Update rommapp/romm to v5.4.1

iac-renovate commented

2026-10-22 23:43:27 +00:00

Member

This PR contains the following updates:

Package	Update	Change
rommapp/romm	patch	`5.4.0` → `5.4.1`

Release Notes

rommapp/romm (rommapp/romm)

`v5.4.1`

Compare Source

[!CAUTION]
This release includes mitigations for the recent eMudhra CA compromise as well as general dependency upgrades. While we don't believe RomM instances are vulnerable, we recommend upgrading as soon as possible.

What's Changed

docs(readme): move corporate sponsors above friends by @gantoine in #5219
chore(deps-dev): bump handlebars from 4.7.9 to 4.7.10 in /frontend by @dependabot[bot] in #5221
fix(deps): bump certifi to 2026.10.19 to distrust compromised eMudhra intermediates by @gantoine in #5283
chore(deps): bump uv to 0.13.4 by @gantoine in #5284
chore(trunk): Upgrade trunk by @github-actions[bot] in #5225
chore(deps): update github actions by @renovate[bot] in #5244
chore(deps): bump aiohttp from 3.14.3 to 3.14.4 by @dependabot[bot] in #5276
chore(deps-dev): bump vite from 8.3.1 to 8.3.4 in /frontend by @dependabot[bot] in #5285
chore(deps): bump follow-redirects from 1.16.0 to 1.16.1 in /frontend by @dependabot[bot] in #5286
docs: list the ROM patcher env vars in env.template by @pcbeingused333 in #5265
chore(deps): update dependency pillow to v13 [security] by @renovate[bot] in #5288
chore(deps): update dependency storybook to v10.6.2 [security] by @renovate[bot] in #5291
chore(deps): bump Node to 24.22.1 for the October 2026 security release by @gantoine in #5295
fix(docker): upgrade the image's pip to 26.2.2 by @gantoine in #5298
chore(deps): update github/codeql-action action to v4.39.0 by @renovate[bot] in #5299

New Contributors

@pcbeingused333 made their first contribution in #5265

Full Changelog: https://github.com/rommapp/romm/compare/5.4.0...5.4.1

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [rommapp/romm](https://github.com/rommapp/romm) | patch | `5.4.0` → `5.4.1` | --- ### Release Notes <details> <summary>rommapp/romm (rommapp/romm)</summary> ### [`v5.4.1`](https://github.com/rommapp/romm/releases/tag/5.4.1) [Compare Source](https://github.com/rommapp/romm/compare/5.4.0-beta.1...5.4.1) > \[!CAUTION] > This release includes mitigations for the recent [eMudhra CA compromise](https://emudhra.we-have-a-problem.com/) as well as general dependency upgrades. While we don't believe RomM instances are vulnerable, we recommend upgrading as soon as possible. #### What's Changed - docs(readme): move corporate sponsors above friends by [@gantoine](https://github.com/gantoine) in [#5219](https://github.com/rommapp/romm/pull/5219) - chore(deps-dev): bump handlebars from 4.7.9 to 4.7.10 in /frontend by [@dependabot](https://github.com/dependabot)\[bot] in [#5221](https://github.com/rommapp/romm/pull/5221) - fix(deps): bump certifi to 2026.10.19 to distrust compromised eMudhra intermediates by [@gantoine](https://github.com/gantoine) in [#5283](https://github.com/rommapp/romm/pull/5283) - chore(deps): bump uv to 0.13.4 by [@gantoine](https://github.com/gantoine) in [#5284](https://github.com/rommapp/romm/pull/5284) - chore(trunk): Upgrade trunk by [@github-actions](https://github.com/github-actions)\[bot] in [#5225](https://github.com/rommapp/romm/pull/5225) - chore(deps): update github actions by [@renovate](https://github.com/renovate)\[bot] in [#5244](https://github.com/rommapp/romm/pull/5244) - chore(deps): bump aiohttp from 3.14.3 to 3.14.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#5276](https://github.com/rommapp/romm/pull/5276) - chore(deps-dev): bump vite from 8.3.1 to 8.3.4 in /frontend by [@dependabot](https://github.com/dependabot)\[bot] in [#5285](https://github.com/rommapp/romm/pull/5285) - chore(deps): bump follow-redirects from 1.16.0 to 1.16.1 in /frontend by [@dependabot](https://github.com/dependabot)\[bot] in [#5286](https://github.com/rommapp/romm/pull/5286) - docs: list the ROM patcher env vars in env.template by [@pcbeingused333](https://github.com/pcbeingused333) in [#5265](https://github.com/rommapp/romm/pull/5265) - chore(deps): update dependency pillow to v13 \[security] by [@renovate](https://github.com/renovate)\[bot] in [#5288](https://github.com/rommapp/romm/pull/5288) - chore(deps): update dependency storybook to v10.6.2 \[security] by [@renovate](https://github.com/renovate)\[bot] in [#5291](https://github.com/rommapp/romm/pull/5291) - chore(deps): bump Node to 24.22.1 for the October 2026 security release by [@gantoine](https://github.com/gantoine) in [#5295](https://github.com/rommapp/romm/pull/5295) - fix(docker): upgrade the image's pip to 26.2.2 by [@gantoine](https://github.com/gantoine) in [#5298](https://github.com/rommapp/romm/pull/5298) - chore(deps): update github/codeql-action action to v4.39.0 by [@renovate](https://github.com/renovate)\[bot] in [#5299](https://github.com/rommapp/romm/pull/5299) #### New Contributors - [@pcbeingused333](https://github.com/pcbeingused333) made their first contribution in [#5265](https://github.com/rommapp/romm/pull/5265) **Full Changelog**: <https://github.com/rommapp/romm/compare/5.4.0...5.4.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

iac-renovate added 1 commit

2026-10-22 23:43:28 +00:00

Update rommapp/romm to v5.4.1

/ lint (push) Failing after 2m24s

Details

/ image (push) Has been skipped

Details

/ publish (push) Has been skipped

Details

/ lint (pull_request) Successful in 2m13s

Details

6801091e65

/ lint (push) Failing after 2m24s

Details

/ image (push) Has been skipped

Details

/ publish (push) Has been skipped

Details

/ lint (pull_request) Successful in 2m13s

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin "renovate/rommapp-romm-5.x:renovate/rommapp-romm-5.x"

git switch "renovate/rommapp-romm-5.x"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "main"

git merge --no-ff "renovate/rommapp-romm-5.x"

git switch "renovate/rommapp-romm-5.x"

git rebase "main"

git switch "main"

git merge --ff-only "renovate/rommapp-romm-5.x"

git switch "renovate/rommapp-romm-5.x"

git rebase "main"

git switch "main"

git merge --no-ff "renovate/rommapp-romm-5.x"

git switch "main"

git merge --squash "renovate/rommapp-romm-5.x"

git switch "main"

git merge --ff-only "renovate/rommapp-romm-5.x"

git switch "main"

git merge "renovate/rommapp-romm-5.x"

git push origin "main"

Rows
Columns

Update rommapp/romm to v5.4.1 #1

Release Notes

v5.4.1

What's Changed

New Contributors

Configuration

Checkout

Merge

`v5.4.1`