Flux/Talos deployment constraints and any required Helm value migrations.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately reflects the main change: a major version upgrade of the homepage container image from v0.10.9 to v1.x.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch renovate/ghcr.io-gethomepage-homepage-1.x

Comment @coderabbitai help to get the list of available commands and usage tips.

@homebot-0 homebot-0 bot added the area/kubernetes Changes to Kubernetes manifests and apps label Dec 20, 2025
@homebot-0
Copy link
Contributor Author

homebot-0 bot commented Dec 20, 2025

ℹ️ SOPS Encryption Check

No SOPS files detected in this pull request.

Check Status
SOPS files in PR ✅ None detected

No encryption validation required for this PR.

@homebot-0
Copy link
Contributor Author

homebot-0 bot commented Dec 20, 2025

✅ Gitleaks Secret Scan Passed

No secrets detected in this pull request.

Check Status
Secret patterns ✅ Clean
Sensitive files ✅ None detected

@homebot-0
Copy link
Contributor Author

homebot-0 bot commented Dec 20, 2025

--- kubernetes/apps/tools/homepage/app Kustomization: tools/homepage HelmRelease: tools/homepage

+++ kubernetes/apps/tools/homepage/app Kustomization: tools/homepage HelmRelease: tools/homepage

@@ -47,13 +47,13 @@

               TZ: America/New_York
             envFrom:
             - secretRef:
                 name: homepage-secrets
             image:
               repository: ghcr.io/gethomepage/homepage
-              tag: v0.10.9
+              tag: v1.10.0
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3

@homebot-0
Copy link
Contributor Author

homebot-0 bot commented Dec 20, 2025

--- HelmRelease: tools/homepage Deployment: tools/homepage

+++ HelmRelease: tools/homepage Deployment: tools/homepage

@@ -51,13 +51,13 @@

           value: '568'
         - name: TZ
           value: America/New_York
         envFrom:
         - secretRef:
             name: homepage-secrets
-        image: ghcr.io/gethomepage/homepage:v0.10.9
+        image: ghcr.io/gethomepage/homepage:v1.10.0
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /
             port: 3000
           initialDelaySeconds: 10

jlengelbrecht added a commit that referenced this pull request Dec 21, 2025
- Update LinuxServer regex to handle -r{N}-ls{N} format (qBittorrent)
- Change Home Assistant from loose to regex versioning (excludes dev/beta)
- Fix qBittorrent tag: 5.1.4 → 5.1.4-r1-ls431 (proper stable format)

Fixes false major PRs: #630 (qBittorrent), #628 (Home Assistant)
Stale PRs to close: #631 (Sonarr), #630
Valid majors to review: #629 (Uptime Kuma), #627 (Homepage), #626 (MariaDB)
jlengelbrecht added a commit that referenced this pull request Dec 21, 2025
)

* fix(renovate): address versioning gaps causing false major updates

- Update LinuxServer regex to handle -r{N}-ls{N} format (qBittorrent)
- Change Home Assistant from loose to regex versioning (excludes dev/beta)
- Fix qBittorrent tag: 5.1.4 → 5.1.4-r1-ls431 (proper stable format)

Fixes false major PRs: #630 (qBittorrent), #628 (Home Assistant)
Stale PRs to close: #631 (Sonarr), #630
Valid majors to review: #629 (Uptime Kuma), #627 (Homepage), #626 (MariaDB)

* fix(renovate): add stable-only versioning for non-LinuxServer images

- Uptime Kuma: exclude beta/nightly/variants (alpine, slim, rootless)
- MariaDB: exclude RC and platform variants (noble, ubi)
- Homepage: explicit v-prefixed semver matching

Ensures only production-ready releases are proposed for updates.

* fix(renovate): add MariaDB to database wait rule per CodeRabbit feedback

* fix(renovate): resolve MariaDB rule conflict - add safety settings to versioning rule
@homebot-0 homebot-0 bot force-pushed the renovate/ghcr.io-gethomepage-homepage-1.x branch from 571dc79 to b8a3760 Compare January 19, 2026 06:16
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (2)
kubernetes/apps/tools/homepage/app/helmrelease.yaml (2)

99-100: Missing Stakater Reloader annotation for secret rotation.

The pod references homepage-secrets via envFrom but lacks the reloader annotation. When secrets rotate, the pod won't restart automatically.

🔧 Proposed fix
       annotations:
         security.homelab/network: "Internal - Dashboard for homelab services"
+        secret.reloader.stakater.com/reload: "homepage-secrets"

As per coding guidelines, deployments using ExternalSecret should include reloader annotations.


42-46: Add HOMEPAGE_ALLOWED_HOSTS — v1.0.0+ breaking change blocks all requests

v1.0.0+ enforces host validation; without HOMEPAGE_ALLOWED_HOSTS set, the dashboard rejects all requests with "Host validation failed". Add the hostname to env or ExternalSecret.

Fix
            env:
              TZ: America/New_York
              PUID: "568"
              PGID: "568"
+             HOMEPAGE_ALLOWED_HOSTS: "homepage.homelab0.org,homepage.tools.svc.cluster.local"

Or inject via ExternalSecret if managing externally.

Also add missing Stakater Reloader annotation for secret rotation:

      annotations:
        security.homelab/network: "Internal - Dashboard for homelab services"
+       reloader.stakater.com/reload: "homepage-secrets"

@homebot-0 homebot-0 bot force-pushed the renovate/ghcr.io-gethomepage-homepage-1.x branch from b8a3760 to d2f73bd Compare February 5, 2026 06:29
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (2)
kubernetes/apps/tools/homepage/app/helmrelease.yaml (2)

99-100: ⚠️ Potential issue | 🟡 Minor

Missing Stakater Reloader annotation for secret rotation

The pod references homepage-secrets via envFrom but lacks the reloader annotation. Secret updates won't trigger pod restarts.

🔄 Proposed fix
       annotations:
         security.homelab/network: "Internal - Dashboard for homelab services"
+        secret.reloader.stakater.com/reload: "homepage-secrets"

As per coding guidelines: HelmRelease using ExternalSecret or SOPS secrets should include reloader annotations for automatic secret rotation.


42-46: ⚠️ Potential issue | 🔴 Critical

Missing HOMEPAGE_ALLOWED_HOSTS for v1.10.0 host validation

The v1.10.0 release requires this environment variable to validate incoming Host headers. Without it, requests will fail with "Host validation failed" errors. Add the environment variable matching your HTTPRoute hostname:

            env:
              TZ: America/New_York
              PUID: "568"
              PGID: "568"
+             HOMEPAGE_ALLOWED_HOSTS: "homepage.homelab0.org"

Also missing: Add Stakater Reloader annotation

The ExternalSecret homepage-secrets is referenced but the pod lacks the auto-reload annotation. Add to defaultPodOptions.annotations:

      annotations:
        security.homelab/network: "Internal - Dashboard for homelab services"
+       secret.reloader.stakater.com/reload: "homepage-secrets"

@jlengelbrecht jlengelbrecht enabled auto-merge (squash) February 5, 2026 07:25
@jlengelbrecht jlengelbrecht merged commit 5adb127 into main Feb 5, 2026
14 checks passed
@jlengelbrecht jlengelbrecht deleted the renovate/ghcr.io-gethomepage-homepage-1.x branch February 5, 2026 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/kubernetes Changes to Kubernetes manifests and apps renovate Dependency update by Renovate update/major Major version update - breaking changes possible

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant