feat(container): update ghcr.io/pocket-id/pocket-id ( v2.8.0 ➔ v2.11.0 )

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/pocket-id/pocket-id	minor	v2.8.0 → v2.11.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)

v2.11.0

Compare Source

Bug Fixes

• postgres migration 2025082 remove public schema references (#​1582 by @​MarcoScabbiolo)
• allow insecure callback URLs by default until next major release (d9ead47 by @​stonith404)
• sort signup tokens by creation date explicitly (77398a5 by @​stonith404)
• login code mobile ux (#​1584 by @​James18232)
• INTERNAL_APP_URL not reflected in UI URLs (316cf47 by @​stonith404)
• ignore tab URL hashes in navigation history (a3f27ec by @​stonith404)
• block link-local addresses in SSRF protection (9714296 by @​stonith404)

Documentation

• update README (ff5e565 by @​stonith404)

Features

• add support for CIDR and IP address lists in TRUST_PROXY (187cd8d by @​stonith404)

Other

• manage instance ID in the KV table (#​1579 by @​ItalyPaleAle)
• Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#​1578 by @​dependabot[bot])
• remove low demand issue closer (bb03660 by @​stonith404)

Full Changelog: pocket-id/pocket-id@v2.10.0...v2.11.0

v2.10.0

Compare Source

Bug Fixes

• login code null submission and login code length check (#​1512 by @​James18232)
• don't reject offline_accessscope (2ed7035 by @​stonith404)
• CSP error with response_mode=form_post (16b5c16 by @​stonith404)
• various bugs in observability / OTel (#​1564 by @​ItalyPaleAle)
• restore behavior that unknown scopes get ignored (34e9a6d by @​stonith404)
• re-check api permissions on access token refresh (e8cb0c8 by @​stonith404)
• merge requested scopes instead of replacing them (5e2cc6f by @​stonith404)
• device authorization resolve resource creating device_code (2f55b7c by @​stonith404)
• add missing burst to rate limit (f3b6ceb by @​stonith404)
• disable one time access token exchange for disabled users (c85a4e6 by @​stonith404)
• /authorize endpoint crashes when list of scopes is empty (#​1575 by @​ItalyPaleAle)
• mobile layout improvements (2910c51 by @​stonith404)

Documentation

• add link to API docs (968d072 by @​stonith404)
• fix wrong OpenAPI documentation (da3677f by @​stonith404)

Features

• upgrade shadcn components (80509c8 by @​stonith404)
• improve error handling on authorize page (8689ddd by @​stonith404)
• add ability to skip consent for client (d467855 by @​stonith404)
• prompt admin with PKCE client support hint (#​1499 by @​James18232)
• login code input boxes (#​1545 by @​James18232)
• drop TOFU support for callback URL (931a6c2 by @​stonith404)
• add OAuth APIs with scoped permissions (#​1542 by @​stonith404)
• add support for unencrypted OIDC request parameter (25dcad7 by @​stonith404)
• add description field to oidc clients (#​1547 by @​seanmckenzie428)
• add tab bar navigation for crowded pages (28a553f by @​stonith404)

Other

• close low-demand feature requests (35987b9 by @​stonith404)
• Bump the "all-dependencies" group with 2 updates across multiple ecosystems (#​1528 by @​dependabot[bot])
• fix locators after shadcn upgrade (dbbe2a4 by @​stonith404)
• use fosite for OAuth 2.0 logic (#​1520 by @​stonith404)
• wrap last two migrations into transaction (cf9a319 by @​stonith404)
• remove dead code (519cda0 by @​stonith404)
• update vulnerable dependencies (e538ea0 by @​stonith404)
• fix flaky test (7eaaea7 by @​stonith404)
• add AGENTS.md (d0243fe by @​stonith404)
• use goreleaser for binaries and static image builds (#​1478 by @​kmendell)
• add support for Docker Hub (99ab38d by @​stonith404)
• remove static next image tag (49305ed by @​stonith404)
• don't build unnecessary binaries for next image (4b957a0 by @​stonith404)
• change Depot project (cdc2374 by @​stonith404)
• don't tag next image with current version (cf54786 by @​stonith404)
• add exempt user to PR quality checks (254ae88 by @​stonith404)
• migrate API key functionality to single apikey module (9fce987 by @​stonith404)
• migrate Webauthn functionality to single webauthn module (58fcf7c by @​stonith404)
• migrate signup functionality to single usersignup module (ecad31c by @​stonith404)
• make API key renewal date picker navigation date-independent (#​1560 by @​ItalyPaleAle)
• integrate Francis actor framework for background jobs, cron scheduling, and rate limiting (#​1556 by @​ItalyPaleAle)
• Bump the "all-dependencies" group with 3 updates across multiple ecosystems (#​1563 by @​dependabot[bot])
• use go-kit for sending emails (#​1565 by @​ItalyPaleAle)
• update AAGUIDs (#​1567 by @​github-actions[bot])
• move Pocket ID specific logic from Fosite into Pocket ID repo (9a94aa0 by @​stonith404)
• update Fosite version (337fc6f by @​stonith404)
• pass transaction to resolveResource (7667377 by @​stonith404)
• remove redundant dtos (fa2d08c by @​stonith404)
• rename migrations (c72da58 by @​stonith404)
• remove duplicate fosite config properties (190914f by @​stonith404)
• fix migration version in database.json (a5f2192 by @​stonith404)
• fix wrong migration name (ce7d3a7 by @​stonith404)
• run formatter (59a6868 by @​stonith404)
• upgrade go version (f62d476 by @​stonith404)

Performance Improvements

• include permissions in api list response (8035a4c by @​stonith404)

Full Changelog: pocket-id/pocket-id@v2.9.0...v2.10.0

v2.9.0

Compare Source

Bug Fixes

• issues with loading new font (#​1496 by @​MelvinSnijders)
• PAR parameters not respected by authorize page (3d9d4de by @​stonith404)
• add responsive css for api/user/group/client page add buttons (#​1508 by @​James18232)
• load Gloock font from static path instead of inline (89b4abb by @​stonith404)
• update terminology from public key code exchange to proof key co… (#​1515 by @​maxwassiljew)
• callback URL validation not validated if prompt=none (8a75774 by @​stonith404)
• passkey card not rounded (84678c3 by @​stonith404)

Documentation

• add AI Usage Policy to CONTRIBUTING.md (fea933b by @​stonith404)
• add PR template (bf9f76b by @​stonith404)
• add "needs more upvotes" label as default (fc42f62 by @​stonith404)
• fix link to watchtower repo (#​1500 by @​wollew)

Features

• add support for Pushed Authorization Requests (RFC9126) (#​1404 by @​Zenithar)

Other

• fix linter issues (4f97cd4 by @​stonith404)
• update AAGUIDs (#​1511 by @​github-actions[bot])
• run svelte check and unit tests in breaking branches (83b45f6 by @​stonith404)
• run formatter (2726ddd by @​stonith404)
• bump vite from 8.0.13 to 8.0.16 (#​1521 by @​dependabot[bot])
• npm dependabot not run from root (c0d96a0 by @​stonith404)
• fix wrong assertion (effd2a1 by @​stonith404)
• Bump the "all-dependencies" group with 4 updates across multiple ecosystems (#​1523 by @​dependabot[bot])

Full Changelog: pocket-id/pocket-id@v2.8.0...v2.9.0

---

Configuration

📅 Schedule: (in timezone America/Detroit)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.