Slam6488/docker-compose
Watch
1
0
Fork
You've already forked docker-compose
 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Update snipe/snipe-it Docker tag to v8.8.3 #11

Merged
Slam6488 merged 1 commit from renovate/snipe-snipe-it-8.x into main 2026-10-22 05:22:44 +02:00
Conversation 0 Commits 1 Files changed 1 +1 -1
renovate-bot commented 2026-10-21 22:01:37 +02:00
Collaborator

This PR contains the following updates:

Package Update Change
snipe/snipe-it patch v8.8.1 → v8.8.3

Release Notes

grokability/snipe-it (snipe/snipe-it)

v8.8.3: - Docker Alpine PHP2SHELL security patch

Compare Source

[!CAUTION]
This version of Snipe-IT REQUIRES PHP 8.2.0 or greater, 8.4+ recommended. PHP 8.2 is still in security release support until 31 Dec 2026, but let's not play that game - and some of the new features we're working on will require PHP 8.3+, so... get on that, ferreal!

Didja miss us? Sorry for the extra tagging/release noise, but we were notified that we released 8.8.2 about 10 minutes before Alpine released their patched PHP versions, so we had to rebuild and push the updated tags.

Cringey millennial meme Boxing-bag-knockout

Ubuntu docker users were already covered by the previous release, so this is just for the docker Alpine folks.

It's... been a long day on our side, probably pretty long on your side too.

Cringey millennial meme big-wine

Stay safe out there, folks.

What's Changed

New Contributors

Full Changelog: https://github.com/grokability/snipe-it/compare/v8.8.2...v8.8.3

v8.8.2

Compare Source

[!CAUTION]
This version of Snipe-IT REQUIRES PHP 8.2.0 or greater, 8.4+ recommended. PHP 8.2 is still in security release support until 31 Dec 2026, but let's not play that game - and some of the new features we're working on will require PHP 8.3+, so... get on that, ferreal!

Happy PHPocalypse for those who celebrate.

We're sure you've heard about the PHP2SHELL exploit that was patched today. If not, you can read a little about it here, but suffice to say it's BAD. Like, really really bad.

Cringey millennial meme oh-shi

Absolutely EVERYONE is encouraged to upgrade their version of PHP ASAFP

Our hosted fleet is fully patched, so those of you nestled in our loving arms are already good to go with nothing for you to do. This release fixes just a few small bugs, but it really a convenience release so that folks on docker can get a real tagged version instead of using latest.

Docker Users

We don’t pin the patch versions in the docker images, so a rebuild will get whatever is latest for the distro.

Ubuntu back-patches their packages and then gives them a sub version (the 24.0.13) version, for example:

apt list --installed | grep php

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

libapache2-mod-php8.3/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php-common/now 2:93ubuntu2 all [installed,local]
php-memcached/now 3.2.0+2.2.0-4ubuntu3 amd64 [installed,local]
php8.3-bcmath/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-cli/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-common/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-curl/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-dev/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-gd/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-igbinary/now 3.2.13-1ubuntu3 amd64 [installed,local]
php8.3-ldap/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-mbstring/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-memcached/now 3.2.0+2.2.0-4ubuntu3 amd64 [installed,local]
php8.3-msgpack/now 1:2.2.0~rc2-3ubuntu1 amd64 [installed,local]
php8.3-mysql/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-opcache/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-readline/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-redis/now 5.3.7+4.3.0-3ubuntu1 amd64 [installed,local]
php8.3-xml/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]
php8.3-zip/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local]

Similarly, Alpine has back-patched for this security vulnerability.

Check inside the running container, replacing snipe-it with the container name:

docker exec snipe-it php -v

To see the full Alpine package versions:

docker exec snipe-it sh -c 'apk info -v | grep -E "^php[0-9]+-"'

After updating, recreate the container so its web-serving PHP processes use the updated binaries.

What's Changed

Full Changelog: https://github.com/grokability/snipe-it/compare/v8.8.1...v8.8.2

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [snipe/snipe-it](https://github.com/grokability/snipe-it) | patch | `v8.8.1` → `v8.8.3` | --- ### Release Notes <details> <summary>grokability/snipe-it (snipe/snipe-it)</summary> ### [`v8.8.3`](https://github.com/grokability/snipe-it/releases/tag/v8.8.3): - Docker Alpine PHP2SHELL security patch [Compare Source](https://github.com/grokability/snipe-it/compare/v8.8.2...v8.8.3) > \[!CAUTION]\ > **This version of Snipe-IT REQUIRES PHP 8.2.0 or greater, 8.4+ recommended.** PHP 8.2 is still in security release support until 31 Dec 2026, but let's not play that game - and some of the new features we're working on will require PHP 8.3+, so... get on that, ferreal! Didja miss us? Sorry for the extra tagging/release noise, but we were notified that we released 8.8.2 about 10 minutes before Alpine released their patched PHP versions, so we had to rebuild and push the updated tags. <details> <summary>Cringey millennial meme</summary> <img width="300" height="200" alt="Boxing-bag-knockout" src="https://github.com/user-attachments/assets/ec698852-916c-4ad9-9ebd-84a14ae1982a" /> </details> Ubuntu docker users were already covered by the previous release, so this is just for the docker Alpine folks. It's... been a long day on our side, probably pretty long on your side too. <details> <summary>Cringey millennial meme</summary> <img width="400" height="225" alt="big-wine" src="https://github.com/user-attachments/assets/82a92e69-97b9-4f15-86bc-19767d939fa4" /> </details> Stay safe out there, folks. #### What's Changed - Fixed [#&#8203;19895](https://github.com/grokability/snipe-it/issues/19895) - remove PHP 8.4/8.5 deprecation notices by [@&#8203;sudarshanvashisht](https://github.com/sudarshanvashisht) in [#&#8203;19896](https://github.com/grokability/snipe-it/pull/19896) #### New Contributors - [@&#8203;sudarshanvashisht](https://github.com/sudarshanvashisht) made their first contribution in [#&#8203;19896](https://github.com/grokability/snipe-it/pull/19896) **Full Changelog**: <https://github.com/grokability/snipe-it/compare/v8.8.2...v8.8.3> ### [`v8.8.2`](https://github.com/grokability/snipe-it/releases/tag/v8.8.2) [Compare Source](https://github.com/grokability/snipe-it/compare/v8.8.1...v8.8.2) > \[!CAUTION]\ > **This version of Snipe-IT REQUIRES PHP 8.2.0 or greater, 8.4+ recommended.** PHP 8.2 is still in security release support until 31 Dec 2026, but let's not play that game - and some of the new features we're working on will require PHP 8.3+, so... get on that, ferreal! Happy PHPocalypse for those who celebrate. We're sure you've heard about the PHP2SHELL exploit that was patched today. If not, you can [read a little about it here](https://grokstar.dev/security/2026/10/critical-php-security-update-php2shell/), but suffice to say it's BAD. Like, really really bad. <details> <summary>Cringey millennial meme</summary> <img width="480" height="360" alt="oh-shi" src="https://github.com/user-attachments/assets/5d86bb6f-01ca-44ec-8b66-e6b6501e6811" /> </details> ### Absolutely EVERYONE is encouraged to upgrade their version of PHP ASAFP Our hosted fleet is fully patched, so those of you nestled in our loving arms are already good to go with nothing for you to do. This release fixes just a few small bugs, but it really a convenience release so that folks on docker can get a real tagged version instead of using `latest`. #### Docker Users We don’t pin the patch versions in the docker images, so a rebuild will get whatever is latest for the distro. Ubuntu back-patches their packages and then [gives them a sub version](https://ubuntu.com/blog/php2shell-vulnerability-fixes-available) (the 24.0.13) version, for example: ```shell apt list --installed | grep php WARNING: apt does not have a stable CLI interface. Use with caution in scripts. libapache2-mod-php8.3/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php-common/now 2:93ubuntu2 all [installed,local] php-memcached/now 3.2.0+2.2.0-4ubuntu3 amd64 [installed,local] php8.3-bcmath/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-cli/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-common/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-curl/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-dev/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-gd/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-igbinary/now 3.2.13-1ubuntu3 amd64 [installed,local] php8.3-ldap/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-mbstring/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-memcached/now 3.2.0+2.2.0-4ubuntu3 amd64 [installed,local] php8.3-msgpack/now 1:2.2.0~rc2-3ubuntu1 amd64 [installed,local] php8.3-mysql/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-opcache/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-readline/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-redis/now 5.3.7+4.3.0-3ubuntu1 amd64 [installed,local] php8.3-xml/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] php8.3-zip/now 8.3.6-0ubuntu0.24.04.13 amd64 [installed,local] ``` Similarly, Alpine has back-patched [for this security vulnerability](https://wwwtest.alpinelinux.org/). Check **inside the running container**, replacing `snipe-it` with the container name: ``` docker exec snipe-it php -v ``` To see the full Alpine package versions: ``` docker exec snipe-it sh -c 'apk info -v | grep -E "^php[0-9]+-"' ``` After updating, **recreate the container** so its web-serving PHP processes use the updated binaries. #### What's Changed - Fixed [#&#8203;19870](https://github.com/grokability/snipe-it/issues/19870) and [#&#8203;19869](https://github.com/grokability/snipe-it/issues/19869) - small maintenance improvements by [@&#8203;snipe](https://github.com/snipe) in [#&#8203;19871](https://github.com/grokability/snipe-it/pull/19871) - Fixed [#&#8203;19595](https://github.com/grokability/snipe-it/issues/19595) - numbers in custom fields exporting inconsistently by [@&#8203;snipe](https://github.com/snipe) in [#&#8203;19872](https://github.com/grokability/snipe-it/pull/19872) - 🎥 Fixed [#&#8203;19778](https://github.com/grokability/snipe-it/issues/19778) - allow bulk scanner auditing by 2D bardcode by [@&#8203;snipe](https://github.com/snipe) in [#&#8203;19874](https://github.com/grokability/snipe-it/pull/19874) - Fixed [#&#8203;19626](https://github.com/grokability/snipe-it/issues/19626) - respect lastname firstname order more thoroughly by [@&#8203;snipe](https://github.com/snipe) in [#&#8203;19875](https://github.com/grokability/snipe-it/pull/19875) - Fixed potentially missing rows in license seats api endpoint by [@&#8203;marcusmoore](https://github.com/marcusmoore) in [#&#8203;19883](https://github.com/grokability/snipe-it/pull/19883) - Bulk Checkout: Fixes redirect option not persisting by [@&#8203;Godmartinz](https://github.com/Godmartinz) in [#&#8203;19881](https://github.com/grokability/snipe-it/pull/19881) - Fixed [#&#8203;19887](https://github.com/grokability/snipe-it/issues/19887) - use alpine 3.24 to get newer php by [@&#8203;markof88](https://github.com/markof88) in [#&#8203;19889](https://github.com/grokability/snipe-it/pull/19889) - Fixed [#&#8203;18508](https://github.com/grokability/snipe-it/issues/18508) Custom Fields: Allow cloning custom fieldsets by [@&#8203;marcusmoore](https://github.com/marcusmoore) in [#&#8203;19793](https://github.com/grokability/snipe-it/pull/19793) **Full Changelog**: <https://github.com/grokability/snipe-it/compare/v8.8.1...v8.8.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTEuNCIsInVwZGF0ZWRJblZlciI6IjQ0LjExMS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
renovate-bot force-pushed renovate/snipe-snipe-it-8.x from 5488ecbcf5 to 3f5bb6a4b2 2026-10-22 04:01:34 +02:00 Compare
renovate-bot changed title from Update snipe/snipe-it Docker tag to v8.8.2 to Update snipe/snipe-it Docker tag to v8.8.3 2026-10-22 04:01:39 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
Slam6488
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Slam6488/docker-compose!11
No description provided.