Update docker.io/portainer/portainer-ce Docker tag to v2.33.0
No problems deploying to Proxmox VE K3s Kubernetes cluster via Helm Chart and Flux V2 reconciliation in a GitOps approach with dependency update facilitated by Mend's Renovate Bot.
Also the corresponding agents were automatically rolled out via Watchtower infrastructure on the Docker-only nodes including arm node with dependency update facilitated by Mend's Renovate Bot.
This MR contains the following updates:
| Package | Update | Change |
|---|---|---|
| docker.io/portainer/portainer-ce | minor | 2.32.0 -> 2.33.0 |
Release Notes
portainer/portainer (docker.io/portainer/portainer-ce)
v2.33.0: LTS
Known issues
- On Async Edge environments, an invalid update schedule date can be displayed when browsing a snapshot
Known issues with Podman support
- Podman environments aren't supported by auto-onboarding script
- It's not possible to add Podman environments via socket, when running a Portainer server on Docker (and vice versa)
- Support for only CentOS 9, Podman 5 rootful
New in this Release:
- Improved the dropdown behavior when there are more than 1000 items
- Improved the YAML web editor
- Introduced the ability to add bearer token authentication support for Bitbucket Repositories
- Fixed an issue where duplicated events could be created by pending events
- Moved the kubectl shell feature to a pop-up window
- Improved performance by optimizing Edge Group endpoint relations
- Added Permissions-Policy header to improve security
- Fixed an issue where the log viewer could crash when rendering long multiline logs
- Fixed an issue where Portainer generated kubeconfig causes
kubectl execto fail - Fixed an issue with custom logos not being aligned correctly
- Fixed an issue where Helm preview (dry run) errors could block some valid Helm installs
- Fixed an issue where Kubernetes environment stats were missing in the Home View
- Fixed an issue where the environment count could overlap with the other UI components in the Edge Configuration list view
- Fixed an issue with links to Secrets when there is a ConfigMap and a Secret with the same names
- Fixed an issue where edge stacks could show a status of unavailable when they were properly deployed
- Fixed an issue where Helm applications with the same workload name would get combined in the Applications page
- Fixed an issue where a standard user with access to a Helm registry could not load OCI Helm charts
- Fixed Swagger documentation
- Resolved the following CVEs:
- CVE-2025-55198
- CVE-2025-55199
- CVE-2025-54388
- CVE-2020-8552
- CVE-2025-8556
- GHSA-fv92-fjc5-jj9h
Deprecated and removed features
Deprecated features
- None
Removed features
- As previously announced, support for the Docker manifest list format (
application/vnd.docker.distribution.manifest.list.v2+json) has been removed. All published container images now exclusively use the OCI image index format (application/vnd.oci.image.index.v1+json). Tooling that relied on Docker-specific media types should be updated to ensure compatibility with OCI-compliant image indexes. - The OpenAI integration experimental feature has been removed.
