Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
curlimages/curl	minor	8.12.1 → 8.18.0
grafana/grafana	patch	11.6.0 → 11.6.14
grafana/loki	minor	3.6.9 → 3.7.1
grafana/promtail	minor	2.7.1 → 2.9.17
nginx	patch	1.29.0 → 1.29.7
offen/docker-volume-backup (source)	minor	v2.25.1 → v2.47.2
portainer/portainer-ce	minor	2.33.3 → 2.40.0
prom/node-exporter	minor	v1.6.1 → v1.10.2
prom/prometheus	minor	v2.47.1 → v2.55.1

---

Release Notes

curl/curl-container (curlimages/curl)

v8.18.0

Compare Source

Changed

• bump to curl 8.18.0
• bump to alpine 3.23.0

v8.17.0

Changed

• bump to curl 8.17.0
• bump to alpine 3.22.2

v8.16.0

Changed

• bump to curl 8.16.0

v8.15.0

Compare Source

[8.15.0] - 2025-07-16

Changed

• bump to curl 8.15.0
• bump to alpine 3.22.1

v8.14.1

Compare Source

Changed

• bump to curl 8.14.1
• bump to alpine 3.22.0

v8.13.0

Compare Source

Changed

• bump to curl 8.13.0
• bump to alpine 3.21.3

grafana/grafana (grafana/grafana)

v11.6.14

Compare Source

Bug fixes

• Security: Fix CVE-2026-33375

v11.6.13

Compare Source

Features and enhancements

• Go: Update to 1.25.8 #​119702, @​macabu

v11.6.12

Compare Source

v11.6.11

Compare Source

Features and enhancements

• Alerting: Add limits for the size of expanded notification templates #​117713, @​yuri-tceretian
• Correlations: Remove support for org_id=0 #​116936, @​gelicia
• Go: Update to 1.25.7 #​117476, @​macabu
• Security(Public dashboards annotations): use dashboard timerange if time selection disabled #​117865, @​github-actions[bot]

v11.6.10

Compare Source

Features and enhancements

• API: Add missing scope check on dashboards #​116894, @​Proximyst
• Avatar: Require sign-in, remove queue, respect timeout #​116898, @​macabu
• Go: Update to 1.25.6 #​116402, @​macabu

Bug fixes

• Alerting: Fix a race condition panic in ResetStateByRuleUID #​115691, @​alexander-akhmetov

v11.6.9

Compare Source

Features and enhancements

• Alerting: Update alerting dependency #​114249, @​moustafab
• Dependencies: Bump Go to v1.25.5 #​114757, @​macabu
• PDFTables: Dynamically shrink font to try and fit whole table in pdf page width (Enterprise)
• Plugins: Add PluginContext to plugins when scenes is disabled #​115060, @​hugohaggmark

Bug fixes

• Alerting: Fix contacts point issues #​115409, @​yuri-tceretian

v11.6.8

Compare Source

Bug fixes

• Alerting: Fix unmarshalling of GettableStatus to include time intervals #​112731, @​yuri-tceretian
• AnalyticsSummaries: Fix dashboard rollup not resetting "last X days" metrics to zero (Enterprise)
• AnalyticsSummaries: Fix dashboard rollup totals resetting incorrectly (Enterprise)
• Seeder: Add check in filterRemovedPermissions for already existing new permissions before seeding (Enterprise)

v11.6.7

Compare Source

Features and enhancements

• Analytics: Apply proper batching to Loki exports and add configurable settings (Enterprise)
• Go: Update to 1.25.2 + golangci-lint v2.5.0 + golang.org/x/net v0.45.0 #​112162, @​grambbledook
• Go: Update to 1.25.3 #​112365, @​macabu

Bug fixes

• Auth: Fix render user OAuth passthrough #​112094, @​mgyongyosi
• LDAP Authentication: Fix URL to propagate username context as parameter #​111846, @​bradleypettit
• Plugins: Dependencies do not inherit parent URL for preinstall #​111801, @​wbrowne
• URLParams: Stringify true values as key=true always (fixes issues with variables with true value) #​112045, @​torkelo

v11.6.6

Compare Source

Features and enhancements

• Auditing: Add settings to control recording of datasource query request and response body (Enterprise)

v11.6.5

Compare Source

Features and enhancements

• Alerting: Bump alerting package to include change to NewTLSClient #​108817, @​rwwiv
• Go: Update to 1.24.6 #​109314, @​Proximyst

v11.6.4

Compare Source

Features and enhancements

• Dependencies: Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 #​107555, @​macabu
• StateTimeline: Add endTime to tooltip #​107605, @​adela-almasan
• Unified storage: Respect GF_DATABASE_URL override #​107573, @​pstibrany

Bug fixes

• Alerting: Fix group interval override when adding new rules #​107496, @​konrad147
• Azure: Fix legend formatting #​106934, @​aangelisc
• Azure: Fix resource name determination in template variable queries #​106939, @​aangelisc
• Graphite: Fix annotation queries #​106940, @​aangelisc
• Graphite: Fix date mutation #​107523, @​aangelisc
• Graphite: Fix nested variable interpolation for repeated rows #​107564, @​aangelisc
• Security: Fixes for CVE-2025-6197 and CVE-2025-6023 #​108281, @​volcanonoodle

v11.6.3

Compare Source

Features and enhancements

• Profiles: Stop passing response headers for Grafana-Pyroscope and parca datasources #​106729, @​simonswine

Bug fixes

• FlameGraph: Fix bug for function names that conflict with JavaScript object prototype properties #​106624, @​simonswine
• Security: Fixed CVE-2025-6023
• Security: Fixed CVE-2025-6197

v11.6.2

Compare Source

Bug fixes

• Security: Fixed CVE-2025-3415

v11.6.1

Compare Source

Bug fixes

• Security: Fix CVE-2025-4123

offen/docker-volume-backup (offen/docker-volume-backup)

v2.47.2

Compare Source

Fixes

• Google Drive upload fails silently when configuration is wrong #​733
• Service count in Swarm mode is always 0 #​736 (thanks @​SmallFriendlyKiwi)

Chores

• Dependency hygiene #​731 #​734 #​735

v2.47.1

Compare Source

Fixes

• Send Content-MD5 header on S3 uploads #​728 (thanks @​tianshanghong)

Chores

• Build using Go 1.26 #​730 #​726
• Dependeny hygiene #​709 #​710 #​712 #​713 #​714 #​715 #​716 #​717 #​718 #​719 #​720 #​721 #​722 #​723 #​724 #​725

v2.47.0

Compare Source

Features

• Add print-config subcommand for debugging #​698 (thanks @​le-lenn)

Fixes

• send failure notifications for config init errors too #​697 (thanks @​le-lenn)

Chores

• Update alpine version to 3.23 #​693
• Migrate from package docker/docker to moby packages #​676 #​682
• Dependency hygiene #​670 #​672 #​669 #​673 #​671 #​675 #​677 #​678 #​679 #​68 #​684 #​683 #​681 #​685 #​688 #​689 #​690 #​691 #​692 #​695 #​701 #​706 #​707
• Desired go version can be read from go.mod #​647
• optimize test suite for local use #​702 #​700 (thanks @​le-lenn)

v2.46.1

Compare Source

Fixes

• Close dangling SSH connections after use #​668

Chores

• Dependency Hygiene #​665 #​666

v2.46.0

Compare Source

Features

• Add option to skip restart of stopped containers/services after backup #​659 (thanks @​ChainsLunatic)

Chores

• Dependency hygiene #​656 #​657 #​658 #​660 #​661 #​662

v2.45.0

Compare Source

Features

• Add optional jittering before any backup actions #​654 (thanks @​estebanthi)

Fixes

• Update shoutrrr to set default SMTP timeout of 10s #​655 (thanks @​PythonGermany @​nicholas-fedor)

Chores

• Dependeny hygiene #​649 #​650 #​651 #​652

v2.44.1

Compare Source

Fixes

• Ensure destination exists when using SSH storage #​646 (Thanks @​estebanthi)

Chores

• Replace containrrr/shoutrrr with nicholas-fedor/shoutrrr #​643 (Thanks @​nicholas-fedor for updating the documentation for my usecase)
• Dependency hygiene #​616 #​617 #​618 #​619 #​625 #​626 #​630 #​632 #​633 #​634 #​636 #​635 #​639 #​640 #​641 #​644 #​645
• Update golanglint-ci integration #​637

Docs

• Fix mistake in notification template documentation #​623 (Thanks @​igox)

v2.44.0

Compare Source

Features

• Add Google Drive support #​613 (thanks @​luizguilhermesj)

Chores

• Dependency hygiene #​594 #​596 #​599 #​600 #​601 #​602 #​604 #​606 #​605 #​610 #​609 #​615
• Test setup improvements #​597 #​598

v2.43.4

Compare Source

Fixes

• Fall back to default behavior when deployed to a Swarm worker node #​593

Docs

• Link to Dropbox from config reference is outdated #​562
• Update encrypt-backups.md #​550 (Thanks @​danial23)

Chores

• Dependency hygiene #​551 #​553 #​554 #​555 #​556 #​557 #​558 #​559 #​560 #​568 #​569 #​570 #​572 #​573 #​577 #​579 #​580 #​583 #​584 #​585 #​586 #​587
• Update base image #​589

v2.43.3

Compare Source

Fixes

• Directories aren't excluded from pruning logic #​548

Chores

• Dependency hygiene #​532 #​533 #​534 #​535 #​536 #​542 #​543 #​544 #​545
• Build using Go 1.24 #​537
• Always use read only socket mount in tests #​546

Docs

• Config reference should always use default values #​549

v2.43.2

Compare Source

Fixes

• Support passing standard ssh keys to age encryption #​530

Chores

• Dependency Hygiene #​522 #​523 #​524 #​526 #​527
• Docker build now warns about casing mismatch 2652e05

v2.43.1

Compare Source

Fixes

• Error cases when parsing labeled commands into argv are not handled sufficiently #​506

Chores

• Dependency hygiene #​460 #​461 #​463 #​464 #​467 #​469 #​470 #​475 #​476 #​477 #​479 #​482 #​483 #​485 #​487 #​489 #​488 #​491 #​493 #​494 #​495 #​499 #​501 #​500 #​508 #​510 #​511 #​512 #​516 #​518 #​517
• Compile using Go 1.23 #​462
• Base image off alpine:3.21 #​502

Docs

• Documentation update for DROPBOX_REMOTE_PATH environment variable #​473 (thanks @​shalafi99)

v2.43.0

Compare Source

Features

• Support archive encryption using age #​432 (thanks @​nkcmr)

Chores

• Dependency hygiene #​458

v2.42.0

Compare Source

Features

• Add "none" compression type #​457 (thanks @​jzebedee)
• Support PGP Asymmetric Encryption #​456 (thanks @​lbsekr)

v2.41.0

Compare Source

Features

• Add support for Azure storage access tiers #​452

Chores

• Dependency hygiene #​453 #​454

v2.40.0

Compare Source

Features

• Bump shoutrrr to version 0.8 #​450

Fixes

• Close file handler after encryption #​419 (thanks @​testwill)
• Fix minor complaints raised by golangci-lint e613f60

Chores

• Dependency hygiene #​449 #​448 #​442 #​444 #​443 #​441 #​439 #​440 #​438 #​435 #​434 #​431 #​430 #​428 #​427 #​426 #​421 #​418 #​416 #​415 #​414 #​408 #​409 #​410
• Update Alpine to 3.20 #​424
• Dev setup maintenance

v2.39.1

Compare Source

Fixes

• Result of query for services is used before handling possible error, non-replicated services that are labeled should raise an error #​405

Chores

• Update test suite image to use Docker 26 #​404
• Print stack trace when encountering unexpected panic #​406
• Dependency hygiene #​389 #​390 #​392 #​401 #​402

v2.39.0

Compare Source

Features

• Allow authentication using connection string when targeting Azure Blob Storage #​383

Chores

• Dependency hygiene #​381 #​382
• Also forward exec output when failing to demultiplex #​379

v2.38.2

Compare Source

This release fixes an issue when running docker-volume-backup against the Balena Docker Engine.

Fixes

• Swarm mode check fails on non-standard Info responses #​376

Chores

• Dependency hygiene #​377

v2.38.1

Compare Source

Fixes

• Lines from conf files that are comments should not be passed to shell.Expand #​374

v2.38.0

Compare Source

Features

• Allow backup to be run as non-root user #​372

Fixes

• Expanding values in conf files should work like with source #​372

Chores

• Improve user facing error messages and "stack traces" #​360

Build

• Build using Go 1.22 #​356
• Hardcoded label values don't require quoting #​365

v2.37.3

Compare Source

This fixes another regression that was introduced in v2.37.0. If you rely on variable names to be expanded in conf.d files, please make sure to upgrade to this version to keep the behavior consistent with previous releases.

Fixes

• Conf files should expand env vars #​363

Build:

• Add OCI labels to Docker images #​361 (thanks @​pxlfrk)

v2.37.2

Compare Source

Fixes

• Remove stray log statement #​359

v2.37.1

Compare Source

v2.37.0 contained a regression where environment variables would not be considered at all when running multiple schedules from a conf.d directory. If you use this feature please upgrade to this version and do not use v2.37.0 which might result in backups not being persisted without further notice.

Fixes

• Env vars should propagate when using conf.d #​358

Chores

• Dependency hygiene #​352 #​353 #​354 #​355

v2.37.0

Compare Source

Features

• Use Go-native cron scheduling #​338 (thanks @​pixxon)

Chores

• Dependency hygiene #​345

---

This image now supports a richer set of cron schedules than before. See the documentation for what exactly is supported.

v2.36.1

Compare Source

Fixes

• Exclusive file lock is released prematurely #​339

v2.36.0

Compare Source

This release improves Docker Swarm support by removing the need for using a on-failure restart policy on your services. Check the documentation for further details.

Features

• Improve Swarm Support #​333 (thanks @​pixxon for all the input when working on this)

Chores

• Dependency hygiene #​324 #​325 #​326 #​330 #​331 #​336
• Update action packages #​335
• Start using v2 API for openpgp package #​332

Fixes

• Panic values that can be cast to errors are not being printed #​334

Docs

• Fix dropbox doc link #​323 (thanks @​peteward44)

---

Deprecation notice

This release deprecates the BACKUP_STOP_CONTAINER_LABEL setting and renames it to BACKUP_STOP_DURING_BACKUP_LABEL. The old setting will still work, but you will see a deprecation warning in your logs. It will also be removed in the next major version.

To update, rename the key:

    env:
-     BACKUP_STOP_CONTAINER_LABEL: database
+     BACKUP_STOP_DURING_BACKUP_LABEL: database

Also see: https://offen.github.io/docker-volume-backup/how-tos/replace-deprecated-backup-stop-container-label.html

v2.35.0

Compare Source

Features

• add toJson and toPrettyJson notification template helpers #​319 (thanks @​hywax)

Chores

• Dependency hygiene #​317 #​318 #​320
• bump alpine base image to 3.19 #​314

v2.34.0

Compare Source

Features

• Improve performance of SSH storage backend (#​313) - thanks @​Riscue

Chores

• Dependency hygiene #​302 #​303 #​305 #​308 #​311 #​312

v2.33.2

Compare Source

Fixes

• Retention days not correctly displayed in log #​300

v2.33.1

Compare Source

Fixes

• Error message on demultiplexing Docker command output received bad error arg #​295

v2.33.0

Compare Source

Features

• Improve Gzip performance by replacing stdlib gzip with klauspost/pgzip #​266 (Thanks @​MaxJa4)

New parameter GZIP_PARALLELISM can be used to further control resource usage when compressing.

v2.32.0

Compare Source

Features

• Support _FILE based configuration values #​264 (Thanks @​MaxJa4)

v2.31.0

Compare Source

Features

• Exclude specific backends from pruning #​262 (Thanks @​MaxJa4)

Chores

• Print context in log field instead of prepending to message #​260
• Replace deprecated openpgp package with community fork #​263 (Thanks @​MaxJa4)

v2.30.0

Compare Source

Features

• Add Dropbox support #​251 (Thanks @​MaxJa4)

Fixes

• Fix code in storage packages not logging #​250 (Thanks @​MaxJa4)

Chores

• Dependency updates #​255

v2.29.0

Compare Source

Features

• Support Zstd compression for archives #​249 (Thanks @​michalmiddleton)

Chores

• Update Base Image to Alpine 1.18 #​219
• Miscellaneous Dependabot updates #​224 #​226 #​225 #​223 #​227 #​228 #​229 #​233 #​234 #​238 #​239 #​240 #​248
• Update Go version to 1.21 #​246 #​241 #​242
• Drop Logrus, use log/slog package #​247

Docs

• Fix mistake in README #​230 (Thanks @​jsloane)

---

Important: By migrating to stdlib logging through the log/slog package, structured logging output will subtly change with this release (quoting and casing of log levels). In case you rely on parsing the logs, check if your setup still works after upgrading.

v2.28.0

Compare Source

Features

• Support setting upload part size for S3 storage #​214 - thanks @​erwanlpfr

Chores

• Update Docker client library #​215

v2.27.0

Compare Source

Features

• Update shoutrrr to 0.7 #​213 (thanks @​ba-tno)

Chores

• Entrypoint permissions can be set on COPY #​211

v2.26.2

Compare Source

Fixes

• Fix force updating of containers managed by Docker Swarm #​209

v2.26.1

Compare Source

Fixes

• Updat

---

Configuration

📅 Schedule: Branch creation - "before 4am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.