Update all patch dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/authelia/authelia (source)	patch	4.39.3 → 4.39.15
ghcr.io/lldap/lldap	patch	v0.6.1-alpine → v0.6.2-alpine
ghcr.io/stakater/reloader	patch	v1.4.2 → v1.4.12
kiwigrid/k8s-sidecar	patch	1.30.3 → 1.30.11

---

Release Notes

authelia/authelia (ghcr.io/authelia/authelia)

v4.39.15

Compare Source

Bug Fixes

• authentication: error determining ldap server health (#​10753) (b6e14c7)
• configuration: defaults not applied to server authz (#​10793) (73bee22)

Docker Container

• docker pull authelia/authelia:4.39.15
• docker pull ghcr.io/authelia/authelia:4.39.15

v4.39.14

Compare Source

Bug Fixes

• authentication: ldap pool deadlock (#​10527) (279c1be), closes #​9936 #​10392
• authentication: referrals not chased (#​10608) (5ddb457), closes #​10569
• authentication: remove singleflight debug logging (#​10628) (4c1c6ee)
• expression: shallow value resolution (#​10582) (bc0fb6c), closes #​10558

Docker Container

• docker pull authelia/authelia:4.39.14
• docker pull ghcr.io/authelia/authelia:4.39.14

v4.39.13

Compare Source

Bug Fixes

• authentication: basic auth cache multi-flight (#​10522) (e25b66c)
• regulation: pool deadline error incorrectly logged (#​10521) (4b45d48)

Docker Container

• docker pull authelia/authelia:4.39.13
• docker pull ghcr.io/authelia/authelia:4.39.13

v4.39.12

Compare Source

Bug Fixes

• storage: oauth2 device code constraints (#​10484) (26f3b89), closes #​10404

Docker Container

• docker pull authelia/authelia:4.39.12
• docker pull ghcr.io/authelia/authelia:4.39.12

v4.39.11

Compare Source

Bug Fixes

• handlers: webauthn experimental 2fa default redirection (#​10426) (8c76ea3)
• oidc: remember consent ignored (#​10384) (5cd17eb)
• web: consent remember ux (#​10347) (e9a4047)

Docker Container

• docker pull authelia/authelia:4.39.11
• docker pull ghcr.io/authelia/authelia:4.39.11

v4.39.10

Compare Source

Bug Fixes

• web: dynamically set html lang tag (#​10297) (a1f594d), closes #​8729

Docker Container

• docker pull authelia/authelia:4.39.10
• docker pull ghcr.io/authelia/authelia:4.39.10

v4.39.9

Compare Source

Bug Fixes

• authelia apt repository (#​10255) (e3573cd)
• goreleaser .deb postinstall script failure (#​10227) (b01d8bb)

Docker Container

• docker pull authelia/authelia:4.39.9
• docker pull ghcr.io/authelia/authelia:4.39.9

v4.39.8

Compare Source

Bug Fixes

• set config file type (#​10201) (d9af3c6), closes #​10198

Docker Container

• docker pull authelia/authelia:4.39.8
• docker pull ghcr.io/authelia/authelia:4.39.8

v4.39.7

Compare Source

Bug Fixes

• oidc: consent form not restored (#​10152) (73811c7)
• web: remove invalid fragment and use array (#​10093) (cbfdeaa)

Docker Container

• docker pull authelia/authelia:4.39.7
• docker pull ghcr.io/authelia/authelia:4.39.7

v4.39.6

Compare Source

Notable Changes

OpenID Connect 1.0 client registrations incorrectly allowed none as a authorization_signed_response_alg value, this is no longer the case and if you specified this value you'll have to either remove it or update it to the new correct default of RS256.

Bug Fixes

• commands: missing header list header (#​9956) (6a31393)
• configuration: healthchecks for unix are unhealthy (#​9988) (76e0702)
• oidc: alg none allowed for jarm (#​10045) (86e8c4b)
• regulation: ip not marked (#​9949) (b731a0c)

Docker Container

• docker pull authelia/authelia:4.39.6
• docker pull ghcr.io/authelia/authelia:4.39.6

v4.39.5

Compare Source

Bug Fixes

• configuration: allow claim name override (#​9714) (1ce7c5e), closes #​9687
• configuration: default pbkdf2 iterations (#​9694) (8173ba4)
• embed: unable to run services (#​9619) (e77c6bc)
• notifier: disable require tls ineffectual (#​9803) (6bddcc6)
• oidc: authorize request relies on session update (#​9678) (fcd2bba), closes #​9677
• storage: change key operator (#​9618) (b582afb)
• webauthn: allow relaxed cache policy (#​9696) (5e56d20)
• web: csp inline style error (#​9642) (46c49f1)

Docker Container

• docker pull authelia/authelia:4.39.5
• docker pull ghcr.io/authelia/authelia:4.39.5

v4.39.4

Compare Source

Bug Fixes

• configuration: oidc enc generated kid invalid chars (#​9493) (15f2a1a)
• oidc: explicit consent flow failure (#​9562) (a3f62b3)
• web: add missing translations (#​9496) (9d8fd85)
• web: adjust contrast for iv buttons and text input (#​9570) (f040e41)

Docker Container

• docker pull authelia/authelia:4.39.4
• docker pull ghcr.io/authelia/authelia:4.39.4

lldap/lldap (ghcr.io/lldap/lldap)

v0.6.2

Compare Source

[0.6.2] 2025-07-21

Small release, focused on LDAP improvements and ongoing maintenance.

Added

• LDAP
  • Support for searching groups by their groupid
  • Support for whoamiOID
  • Support for creating groups
  • Support for subschema entry
• Custom assets path.
• New endpoint for requesting client settings

Changed

• A missing JWT secret now prevents startup.
• Attributes with invalid characters (such as underscores) cannot be created anymore.
• Searching custom (string) attributes is now case insensitive.
• Using the top-level firstName, lastName and avatar GraphQL fields for users is now deprecated. Use the attributes field instead.

Fixed

• lldap_set_password now uses the system's SSL certificates.

Cleanups

• Split the main lldap crate into many sub-crates
• Various dependency version bumps
• Upgraded to 2024 Rust edition
• Docs/FAQ improvements

Bootstrap script

• Custom attributes support
• Read the paswsord from a file
• Resilient to no user or group files

New services

• Discord integration (Discord role to LLDAP user)
• HashiCorp
• Jellyfin 2FA with Duo
• Kimai
• Mailcow
• Peertube
• Penpot
• PgAdmin
• Project Quay
• Quadlet
• Snipe-IT
• SSSD
• Stalwart
• UnifiOS

New Contributors

• @​fa-sharp made their first contribution in #​1080
• @​mbelangergit made their first contribution in #​1083
• @​tyami94 made their first contribution in #​1079
• @​maystar made their first contribution in #​1096
• @​geragio made their first contribution in #​1105
• @​hendrik1120 made their first contribution in #​1124
• @​baka-yuki made their first contribution in #​1127
• @​taiwan-king made their first contribution in #​1126
• @​meetpatty made their first contribution in #​1134
• @​ivan-sirosh made their first contribution in #​1132
• @​juntong20XX made their first contribution in #​1144
• @​vmd1 made their first contribution in #​1146
• @​avargaskun made their first contribution in #​1155
• @​cogdavid made their first contribution in #​1157
• @​broemp made their first contribution in #​1166
• @​MikaelUrankar made their first contribution in #​1170
• @​ChibyX made their first contribution in #​1174
• @​sdelnevo made their first contribution in #​1173
• @​ingalls made their first contribution in #​1177
• @​bryanalves made their first contribution in #​1182
• @​jaj42 made their first contribution in #​1183
• @​PHIDIAS0303 made their first contribution in #​1188
• @​AlexandreFoley made their first contribution in #​1192
• @​selfhoster1312 made their first contribution in #​1198
• @​T0byV made their first contribution in #​1071
• @​coredoesdev made their first contribution in #​1210

Full Changelog: lldap/lldap@v0.6.1...v0.6.2

stakater/Reloader (ghcr.io/stakater/reloader)

v1.4.12

Compare Source

What's Changed

• feat(helm): support both object and string formats for imagePullSecrets by @​michael-voegeli-fnt in #​1043
• Bumped go version for vuln fix by @​msafwankarim in #​1064
• Bump version to 1.4.12 on release-v1.4.12 branch by @​github-actions[bot] in #​1066

New Contributors

• @​michael-voegeli-fnt made their first contribution in #​1043

Full Changelog: stakater/Reloader@chart-v2.2.6...v1.4.12

v1.4.11

Compare Source

What's Changed

• fix the value reference to runAsUser for OpenShift by @​arizon-dread in #​1032
• Fix issue in yaml path by @​artemptushkin in #​1052
• fix:Rename pause-deployment-annotation to pause-deployment-time-annot… by @​Wamgleb in #​1049
• Fix configmaps key in ResourceMap leading to controllers not being able to mark themselves as initialized by @​MatthiasWerning in #​1061
• Bump version to 1.4.11 on release-v1.4.11 branch by @​github-actions[bot] in #​1062

New Contributors

• @​arizon-dread made their first contribution in #​1032
• @​artemptushkin made their first contribution in #​1052
• @​Wamgleb made their first contribution in #​1049
• @​MatthiasWerning made their first contribution in #​1061

Full Changelog: stakater/Reloader@chart-v2.2.5...v1.4.11

v1.4.10

Compare Source

What's Changed

• Removed code for deployment config SA-7383 by @​msafwankarim in #​946
• [helm] Add templating support for additionals labels by @​vmizoules in #​938
• [optimization] Do not re-fetch resource on first attempt on upgrade by @​videlov in #​952
• chore(deps): update dependency stakater/vale-package to v0.0.65 by @​renovate[bot] in #​929
• chore(deps): update dependency stakater/vale-package to v0.0.77 by @​renovate[bot] in #​953
• Update Workflow to not push the image by @​msafwankarim in #​956
• Update pull_request_docs.yaml by @​msafwankarim in #​959
• feat: support Google Chat as an Alert notification provider by @​alexandermarston in #​934
• Bump Chart by @​msafwankarim in #​964
• Update push-helm-chart.yaml by @​msafwankarim in #​965
• feat: add ignore annotation support for skipping reloads by @​jamie-stinson in #​928
• Add OwnerReference to generated Jobs by @​ChristianCiach in #​865
• Ignore namespaceSelector when not watch globally by @​yo-ga in #​933
• Use labels suggested by Kubernetes and Helm best practices by @​pinkavaj in #​967
• Add pausing deployments during upgrades by @​s10 in #​958
• Publish a configmap that contains build/version info and reloader flags by @​msafwankarim in #​970
• Extracted some functions to public package to reuse them in gateway by @​msafwankarim in #​966
• Added pprof flag by @​msafwankarim in #​980
• Added pause deployment annotation overrides by @​msafwankarim in #​983
• Bump chart by @​msafwankarim in #​986
• Moved Voume & VoumeMounts within Deployment in values.yaml by @​mahmadmujtaba in #​987
• Update index.md by @​abaziz in #​995
• Update README.md by @​abaziz in #​993
• reloader: Add in support for dnsConfig for pod reloader. by @​nitinverma9 in #​981
• fix: handle operator crash when using workloadRef by @​praddy26 in #​989
• Moved some functions to common package by @​msafwankarim in #​988
• fixed broken test by @​Felix-Stakater in #​998
• Bump image tag and chart version by @​msafwankarim in #​1002
• Clarify PR process for Helm chart version updates by @​msafwankarim in #​1003
• Fix comment for adding Stakater Helm repository by @​msafwankarim in #​1004
• fix: Controller not respecting ignore* flags #​966 by @​praddy26 in #​997
• fix: bump go version to fix CVEs by @​SebastienSyd in #​1007
• Bump chart by @​msafwankarim in #​1009
• fix: Prevent permission errors for ignored workload types #​996 by @​praddy26 in #​1013
• chore(deps): update dependency stakater/vale-package to v0.0.86 by @​renovate[bot] in #​1017
• chore(deps): update sigstore/cosign-installer action to v3.10.1 by @​renovate[bot] in #​954
• chore(deps): update anothrnick/github-tag-action action to v1.75.0 by @​renovate[bot] in #​920
• fix(deps): update k8s.io/utils digest to bc988d5 by @​renovate[bot] in #​914
• chore(deps): update dependency stakater/vale-package to v0.0.87 by @​renovate[bot] in #​1021
• chore(deps): update stakater/.github action to v0.0.163 by @​renovate[bot] in #​1022
• chore(deps): update peter-evans/create-pull-request action to v7.0.8 by @​renovate[bot] in #​873
• chore(deps): update nginxinc/nginx-unprivileged docker tag to v1.29 by @​renovate[bot] in #​907
• fix: bump go version to fix CVEs by @​SebastienSyd in #​1033
• Release v1.4.9 by @​Felix-Stakater in #​1035
• chore(deps): update actions/setup-go action to v6 by @​renovate[bot] in #​1030
• chore(deps): update sigstore/cosign-installer action to v4 by @​renovate[bot] in #​1031
• chore(deps): update actions/checkout action to v5 by @​renovate[bot] in #​1029
• fix(deps): update module github.com/spf13/cobra to v1.10.1 by @​renovate[bot] in #​1027
• chore(deps): update ghcr.io/stakater/reloader docker tag to v1.4.9 by @​renovate[bot] in #​1037
• Bump chart by @​msafwankarim in #​1039
• chore(deps): update python docker tag to v3.14 by @​renovate[bot] in #​1025
• fix(deps): update module github.com/argoproj/argo-rollouts to v1.8.3 by @​renovate[bot] in #​1023
• Upgradde to go 1.25.3 (latest) by @​msafwankarim in #​1042
• Bump version to 1.4.10 on release-v1.4.10 branch by @​github-actions[bot] in #​1044

New Contributors

• @​vmizoules made their first contribution in #​938
• @​alexandermarston made their first contribution in #​934
• @​jamie-stinson made their first contribution in #​928
• @​ChristianCiach made their first contribution in #​865
• @​yo-ga made their first contribution in #​933
• @​pinkavaj made their first contribution in #​967
• @​s10 made their first contribution in #​958
• @​mahmadmujtaba made their first contribution in #​987
• @​abaziz made their first contribution in #​995
• @​nitinverma9 made their first contribution in #​981
• @​praddy26 made their first contribution in #​989
• @​Felix-Stakater made their first contribution in #​998
• @​SebastienSyd made their first contribution in #​1007

Full Changelog: stakater/Reloader@v1.4.9...v1.4.10

v1.4.9

Compare Source

What's Changed

• fix: Prevent permission errors for ignored workload types #​996 by @​praddy26 in #​1013
• chore(deps): update dependency stakater/vale-package to v0.0.86 by @​renovate[bot] in #​1017
• chore(deps): update sigstore/cosign-installer action to v3.10.1 by @​renovate[bot] in #​954
• chore(deps): update anothrnick/github-tag-action action to v1.75.0 by @​renovate[bot] in #​920
• fix(deps): update k8s.io/utils digest to bc988d5 by @​renovate[bot] in #​914
• chore(deps): update dependency stakater/vale-package to v0.0.87 by @​renovate[bot] in #​1021
• chore(deps): update stakater/.github action to v0.0.163 by @​renovate[bot] in #​1022
• chore(deps): update peter-evans/create-pull-request action to v7.0.8 by @​renovate[bot] in #​873
• chore(deps): update nginxinc/nginx-unprivileged docker tag to v1.29 by @​renovate[bot] in #​907
• fix: bump go version to fix CVEs by @​SebastienSyd in #​1033

Full Changelog: stakater/Reloader@chart-v2.2.3...v1.4.9

v1.4.8

Compare Source

What's Changed

• Bump image tag and chart version by @​msafwankarim in #​1002
• Clarify PR process for Helm chart version updates by @​msafwankarim in #​1003
• Fix comment for adding Stakater Helm repository by @​msafwankarim in #​1004
• fix: Controller not respecting ignore* flags #​966 by @​praddy26 in #​997
• fix: bump go version to fix CVEs by @​SebastienSyd in #​1007
• Bump version to 1.4.8 on release-v1.4.8 branch by @​github-actions[bot] in #​1008

New Contributors

• @​SebastienSyd made their first contribution in #​1007

Full Changelog: stakater/Reloader@v1.4.7...v1.4.8

v1.4.7

Compare Source

What's Changed

• Bump chart by @​msafwankarim in #​986
• Moved Voume & VoumeMounts within Deployment in values.yaml by @​mahmadmujtaba in #​987
• Update index.md by @​abaziz in #​995
• Update README.md by @​abaziz in #​993
• reloader: Add in support for dnsConfig for pod reloader. by @​nitinverma9 in #​981
• fix: handle operator crash when using workloadRef by @​praddy26 in #​989
• Moved some functions to common package by @​msafwankarim in #​988
• fixed broken test by @​Felix-Stakater in #​998
• Bump version to 1.4.7 on release-v1.4.7 branch by @​github-actions[bot] in #​1001

New Contributors

• @​mahmadmujtaba made their first contribution in #​987
• @​abaziz made their first contribution in #​995
• @​nitinverma9 made their first contribution in #​981
• @​praddy26 made their first contribution in #​989
• @​Felix-Stakater made their first contribution in #​998

Full Changelog: stakater/Reloader@v1.4.6...v1.4.7

v1.4.6

Compare Source

What's Changed

• Bump Chart by @​msafwankarim in #​964
• Update push-helm-chart.yaml by @​msafwankarim in #​965
• feat: add ignore annotation support for skipping reloads by @​jamie-stinson in #​928
• Add OwnerReference to generated Jobs by @​ChristianCiach in #​865
• Ignore namespaceSelector when not watch globally by @​yo-ga in #​933
• Use labels suggested by Kubernetes and Helm best practices by @​pinkavaj in #​967
• Add pausing deployments during upgrades by @​s10 in #​958
• Publish a configmap that contains build/version info and reloader flags by @​msafwankarim in #​970
• Extracted some functions to public package to reuse them in gateway by @​msafwankarim in #​966
• Added pprof flag by @​msafwankarim in #​980
• Added pause deployment annotation overrides by @​msafwankarim in #​983
• Bump version to 1.4.6 on release-v1.4.6 branch by @​github-actions[bot] in #​985

New Contributors

• @​jamie-stinson made their first contribution in #​928
• @​ChristianCiach made their first contribution in #​865
• @​yo-ga made their first contribution in #​933
• @​pinkavaj made their first contribution in #​967
• @​s10 made their first contribution in #​958

Full Changelog: stakater/Reloader@v1.4.5...v1.4.6

v1.4.5

Compare Source

What's Changed

• Update Chart.yaml by @​msafwankarim in #​943
• Update Chart.yaml by @​msafwankarim in #​945
• Removed code for deployment config SA-7383 by @​msafwankarim in #​946
• [helm] Add templating support for additionals labels by @​vmizoules in #​938
• [optimization] Do not re-fetch resource on first attempt on upgrade by @​videlov in #​952
• chore(deps): update dependency stakater/vale-package to v0.0.65 by @​renovate in #​929
• chore(deps): update dependency stakater/vale-package to v0.0.77 by @​renovate in #​953
• Update Workflow to not push the image by @​msafwankarim in #​956
• Update pull_request_docs.yaml by @​msafwankarim in #​959
• feat: support Google Chat as an Alert notification provider by @​alexandermarston in #​934
• Bump version to 1.4.5 on release-v1.4.5 branch by @​github-actions in #​963

New Contributors

• @​vmizoules made their first contribution in #​938
• @​alexandermarston made their first contribution in #​934

Full Changelog: stakater/Reloader@v1.4.4...v1.4.5

v1.4.4

Compare Source

What's Changed

• Removed patch version from golang in dockerfile by @​msafwankarim in #​940

Full Changelog: stakater/Reloader@v1.4.3...v1.4.4

v1.4.3

Compare Source

What's Changed

• Add certificate as source in docs by @​rasheedamir in #​913
• Support for resource patching with retries by @​videlov in #​877
• Updated readmes to include details about namespace selectors by @​msafwankarim in #​923
• Chore(deps): update dependency stakater/vale-package to v0.0.62 by @​renovate in #​924
• Bump version to 1.4.3 on release-v1.4.3 branch by @​github-actions in #​939

New Contributors

• @​videlov made their first contribution in #​877
• @​msafwankarim made their first contribution in #​923

Full Changelog: stakater/Reloader@v1.4.2...v1.4.3

kiwigrid/k8s-sidecar (kiwigrid/k8s-sidecar)

v1.30.11

Compare Source

⚠️ YANKED/UNSTABLE ⚠️: Do not use 1.30.11 due to #​431
Use 1.30.9 as latest stable

📦 Dependencies

• Bump python-json-logger from 3.3.0 to 4.0.0 in /src
  • PR: #​424

v1.30.10

Compare Source

⚠️ YANKED/UNSTABLE ⚠️: Do not use 1.30.10 due to #​431
Use 1.30.9 as latest stable

📦 Dependencies

• Bump requests from 2.32.4 to 2.32.5 in /src
  • PR: #​418

v1.30.9

Compare Source

🚀 Features

• Extend exception handling
  • PR: #​403
• Add check for 'none' response
  • PR: #​413

📦 Dependencies

• Bump actions/download-artifact from 4 to 5
  • PR: #​408
• Bump actions/checkout from 4 to 5
  • PR: #​409

v1.30.8

Compare Source

📦 Dependencies

• Bump logfmter from 0.0.9 to 0.0.10 in /src
  • PR: #​406

v1.30.7

Compare Source

v1.30.6

Compare Source

v1.30.5

Compare Source

📦 Dependencies

• Bump requests from 2.32.3 to 2.32.4 in /src
  • PR: #​397
• Bump kubernetes from 32.0.1 to 33.1.0 in /src
  • PR: #​398

v1.30.4

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.