vaultwarden

Update docker.io/vaultwarden/server Docker tag to v1.36.0

Automatically upgrading Vaultwarden container with Watchtower and having to problems whatsoever with dependency update facilitated by Mend's Renovate Bot.

This MR contains the following updates:

Package	Update	Change
docker.io/vaultwarden/server	minor	`1.35.8` → `1.36.0`

Release Notes

dani-garcia/vaultwarden (docker.io/vaultwarden/server)

`v1.36.0`

Compare Source

Security Fixes

This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.

SSO Login CSRF
GHSA-pfp2-jhgq-6hg5
GHSA-w6h6-8r66-hcv7
User/Organization Enumeration
GHSA-hxqh-ff5p-wfr3
SSO existing-user binding
GHSA-j4j8-gpvj-7fqr
GHSA-6x5c-84vm-5j56
SSRF via Icon Endpoint
GHSA-72vh-x5jq-m82g
Some crate's updated and other minor security enhancements

These are private for now, pending CVE assignment.

Notes

Archiving of items is available
https://bitwarden.com/blog/keep-your-vault-tidy-with-item-archiving/
https://bitwarden.com/nl-nl/help/managing-items/#archive
Web Vault updated to v2026.4.1

What's Changed

SSO fallback to UserInfo preferred_username by @Timshel in #7128
Dummy identifier need to pass for a guid by @Timshel in #7154
add new /identity/accounts/prelogin/password by @stefan0xC in #7156
Add DuckDuckGo browser device type by @dfunkt in #7147
Apply duration_suboptimal_units lint findings by @dfunkt in #7144
Apply ref_option lint findings by @dfunkt in #7143
Fix hardcoded sso identifier by @Timshel in #7157
Update crates and fix a nightly lint by @BlackDex in #7161
Fix Host/IP resolving by @BlackDex in #7162
Several SSO Fixes by @BlackDex in #7163
Add support for archiving items by @matt-aaron in #6916
Fix favicon fetching to check all icon links instead of just the first one by @Shocker in #6880
Fix merge conflict by @dani-garcia in #7164
Replace organization_uuid unwrap with proper error handling by @xjohnyknox in #6936
fix: return Err instead of panic on unknown cipher atype in to_json() by @mango766 in #7068
Allow SQLite to be linked against dynamically by @ISSOtm in #7057
Update crates and web-vault by @BlackDex in #7171
Update hickory by @BlackDex in #7175

New Contributors

@matt-aaron made their first contribution in #6916
@Shocker made their first contribution in #6880
@xjohnyknox made their first contribution in #6936
@mango766 made their first contribution in #7068
@ISSOtm made their first contribution in #7057

Full Changelog: https://github.com/dani-garcia/vaultwarden/compare/1.35.8...1.36.0

You can discuss this release here https://github.com/dani-garcia/vaultwarden/discussions/7177

Update docker.io/percona/mongodb_exporter Docker tag to v0.51.0

Automtated minor upgrade of the MongoDB exporter Docker container by means of Watchtower with dependency update facilitated by Mend's Renovate Bot. This MR contains the following updates: Package Update Change docker.io/percona/mongodb_exporter minor 0.49.0 → 0.51.0 Release Notes percona/mongodb_exporter (docker.

Update docker.io/mongo Docker tag to v8.3.1

Successfully upgraded the Docker container on the Database Host using Watchtower infrastructure. This MR contains the following updates: Package Update Change docker.io/mongo minor 8.2.7-noble → 8.3.1-noble Release Notes docker.io/mongo (docker) 8.3.1 MongoDB is a document database designed for ease of development

Update docker.io/ghost Docker tag to v6.36.0

On both domains I upgraded Ghost successfully by means of Watchtower Docker container update with dependency update facilitated by Mend's Renovate Bot. This MR contains the following updates: Package Update Change docker.io/ghost minor 6.35.0 → 6.36.0 Release Notes TryGhost/Ghost (docker.io/ghost)

Update ghcr.io/jokob-sk/netalertx Docker tag to v26.5.4

I upgraded NetAlertX successfully by means of Watchtower Docker container update with dependency update facilitated by Mend's Renovate Bot. This MR contains the following updates: Package Update Change ghcr.io/jokob-sk/netalertx minor 26.4.6 → 26.5.4 Release Notes netalertx/NetAlertX (ghcr.io/jokob-sk/netalertx) v26.