portainer

Update docker.io/portainer/portainer-ce Docker tag to v2.33.1

Michi Kofler-Häusler

01 Sep 2025 — 1 min read

No problems deploying to Proxmox VE K3s Kubernetes cluster via Helm Chart and Flux V2 reconciliation in a GitOps approach with dependency update facilitated by Mend's Renovate Bot.

Also the corresponding agents were automatically rolled out via Watchtower infrastructure on the Docker-only nodes including arm node with dependency update facilitated by Mend's Renovate Bot.

This MR contains the following updates:

Package	Update	Change
docker.io/portainer/portainer-ce	patch	`2.33.0` -> `2.33.1`

Release Notes

portainer/portainer (docker.io/portainer/portainer-ce)

`v2.33.1`: LTS

Compare Source

Known issues

On Async Edge environments, an invalid update schedule date can be displayed when browsing a snapshot

Known issues with Podman support

Podman environments aren't supported by auto-onboarding script
It's not possible to add Podman environments via socket, when running a Portainer server on Docker (and vice versa)
Support for only CentOS 9, Podman 5 rootful

Changes:

Fixed an issue where the environment status was not updating in a timely fashion for Standard Edge Agent
Fixed an issue where the --tlscert and --tlskey CLI options did not work unless --sslcert and --sslkey were also provided
Fixed an issue where Edge Stacks with GitOps enabled were not being updated correctly
Fixed an issue where the container engine defaulted to Docker when associating the first Kubernetes environment
Resolved the following CVEs:
- CVE-2025-22871
- CVE-2025-22868
- CVE-2025-22869
- CVE-2025-4673
- CVE-2024-45341
- CVE-2024-45336
- CVE-2025-0913
- CVE-2024-45338
- CVE-2025-22872
- CVE-2024-40635
- CVE-2025-22870
- CVE-2025-22866
- CVE-2025-54410
- GHSA-2464-8j7c-4cjm

Deprecated and removed features

Deprecated features

None

Removed features

None

Update docker.io/metabase/metabase Docker tag to v0.56.4

No problems upgrading the Docker container with a Docker compose yaml file and by means of Watchtower infrastructure with dependency update facilitated by Mend's Renovate Bot. This MR contains the following updates: Package Update Change docker.io/metabase/metabase patch v0.56.3 -> v0.56.4

Update docker.io/hashicorp/vault Docker tag to v1.20.3

No problems upgrading the Hashicorp Vault Docker container with a Docker compose yaml file within Portainer and by means of Portainer DevOps resp. GitOps with dependency update facilitated by Mend's Renovate Bot. This MR contains the following updates: Package Update Change docker.io/hashicorp/vault patch 1.20.

Update Helm release gitlab-runner to v0.80.1

No problems deploying GitLab Runner to K3s cluster via Helm Chart and Flux V2 reconciliation in a GitOps approach with dependency update facilitated by Mend's Renovate Bot. And also by means of Watchtower infrastructure to Docker host for Image Lifecycle Management with dependency update facilitated by Mend'

Update docker.io/ghost Docker tag to v6.0.6

On both domains I upgraded Ghost successfully by means of Watchtower Docker container update with dependency update facilitated by Mend's Renovate Bot. This MR contains the following updates: Package Update Change docker.io/ghost patch 6.0.5 -> 6.0.6 Release Notes TryGhost/Ghost (docker.