noahc/minilab
1
Fork 0
Code Issues 1 Pull requests 3 Releases Packages 2 Activity Actions

chore(deps): update ghcr.io/tale/headplane docker tag to v0.8.2 #637

Open
renovate wants to merge 1 commit from renovate/ghcr.io-tale-headplane-0.x into main
pull from: renovate/ghcr.io-tale-headplane-0.x
merge into: noahc:main
Conversation 0 Commits 1 Files changed 1 +1 -1
renovate commented 2026-10-22 22:01:13 +00:00
Collaborator
Copy link

This PR contains the following updates:

Package Update Change
ghcr.io/tale/headplane patch 0.8.1 → 0.8.2

Release Notes

tale/headplane (ghcr.io/tale/headplane)

v0.8.2

Compare Source

This release contains an important security update for Headplane that protects against the compromised eMudhra intermediate CAs with Node.js 24.22.1 and Go 1.27.3. Any native installations should also upgrade to these versions and rebuild the agent.

Fixes

  • Docker images now ship Node.js 24.22.1 and an agent built on Go 1.27.3 (fixes GHSA-jhh3-g853-mxjc, reported by @​trouze).
  • A machine's page now requires permission to view machines, like the machines list. Previously anyone signed in could open it by its address.
  • The agent no longer creates a new auth key everytime it starts, which caused duplicate machines to be registered on Headscale 0.28.
    • The agent now reuses its existing key and will delete leftover machines on Headscale if it detects a duplicate.
    • Restart resiliency and crash recovery have been improved. There is now a 20 second heartbeat to catch an unresponsive agent.
    • Headplane now rejects an agent work directory it can't write to.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/tale/headplane](https://github.com/tale/headplane) | patch | `0.8.1` → `0.8.2` | --- ### Release Notes <details> <summary>tale/headplane (ghcr.io/tale/headplane)</summary> ### [`v0.8.2`](https://github.com/tale/headplane/releases/tag/v0.8.2) [Compare Source](https://github.com/tale/headplane/compare/v0.8.1...v0.8.2) This release contains an important security update for Headplane that protects against the [compromised eMudhra intermediate CAs](https://emudhra.com/en/post/certificate-security-incident) with Node.js 24.22.1 and Go 1.27.3. Any native installations should also upgrade to these versions and rebuild the agent. #### Fixes - Docker images now ship Node.js 24.22.1 and an agent built on Go 1.27.3 (fixes [GHSA-jhh3-g853-mxjc](https://github.com/tale/headplane/security/advisories/GHSA-jhh3-g853-mxjc), reported by [@&#8203;trouze](https://github.com/trouze)). - A machine's page now requires permission to view machines, like the machines list. Previously anyone signed in could open it by its address. - The agent no longer creates a new auth key everytime it starts, which caused duplicate machines to be registered on Headscale 0.28. - The agent now reuses its existing key and will delete leftover machines on Headscale if it detects a duplicate. - Restart resiliency and crash recovery have been improved. There is now a 20 second heartbeat to catch an unresponsive agent. - Headplane now rejects an agent work directory it can't write to. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzYuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/ghcr.io-tale-headplane-0.x:renovate/ghcr.io-tale-headplane-0.x
git switch renovate/ghcr.io-tale-headplane-0.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/ghcr.io-tale-headplane-0.x
git switch renovate/ghcr.io-tale-headplane-0.x
git rebase main
git switch main
git merge --ff-only renovate/ghcr.io-tale-headplane-0.x
git switch renovate/ghcr.io-tale-headplane-0.x
git rebase main
git switch main
git merge --no-ff renovate/ghcr.io-tale-headplane-0.x
git switch main
git merge --squash renovate/ghcr.io-tale-headplane-0.x
git switch main
git merge --ff-only renovate/ghcr.io-tale-headplane-0.x
git switch main
git merge renovate/ghcr.io-tale-headplane-0.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
noahc/minilab!637
No description provided.