Update Container images

[renovate]

This PR contains the following updates:

Package	Update	Change
golift/notifiarr	patch	0.9.5 → v0.9.7
nickfedor/watchtower	patch	1.21.0 → 1.21.2
tautulli/tautulli	minor	v2.17.2 → v2.18.1

---

Release Notes

Notifiarr/notifiarr (golift/notifiarr)

v0.9.7

Fixes

• fix: preserve MySQL hostnames in service checks by @​Geoffbro in #​1271
• Fix service checks and add tests by @​davidnewhall in #​1277
• protect a missing form, missing nvidia, missing busIDs by @​davidnewhall in #​1281
• Surface bad API key more clearly by @​davidnewhall in #​1282
• Fix Trust Profile password vs header fields by @​davidnewhall in #​1285
• Honor container TZ in client logs by @​davidnewhall in #​1288
• Fix swagger comments after ApiResponse rename by @​davidnewhall in #​1289
• Install Synology binary under /usr/local instead of /usr/bin by @​johnnyxmas in #​1280
• Keep Docker NFS bind mounts in snapshots by @​davidnewhall in #​1290
• Fix Vite 8 production build by @​davidnewhall in #​1299
• Fix UI freeze when deleting the last app instance by @​davidnewhall in #​1298
• Keep instance originals aligned after deleting a middle row by @​davidnewhall in #​1301
• Stop File Watcher self-log errors from spamming Discord by @​davidnewhall in #​1300
• Fix nil logger panic when adding a service after Start by @​davidnewhall in #​1305
• Sign Windows exe with golift/codesign@​v1 by @​davidnewhall in #​1304
• Fail unstable.golift.io uploads on HTTP errors by @​davidnewhall in #​1306
• Fix mobile sidebar scroll so Trust Profile is reachable on Home by @​davidnewhall in #​1307

Dependency Updates

• fix(deps): update module golift.io/starr to v1.3.1 by @​renovate[bot] in #​1235
• chore(deps): update golang docker tag to v1.26.6 by @​renovate[bot] in #​1268
• chore(deps): update nvidia/cuda docker tag to v13.3.1 by @​renovate[bot] in #​1246
• chore(deps): update dependency swagger-ui to v5.32.14 by @​renovate[bot] in #​1247
• chore(deps): update dependency prettier to v3.9.6 by @​renovate[bot] in #​1253
• chore(github): add issue form templates with issue types by @​bakerboy448 in #​1265
• Update linter. by @​davidnewhall in #​1274
• Update dependency svelte-check to v4.7.6 by @​renovate[bot] in #​1254
• Update dependency js-cookie to v3.0.8 by @​renovate[bot] in #​1273
• Update dependency prettier-plugin-svelte to v4 by @​renovate[bot] in #​1283
• Update dependency svelte-select to v6 by @​renovate[bot] in #​1284
• Update dependency @​sveltejs/vite-plugin-svelte to v7 by @​renovate[bot] in #​1293
• Update dependency vite to v8 by @​renovate[bot] in #​1294
• Update softprops/action-gh-release action to v3 by @​renovate[bot] in #​1295
• Update ubuntu Docker tag to v26 - autoclosed by @​renovate[bot] in #​1296
• Update module golift.io/xtractr to v0.6.0 by @​renovate[bot] in #​1309
• Update dependency svelte to v5.57.0 by @​renovate[bot] in #​1310

New Contributors

• @​Geoffbro made their first contribution in #​1271
• @​johnnyxmas made their first contribution in #​1280

Full Changelog: Notifiarr/notifiarr@v0.9.5...v0.9.7

nicholas-fedor/watchtower (nickfedor/watchtower)

v1.21.2

Compare Source

Added

• Add jmooo as a contributor for bug, and code by @​allcontributors[bot] in #​2239

Changed

• Publish docs on stable tag releases by @​nicholas-fedor in #​2235

Chores

• Apply gofumpt extras and golangci-lint formatter updates by @​nicholas-fedor in #​2242
• Update nicholas-fedor/go-proxy-pull-action action to v1.1.48 by @​renovate[bot] in #​2238
• Update module github.com/sirupsen/logrus to v1.10.2 by @​renovate[bot] in #​2237
• Update opentelemetry-go monorepo to v1.46.0 by @​renovate[bot] in #​2232
• Update github.com/google/pprof digest to 4d45320 by @​renovate[bot] in #​2231

Fixed

• Include skipped containers in scan summaries by @​nicholas-fedor in #​2241
• Detect throttles advertised only via retry-after by @​jmooo in #​2230

New Contributors

• @​jmooo made their first contribution in #​2230

v1.21.1

Compare Source

Added

• Add ncrosty58 as a contributor for code by @​allcontributors[bot] in #​2194
• Add llc1123 as a contributor for code by @​allcontributors[bot] in #​2193

Chores

• Update module github.com/nicholas-fedor/shoutrrr to v0.17.2 by @​renovate[bot] in #​2227
• Update module github.com/go-openapi/spec to v0.22.11 by @​renovate[bot] in #​2226
• Bump go-openapi jsonreference and spec by @​nicholas-fedor in #​2224
• Update github.com/google/pprof digest to 8a17677 by @​renovate[bot] in #​2222
• Update cimg/go:1.27.0 docker digest to 4da2d4b by @​renovate[bot] in #​2221
• Update module github.com/gofiber/utils/v2 to v2.4.2 by @​renovate[bot] in #​2219
• Update nicholas-fedor/go-proxy-pull-action action to v1.1.47 by @​renovate[bot] in #​2217
• Update go-openapi packages to v0.29.1 by @​renovate[bot] in #​2214
• Update github/codeql-action action to v4.37.8 by @​renovate[bot] in #​2212
• Update cimg/go:1.27.0 docker digest to 91e576b by @​renovate[bot] in #​2211
• Update golang docker tag to v1.27.0 by @​renovate[bot] in #​2209
• Update go-openapi packages to v0.29.0 by @​renovate[bot] in #​2208
• Update go module directive to v1.27.0 by @​renovate[bot] in #​2206
• Update cimg/go docker tag to v1.27.0 by @​renovate[bot] in #​2205
• Update module github.com/stretchr/testify to v1.12.1 by @​renovate[bot] in #​2202
• Update golang:alpine3.24 docker digest to 4c9fe60 by @​renovate[bot] in #​2201
• Update cimg/go docker tag to v1.26.7 by @​renovate[bot] in #​2199
• Update golang:alpine3.24 docker digest to 28d89ee by @​renovate[bot] in #​2198
• Update docker/setup-buildx-action action to v4.3.0 by @​renovate[bot] in #​2196
• Update module github.com/sirupsen/logrus to v1.10.1 by @​renovate[bot] in #​2195

Tautulli/Tautulli (tautulli/tautulli)

v2.18.1

Compare Source

• Activity:
  • Fix: Empty sessions row being added into the database.
• History:
  • Fix: Unable to expand detailed history when "Current Activity in History Tables" setting is enabled. (#​2805)
• Notifications:
  • Fix: Email password being overwritten with a blank value when saving email notification settings. (#​2804)
  • Fix: New device notification retriggering for Local user. (#​2795)
  • Fix: Sentinel values appearing in notification text enclosed in backticks. (#​2794)
• Other:
  • New: Added X-Frame-Options header to config file. (#​2807)
• API:
  • Fix: Guest users being able to retrieve history of another user through the API.
  • Change: Revert double nested data in get_plex_logs API command response. (#​2806)

v2.18.0

Compare Source

• Activity:
  • Fix: Displaying 4K resolution on activity cards.
  • New: Added Dolby Atmos to activity cards.
• Notifications:
  • New: Added Dolby Atmos notification parameters.
  • New: Support for Tautulli Remote App notifications sent using a push relay instead of OneSignal. OneSignal notifications will be deprecated on Oct. 1, 2026. (#​2772)
• Exporter:
  • New: Added editionTitle to export fields for shows, seasons, and episodes.
• History:
  • Fix: Double history table refresh on page load.
  • Fix: Paginate datatables queries in SQL instead of Python. (#​2728) (Thanks @​stephenp)
  • Fix: Various database optimizations to improve performance of history queries.
• UI:
  • Fix: Unable to edit users or libraries from the tables.
  • Fix: Dashboard stats card overflow/clipping on Firefox 153.0.3. (#​2776, #​2787) (Thanks @​maldis018)
  • New: Added button to delete/restore users and libraries from the user/library profile pages.
  • New: Added toggle for anonymous system analytics to the setup wizard and settings page. (#​2781)
• Other:
  • Fix: Improve Plex log file parsing.
  • Fix: Path traversal in update tarfile extraction. (CVE-2026-TBD) (Thanks @​tonghuaroot)
  • Fix: Plex token leakage in case-sensitive URL bypass in pms_image_proxy. (CVE-2026-TBD) (Thanks @​Xiaoyiyi23)
  • New: Build separate MacOS arm64 and x86_64 packages for Apple silicon and Intel Macs.
  • New: Added security headers to cherrypy response headers.
• API:
  • Fix: get_home_stats API command before and after parameters not working.
  • Fix: get_export_fields API command sub_media_type parameter not working.
  • Fix: search API command limit parameter not being applied.
  • Fix: delete_hosted_images API command return correct error response.
  • Fix: notify API command notify_action parameter clobbering if provided.
  • Fix: set_newsletter_config API command optional parameters subject/body/message.
  • Fix: download_plex_log and get_plex_log API commands return correct error response.
  • Fix: logout_user_session API command return correct error response when no row_id provided.
  • Fix: get_logs API command search/regex/sort before slicing.
  • Fix: get_recently_added API command response contained a blank section_id.
  • Fix: get_metadata API command return error for invalid rating_key provided.
  • Fix: sql API command making database backups on every query.
  • Fix: API commands not returning correct 400 error response.
  • New: Added Dolby Atmos info to the get_activity and get_metadata API command.
  • New: Allow X-Api-Key header to be used instead of the API key parameter.
  • New: Add API response to CORS preflight OPTIONS.
  • Change: edit_user and edit_library API commands to only update provided parameters.
  • Change: set_notifier_config and set_newsletter_config API commands to only update provided parameters.
  • Change: Double nested data in get_plex_logs API command response.
  • Removed: Deprecated delete_synced_item API command.

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "before 8am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[scottgigawatt]

Reviewed the rebased Notifiarr, Watchtower, and Tautulli image updates; both Watchtower pins remain aligned and all current-head checks pass.