v4.1.68

Merge pull request #329 from balena-io/renovate/balena-open-balena-api-26.x
Update balena/open-balena-api Docker tag to v26.3.0
2025-06-24 18:25:16 +00:00 · 2024-08-19 20:49:04 +00:00 · 2024-08-19 20:48:21 +00:00 · 2024-08-19 19:54:33 +00:00 · 2024-08-19 19:11:55 +00:00 · 2024-08-19 19:11:12 +00:00
11 changed files with 864 additions and 22 deletions
--- a/.github/workflows/flowzone.yml
+++ b/.github/workflows/flowzone.yml
@ -25,15 +25,6 @@ jobs:
    with:
      jobs_timeout_minutes: 60
      cloudflare_website: open-balena
-      custom_runs_on: |
-        [
-          [
-            "self-hosted",
-            "Linux",
-            "X64"
-          ]
-        ]
-
      balena_slugs: |
        balena/open-balena

--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@ -73,13 +73,13 @@ jobs:
      name: ${{ matrix.target }}

    steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+    - uses: actions/checkout@9a9194f87191a7e9055e3e9b95b8cfb13023bb08

    # https://github.com/unfor19/install-aws-cli-action
    - name: Setup awscli
      uses: unfor19/install-aws-cli-action@e8b481e524a99f37fbd39fdc1dcb3341ab091367 # v1

-    - uses: aws-actions/configure-aws-credentials@febab93d024649c3429d6b4609fe0a64bd9803f3
+    - uses: aws-actions/configure-aws-credentials@55f725fcb586ca16a5ed5b0d75d464defbfa831b
      with:
        aws-region: ${{ vars.AWS_REGION || 'us-east-1' }}
        role-session-name: github-${{ github.job }}-${{ github.run_id }}-${{ github.run_attempt }}
@ -798,6 +798,14 @@ jobs:
                && rm -f "\${tmphosts}" \
                && getent hosts api.${{ matrix.subdomain }}.${{ matrix.dns_tld }} | grep 127.0.1.1

+              sshd -T
+              service ssh restart
+
+          # https://forums.docker.com/t/docker-compose-through-ssh-failing-and-referring-to-docker-example-com/115165/18
+          - path: /etc/ssh/sshd_config.d/00-cloud-init
+            content: |
+              MaxStartups 100:0:100
+
        # cloud-init runs as root
        # (e.g.) https://cloudinit.readthedocs.io/en/latest/reference/merging.html#example-cloud-config
        runcmd:
@ -839,6 +847,10 @@ jobs:
        aws ec2 wait instance-running --instance-ids "${instance_id}"
        with_backoff aws ec2 wait instance-status-ok --instance-ids "${instance_id}"

+        private_ip="$(aws ec2 describe-instances --instance-id "${instance_id}" \
+          | jq -r .Reservations[].Instances[].PrivateIpAddress)"
+        echo "private_ip=${private_ip}" >>"${GITHUB_OUTPUT}"
+
      env:
        ATTEMPTS: 2
        AWS_DEFAULT_REGION: ${{ vars.AWS_REGION || 'us-east-1' }}
@ -876,10 +888,20 @@ jobs:
        trap 'log_output' EXIT

        # https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started-enable-ssh-connections.html
+        mkdir -p "${HOME}/.ssh/controlmasters"
        cat << EOF > "${HOME}/.ssh/config"
+        host *
+            StrictHostKeyChecking no
+            UserKnownHostsFile /dev/null
+
        host i-*
            StrictHostKeyChecking no
            UserKnownHostsFile /dev/null
+            TCPKeepAlive yes
+            ServerAliveInterval 5
+            ControlPath "${HOME}/.ssh/controlmasters/%r@%h:%p"
+            ControlMaster auto
+            ControlPersist 5m
            ProxyCommand sh -c "aws ssm start-session --target %h --document-name AWS-StartSSHSession --parameters 'portNumber=%p'"
        EOF

@ -998,6 +1020,16 @@ jobs:
        with_backoff balena keys | grep ${{ steps.provision-ssh-key.outputs.key_id }} \
          | awk '{print $1}' | xargs --no-run-if-empty balena key rm --yes

+    - name: remove AWS/EC2 key-pair
+      if: always() && matrix.target == 'compose-private-pki'
+      continue-on-error: true
+      run: |
+        set -ue
+
+        [[ '${{ vars.VERBOSE }}' =~ on|On|Yes|yes|true|True ]] && set -x
+
+        aws ec2 delete-key-pair --key-name ${{ steps.generate-key-pair.outputs.key_name }}
+
    - name: delete balenaOS test device
      if: always() && matrix.target == 'balena-public-pki'
      continue-on-error: true
--- a/.versionbot/CHANGELOG.yml
+++ b/.versionbot/CHANGELOG.yml
@ -1,3 +1,589 @@
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.3.0
+      hash: 423418f11615760898dd7e9007e3c75f41b6a319
+      body: |
+        Update balena/open-balena-api from 26.2.2 to 26.3.0
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.68
+  title: ""
+  date: 2024-08-19T20:49:01.002Z
+- commits:
+    - subject: Update qemux/qemu-docker Docker tag to v5.18
+      hash: 7210ea0ad80c8fe7ee470a7f85bd7436f91f0411
+      body: |
+        Update qemux/qemu-docker from 5.16 to 5.18
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.67
+  title: ""
+  date: 2024-08-19T19:11:51.804Z
+- commits:
+    - subject: SSH reliability settings
+      hash: 539adade50241c6f9d20bcf08cb028c3026d8f37
+      body: >
+        * enable SSHD multiplexing, KeepAlive and relax throttling
+
+
+        Thank you for the hint:
+
+        https://forums.docker.com/t/docker-compose-through-ssh-failing-and-referring-to-docker-example-com/115165/18?u=ab77
+
+               MaxStartups
+                       Specifies the maximum number of concurrent
+                       unauthenticated connections to the SSH daemon.
+                       Additional connections will be dropped until
+                       authentication succeeds or the LoginGraceTime expires for
+                       a connection.  The default is 10:30:100.
+
+                       Alternatively, random early drop can be enabled by
+                       specifying the three colon separated values
+                       start:rate:full (e.g. "10:30:60").  sshd(8) will refuse
+                       connection attempts with a probability of rate/100 (30%)
+                       if there are currently start (10) unauthenticated
+                       connections.  The probability increases linearly and all
+                       connection attempts are refused if the number of
+                       unauthenticated connections reaches full (60).
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+    - subject: SSH reliability settings
+      hash: 758c52b7bab371d6f5d8abfe05927b7b18f90be0
+      body: >
+        SSH connections keep breaking between Hetzner EU DCs and AWS us-east-1
+        for no particular reason. Suspect Hetzner local network saturation
+        and/or a function of trans-atlantic routing/peering/time of day. Adding
+        connection multiplexing and keepalive to test this theory.
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.66
+  title: ""
+  date: 2024-08-19T18:22:02.557Z
+- commits:
+    - subject: "patch: Add Table of Contents"
+      hash: b414f262c0adae9014d1589be64276785efecbbd
+      body: ""
+      footer:
+        Signed-off-by: Vipul Gupta (@vipulgupta2048) <vipulgupta2048@gmail.com>
+        signed-off-by: Vipul Gupta (@vipulgupta2048) <vipulgupta2048@gmail.com>
+      author: Vipul Gupta (@vipulgupta2048)
+      nested: []
+  version: 4.1.65
+  title: ""
+  date: 2024-08-15T21:13:54.244Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 55f725f
+      hash: 2f141a4e4e5f7e782bbecc12dab9ecd30f9fda0a
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.64
+  title: ""
+  date: 2024-08-13T16:51:55.472Z
+- commits:
+    - subject: Cleanup AWS/EC2 key pairs
+      hash: b4efd6345448975b1871645b83546ab6bf2284d8
+      body: ""
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.63
+  title: ""
+  date: 2024-08-12T17:47:56.854Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.41.1
+      hash: b8717d5fbec46cf41cc748c98d83f850a9f1ad3d
+      body: |
+        Update balena/open-balena-registry from 2.39.65 to 2.41.1
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.62
+  title: ""
+  date: 2024-08-12T17:25:37.250Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.2.2
+      hash: bafc9c02ab31711beb8f2220abb9b1ea421ebb34
+      body: |
+        Update balena/open-balena-api from 26.1.6 to 26.2.2
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.61
+  title: ""
+  date: 2024-08-12T16:14:26.855Z
+- commits:
+    - subject: Update redis Docker tag to v7.4
+      hash: 24925320f84095ba6ade3f857718abb6a8b48205
+      body: |
+        Update redis from 7.2 to 7.4
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.60
+  title: ""
+  date: 2024-08-10T06:16:57.031Z
+- commits:
+    - subject: Update balena/open-balena-s3 Docker tag to v2.28.52
+      hash: 6b4682ece6e4c8b0c7519d5529421289512308e7
+      body: |
+        Update balena/open-balena-s3 from 2.28.50 to 2.28.52
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.59
+  title: ""
+  date: 2024-08-10T05:13:58.126Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.34
+      hash: b3d0f53bdbe02df906cc7e1bdb4c207757f35d41
+      body: |
+        Update balena-io/balena-cli from 18.2.33 to 18.2.34
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.58
+  title: ""
+  date: 2024-08-10T04:17:16.064Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.1.6
+      hash: d3694bbd6e14403dc6581b47c4879e1b1c29a1c7
+      body: |
+        Update balena/open-balena-api from 26.1.5 to 26.1.6
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.57
+  title: ""
+  date: 2024-08-10T03:18:52.046Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 39228ca
+      hash: bb47956aa66a79fd31dc96810dee2ce2431a824c
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.56
+  title: ""
+  date: 2024-08-10T02:34:34.556Z
+- commits:
+    - subject: Update balena/open-balena-vpn Docker tag to v11.30.31
+      hash: 2ba2d6aadd2c7e36c1fb849d4476423c004bf7f7
+      body: |
+        Update balena/open-balena-vpn from 11.30.27 to 11.30.31
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.55
+  title: ""
+  date: 2024-08-06T14:52:02.295Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.1.5
+      hash: 6742366dbb25f966b9aa86d0fe1430cf522df443
+      body: |
+        Update balena/open-balena-api from 26.1.3 to 26.1.5
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.54
+  title: ""
+  date: 2024-08-05T22:16:49.357Z
+- commits:
+    - subject: Update actions/checkout digest to 9a9194f
+      hash: b122b301fdb8cf132bddd54ae8b063b8c8436d2e
+      body: |
+        Update actions/checkout
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.53
+  title: ""
+  date: 2024-08-05T21:02:28.674Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.39.65
+      hash: a068dafe1cd6c694885435dc2af90309f3ec0bac
+      body: |
+        Update balena/open-balena-registry from 2.39.63 to 2.39.65
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.52
+  title: ""
+  date: 2024-08-01T19:27:14.377Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26.1.3
+      hash: eceb7deb864ef77b21902f9be1571a37110c292b
+      body: |
+        Update balena/open-balena-api from 26.1.2 to 26.1.3
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.51
+  title: ""
+  date: 2024-07-23T20:23:52.809Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 12e3392
+      hash: 7dcbd0ea01f5bd554494fd8d36aaedc21f84b4dc
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.50
+  title: ""
+  date: 2024-07-23T04:14:31.183Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v26
+      hash: aec392953ff40c20e47fae000769d4d8ff8fb167
+      body: |
+        Update balena/open-balena-api from 25.2.8 to 26.1.2
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.49
+  title: ""
+  date: 2024-07-22T15:21:11.990Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.39.63
+      hash: 9e7dca1e77afc8ad19db3c6675bc031199f8c032
+      body: |
+        Update balena/open-balena-registry from 2.39.62 to 2.39.63
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.48
+  title: ""
+  date: 2024-07-19T18:33:11.552Z
+- commits:
+    - subject: Update balena/open-balena-s3 Docker tag to v2.28.50
+      hash: d796f9c7a91285e38237a55443c677dad498475d
+      body: |
+        Update balena/open-balena-s3 from 2.28.49 to 2.28.50
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.47
+  title: ""
+  date: 2024-07-19T17:33:39.487Z
+- commits:
+    - subject: Update balena/open-balena-vpn Docker tag to v11.30.27
+      hash: e2dd1d1e7c0a21c05352bc1335ae2e0fb28cc61a
+      body: |
+        Update balena/open-balena-vpn from 11.30.26 to 11.30.27
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.46
+  title: ""
+  date: 2024-07-17T11:32:13.393Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 6116f2b
+      hash: 777aecb83ca294be1ff0eb03fb1072d8cb4b4632
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.45
+  title: ""
+  date: 2024-07-17T10:18:53.984Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.33
+      hash: 8e416c235bb659e55e10877efd4cf9c3fc076525
+      body: |
+        Update balena-io/balena-cli from 18.2.32 to 18.2.33
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.44
+  title: ""
+  date: 2024-07-17T09:22:09.080Z
+- commits:
+    - subject: Remove custom_runs_on instruction from flowzone.yml
+      hash: 33cce523a0a6091d0dce18c25c21d032e555e193
+      body: |
+        This project has no custom actions to run, and was using
+        the legacy input format for custom jobs that is being deprecated.
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Kyle Harding
+      nested: []
+  version: 4.1.43
+  title: ""
+  date: 2024-07-16T18:34:53.997Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.32
+      hash: c20c3c9b4799daddfb8b0d40c47b631ef5764ccd
+      body: |
+        Update balena-io/balena-cli from 18.2.31 to 18.2.32
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.42
+  title: ""
+  date: 2024-07-16T16:19:12.990Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.2.8
+      hash: e308b28fe82974ec25ea35971d3f630cad21104e
+      body: |
+        Update balena/open-balena-api from 25.2.7 to 25.2.8
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.41
+  title: ""
+  date: 2024-07-16T15:43:44.456Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.31
+      hash: f353fbbbc23484d1eb325efe203e734d5f6cef69
+      body: |
+        Update balena-io/balena-cli from 18.2.30 to 18.2.31
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.40
+  title: ""
+  date: 2024-07-15T22:17:15.441Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.30
+      hash: 11f7a27d3e0a5492da0b5949b06016f7e9853a67
+      body: |
+        Update balena-io/balena-cli from 18.2.29 to 18.2.30
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.39
+  title: ""
+  date: 2024-07-15T20:02:03.290Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.2.7
+      hash: 62c653d7feec0984095a6287acf63e6ae0d6972f
+      body: |
+        Update balena/open-balena-api from 25.2.5 to 25.2.7
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.38
+  title: ""
+  date: 2024-07-15T16:53:48.116Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.29
+      hash: 373af1b08bc88810e64b28e5835949985f02c687
+      body: |
+        Update balena-io/balena-cli from 18.2.28 to 18.2.29
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.37
+  title: ""
+  date: 2024-07-12T16:22:10.988Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.28
+      hash: e3f9ce631f9a59f7e58f45458ba8d42eae39cbc5
+      body: |
+        Update balena-io/balena-cli from 18.2.25 to 18.2.28
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.36
+  title: ""
+  date: 2024-07-12T14:19:27.958Z
+- commits:
+    - subject: Update balena/open-balena-vpn Docker tag to v11.30.26
+      hash: d00a7c95df84dfac2589067cee8bdcc8dd0cab8c
+      body: |
+        Update balena/open-balena-vpn from 11.30.23 to 11.30.26
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.35
+  title: ""
+  date: 2024-07-12T00:22:23.539Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.39.62
+      hash: f32815c05de34bd089cf43c30384fcf5602a97a9
+      body: |
+        Update balena/open-balena-registry from 2.39.61 to 2.39.62
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.34
+  title: ""
+  date: 2024-07-11T22:32:18.638Z
+- commits:
+    - subject: Update aws-actions/configure-aws-credentials digest to 96589f5
+      hash: 0d88815b2099bf7cb894d07c23ae0a31c72c3803
+      body: |
+        Update aws-actions/configure-aws-credentials
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.33
+  title: ""
+  date: 2024-07-11T20:56:36.530Z
+- commits:
+    - subject: Update balena/open-balena-s3 Docker tag to v2.28.49
+      hash: b8e98e52463c4ab455b1b2fcb7b3e7a9047c6553
+      body: |
+        Update balena/open-balena-s3 from 2.28.48 to 2.28.49
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.32
+  title: ""
+  date: 2024-07-11T17:17:34.659Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.2.5
+      hash: 1c28d800cfb9005b29b6ee70373309b243ac4a5d
+      body: |
+        Update balena/open-balena-api from 25.2.0 to 25.2.5
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.31
+  title: ""
+  date: 2024-07-11T16:22:22.102Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.25
+      hash: be6af919b1ed89ec4cb57a9b506d32383948e500
+      body: |
+        Update balena-io/balena-cli from 18.2.22 to 18.2.25
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.30
+  title: ""
+  date: 2024-07-11T15:50:44.267Z
+- commits:
+    - subject: Update dependency balena-io/balena-cli to v18.2.22
+      hash: 7879d34af93f294cef526628c4cc0ed3ce887107
+      body: |
+        Update balena-io/balena-cli from 18.2.20 to 18.2.22
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.29
+  title: ""
+  date: 2024-07-10T18:20:25.967Z
+- commits:
+    - subject: Update balena/open-balena-registry Docker tag to v2.39.61
+      hash: 688f0a5e0235d9255cd9d041795ca9fe936ec2dc
+      body: |
+        Update balena/open-balena-registry from 2.39.60 to 2.39.61
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.28
+  title: ""
+  date: 2024-07-09T21:13:43.409Z
+- commits:
+    - subject: Update balena/open-balena-api Docker tag to v25.2.0
+      hash: 06bd4b6561a90a5d09891d872223d388f593108e
+      body: |
+        Update balena/open-balena-api from 25.1.29 to 25.2.0
+      footer:
+        Change-type: patch
+        change-type: patch
+      author: Self-hosted Renovate Bot
+      nested: []
+  version: 4.1.27
+  title: ""
+  date: 2024-07-09T20:23:31.619Z
+- commits:
+    - subject: Relax regex to match all Let's Encrypt CNs
+      hash: 44b6e5a4c12f754aa2ed1b9a5ec9d3d7a01b5778
+      body: ""
+      footer:
+        change-type: patch
+      author: Anton Belodedenko
+      nested: []
+  version: 4.1.26
+  title: ""
+  date: 2024-07-09T19:15:06.632Z
 - commits:
    - subject: Update balena/open-balena-s3 Docker tag to v2.28.48
      hash: 7924ee920abca8caa0a499cd9a3af7efc6f06342
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -4,6 +4,222 @@ All notable changes to this project will be documented in this file
 automatically by Versionist. DO NOT EDIT THIS FILE MANUALLY!
 This project adheres to [Semantic Versioning](http://semver.org/).

+# v4.1.68
+## (2024-08-19)
+
+* Update balena/open-balena-api Docker tag to v26.3.0 [Self-hosted Renovate Bot]
+
+# v4.1.67
+## (2024-08-19)
+
+* Update qemux/qemu-docker Docker tag to v5.18 [Self-hosted Renovate Bot]
+
+# v4.1.66
+## (2024-08-19)
+
+* SSH reliability settings [Anton Belodedenko]
+* SSH reliability settings [Anton Belodedenko]
+
+# v4.1.65
+## (2024-08-15)
+
+* patch: Add Table of Contents [Vipul Gupta (@vipulgupta2048)]
+
+# v4.1.64
+## (2024-08-13)
+
+* Update aws-actions/configure-aws-credentials digest to 55f725f [Self-hosted Renovate Bot]
+
+# v4.1.63
+## (2024-08-12)
+
+* Cleanup AWS/EC2 key pairs [Anton Belodedenko]
+
+# v4.1.62
+## (2024-08-12)
+
+* Update balena/open-balena-registry Docker tag to v2.41.1 [Self-hosted Renovate Bot]
+
+# v4.1.61
+## (2024-08-12)
+
+* Update balena/open-balena-api Docker tag to v26.2.2 [Self-hosted Renovate Bot]
+
+# v4.1.60
+## (2024-08-10)
+
+* Update redis Docker tag to v7.4 [Self-hosted Renovate Bot]
+
+# v4.1.59
+## (2024-08-10)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.52 [Self-hosted Renovate Bot]
+
+# v4.1.58
+## (2024-08-10)
+
+* Update dependency balena-io/balena-cli to v18.2.34 [Self-hosted Renovate Bot]
+
+# v4.1.57
+## (2024-08-10)
+
+* Update balena/open-balena-api Docker tag to v26.1.6 [Self-hosted Renovate Bot]
+
+# v4.1.56
+## (2024-08-10)
+
+* Update aws-actions/configure-aws-credentials digest to 39228ca [Self-hosted Renovate Bot]
+
+# v4.1.55
+## (2024-08-06)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.31 [Self-hosted Renovate Bot]
+
+# v4.1.54
+## (2024-08-05)
+
+* Update balena/open-balena-api Docker tag to v26.1.5 [Self-hosted Renovate Bot]
+
+# v4.1.53
+## (2024-08-05)
+
+* Update actions/checkout digest to 9a9194f [Self-hosted Renovate Bot]
+
+# v4.1.52
+## (2024-08-01)
+
+* Update balena/open-balena-registry Docker tag to v2.39.65 [Self-hosted Renovate Bot]
+
+# v4.1.51
+## (2024-07-23)
+
+* Update balena/open-balena-api Docker tag to v26.1.3 [Self-hosted Renovate Bot]
+
+# v4.1.50
+## (2024-07-23)
+
+* Update aws-actions/configure-aws-credentials digest to 12e3392 [Self-hosted Renovate Bot]
+
+# v4.1.49
+## (2024-07-22)
+
+* Update balena/open-balena-api Docker tag to v26 [Self-hosted Renovate Bot]
+
+# v4.1.48
+## (2024-07-19)
+
+* Update balena/open-balena-registry Docker tag to v2.39.63 [Self-hosted Renovate Bot]
+
+# v4.1.47
+## (2024-07-19)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.50 [Self-hosted Renovate Bot]
+
+# v4.1.46
+## (2024-07-17)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.27 [Self-hosted Renovate Bot]
+
+# v4.1.45
+## (2024-07-17)
+
+* Update aws-actions/configure-aws-credentials digest to 6116f2b [Self-hosted Renovate Bot]
+
+# v4.1.44
+## (2024-07-17)
+
+* Update dependency balena-io/balena-cli to v18.2.33 [Self-hosted Renovate Bot]
+
+# v4.1.43
+## (2024-07-16)
+
+* Remove custom_runs_on instruction from flowzone.yml [Kyle Harding]
+
+# v4.1.42
+## (2024-07-16)
+
+* Update dependency balena-io/balena-cli to v18.2.32 [Self-hosted Renovate Bot]
+
+# v4.1.41
+## (2024-07-16)
+
+* Update balena/open-balena-api Docker tag to v25.2.8 [Self-hosted Renovate Bot]
+
+# v4.1.40
+## (2024-07-15)
+
+* Update dependency balena-io/balena-cli to v18.2.31 [Self-hosted Renovate Bot]
+
+# v4.1.39
+## (2024-07-15)
+
+* Update dependency balena-io/balena-cli to v18.2.30 [Self-hosted Renovate Bot]
+
+# v4.1.38
+## (2024-07-15)
+
+* Update balena/open-balena-api Docker tag to v25.2.7 [Self-hosted Renovate Bot]
+
+# v4.1.37
+## (2024-07-12)
+
+* Update dependency balena-io/balena-cli to v18.2.29 [Self-hosted Renovate Bot]
+
+# v4.1.36
+## (2024-07-12)
+
+* Update dependency balena-io/balena-cli to v18.2.28 [Self-hosted Renovate Bot]
+
+# v4.1.35
+## (2024-07-12)
+
+* Update balena/open-balena-vpn Docker tag to v11.30.26 [Self-hosted Renovate Bot]
+
+# v4.1.34
+## (2024-07-11)
+
+* Update balena/open-balena-registry Docker tag to v2.39.62 [Self-hosted Renovate Bot]
+
+# v4.1.33
+## (2024-07-11)
+
+* Update aws-actions/configure-aws-credentials digest to 96589f5 [Self-hosted Renovate Bot]
+
+# v4.1.32
+## (2024-07-11)
+
+* Update balena/open-balena-s3 Docker tag to v2.28.49 [Self-hosted Renovate Bot]
+
+# v4.1.31
+## (2024-07-11)
+
+* Update balena/open-balena-api Docker tag to v25.2.5 [Self-hosted Renovate Bot]
+
+# v4.1.30
+## (2024-07-11)
+
+* Update dependency balena-io/balena-cli to v18.2.25 [Self-hosted Renovate Bot]
+
+# v4.1.29
+## (2024-07-10)
+
+* Update dependency balena-io/balena-cli to v18.2.22 [Self-hosted Renovate Bot]
+
+# v4.1.28
+## (2024-07-09)
+
+* Update balena/open-balena-registry Docker tag to v2.39.61 [Self-hosted Renovate Bot]
+
+# v4.1.27
+## (2024-07-09)
+
+* Update balena/open-balena-api Docker tag to v25.2.0 [Self-hosted Renovate Bot]
+
+# v4.1.26
+## (2024-07-09)
+
+* Relax regex to match all Let's Encrypt CNs [Anton Belodedenko]
+
 # v4.1.25
 ## (2024-07-09)

--- a/2
+++ b/2
@ -145,7 +145,7 @@ auto-pki: config # Start all services using LetsEncrypt and ACME
 	@docker compose up -d
 	@$(MAKE) waitlog SERVICE=cert-manager LOG_STRING="/certs/export/chain.pem Certificate will not expire in [0-9] days"
 	@$(MAKE) waitlog SERVICE=cert-manager LOG_STRING="subject=CN = ${DNS_TLD}"
-	@$(MAKE) waitlog SERVICE=cert-manager LOG_STRING="issuer=C = US, O = Let's Encrypt, CN = R3"
+	@$(MAKE) waitlog SERVICE=cert-manager LOG_STRING="issuer=C = US, O = Let's Encrypt, CN = .*"
 	@$(MAKE) wait SERVICE=haproxy
 	@$(MAKE) showenv
 	@$(MAKE) showpass
--- a/README.md
+++ b/README.md
@ -16,6 +16,23 @@ images to your devices.

 To learn more about openBalena, visit [balena.io/open][open-balena-website].

+- [Features](#features)
+- [Getting Started](#getting-started)
+- [Compatibility](#compatibility)
+- [Documentation](#documentation)
+- [Getting Help](#getting-help)
+- [Contributing](#contributing)
+- [Roadmap](#roadmap)
+- [Differences between openBalena and balenaCloud](#differences-between-openbalena-and-balenacloud)
+- [License](#license)
+- [FAQ](#faq)
+  - [How do you ensure continuity of openBalena? Are there security patches on openBalena?](#how-do-you-ensure-continuity-of-openbalena-are-there-security-patches-on-openbalena)
+  - [How do you ensure the "Join" command actually works between openBalena and](#how-do-you-ensure-the-join-command-actually-works-between-openbalena-and)
+  - [Is it "production ready"?](#is-it-production-ready)
+  - [Can a new device type be added to openBalena?](#can-a-new-device-type-be-added-to-openbalena)
+  - [Are there open-source UI dashboards from the community for openBalena?](#are-there-open-source-ui-dashboards-from-the-community-for-openbalena)
+
+

 ## Features

@ -159,7 +176,7 @@ While we actually have some rather large fleets using openBalena, we consider it
 perpetually in "beta". This means potentially introducing breaking changes between
 releases.

-### Can new device type be added to openBalena?
+### Can a new device type be added to openBalena?
 openBalena imports the following public [device-types] "out of the box". You can specify
 your own contracts repository by overriding `CONTRACTS_PUBLIC_REPO_NAME`,
 `CONTRACTS_PUBLIC_REPO_OWNER` and `IMAGE_STORAGE_BUCKET` environment variables on the API
--- a/2
+++ b/2
@ -1 +1 @@
-4.1.25
+4.1.68
--- a/balena.yml
+++ b/balena.yml
@ -23,4 +23,4 @@ data:
    - generic-amd64
    - genericx86-64-ext
    - intel-nuc
-version: 4.1.25
+version: 4.1.68
--- a/docker-compose.yml
+++ b/docker-compose.yml
@ -79,7 +79,7 @@ services:
      *with-default-privileges,
      *with-default-volumes,
    ]
-    image: balena/open-balena-api:v25.1.29
+    image: balena/open-balena-api:v26.3.0
    depends_on:
      - db
      - redis
@ -119,7 +119,7 @@ services:
      *with-default-healthcheck,
      *with-default-privileges,
    ]
-    image: balena/open-balena-registry:v2.39.60
+    image: balena/open-balena-registry:v2.41.1
    volumes:
      - certs-data:/certs
      - resin-data:/balena
@ -146,7 +146,7 @@ services:
      *with-network-privileges,
      *with-default-privileges,
    ]
-    image: balena/open-balena-vpn:v11.30.23
+    image: balena/open-balena-vpn:v11.30.31
    depends_on:
      - api
    environment:
@ -175,7 +175,7 @@ services:
      *with-default-healthcheck,
      *with-default-privileges,
    ]
-    image: balena/open-balena-s3:v2.28.48
+    image: balena/open-balena-s3:v2.28.52
    volumes:
      - s3-data:/export
      - certs-data:/certs
@ -189,7 +189,7 @@ services:
  redis:
    <<: *base-service
    # https://redis.io/blog/what-redis-license-change-means-for-our-managed-service-providers/
-    image: redis:7.2-alpine
+    image: redis:7.4-alpine
    volumes:
      - redis-data:/data
    healthcheck:
--- a/src/balena-tests/Dockerfile
+++ b/src/balena-tests/Dockerfile
@ -1,7 +1,7 @@
 FROM ubuntu:24.04

 # renovate: datasource=github-releases depName=balena-io/balena-cli
-ARG BALENA_CLI_VERSION=v18.2.20
+ARG BALENA_CLI_VERSION=v18.2.34

 RUN apt-get update && apt-get install -y --no-install-recommends \
 	bash \
--- a/src/test-device/Dockerfile
+++ b/src/test-device/Dockerfile
@ -1,6 +1,6 @@
 # https://hub.docker.com/r/qemux/qemu-docker
 # https://github.com/qemus/qemu-docker
-FROM qemux/qemu-docker:5.16
+FROM qemux/qemu-docker:5.18

 RUN apt-get update && apt-get install -y --no-install-recommends \
 	minicom \
 @ -1 +1 @@
 .1.25
 .1.68