Update adguard/adguardhome Docker tag to v0.107.77 #43

Open
renovate-bot wants to merge 1 commit from renovate/adguard-adguardhome-0.x into main
Collaborator

This PR contains the following updates:

Package Update Change
adguard/adguardhome (source) patch v0.107.71v0.107.77

Release Notes

AdguardTeam/AdGuardHome (adguard/adguardhome)

v0.107.77

Compare Source

See also the v0.107.77 GitHub milestone.

NOTE: Add new changes BELOW THIS COMMENT.
-->

Added
  • New reason query parameter in GET /control/querylog. See openapi/openapi.yaml for the full description.
Deprecated
  • Query parameter response_status in GET /control/querylog is now deprecated. Use new reason query parameter instead.
Fixed
  • Blocked services check on the Custom filtering rules page does not work properly without specifying of a client.

v0.107.76

Compare Source

See also the v0.107.76 GitHub milestone.

Changed
  • Duration values in YAML configuration file now support d (days) units and has been updated.

    NOTE: Any rollback to version below the v0.107.76 should convert the values back to hours.

Fixed
  • DNS caching with disabled DNSSEC (#​8384).

v0.107.75

Compare Source

See also the v0.107.75 GitHub milestone.

Security
  • Authorization in GLiNET mode is no longer vulnerable to path traversal attacks.

  • Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in 1.26.3.

  • IDs of requests received over DoH and DoQ and forwarded to plain-DNS upstreams are now set to non-zero values to improve security.

    This is GHSA-xgx4-4h9w-53pv. We thank @​N0zoM1z0 for reporting this security issue.

Changed
  • Frontend API requests no longer depend on axios.

  • Dashboard charts use Recharts instead of Nivo.

  • enable_dnssec in dns configuration now defines whether the proxy should set the DO flag in the upstream requests, the default is true (#​7046).

Fixed
  • Statistics database deadlock (#​8359).

  • Translated labels on the DNS settings pages not updating after changing the UI language.

  • Dashboard charts now correctly display lower query counts (#​6823).

  • Redundant validation warnings about DHCP when it's disabled (#​8348).

  • Safe Browsing and Parental Control labels on the General Settings page not updating after changing the UI language.

v0.107.74

Compare Source

See also the v0.107.74 GitHub milestone.

Security
  • Frontend libraries has been updated to prevent the possibility of exploiting the vulnerability described in CVE-2026-40175.

  • Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in 1.26.2.

Changed
Configuration changes

In this release, the schema version has changed from 33 to 34.

  • Added a new field doh in http configuration.

    # BEFORE:
    'http':
      # …
    'tls':
      # …
      'allow_unencrypted_doh': false
    
    # AFTER:
    'http':
      # …
      'doh':
        'insecure_enabled': false
        'routes':
          - 'GET /dns-query'
          - 'POST /dns-query'
          - 'GET /dns-query/{ClientID}'
          - 'POST /dns-query/{ClientID}'
    'tls':
      # …
    

    To roll back this change, set the schema_version back to 33.

Fixed
  • Incorrect forwarding of root domain requests when domain-specific upstreams are configured (#​7058).

  • The strict SNI check setting is not persisted when the TLS configuration is changed (#​8327).

  • Status reported by the launchd service implementation in cases of scheduled service restart.

  • Fixed clients block/unblock when moving clients between allowed and disallowed lists.

v0.107.73

Compare Source

See also the v0.107.73 GitHub milestone.

Security
  • Authentication is now applied to requests that have been upgraded from HTTP/2 Cleartext (H2C) requests to public resources.

    NOTE: We thank @​mandreko for reporting this security issue.

v0.107.72

Compare Source

See also the v0.107.72 GitHub milestone.

Security
  • Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in 1.25.7.
Added
  • AdGuard Home now tracks the TLS certificate and key files for updates and reloads them after any updates are detected (#​3962).

  • New query parameter recent in GET /control/stats/ defines statistics lookback period in millieseconds. See openapi/openapi.yaml for details.

  • New field "ignored_enabled" in GetStatsConfigResponse or GetQueryLogConfigResponse. See openapi/openapi.yaml for details.

Changed
  • In addition to modifying the contents of a hosts file, deleting or renaming the file now also updates runtime clients and DNS filtering results.
Configuration changes

In this release, the schema version has changed from 32 to 33.

  • Added a new boolean field ignored_enabled in querylog and statistics config.

    # BEFORE:
    'querylog':
      # …
      'ignored':
      - '|.^'
    'statistics':
      # …
      'ignored':
      - '|.^'
    
    # AFTER:
    'querylog':
      # …
      'ignored':
      - '|.^'
      'ignored_enabled': true
    'statistics':
      # …
      'ignored':
      - '|.^'
      'ignored_enabled': true
      ```
    
    To roll back this change, set the `schema_version` back to `32`.
    
Fixed
  • Executable permissions in some Docker installations (#​8237).

  • Unknown blocked services from both global and client configuration now logged instead of causing server crash.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [adguard/adguardhome](https://adguard.com/en/adguard-home/overview.html) ([source](https://github.com/AdguardTeam/AdGuardHome)) | patch | `v0.107.71` → `v0.107.77` | --- ### Release Notes <details> <summary>AdguardTeam/AdGuardHome (adguard/adguardhome)</summary> ### [`v0.107.77`](https://github.com/AdguardTeam/AdGuardHome/blob/HEAD/CHANGELOG.md#v010777---2026-06-01-APPROX) [Compare Source](https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.76...v0.107.77) See also the [v0.107.77 GitHub milestone][ms-v0.107.77]. [ms-v0.107.77]: https://github.com/AdguardTeam/AdGuardHome/milestone/112?closed=1 NOTE: Add new changes BELOW THIS COMMENT. \--> ##### Added - New `reason` query parameter in `GET /control/querylog`. See `openapi/openapi.yaml` for the full description. ##### Deprecated - Query parameter `response_status` in `GET /control/querylog` is now deprecated. Use new `reason` query parameter instead. ##### Fixed - Blocked services check on the Custom filtering rules page does not work properly without specifying of a client. <!-- NOTE: Add new changes ABOVE THIS COMMENT. --> ### [`v0.107.76`](https://github.com/AdguardTeam/AdGuardHome/blob/HEAD/CHANGELOG.md#v010776---2026-05-21) [Compare Source](https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.75...v0.107.76) See also the [v0.107.76 GitHub milestone][ms-v0.107.76]. ##### Changed - Duration values in YAML configuration file now support `d` (days) units and has been updated. **NOTE:** Any rollback to version below the `v0.107.76` should convert the values back to hours. ##### Fixed - DNS caching with disabled DNSSEC ([#&#8203;8384]). [#&#8203;8384]: https://github.com/AdguardTeam/AdGuardHome/issues/8384 [ms-v0.107.76]: https://github.com/AdguardTeam/AdGuardHome/milestone/111?closed=1 ### [`v0.107.75`](https://github.com/AdguardTeam/AdGuardHome/blob/HEAD/CHANGELOG.md#v010775---2026-05-19) [Compare Source](https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.74...v0.107.75) See also the [v0.107.75 GitHub milestone][ms-v0.107.75]. ##### Security - Authorization in GLiNET mode is no longer vulnerable to path traversal attacks. - Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.26.3][go-1.26.3]. - IDs of requests received over DoH and DoQ and forwarded to plain-DNS upstreams are now set to non-zero values to improve security. This is GHSA-xgx4-4h9w-53pv. We thank [@&#8203;N0zoM1z0](https://github.com/N0zoM1z0) for reporting this security issue. ##### Changed - Frontend API requests no longer depend on axios. - Dashboard charts use Recharts instead of Nivo. - `enable_dnssec` in `dns` configuration now defines whether the proxy should set the DO flag in the upstream requests, the default is `true` ([#&#8203;7046]). ##### Fixed - Statistics database deadlock ([#&#8203;8359]). - Translated labels on the DNS settings pages not updating after changing the UI language. - Dashboard charts now correctly display lower query counts ([#&#8203;6823]). - Redundant validation warnings about DHCP when it's disabled ([#&#8203;8348]). - Safe Browsing and Parental Control labels on the General Settings page not updating after changing the UI language. [#&#8203;6823]: https://github.com/AdguardTeam/AdGuardHome/issues/6823 [#&#8203;7046]: https://github.com/AdguardTeam/AdGuardHome/issues/7046 [#&#8203;8348]: https://github.com/AdguardTeam/AdGuardHome/issues/8348 [#&#8203;8359]: https://github.com/AdguardTeam/AdGuardHome/issues/8359 [ms-v0.107.75]: https://github.com/AdguardTeam/AdGuardHome/milestone/110?closed=1 [go-1.26.3]: https://groups.google.com/g/golang-announce/c/qcCIEXso47M ### [`v0.107.74`](https://github.com/AdguardTeam/AdGuardHome/blob/HEAD/CHANGELOG.md#v010774---2026-04-16) [Compare Source](https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.73...v0.107.74) See also the [v0.107.74 GitHub milestone][ms-v0.107.74]. ##### Security - Frontend libraries has been updated to prevent the possibility of exploiting the vulnerability described in [CVE-2026-40175][cve-2026-40175]. - Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.26.2][go-1.26.2]. ##### Changed ##### Configuration changes In this release, the schema version has changed from 33 to 34. - Added a new field `doh` in `http` configuration. ```yaml # BEFORE: 'http': # … 'tls': # … 'allow_unencrypted_doh': false # AFTER: 'http': # … 'doh': 'insecure_enabled': false 'routes': - 'GET /dns-query' - 'POST /dns-query' - 'GET /dns-query/{ClientID}' - 'POST /dns-query/{ClientID}' 'tls': # … ``` To roll back this change, set the `schema_version` back to `33`. ##### Fixed - Incorrect forwarding of root domain requests when domain-specific upstreams are configured ([#&#8203;7058]). - The strict SNI check setting is not persisted when the TLS configuration is changed ([#&#8203;8327]). - Status reported by the launchd service implementation in cases of scheduled service restart. - Fixed clients block/unblock when moving clients between allowed and disallowed lists. [#&#8203;7058]: https://github.com/AdguardTeam/AdGuardHome/issues/7058 [#&#8203;8327]: https://github.com/AdguardTeam/AdGuardHome/issues/8327 [cve-2026-40175]: https://nvd.nist.gov/vuln/detail/CVE-2026-40175 [go-1.26.2]: https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU [ms-v0.107.74]: https://github.com/AdguardTeam/AdGuardHome/milestone/109?closed=1 ### [`v0.107.73`](https://github.com/AdguardTeam/AdGuardHome/blob/HEAD/CHANGELOG.md#v010773---2026-03-10) [Compare Source](https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.72...v0.107.73) See also the [v0.107.73 GitHub milestone][ms-v0.107.73]. ##### Security - Authentication is now applied to requests that have been upgraded from HTTP/2 Cleartext (H2C) requests to public resources. **NOTE:** We thank [@&#8203;mandreko](https://github.com/mandreko) for reporting this security issue. [ms-v0.107.73]: https://github.com/AdguardTeam/AdGuardHome/milestone/108?closed=1 ### [`v0.107.72`](https://github.com/AdguardTeam/AdGuardHome/blob/HEAD/CHANGELOG.md#v010772---2026-02-19) [Compare Source](https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.71...v0.107.72) See also the [v0.107.72 GitHub milestone][ms-v0.107.72]. ##### Security - Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.25.7][go-1.25.7]. ##### Added - AdGuard Home now tracks the TLS certificate and key files for updates and reloads them after any updates are detected ([#&#8203;3962]). - New query parameter `recent` in `GET /control/stats/` defines statistics lookback period in millieseconds. See `openapi/openapi.yaml` for details. - New field `"ignored_enabled"` in `GetStatsConfigResponse` or `GetQueryLogConfigResponse`. See `openapi/openapi.yaml` for details. ##### Changed - In addition to modifying the contents of a hosts file, deleting or renaming the file now also updates runtime clients and DNS filtering results. ##### Configuration changes In this release, the schema version has changed from 32 to 33. - Added a new boolean field `ignored_enabled` in querylog and statistics config. ````yaml # BEFORE: 'querylog': # … 'ignored': - '|.^' 'statistics': # … 'ignored': - '|.^' # AFTER: 'querylog': # … 'ignored': - '|.^' 'ignored_enabled': true 'statistics': # … 'ignored': - '|.^' 'ignored_enabled': true ``` To roll back this change, set the `schema_version` back to `32`. ```` ##### Fixed - Executable permissions in some Docker installations ([#&#8203;8237]). - Unknown blocked services from both global and client configuration now logged instead of causing server crash. [#&#8203;3962]: https://github.com/AdguardTeam/AdGuardHome/issues/3962 [#&#8203;8237]: https://github.com/AdguardTeam/AdGuardHome/issues/8237 [go-1.25.7]: https://groups.google.com/g/golang-announce/c/K09ubi9FQFk [ms-v0.107.72]: https://github.com/AdguardTeam/AdGuardHome/milestone/107?closed=1 </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44LjEiLCJ1cGRhdGVkSW5WZXIiOiI0My4yMzEuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot changed title from Update adguard/adguardhome Docker tag to v0.107.72 to Update adguard/adguardhome Docker tag to v0.107.73 2026-04-06 13:56:23 +02:00
renovate-bot force-pushed renovate/adguard-adguardhome-0.x from 90b5d3b546 to aa55ad5ae3 2026-04-16 13:44:53 +02:00 Compare
renovate-bot changed title from Update adguard/adguardhome Docker tag to v0.107.73 to Update adguard/adguardhome Docker tag to v0.107.74 2026-04-16 13:44:54 +02:00
renovate-bot force-pushed renovate/adguard-adguardhome-0.x from aa55ad5ae3 to 6eaee947e9 2026-04-17 00:20:41 +02:00 Compare
renovate-bot force-pushed renovate/adguard-adguardhome-0.x from 6eaee947e9 to ae0c8d2b92 2026-05-19 13:17:22 +02:00 Compare
renovate-bot changed title from Update adguard/adguardhome Docker tag to v0.107.74 to Update adguard/adguardhome Docker tag to v0.107.75 2026-05-19 13:17:25 +02:00
renovate-bot force-pushed renovate/adguard-adguardhome-0.x from ae0c8d2b92 to 82be5a23cc 2026-05-21 20:36:04 +02:00 Compare
renovate-bot changed title from Update adguard/adguardhome Docker tag to v0.107.75 to Update adguard/adguardhome Docker tag to v0.107.76 2026-05-21 20:36:05 +02:00
renovate-bot force-pushed renovate/adguard-adguardhome-0.x from 82be5a23cc to 4ad77a98e3 2026-06-02 14:48:08 +02:00 Compare
renovate-bot changed title from Update adguard/adguardhome Docker tag to v0.107.76 to Update adguard/adguardhome Docker tag to v0.107.77 2026-06-02 14:48:12 +02:00
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/adguard-adguardhome-0.x:renovate/adguard-adguardhome-0.x
git switch renovate/adguard-adguardhome-0.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/adguard-adguardhome-0.x
git switch renovate/adguard-adguardhome-0.x
git rebase main
git switch main
git merge --ff-only renovate/adguard-adguardhome-0.x
git switch renovate/adguard-adguardhome-0.x
git rebase main
git switch main
git merge --no-ff renovate/adguard-adguardhome-0.x
git switch main
git merge --squash renovate/adguard-adguardhome-0.x
git switch main
git merge --ff-only renovate/adguard-adguardhome-0.x
git switch main
git merge renovate/adguard-adguardhome-0.x
git push origin main
Sign in to join this conversation.
No reviewers
No labels
navidrome
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
jori/docker-compose-files!43
No description provided.