chore(deps): update ghcr.io/pocket-id/pocket-id docker tag to v2.13.0 #117

Open

renovate-bot wants to merge 1 commit from renovate/ghcr.io-pocket-id-pocket-id-2.x into master

pull from: renovate/ghcr.io-pocket-id-pocket-id-2.x

merge into: xenrox:master

xenrox:master

xenrox:renovate/pin-dependencies

Conversation 0 Commits 1 Files changed 1 +1 -1

renovate-bot commented 2026-08-07 10:01:09 +00:00

Collaborator

Copy link

This PR contains the following updates:

Package	Update	Change
ghcr.io/pocket-id/pocket-id	minor	v2.12.0 → v2.13.0

---

Release Notes

pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)

v2.13.0

Compare Source

Bug Fixes

• retry qr code login polling for known transient gateway responses (7039692 by @​stonith404)
• decrease QR code login session duration to 5 minutes (e35be30 by @​stonith404)
• show more user-friendly error message if QR code has expired (27199f6 by @​stonith404)
• one-time-access-token CLI fails with "RuntimePSKs is required" (#​1637 by @​salcatroppa)
• session revoke fails if orphaned session tokens exist (598895e by @​stonith404)
• disable api key auth for webauthn register endpoints (db64b15 by @​stonith404)
• explicitly set SameSite to Lax for cookies (69d55ad by @​stonith404)
• explicitly require JSON for request bodies (1238bf0 by @​stonith404)
• don't rely on content length header for optional json binding (2c7d1b6 by @​stonith404)
• respect log level in HTTP request logs (488c50e by @​stonith404)
• don't skip rate limits for loopback addresses (140b5d3 by @​stonith404)
• make OIDC client token lifetimes optional (#​1650 by @​ItalyPaleAle)
• in non-HA mode, increase AlarmLeaseDuration (#​1660 by @​ItalyPaleAle)
• separate TLS inputs and preserve certificate reloads (#​1653 by @​stonith404)
• brotli compression ignored (#​1661 by @​stonith404)
• align last signed in text left (c87012a by @​stonith404)

Features

• make oauth access tokens RFC 9068 compliant (7c55bdf by @​stonith404)
• implement OAuth Client ID Metadata Document (#​1526 by @​jfroy)
• add ability to customize session duration of clients (#​1641 by @​stonith404)
• add observability to actors (#​1646 by @​ItalyPaleAle)
• include Francis data in Pocket ID backups (#​1645 by @​ItalyPaleAle)
• add settings for limiting what passkeys can be used (#​1662 by @​stonith404)

Other

• preserve tab indentation for package.json in release script (a1ebf4e by @​stonith404)
• Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#​1639 by @​dependabot[bot])
• use paraglide markup instead of custom implementation (b08ac7b by @​stonith404)
• fix wrong database version in database.json (281bea5 by @​stonith404)
• standardize API error handling (#​1635 by @​stonith404)
• add deepsec to gitignore (e3e0ddc by @​stonith404)
• upgrade vulnerable dependencies (9320144 by @​stonith404)
• remove unused curl dependency from Dockerfile (98160b2 by @​stonith404)
• remove invalid unit test (95809dd by @​stonith404)
• use smaller francis.bin (4fe6f06 by @​stonith404)
• move GeoLite to its own package (#​1647 by @​ItalyPaleAle)
• fix formatting (#​1666 by @​Copilot)

Full Changelog: https://github.com/pocket-id/pocket-id/compare/v2.12.0...v2.13.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.12.0` → `v2.13.0` | --- ### Release Notes <details> <summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary> ### [`v2.13.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2130) [Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.12.0...v2.13.0) ##### Bug Fixes - retry qr code login polling for known transient gateway responses ([7039692](https://github.com/pocket-id/pocket-id/commit/703969278be2a6b2cae30ca89dba4b73b0c969fa) by [@&#8203;stonith404](https://github.com/stonith404)) - decrease QR code login session duration to 5 minutes ([e35be30](https://github.com/pocket-id/pocket-id/commit/e35be309a3d40064617ef0ad557476c93ba983a9) by [@&#8203;stonith404](https://github.com/stonith404)) - show more user-friendly error message if QR code has expired ([27199f6](https://github.com/pocket-id/pocket-id/commit/27199f61d4adaeca463db68980dae6c2a885c5b4) by [@&#8203;stonith404](https://github.com/stonith404)) - one-time-access-token CLI fails with "RuntimePSKs is required" ([#&#8203;1637](https://github.com/pocket-id/pocket-id/pull/1637) by [@&#8203;salcatroppa](https://github.com/salcatroppa)) - session revoke fails if orphaned session tokens exist ([598895e](https://github.com/pocket-id/pocket-id/commit/598895e7c53df28598d578896f6396241e9e9ef7) by [@&#8203;stonith404](https://github.com/stonith404)) - disable api key auth for webauthn register endpoints ([db64b15](https://github.com/pocket-id/pocket-id/commit/db64b150be9046ee971f520b4c30f3b3d434facf) by [@&#8203;stonith404](https://github.com/stonith404)) - explicitly set SameSite to Lax for cookies ([69d55ad](https://github.com/pocket-id/pocket-id/commit/69d55ada6c695c47f764285ca9e94736e50a8103) by [@&#8203;stonith404](https://github.com/stonith404)) - explicitly require JSON for request bodies ([1238bf0](https://github.com/pocket-id/pocket-id/commit/1238bf0f378340d101c90295990b514131b10fe7) by [@&#8203;stonith404](https://github.com/stonith404)) - don't rely on content length header for optional json binding ([2c7d1b6](https://github.com/pocket-id/pocket-id/commit/2c7d1b63e1a366718d0c1951475e791922bb2445) by [@&#8203;stonith404](https://github.com/stonith404)) - respect log level in HTTP request logs ([488c50e](https://github.com/pocket-id/pocket-id/commit/488c50ef95e3e88f3a0085a67b399819a4647c7f) by [@&#8203;stonith404](https://github.com/stonith404)) - don't skip rate limits for loopback addresses ([140b5d3](https://github.com/pocket-id/pocket-id/commit/140b5d3cb440ccc7a30a3a1c9aae2f7a9d5efb4a) by [@&#8203;stonith404](https://github.com/stonith404)) - make OIDC client token lifetimes optional ([#&#8203;1650](https://github.com/pocket-id/pocket-id/pull/1650) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle)) - in non-HA mode, increase AlarmLeaseDuration ([#&#8203;1660](https://github.com/pocket-id/pocket-id/pull/1660) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle)) - separate TLS inputs and preserve certificate reloads ([#&#8203;1653](https://github.com/pocket-id/pocket-id/pull/1653) by [@&#8203;stonith404](https://github.com/stonith404)) - brotli compression ignored ([#&#8203;1661](https://github.com/pocket-id/pocket-id/pull/1661) by [@&#8203;stonith404](https://github.com/stonith404)) - align last signed in text left ([c87012a](https://github.com/pocket-id/pocket-id/commit/c87012ae01cb9e85ab305fffc40347297eff6ffb) by [@&#8203;stonith404](https://github.com/stonith404)) ##### Features - make oauth access tokens RFC 9068 compliant ([7c55bdf](https://github.com/pocket-id/pocket-id/commit/7c55bdf115fc5b7fea89ef5cd3c79dc926ddf5ac) by [@&#8203;stonith404](https://github.com/stonith404)) - implement OAuth Client ID Metadata Document ([#&#8203;1526](https://github.com/pocket-id/pocket-id/pull/1526) by [@&#8203;jfroy](https://github.com/jfroy)) - add ability to customize session duration of clients ([#&#8203;1641](https://github.com/pocket-id/pocket-id/pull/1641) by [@&#8203;stonith404](https://github.com/stonith404)) - add observability to actors ([#&#8203;1646](https://github.com/pocket-id/pocket-id/pull/1646) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle)) - include Francis data in Pocket ID backups ([#&#8203;1645](https://github.com/pocket-id/pocket-id/pull/1645) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle)) - add settings for limiting what passkeys can be used ([#&#8203;1662](https://github.com/pocket-id/pocket-id/pull/1662) by [@&#8203;stonith404](https://github.com/stonith404)) ##### Other - preserve tab indentation for package.json in release script ([a1ebf4e](https://github.com/pocket-id/pocket-id/commit/a1ebf4e98b65fa465f99bfa2fb9694a903076a32) by [@&#8203;stonith404](https://github.com/stonith404)) - Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#&#8203;1639](https://github.com/pocket-id/pocket-id/pull/1639) by [@&#8203;dependabot](https://github.com/dependabot)\[bot]) - use paraglide markup instead of custom implementation ([b08ac7b](https://github.com/pocket-id/pocket-id/commit/b08ac7bf7de04872a83913db19fc6392ecf7bd96) by [@&#8203;stonith404](https://github.com/stonith404)) - fix wrong database version in `database.json` ([281bea5](https://github.com/pocket-id/pocket-id/commit/281bea54d351128e29bb2e54455a7cb2e619554a) by [@&#8203;stonith404](https://github.com/stonith404)) - standardize API error handling ([#&#8203;1635](https://github.com/pocket-id/pocket-id/pull/1635) by [@&#8203;stonith404](https://github.com/stonith404)) - add deepsec to gitignore ([e3e0ddc](https://github.com/pocket-id/pocket-id/commit/e3e0ddc192d01de35b8f907144ac66b6b2963ac0) by [@&#8203;stonith404](https://github.com/stonith404)) - upgrade vulnerable dependencies ([9320144](https://github.com/pocket-id/pocket-id/commit/9320144991fa0f9f6c1419af0c78c7e2395dc61e) by [@&#8203;stonith404](https://github.com/stonith404)) - remove unused curl dependency from Dockerfile ([98160b2](https://github.com/pocket-id/pocket-id/commit/98160b20a15056535bf12d357b7d97c63a165cd0) by [@&#8203;stonith404](https://github.com/stonith404)) - remove invalid unit test ([95809dd](https://github.com/pocket-id/pocket-id/commit/95809dd29cea92e30f54c34876305f7a27a595bd) by [@&#8203;stonith404](https://github.com/stonith404)) - use smaller francis.bin ([4fe6f06](https://github.com/pocket-id/pocket-id/commit/4fe6f0688c2760abfe35558ffc9126f3a1e9edc0) by [@&#8203;stonith404](https://github.com/stonith404)) - move GeoLite to its own package ([#&#8203;1647](https://github.com/pocket-id/pocket-id/pull/1647) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle)) - fix formatting ([#&#8203;1666](https://github.com/pocket-id/pocket-id/pull/1666) by [@&#8203;Copilot](https://github.com/Copilot)) **Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.12.0...v2.13.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->

renovate-bot added 1 commit 2026-08-07 10:01:09 +00:00

chore(deps): update ghcr.io/pocket-id/pocket-id docker tag to v2.13.0 7fd9c8fc68

All checks were successful

Hide checks

Lint / lint (push) Successful in 40s

Details

Lint / lint (pull_request) Successful in 40s

Details

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/ghcr.io-pocket-id-pocket-id-2.x:renovate/ghcr.io-pocket-id-pocket-id-2.x

git switch renovate/ghcr.io-pocket-id-pocket-id-2.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master

git merge --no-ff renovate/ghcr.io-pocket-id-pocket-id-2.x

git switch renovate/ghcr.io-pocket-id-pocket-id-2.x

git rebase master

git switch master

git merge --ff-only renovate/ghcr.io-pocket-id-pocket-id-2.x

git switch renovate/ghcr.io-pocket-id-pocket-id-2.x

git rebase master

git switch master

git merge --no-ff renovate/ghcr.io-pocket-id-pocket-id-2.x

git switch master

git merge --squash renovate/ghcr.io-pocket-id-pocket-id-2.x

git switch master

git merge --ff-only renovate/ghcr.io-pocket-id-pocket-id-2.x

git switch master

git merge renovate/ghcr.io-pocket-id-pocket-id-2.x

git push origin master

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

xenrox/ansible!117

No description provided.