Skip to content

Update koenkk/zigbee2mqtt Docker tag to v2.10.1#2234

Closed
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/koenkk-zigbee2mqtt-2.x
Closed

Update koenkk/zigbee2mqtt Docker tag to v2.10.1#2234
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/koenkk-zigbee2mqtt-2.x

Conversation

@renovate

@renovate renovate Bot commented May 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
koenkk/zigbee2mqtt minor 2.9.2 → 2.10.1

Release Notes

Koenkk/zigbee2mqtt (koenkk/zigbee2mqtt)

v2.10.1

Compare Source

Bug Fixes

v2.10.0

Compare Source

Features
Bug Fixes

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "after 2am and before 8am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovate label May 18, 2026
@renovate renovate Bot requested a review from claytono as a code owner May 18, 2026 06:39
@renovate renovate Bot added the renovate label May 18, 2026
@renovate renovate Bot force-pushed the renovate/koenkk-zigbee2mqtt-2.x branch from e486d36 to 7f55651 Compare May 18, 2026 15:55
@github-actions

github-actions Bot commented May 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

koenkk/zigbee2mqtt (docker) 2.9.2 -> 2.10.1

Risk: 🔴 Risk

The Deep Dive

Update Scope

This PR updates the Ansible-managed Zigbee2MQTT container image from koenkk/zigbee2mqtt:2.9.2@sha256:2a21bbf7a664a149024bbe1f776e3151f28ed9db15948270dcbffb89544a41f0 to koenkk/zigbee2mqtt:2.10.1@sha256:67c26dcf8346aced02fe1380a6afd1b57268bcef10faae3f6057c13d5d3dfa80 in the infra PR file diff. The changed default is consumed by the role's Docker Compose template and deployed to the zigbee2mqtt inventory host, so this changes the live app runtime, not just metadata. Bundled runtime dependencies also move from zigbee-herdsman 10.0.5 to 10.0.7, zigbee-herdsman-converters 26.27.0 to 26.46.0, zigbee2mqtt-windfront 2.11.1 to 2.11.2, express-static-gzip 3.0.0 to 3.0.1, and ajv 8.18.0 to 8.20.0; the Node engine range and zigbee2mqtt-frontend stay unchanged in the upstream package.json comparison.

Performance & Stability

  • Open upstream issue 31961 reports filtered_cache stopped suppressing linkquality-only messages after upgrading from 2.9.2 to 2.10.1, with the reporter seeing host CPU around 20 percent versus a 7 percent baseline. The repo does not contain the Zigbee2MQTT application configuration.yaml, because the role mounts /etc/zigbee2mqtt/data into the container, so CI cannot rule out this setting in the deployed data directory.
  • Open upstream issue 32008 reports OTA updates hanging on 2.10.1, requiring a Zigbee2MQTT restart to recover. It is labeled fixed-in-dev, and the related abort-OTA work is still open in upstream pull request 32022, so the proposed stable release does not yet include that mitigation.

Features & UX

  • Zigbee2MQTT v2.10.0 adds Home Assistant MQTT group entity discovery through upstream pull request 31663. It requires Home Assistant newer than 2026.4 and already configured member entities; after Zigbee2MQTT publishes the group discovery payloads, the Home Assistant MQTT integration must be reloaded for group entities to appear.
  • This repo has Home Assistant MQTT configuration in kubernetes/hass/config/configuration.yaml, but the Zigbee2MQTT app configuration that would show homeassistant.enabled is not stored in the repo. To use the new feature, the mounted Zigbee2MQTT config needs homeassistant: enabled: true and actual Zigbee groups in the Zigbee2MQTT data directory.

Security

  • No CVEs or GitHub Security Advisories were found for the direct zigbee2mqtt 2.9.2 to 2.10.1 range in the upstream GitHub security advisories endpoint or in OSV. OSV also returned no advisories for the checked changed runtime packages zigbee-herdsman, zigbee-herdsman-converters, and express-static-gzip at the old and new versions.

Key Fixes

  • Zigbee2MQTT v2.10.1 is a hotfix release for several Tuya device attributes that were not updating or writable, including issue 31851, issue 31835, and issue 31850. This is beneficial only if the deployed Zigbee network contains those affected Tuya devices, and the repo does not include the Zigbee2MQTT database.db device inventory.
  • Pull request 31845 replaces deprecated url.parse usage in the frontend websocket upgrade path. The local Docker Compose template exposes the Zigbee2MQTT frontend through Traefik on container port 8080, so the frontend code path is part of this deployment when the UI is used.

Newer Versions

  • 2.10.1 is the latest upstream release in the release list as of May 21, 2026, so there is no newer stable version to skip to.
  • The unresolved OTA report in issue 32008 has fixed-in-dev signal and upstream pull request 32022 is still open. That suggests a future stable may contain relevant recovery behavior, but it is not available in the proposed 2.10.1 image.

Hazards & Risks

  • Known upstream regression: issue 31961 says filtered_cache worked on 2.9.2 and no longer filters linkquality-only messages on 2.10.1, with material CPU impact in the reporter's setup. The deployed app config is outside this repo, so this cannot be dismissed in CI.
  • Known upstream regression: issue 31847 says Lutron Aurora Z3-1BRL button action_level alternation is broken on 2.10.0 and recovers on rollback to 2.9.1. The repo does not include the Zigbee2MQTT device database, so this cannot be ruled out for the local network.
  • Known upstream risk: issue 32008 reports OTA sessions hanging on 2.10.1 and needing a Zigbee2MQTT restart; the linked mitigation in pull request 32022 is not merged into a stable release.
  • Lower-confidence device-specific risk: issue 32062 reports Namron Touch thermostat 4512737 management failures on 2.10.1, but upstream requested logs and noted the suspected converter refactor was not released. Treat this as watch-list evidence, not the primary reason for the label.
  • Deployment impact: the Ansible role templates docker-compose.yaml and starts the Compose project with wait: true; changing the image pin will recreate or restart the Zigbee2MQTT container on the pantrypi host when the role is applied.

Sources

🔴 Verdict: Risk

Label this renovate:risk: the PR updates the live Zigbee2MQTT runtime and there are open upstream 2.10.x regressions that cannot be ruled out from the CI-only repo because the deployed Zigbee2MQTT config and device database are host-mounted data. CI is mostly passing, but the deployment decision should account for rollback readiness and post-deploy monitoring of MQTT volume, OTA behavior, and Zigbee device actions.

@renovate renovate Bot force-pushed the renovate/koenkk-zigbee2mqtt-2.x branch 15 times, most recently from 5746410 to 8697b25 Compare May 20, 2026 15:43
@renovate renovate Bot force-pushed the renovate/koenkk-zigbee2mqtt-2.x branch 5 times, most recently from 78375ad to 9fc7771 Compare May 21, 2026 18:11
@renovate renovate Bot changed the title Update koenkk/zigbee2mqtt Docker tag to v2.10.0 Update koenkk/zigbee2mqtt Docker tag to v2.10.1 May 21, 2026
@renovate renovate Bot force-pushed the renovate/koenkk-zigbee2mqtt-2.x branch 2 times, most recently from e2c6145 to 10d95cb Compare May 21, 2026 23:59
@renovate renovate Bot force-pushed the renovate/koenkk-zigbee2mqtt-2.x branch from 10d95cb to c33504a Compare May 23, 2026 00:54
@renovate renovate Bot force-pushed the renovate/koenkk-zigbee2mqtt-2.x branch from c33504a to af68198 Compare May 23, 2026 02:57
@claytono claytono closed this May 23, 2026
@renovate

renovate Bot commented May 23, 2026

Copy link
Copy Markdown
Contributor Author

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (2.10.1). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate Bot deleted the renovate/koenkk-zigbee2mqtt-2.x branch May 23, 2026 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@claytono claytono Awaiting requested review from claytono claytono is a code owner

Assignees

No one assigned

Labels

renovate:evaluated renovate:risk renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@claytono