From 63056b313adff8c3a412a212202040d254cb7dc9 Mon Sep 17 00:00:00 2001 From: Jeffrey Smeets Date: Wed, 26 Aug 2026 16:59:06 +0200 Subject: [PATCH] pelican: move panel image to ghcr.io/pelican/panel and pin beta38 The ghcr.io/pelican-dev/panel package is no longer anonymously pullable (token endpoint returns DENIED for every tag, package page 404s). Upstream renamed the org to "pelican" in beta38 and compose.yml now points at ghcr.io/pelican/panel. Verified a real pull of v1.0.0-beta38 from the new location succeeds. Pinning the tag also replaces :latest, which combined with IfNotPresent meant the running version depended on whatever the node happened to have cached. beta36 was clean against all six published advisories, but four of them landed in the last five months, so a deliberate patch path matters here. beta37/38 carry no breaking changes or manual migration steps. beta37 fixes Passkeys origin validation, which is wanted before enrolling 2FA. --- applications/pelican/pelican/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/applications/pelican/pelican/deployment.yaml b/applications/pelican/pelican/deployment.yaml index ca71dbe..8ff01e0 100644 --- a/applications/pelican/pelican/deployment.yaml +++ b/applications/pelican/pelican/deployment.yaml @@ -19,7 +19,7 @@ spec: fsGroup: 82 containers: - name: pelican - image: ghcr.io/pelican-dev/panel:latest + image: ghcr.io/pelican/panel:v1.0.0-beta38 imagePullPolicy: IfNotPresent ports: - containerPort: 80