vloot/prowlarr

Fork 0

generated from vloot/template-kubernetes-deployment

Update ghcr.io/qdm12/gluetun Docker tag to v3.41.3 #15

Open

renovate wants to merge 1 commit from renovate/ghcr.io-qdm12-gluetun-3.x into main

renovate commented

2026-07-29 11:42:13 +00:00

Member

This PR contains the following updates:

Package	Update	Change
ghcr.io/qdm12/gluetun	patch	`v3.41.1` → `v3.41.3`

Release Notes

passteque/gluetun (ghcr.io/qdm12/gluetun)

`v3.41.3`

Compare Source

This fixes a VPN server port forwarding deadlock bug introduced whilst back-porting a fix from the master branch (:latest image) to v3.41.2. Credits to @robinostlund for reporting the bug and even nailing down what it was! (#3416)

Refer to v3.41.2 fixes in case you haven't checked.

`v3.41.2`

Compare Source

⚠️ there is a deadlock bug in the port forwarding if you use the up or down command, I will release v3.41.3 shortly

Fixes

Wireguard:
- support IPv6 address formatting from config files (#3273)
- ignore empty address strings
- skip tun device checks when using kernelspace
OpenVPN:
- bundle provider CA certificates in one block (#3258)
- trim spaces in config lines before parsing (#3327)
- fix support for tcp-client
  - always use proto tcp-client when using TCP
  - parses tcp-client (on top of tcp, tcp4, tcp6) as meaning TCP
Custom openvpn: restrict custom openvpn config protocol to tcp or udp internally
Firewall: shared mutex for both iptables and ip6tables to prevent race conditions
Healthcheck:
- correct behavior when HEALTH_RESTART_VPN=off and startup check fails
- prevent race condition on the healthchecker (#3400)
DNS:
- skip blocking if block lists download fails
- correct error wrapping for DNS listening address validation
- DNS over TLS pool behavior fixed
  - handle timed out connections the same as closed connections
  - close connection on TLS handshake failure
  - improve mutex handling during connection renewal and retrieval
VPN port forwarding:
- no longer stuck after failed port forwarding
- handle empty ports without panicing
Updater: only uses DoH to cloudflare+google
- prevent dns plaintext manipulation both the periodic update and when running in cli mode
- possibly higher reliability on poor connections versus UDP
- drop -dns flag in update command
- for now no configuration allowed since it makes everything rather complex
Control server:
- use port and ports for both single port and multiple ports forwarded
- authentication: return 404 or 405 depending on route
Increase global http client timeout to 35s and precise lower timeouts where needed
- Fix DNS blocklists slow downloads
- Leave 35s timeout for updaters
- Set timeouts to 1s for local calls
- Set timeouts to 5s for LAN VPN calls and small external calls
- Set timeouts to 10s external VPN API calls
Kernel modules: probe searches for features built-in the kernel
CI: set hash of PR commit instead of synthetic commit in docker build argument
internal/command: fix rare race condition on log line stream at command completion

Provider specific fixes

AirVPN: update servers data (#3186)
ExpressVPN:
- add new CA3 certificate to fix TLS handshake failure (#3184, #3192)
- remove pakistan server
Privado:
- servers data updated using JSON API
- allow OpenVPN TCP protocol
- allow additional OpenVPN ports 443, 8080 and 8443 for both tcp and udp
Private Internet Access:
- remove none encryption preset
- use AES-GCM for all presets
- allow ports 501 and 502 as custom ports given they are the defaults
- try x.y.128.1 and x.y.0.1 from the gateway IP to find the API IP address
- fix servers data updater and update servers data
- update default OpenVPN ports: 8080 for UDP, 8443 for TCP (according to pia-foss/manual-connections@8a75e46)
- handle "port is busy" messages and retry port forwarding logic
ProtonVPN: fix updater code
Vyprvpn: update OpenVPN configs zip URL (#3264)

PS:

No time to make a video or a rant section yet, but will do for v3.42.0 for sure!
v3.42 probably coming end of August/early September!
Sorry for the spam, first few v3.41.2 release attempts decided to give me a bunch of surprises in the CI, so here it is again

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/qdm12/gluetun](https://github.com/passteque/gluetun) | patch | `v3.41.1` → `v3.41.3` | --- ### Release Notes <details> <summary>passteque/gluetun (ghcr.io/qdm12/gluetun)</summary> ### [`v3.41.3`](https://github.com/passteque/gluetun/releases/tag/v3.41.3) [Compare Source](https://github.com/passteque/gluetun/compare/v3.41.2...v3.41.3) This fixes a VPN server port forwarding deadlock bug introduced whilst back-porting a fix from the `master` branch (`:latest` image) to `v3.41.2`. Credits to [@robinostlund](https://github.com/robinostlund) for reporting the bug and even nailing down what it was! ([#3416](https://github.com/passteque/gluetun/issues/3416)) Refer to [v3.41.2 fixes](https://github.com/passteque/gluetun/releases/tag/v3.41.2) in case you haven't checked. ### [`v3.41.2`](https://github.com/passteque/gluetun/releases/tag/v3.41.2) [Compare Source](https://github.com/passteque/gluetun/compare/v3.41.1...v3.41.2) ⚠️ there is a deadlock bug in the port forwarding if you use the up or down command, I will release v3.41.3 shortly #### Fixes - Wireguard: - support IPv6 address formatting from config files ([#3273](https://github.com/passteque/gluetun/issues/3273)) - ignore empty address strings - skip tun device checks when using kernelspace - OpenVPN: - bundle provider CA certificates in one block ([#3258](https://github.com/passteque/gluetun/issues/3258)) - trim spaces in config lines before parsing ([#3327](https://github.com/passteque/gluetun/issues/3327)) - fix support for `tcp-client` - always use `proto tcp-client` when using TCP - parses `tcp-client` (on top of `tcp`, `tcp4`, `tcp6`) as meaning TCP - Custom openvpn: restrict custom openvpn config protocol to tcp or udp internally - Firewall: shared mutex for both iptables and ip6tables to prevent race conditions - Healthcheck: - correct behavior when HEALTH\_RESTART\_VPN=off and startup check fails - prevent race condition on the healthchecker ([#3400](https://github.com/passteque/gluetun/issues/3400)) - DNS: - skip blocking if block lists download fails - correct error wrapping for DNS listening address validation - DNS over TLS pool behavior fixed - handle timed out connections the same as closed connections - close connection on TLS handshake failure - improve mutex handling during connection renewal and retrieval - VPN port forwarding: - no longer stuck after failed port forwarding - handle empty ports without panicing - Updater: only uses DoH to cloudflare+google - prevent dns plaintext manipulation both the periodic update and when running in cli mode - possibly higher reliability on poor connections versus UDP - drop `-dns` flag in update command - for now no configuration allowed since it makes everything rather complex - Control server: - use `port` and `ports` for both single port and multiple ports forwarded - authentication: return 404 or 405 depending on route - Increase global http client timeout to 35s and precise lower timeouts where needed - Fix DNS blocklists slow downloads - Leave 35s timeout for updaters - Set timeouts to 1s for local calls - Set timeouts to 5s for LAN VPN calls and small external calls - Set timeouts to 10s external VPN API calls - Kernel modules: probe searches for features built-in the kernel - CI: set hash of PR commit instead of synthetic commit in docker build argument - `internal/command`: fix rare race condition on log line stream at command completion ##### Provider specific fixes - AirVPN: update servers data ([#3186](https://github.com/passteque/gluetun/issues/3186)) - ExpressVPN: - add new CA3 certificate to fix TLS handshake failure ([#3184](https://github.com/passteque/gluetun/issues/3184), [#3192](https://github.com/passteque/gluetun/issues/3192)) - remove pakistan server - Privado: - servers data updated using JSON API - allow OpenVPN TCP protocol - allow additional OpenVPN ports 443, 8080 and 8443 for both tcp and udp - Private Internet Access: - remove none encryption preset - use AES-GCM for all presets - allow ports 501 and 502 as custom ports given they are the defaults - try x.y.128.1 and x.y.0.1 from the gateway IP to find the API IP address - fix servers data updater and update servers data - update default OpenVPN ports: 8080 for UDP, 8443 for TCP (according to [pia-foss/manual-connections@`8a75e46`](https://github.com/pia-foss/manual-connections/commit/8a75e46be81583d17f9ab3570881419b35000969)) - handle "port is busy" messages and retry port forwarding logic - ProtonVPN: fix updater code - Vyprvpn: update OpenVPN configs zip URL ([#3264](https://github.com/passteque/gluetun/issues/3264)) *** PS: - No time to make a video or a rant section yet, but will do for v3.42.0 for sure! - v3.42 probably coming end of August/early September! - Sorry for the spam, first few v3.41.2 release attempts decided to give me a bunch of surprises in the CI, so here it is again </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate added 1 commit

2026-07-29 11:42:13 +00:00

Update ghcr.io/qdm12/gluetun Docker tag to v3.41.2 e7b371f280

renovate changed title from ~~Update ghcr.io/qdm12/gluetun Docker tag to v3.41.2~~ to Update ghcr.io/qdm12/gluetun Docker tag to v3.41.3

2026-07-30 15:14:55 +00:00

renovate force-pushed renovate/ghcr.io-qdm12-gluetun-3.x from e7b371f280 to 24e3518733

2026-07-30 15:14:55 +00:00

Compare

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/ghcr.io-qdm12-gluetun-3.x:renovate/ghcr.io-qdm12-gluetun-3.x

git switch renovate/ghcr.io-qdm12-gluetun-3.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff renovate/ghcr.io-qdm12-gluetun-3.x

git switch renovate/ghcr.io-qdm12-gluetun-3.x

git rebase main

git switch main

git merge --ff-only renovate/ghcr.io-qdm12-gluetun-3.x

git switch renovate/ghcr.io-qdm12-gluetun-3.x

git rebase main

git switch main

git merge --no-ff renovate/ghcr.io-qdm12-gluetun-3.x

git switch main

git merge --squash renovate/ghcr.io-qdm12-gluetun-3.x

git switch main

git merge --ff-only renovate/ghcr.io-qdm12-gluetun-3.x

git switch main

git merge renovate/ghcr.io-qdm12-gluetun-3.x

git push origin main

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

vloot/prowlarr!15

No description provided.

Rows
Columns