Update ghcr.io/pi-hole/pihole Docker tag to v2026.04.1 #239

Open
renovate-bot wants to merge 1 commits from renovate/ghcr.io-pi-hole-pihole-2026.x into main
Collaborator

This PR contains the following updates:

Package Update Change
ghcr.io/pi-hole/pihole minor 2026.02.02026.04.1

Release Notes

pi-hole/docker-pi-hole (ghcr.io/pi-hole/pihole)

v2026.04.1

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2026.04.0...2026.04.1

New component versions included in this tag:

What's Changed (FTL v6.6.1)

Security advisories

New Contributors

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.6...v6.6.1

What's Changed (Core v6.4.2)

Security advisories

Full Changelog: https://github.com/pi-hole/pi-hole/compare/v6.4.1...v6.4.2

v2026.04.0

Compare Source

New Contributors

Full Changelog: https://github.com/pi-hole/docker-pi-hole/compare/2026.02.0...2026.04.0

Component Release Notes

What's Changed (FTL v6.6)

Security Advisories

New Contributors

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.5...v6.6

What's Changed (Web v6.5)

Security Advisories

New Contributors

Full Changelog: https://github.com/pi-hole/web/compare/v6.4.1...v6.5

What's Changed (Core v6.4.1)

Security Advisories

New Contributors

Full Changelog: https://github.com/pi-hole/pi-hole/compare/v6.4...v6.4.1


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/pi-hole/pihole](https://github.com/pi-hole/docker-pi-hole) | minor | `2026.02.0` → `2026.04.1` | --- ### Release Notes <details> <summary>pi-hole/docker-pi-hole (ghcr.io/pi-hole/pihole)</summary> ### [`v2026.04.1`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.04.1) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2026.04.0...2026.04.1) <!-- Release notes generated using configuration in .github/release.yml at master --> #### What's Changed - docs: update capability documentation links by [@&#8203;SirRGB](https://github.com/SirRGB) in [#&#8203;2025](https://github.com/pi-hole/docker-pi-hole/pull/2025) #### New Contributors - [@&#8203;SirRGB](https://github.com/SirRGB) made their first contribution in [#&#8203;2025](https://github.com/pi-hole/docker-pi-hole/pull/2025) **Full Changelog**: <https://github.com/pi-hole/docker-pi-hole/compare/2026.04.0...2026.04.1> #### New component versions included in this tag: #### What's Changed (FTL v6.6.1) - Add new `GET /api/config/_properties` endpoint by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2356](https://github.com/pi-hole/FTL/pull/2356) - Fix thread-safety issues causing SIGSEGV under concurrent API load by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2835](https://github.com/pi-hole/FTL/pull/2835) - fix: fix rare race condition for SHM strings in API handlers by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2833](https://github.com/pi-hole/FTL/pull/2833) - Accept punycode domains that libidn2 rejects under IDNA2008 by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2838](https://github.com/pi-hole/FTL/pull/2838) - Improve shutdown diagnostics to identify SIGTERM source by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2839](https://github.com/pi-hole/FTL/pull/2839) - Resolve empty backtraces when addr2line is not installed by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2831](https://github.com/pi-hole/FTL/pull/2831) - Improve thread-safety for concurrent API requests by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2847](https://github.com/pi-hole/FTL/pull/2847) - Don't skip device lookup when resolver.macNames is disabled by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2846](https://github.com/pi-hole/FTL/pull/2846) - Fix linker error when compiling w/o optimization by [@&#8203;aeolio](https://github.com/aeolio) in [pi-hole/FTL#2850](https://github.com/pi-hole/FTL/pull/2850) - Clarify `dns.blockESNI` wording by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in [pi-hole/FTL#2784](https://github.com/pi-hole/FTL/pull/2784) - Preserve log file path config when fopen fails by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2834](https://github.com/pi-hole/FTL/pull/2834) #### Security advisories - <https://github.com/pi-hole/pi-hole/security/advisories/GHSA-6w8x-p785-6pm4> - Fixed with : [pi-hole/FTL@`88c569a`](https://github.com/pi-hole/FTL/commit/88c569aa026d905d0066135bb71f36a13acf4bf4) and [pi-hole/pi-hole@`7ccb8dd`](https://github.com/pi-hole/pi-hole/commit/7ccb8ddfb085479fa96e801886eb1cdbeaf3a720) - <https://github.com/pi-hole/FTL/security/advisories/GHSA-9cqv-839p-gpq2> - Fixed with : [pi-hole/FTL@`0c46e4e`](https://github.com/pi-hole/FTL/commit/0c46e4ec7fe57f762fce261625f2cf5d43806e6d) #### New Contributors - [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) made their first contribution in [pi-hole/FTL#2784](https://github.com/pi-hole/FTL/pull/2784) **Full Changelog**: <https://github.com/pi-hole/FTL/compare/v6.6...v6.6.1> #### What's Changed (Core v6.4.2) - Wipe version file before creating a new one by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/pi-hole#6538](https://github.com/pi-hole/pi-hole/pull/6538) - Fix ownership permissions for containing directories in fix\_owner\_per… by [@&#8203;PromoFaux](https://github.com/PromoFaux) in [pi-hole/pi-hole#6589](https://github.com/pi-hole/pi-hole/pull/6589) - Remove reference to /usr/local/bin/COL\_TABLE by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in [pi-hole/pi-hole#6594](https://github.com/pi-hole/pi-hole/pull/6594) - Skip apt cache update when pihole-meta is current by [@&#8203;PromoFaux](https://github.com/PromoFaux) in [pi-hole/pi-hole#6581](https://github.com/pi-hole/pi-hole/pull/6581) - Set versions in /etc/pihole/versions to null if script fails by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/pi-hole#6550](https://github.com/pi-hole/pi-hole/pull/6550) - Remove redundant touching of logfiles from systemd Service by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/pi-hole#6601](https://github.com/pi-hole/pi-hole/pull/6601) - Loosen requirements for local file access for gravity by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/pi-hole#6430](https://github.com/pi-hole/pi-hole/pull/6430) - Fix permission for \*.etag files after gravity run by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/pi-hole#6353](https://github.com/pi-hole/pi-hole/pull/6353) - add logrotate to DEB and RPM dependencies by [@&#8203;darkexplosiveqwx](https://github.com/darkexplosiveqwx) in [pi-hole/pi-hole#6524](https://github.com/pi-hole/pi-hole/pull/6524) - Improve gravity error message including curl exit code and errormsg by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in [pi-hole/pi-hole#6605](https://github.com/pi-hole/pi-hole/pull/6605) #### Security advisories - <https://github.com/pi-hole/pi-hole/security/advisories/GHSA-6w8x-p785-6pm4> - Fixed with : [pi-hole/pi-hole@`7ccb8dd`](https://github.com/pi-hole/pi-hole/commit/7ccb8ddfb085479fa96e801886eb1cdbeaf3a720) and [pi-hole/FTL@`88c569a`](https://github.com/pi-hole/FTL/commit/88c569aa026d905d0066135bb71f36a13acf4bf4) **Full Changelog**: <https://github.com/pi-hole/pi-hole/compare/v6.4.1...v6.4.2> ### [`v2026.04.0`](https://github.com/pi-hole/docker-pi-hole/releases/tag/2026.04.0) [Compare Source](https://github.com/pi-hole/docker-pi-hole/compare/2026.02.0...2026.04.0) <!-- Release notes generated using configuration in .github/release.yml at master --> #### What's Changed (Docker Specific - all related to CI/build) - Group dependabot PRs to reduce PR spam by [@&#8203;yubiuser](https://github.com/yubiuser) in [#&#8203;2004](https://github.com/pi-hole/docker-pi-hole/pull/2004) - ci: switch image publishing to docker/github-builder by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;2008](https://github.com/pi-hole/docker-pi-hole/pull/2008) - Readme Rework by [@&#8203;PromoFaux](https://github.com/PromoFaux) in [#&#8203;1958](https://github.com/pi-hole/docker-pi-hole/pull/1958) - Replace Python test suite with BATS and consolidate workflows by [@&#8203;PromoFaux](https://github.com/PromoFaux) in [#&#8203;2009](https://github.com/pi-hole/docker-pi-hole/pull/2009) - Add timeout to curl command in branch validation by [@&#8203;RynoCODE](https://github.com/RynoCODE) in [#&#8203;2011](https://github.com/pi-hole/docker-pi-hole/pull/2011) - Use bats-assert library functions in BATS test suite by [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;2018](https://github.com/pi-hole/docker-pi-hole/pull/2018) - ci: run build job on pull request event by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;2021](https://github.com/pi-hole/docker-pi-hole/pull/2021) - Update github-builder to v1.5.0 and enable fail-fast by [@&#8203;yubiuser](https://github.com/yubiuser) in [#&#8203;2022](https://github.com/pi-hole/docker-pi-hole/pull/2022) #### New Contributors - [@&#8203;crazy-max](https://github.com/crazy-max) made their first contribution in [#&#8203;2008](https://github.com/pi-hole/docker-pi-hole/pull/2008) - [@&#8203;RynoCODE](https://github.com/RynoCODE) made their first contribution in [#&#8203;2011](https://github.com/pi-hole/docker-pi-hole/pull/2011) - [@&#8203;Copilot](https://github.com/Copilot) made their first contribution in [#&#8203;2018](https://github.com/pi-hole/docker-pi-hole/pull/2018) **Full Changelog**: <https://github.com/pi-hole/docker-pi-hole/compare/2026.02.0...2026.04.0> #### Component Release Notes <!-- Release notes generated using configuration in .github/release.yml at development --> #### What's Changed (FTL v6.6) - Fix possible resolver issue on armv5tel by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2781](https://github.com/pi-hole/FTL/pull/2781) - Introduce CMake options for optional dependencies by [@&#8203;aeolio](https://github.com/aeolio) in [pi-hole/FTL#2795](https://github.com/pi-hole/FTL/pull/2795) - Fix build without mbedtls \[v2] by [@&#8203;aeolio](https://github.com/aeolio) in [pi-hole/FTL#2796](https://github.com/pi-hole/FTL/pull/2796) - Fix overTime data when database.DBimport = false by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2788](https://github.com/pi-hole/FTL/pull/2788) - Fix cross-compilation issues w/ custom toolchain by [@&#8203;aeolio](https://github.com/aeolio) in [pi-hole/FTL#2797](https://github.com/pi-hole/FTL/pull/2797) - Add new option for controling name resolution via MAC address by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2790](https://github.com/pi-hole/FTL/pull/2790) - Fix obtaining client groups by name by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2791](https://github.com/pi-hole/FTL/pull/2791) - Ensure API sessions are restored before starting the HTTP server by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2803](https://github.com/pi-hole/FTL/pull/2803) - Add form-action 'self' to Content-Security-Policy by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/FTL#2804](https://github.com/pi-hole/FTL/pull/2804) - Add query\_frequency to /padd endpoint by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/FTL#2806](https://github.com/pi-hole/FTL/pull/2806) - Guard query-count counters against unsigned underflow by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2815](https://github.com/pi-hole/FTL/pull/2815) - Add universal crash backtrace via \_Unwind\_Backtrace by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2811](https://github.com/pi-hole/FTL/pull/2811) - config: show totp\_secret presence in CLI output by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2813](https://github.com/pi-hole/FTL/pull/2813) - Fix client count inflation for rate-limited queries by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2814](https://github.com/pi-hole/FTL/pull/2814) - Fix stack buffer overflow in get\_process\_name() by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2821](https://github.com/pi-hole/FTL/pull/2821) - Do not restart FTL while `pihole -g` is still ongoing by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/FTL#2419](https://github.com/pi-hole/FTL/pull/2419) #### Security Advisories - [GHSA-r7g8-3fj7-m5qq - Authorization bypass: CLI API sessions can import Teleporter archives and modify configuration](https://github.com/pi-hole/FTL/security/advisories/GHSA-r7g8-3fj7-m5qq) reported by [@&#8203;mzalzahrani](https://github.com/mzalzahrani) - Remote Code Execution (RCE) via Newline Injection in Multiple Configuration Parameters reported by [@&#8203;T0X1Cx](https://github.com/T0X1Cx) - [pi-hole/FTL/security/advisories/GHSA-vfmq-jrx3-wv3c](https://github.com/pi-hole/FTL/security/advisories/GHSA-vfmq-jrx3-wv3c) - [pi-hole/FTL/security/advisories/GHSA-wxhv-w77q-6qwp](https://github.com/pi-hole/FTL/security/advisories/GHSA-wxhv-w77q-6qwp) - [pi-hole/FTL/security/advisories/GHSA-28g5-gg88-wh5m](https://github.com/pi-hole/FTL/security/advisories/GHSA-28g5-gg88-wh5m) - [pi-hole/FTL/security/advisories/GHSA-fqv2-qhfh-ghcj](https://github.com/pi-hole/FTL/security/advisories/GHSA-fqv2-qhfh-ghcj) - [pi-hole/FTL/security/advisories/GHSA-23w8-7333-p9fj](https://github.com/pi-hole/FTL/security/advisories/GHSA-23w8-7333-p9fj) #### New Contributors - [@&#8203;aeolio](https://github.com/aeolio) made their first contribution in [pi-hole/FTL#2795](https://github.com/pi-hole/FTL/pull/2795) **Full Changelog**: <https://github.com/pi-hole/FTL/compare/v6.5...v6.6> <!-- Release notes generated using configuration in .github/release.yml at development --> #### What's Changed (Web v6.5) - Amend teleporter help text that the long-term data is not included by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/web#3721](https://github.com/pi-hole/web/pull/3721) - Do not use 3 columns when boxed layout is used by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in [pi-hole/web#3722](https://github.com/pi-hole/web/pull/3722) - Use <kbd>ENTER</kbd> instead of <kbd>⏎</kbd> by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/web#3727](https://github.com/pi-hole/web/pull/3727) - Don't link to github releases if docker tag is nightly by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/web#3718](https://github.com/pi-hole/web/pull/3718) - Do not try to compare component version when remote version info is not available by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/web#3729](https://github.com/pi-hole/web/pull/3729) - Show loading overlay when adding/removing CNAME records as it requires a FTL restart by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/web#3742](https://github.com/pi-hole/web/pull/3742) - fix: check on responseJSON when wrong password by [@&#8203;guybrush2105](https://github.com/guybrush2105) in [pi-hole/web#3693](https://github.com/pi-hole/web/pull/3693) - Remove the loggingButton from Settings > System > Actions by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/web#3747](https://github.com/pi-hole/web/pull/3747) #### Security Advisories - Multiple Stored HTML Injections and XSS in different web interface pages reported by [@&#8203;andrejtomci](https://github.com/andrejtomci) - [GHSA-jx8x-mj2r-62vq - Stored HTML Injection in queries.js](https://github.com/pi-hole/web/security/advisories/GHSA-jx8x-mj2r-62vq) - [GHSA-9rfm-c5g6-538p - Stored HTML attribute injection](https://github.com/pi-hole/web/security/advisories/GHSA-9rfm-c5g6-538p) - [GHSA-px6w-85wp-ww9v - Stored XSS / HTML injection in the Network page/Dashboard](https://github.com/pi-hole/web/security/advisories/GHSA-px6w-85wp-ww9v) - [GHSA-7xqw-r9pr-qv59 - Reflected XSS / HTML injection in taillog.js](https://github.com/pi-hole/web/security/advisories/GHSA-7xqw-r9pr-qv59) (Also reported by [@&#8203;n1rwhex](https://github.com/n1rwhex) and [@&#8203;mzalzahrani](https://github.com/mzalzahrani)) #### New Contributors - [@&#8203;guybrush2105](https://github.com/guybrush2105) made their first contribution in [pi-hole/web#3693](https://github.com/pi-hole/web/pull/3693) **Full Changelog**: <https://github.com/pi-hole/web/compare/v6.4.1...v6.5> <!-- Release notes generated using configuration in .github/release.yml at development --> #### What's Changed (Core v6.4.1) - Remove additional ':' from debug log system time output by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/pi-hole#6551](https://github.com/pi-hole/pi-hole/pull/6551) - Remove `readonly` from piholeNetworkFlush.sh to avoid error message by [@&#8203;rdwebdesign](https://github.com/rdwebdesign) in [pi-hole/pi-hole#6554](https://github.com/pi-hole/pi-hole/pull/6554) - Add antigravity index by [@&#8203;DL6ER](https://github.com/DL6ER) in [pi-hole/pi-hole#6573](https://github.com/pi-hole/pi-hole/pull/6573) - Fix return status capture of FTL check\_download exists by [@&#8203;yubiuser](https://github.com/yubiuser) in [pi-hole/pi-hole#6572](https://github.com/pi-hole/pi-hole/pull/6572) - Remove misleading TODO comment for SetWebPassword by [@&#8203;10adnan75](https://github.com/10adnan75) in [pi-hole/pi-hole#6531](https://github.com/pi-hole/pi-hole/pull/6531) #### Security Advisories - [GHSA-c935-8g63-qp74 – Local Privilege Escalation](https://github.com/pi-hole/pi-hole/security/advisories/GHSA-c935-8g63-qp74) reported by [@&#8203;smittix](https://github.com/smittix) #### New Contributors - [@&#8203;10adnan75](https://github.com/10adnan75) made their first contribution in [pi-hole/pi-hole#6531](https://github.com/pi-hole/pi-hole/pull/6531) - [@&#8203;Copilot](https://github.com/Copilot) made their first contribution in [pi-hole/pi-hole#6580](https://github.com/pi-hole/pi-hole/pull/6580) **Full Changelog**: <https://github.com/pi-hole/pi-hole/compare/v6.4...v6.4.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDQuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE0MS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
renovate-bot added 1 commit 2026-04-25 08:02:33 +05:30
renovate-bot force-pushed renovate/ghcr.io-pi-hole-pihole-2026.x from 3a80392d2d to 76a15e08d4 2026-04-25 08:02:33 +05:30 Compare
renovate-bot changed title from Update ghcr.io/pi-hole/pihole Docker tag to v2026.04.0 to Update ghcr.io/pi-hole/pihole Docker tag to v2026.04.1 2026-04-25 08:02:37 +05:30
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/ghcr.io-pi-hole-pihole-2026.x:renovate/ghcr.io-pi-hole-pihole-2026.x
git checkout renovate/ghcr.io-pi-hole-pihole-2026.x
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ryuupendragon/docker-compose#239