Pixelfed upgrade failure

What app is this about, and its version: PixelFed 0.12.6~ynh2
What YunoHost version are you running: 12.1.39 (stable)
What type of hardware are you using: Virtual machine

Describe your issue

Attempting to upgrade PixeFed from 0.12.6~ynh2 to 0.12.6~ynh4 fails.

I’m not a Linux guru by any means (hence why I use YunoHost instead of installing from source).

The problem appears to be related to this:

2026-02-20 07:01:58,903: DEBUG -     - Root composer.json requires laravel/passport ^12.0 -> satisfiable by laravel/passport[v12.0.0, ..., v12.4.2].
2026-02-20 07:01:58,903: DEBUG -     - laravel/passport[v12.0.0, ..., v12.4.2] require firebase/php-jwt ^6.4 -> found firebase/php-jwt[v6.4.0, ..., v6.11.1] but these were not loaded, because they are affected by security advisories ("PKSA-y2cr-5h3j-g3ys"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add them to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.

Share relevant logs or error messages

https://paste.yunohost.org/raw/sesokesopo

Tried again today. Same issue.

There is a security issue (with a low risk) with a component, so you’ll have to wait for the update to be made.

But I’ve got a question for you : why do you install Pixelfed on a virtual machine ?

Why not? It’s my personal, self-hosted instance, which piggybacks off my main workstation.

Yes why not, but my question was more about using a heavy stuff (a pixelfed instance) instead of a lightweight one (just an account on a pixelfed instance) ; because the aim of an instance is to be connected to the world, and if it’s a virtual machine on a personal computer, it could be struggling to let people get connected to your instance.

I enjoy the technical challenge/satisfaction I get from ‘hosting my own’.

Isn’t that in the spirit of Yunohost?

Sure, it is !

1 Like

This seems to have been resolved now. Last night’s upgrade was successful. :+1:

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.