CoreBotLabs/infra
2
1
Fork 0
Code Pull requests 11 Activity

chore(deps): update qmcgaw/gluetun docker tag to v3.41.3 #22

Open
renovate-bot wants to merge 1 commit from renovate/qmcgaw-gluetun-3.x into main
pull from: renovate/qmcgaw-gluetun-3.x
merge into: CoreBotLabs:main
Conversation 0 Commits 1 Files changed 2 +2 -2
renovate-bot commented 2026-08-28 05:05:36 +02:00
Owner
Copy link

This PR contains the following updates:

Package Update Change
qmcgaw/gluetun patch v3.41.1 -> v3.41.3

Release Notes

passteque/gluetun (qmcgaw/gluetun)

v3.41.3

Compare Source

This fixes a VPN server port forwarding deadlock bug introduced whilst back-porting a fix from the master branch (:latest image) to v3.41.2. Credits to @​robinostlund for reporting the bug and even nailing down what it was! (#​3416)

Refer to v3.41.2 fixes in case you haven't checked.

v3.41.2

Compare Source

⚠️ there is a deadlock bug in the port forwarding if you use the up or down command, I will release v3.41.3 shortly

Fixes
  • Wireguard:
    • support IPv6 address formatting from config files (#​3273)
    • ignore empty address strings
    • skip tun device checks when using kernelspace
  • OpenVPN:
    • bundle provider CA certificates in one block (#​3258)
    • trim spaces in config lines before parsing (#​3327)
    • fix support for tcp-client
      • always use proto tcp-client when using TCP
      • parses tcp-client (on top of tcp, tcp4, tcp6) as meaning TCP
  • Custom openvpn: restrict custom openvpn config protocol to tcp or udp internally
  • Firewall: shared mutex for both iptables and ip6tables to prevent race conditions
  • Healthcheck:
    • correct behavior when HEALTH_RESTART_VPN=off and startup check fails
    • prevent race condition on the healthchecker (#​3400)
  • DNS:
    • skip blocking if block lists download fails
    • correct error wrapping for DNS listening address validation
    • DNS over TLS pool behavior fixed
      • handle timed out connections the same as closed connections
      • close connection on TLS handshake failure
      • improve mutex handling during connection renewal and retrieval
  • VPN port forwarding:
    • no longer stuck after failed port forwarding
    • handle empty ports without panicing
  • Updater: only uses DoH to cloudflare+google
    • prevent dns plaintext manipulation both the periodic update and when running in cli mode
    • possibly higher reliability on poor connections versus UDP
    • drop -dns flag in update command
    • for now no configuration allowed since it makes everything rather complex
  • Control server:
    • use port and ports for both single port and multiple ports forwarded
    • authentication: return 404 or 405 depending on route
  • Increase global http client timeout to 35s and precise lower timeouts where needed
    • Fix DNS blocklists slow downloads
    • Leave 35s timeout for updaters
    • Set timeouts to 1s for local calls
    • Set timeouts to 5s for LAN VPN calls and small external calls
    • Set timeouts to 10s external VPN API calls
  • Kernel modules: probe searches for features built-in the kernel
  • CI: set hash of PR commit instead of synthetic commit in docker build argument
  • internal/command: fix rare race condition on log line stream at command completion
Provider specific fixes
  • AirVPN: update servers data (#​3186)
  • ExpressVPN:
    • add new CA3 certificate to fix TLS handshake failure (#​3184, #​3192)
    • remove pakistan server
  • Privado:
    • servers data updated using JSON API
    • allow OpenVPN TCP protocol
    • allow additional OpenVPN ports 443, 8080 and 8443 for both tcp and udp
  • Private Internet Access:
    • remove none encryption preset
    • use AES-GCM for all presets
    • allow ports 501 and 502 as custom ports given they are the defaults
    • try x.y.128.1 and x.y.0.1 from the gateway IP to find the API IP address
    • fix servers data updater and update servers data
    • update default OpenVPN ports: 8080 for UDP, 8443 for TCP (according to github.com/pia-foss/manual-connections@8a75e46be8)
    • handle "port is busy" messages and retry port forwarding logic
  • ProtonVPN: fix updater code
  • Vyprvpn: update OpenVPN configs zip URL (#​3264)

PS:

  • No time to make a video or a rant section yet, but will do for v3.42.0 for sure!
  • v3.42 probably coming end of August/early September!
  • Sorry for the spam, first few v3.41.2 release attempts decided to give me a bunch of surprises in the CI, so here it is again

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [qmcgaw/gluetun](https://github.com/passteque/gluetun) | patch | `v3.41.1` -> `v3.41.3` | --- ### Release Notes <details> <summary>passteque/gluetun (qmcgaw/gluetun)</summary> ### [`v3.41.3`](https://github.com/passteque/gluetun/releases/tag/v3.41.3) [Compare Source](https://github.com/passteque/gluetun/compare/v3.41.2...v3.41.3) This fixes a VPN server port forwarding deadlock bug introduced whilst back-porting a fix from the `master` branch (`:latest` image) to `v3.41.2`. Credits to [@&#8203;robinostlund](https://github.com/robinostlund) for reporting the bug and even nailing down what it was! ([#&#8203;3416](https://github.com/passteque/gluetun/issues/3416)) Refer to [v3.41.2 fixes](https://github.com/passteque/gluetun/releases/tag/v3.41.2) in case you haven't checked. ### [`v3.41.2`](https://github.com/passteque/gluetun/releases/tag/v3.41.2) [Compare Source](https://github.com/passteque/gluetun/compare/v3.41.1...v3.41.2) ⚠️ there is a deadlock bug in the port forwarding if you use the up or down command, I will release v3.41.3 shortly ##### Fixes - Wireguard: - support IPv6 address formatting from config files ([#&#8203;3273](https://github.com/passteque/gluetun/issues/3273)) - ignore empty address strings - skip tun device checks when using kernelspace - OpenVPN: - bundle provider CA certificates in one block ([#&#8203;3258](https://github.com/passteque/gluetun/issues/3258)) - trim spaces in config lines before parsing ([#&#8203;3327](https://github.com/passteque/gluetun/issues/3327)) - fix support for `tcp-client` - always use `proto tcp-client` when using TCP - parses `tcp-client` (on top of `tcp`, `tcp4`, `tcp6`) as meaning TCP - Custom openvpn: restrict custom openvpn config protocol to tcp or udp internally - Firewall: shared mutex for both iptables and ip6tables to prevent race conditions - Healthcheck: - correct behavior when HEALTH_RESTART_VPN=off and startup check fails - prevent race condition on the healthchecker ([#&#8203;3400](https://github.com/passteque/gluetun/issues/3400)) - DNS: - skip blocking if block lists download fails - correct error wrapping for DNS listening address validation - DNS over TLS pool behavior fixed - handle timed out connections the same as closed connections - close connection on TLS handshake failure - improve mutex handling during connection renewal and retrieval - VPN port forwarding: - no longer stuck after failed port forwarding - handle empty ports without panicing - Updater: only uses DoH to cloudflare+google - prevent dns plaintext manipulation both the periodic update and when running in cli mode - possibly higher reliability on poor connections versus UDP - drop `-dns` flag in update command - for now no configuration allowed since it makes everything rather complex - Control server: - use `port` and `ports` for both single port and multiple ports forwarded - authentication: return 404 or 405 depending on route - Increase global http client timeout to 35s and precise lower timeouts where needed - Fix DNS blocklists slow downloads - Leave 35s timeout for updaters - Set timeouts to 1s for local calls - Set timeouts to 5s for LAN VPN calls and small external calls - Set timeouts to 10s external VPN API calls - Kernel modules: probe searches for features built-in the kernel - CI: set hash of PR commit instead of synthetic commit in docker build argument - `internal/command`: fix rare race condition on log line stream at command completion ##### Provider specific fixes - AirVPN: update servers data ([#&#8203;3186](https://github.com/passteque/gluetun/issues/3186)) - ExpressVPN: - add new CA3 certificate to fix TLS handshake failure ([#&#8203;3184](https://github.com/passteque/gluetun/issues/3184), [#&#8203;3192](https://github.com/passteque/gluetun/issues/3192)) - remove pakistan server - Privado: - servers data updated using JSON API - allow OpenVPN TCP protocol - allow additional OpenVPN ports 443, 8080 and 8443 for both tcp and udp - Private Internet Access: - remove none encryption preset - use AES-GCM for all presets - allow ports 501 and 502 as custom ports given they are the defaults - try x.y.128.1 and x.y.0.1 from the gateway IP to find the API IP address - fix servers data updater and update servers data - update default OpenVPN ports: 8080 for UDP, 8443 for TCP (according to https://github.com/pia-foss/manual-connections/commit/8a75e46be81583d17f9ab3570881419b35000969) - handle "port is busy" messages and retry port forwarding logic - ProtonVPN: fix updater code - Vyprvpn: update OpenVPN configs zip URL ([#&#8203;3264](https://github.com/passteque/gluetun/issues/3264)) *** PS: - No time to make a video or a rant section yet, but will do for v3.42.0 for sure! - v3.42 probably coming end of August/early September! - Sorry for the spam, first few v3.41.2 release attempts decided to give me a bunch of surprises in the CI, so here it is again </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNS4wIiwidXBkYXRlZEluVmVyIjoiMzguMjUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot force-pushed renovate/qmcgaw-gluetun-3.x from d0b75ef36d to a13c660ed1 2026-09-04 23:31:01 +02:00 Compare
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/qmcgaw-gluetun-3.x:renovate/qmcgaw-gluetun-3.x
git switch renovate/qmcgaw-gluetun-3.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/qmcgaw-gluetun-3.x
git switch renovate/qmcgaw-gluetun-3.x
git rebase main
git switch main
git merge --ff-only renovate/qmcgaw-gluetun-3.x
git switch renovate/qmcgaw-gluetun-3.x
git rebase main
git switch main
git merge --no-ff renovate/qmcgaw-gluetun-3.x
git switch main
git merge --squash renovate/qmcgaw-gluetun-3.x
git switch main
git merge --ff-only renovate/qmcgaw-gluetun-3.x
git switch main
git merge renovate/qmcgaw-gluetun-3.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
CoreBotLabs/infra!22
No description provided.