Update qemux/qemu Docker tag to v7.38

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
qemux/qemu	stage	minor	7.28 → 7.38
qemux/qemu	final	minor	7.28 → 7.38

---

Release Notes

qemus/qemu (qemux/qemu)

v7.38

Compare Source

What's Changed

• feat: Support progress tracking for segmented downloads by @​kroese in #​1285
• build: Add wget2 package by @​kroese in #​1286
• build: Update workflow by @​kroese in #​1288
• fix: Prevent races during interactive QEMU shutdown by @​kroese in #​1287
• fix: Prevent races during interactive shutdown by @​kroese in #​1291
• build: Update workflow by @​kroese in #​1290
• feat: Use multiple connections for downloads by @​kroese in #​1289
• build: Update workflow by @​kroese in #​1292
• fix: Validate connection count by @​kroese in #​1293
• feat: Move download functions to utils by @​kroese in #​1294
• feat: Move shared QEMU helpers to utils by @​kroese in #​1295
• fix: Move download function to utils by @​kroese in #​1296
• feat: Centralize download retry and validation by @​kroese in #​1297
• fix: Skip retries for deterministic download failures by @​kroese in #​1298
• feat: Display aria2 progress percentage in web UI by @​kroese in #​1300

Full Changelog: qemus/qemu@v7.37...v7.38

v7.37

Compare Source

What's Changed

• fix: Remove unnecessary guards by @​kroese in #​1234
• feat: Replace audio relay TCP port with Unix socket by @​kroese in #​1235
• fix: Localize available memory formatting by @​kroese in #​1236
• fix: Remove html status update by @​kroese in #​1237
• feat: Reduce transient startup status messages by @​kroese in #​1238
• build: Update workflow by @​kroese in #​1239
• fix: Spelling error by @​kroese in #​1240
• feat: Limit wget progress output by @​kroese in #​1241
• feat: Update download links by @​kroese in #​1242
• fix: Check if SO_BINDTODEVICE is available for Passt by @​kroese in #​1243
• docs: Environment variables by @​kroese in #​1244
• feat: Improve detection of valid data disk by @​kroese in #​1246
• build: Add diffutils package by @​kroese in #​1247
• feat: Improve detection of valid data disk by @​kroese in #​1248
• feat: Improve detection of valid data disk by @​kroese in #​1249
• fix: Preserve existing disks when resolving installation media by @​kroese in #​1250
• feat: Improve iptable backend selection by @​kroese in #​1245
• build: Remove duplicate package by @​kroese in #​1251
• fix: Prevent switching iptables backends after cleanup failure by @​kroese in #​1252
• fix: Formatting in network code by @​kroese in #​1253
• fix: Do not exit when nameservers are missing by @​kroese in #​1254
• fix: USB option parsing by @​kroese in #​1255
• fix: Use correct driver for .vhdx images by @​kroese in #​1256
• feat: Improve audio error handling by @​kroese in #​1257
• fix: Convert target format to lowercase by @​kroese in #​1258
• fix: Audio for legacy USB controllers by @​kroese in #​1259
• fix: Show QEMU errors on unexpected exit by @​kroese in #​1260
• fix: Do not redirect stderr output by @​kroese in #​1261
• fix: Start audio websocket without script by @​kroese in #​1262
• fix: Clear service logs on startup by @​kroese in #​1263
• build: Set dependabot cooldown period by @​kroese in #​1264
• build: Update Passt to v2026_07_16 by @​kroese in #​1265
• fix: Do not redirect stderr to /dev/null by @​kroese in #​1266
• feat: Preserve graceful shutdown for interactive console by @​kroese in #​1267
• feat: Preserve graceful shutdown for interactive console by @​kroese in #​1268
• fix: Cleanup stale pipe files by @​kroese in #​1269
• feat: Add hasFlag helper for CPU flags by @​kroese in #​1270
• feat: Improve AMD detection by @​kroese in #​1271
• feat: Improve download progress in container logs by @​kroese in #​1272
• fix: Improve interactive terminal detection by @​kroese in #​1273
• feat: Improve download progress readability by @​kroese in #​1274
• docs: Environment variables by @​kroese in #​1275
• build: Add xorriso package by @​kroese in #​1276
• feat: Improve boot mode detection by @​kroese in #​1277
• fix: Improve IP tables cleanup verification by @​kroese in #​1278
• feat: Improve NAT networking by @​kroese in #​1279
• Fix dnsmasq startup failure: DHCP option 26 is named "mtu", not "interface-mtu" by @​dhaw97160 in #​1280
• feat: Add escapeXML function by @​kroese in #​1281
• feat: Add optional lossy VNC compression by @​kroese in #​1282
• fix: Require debug mode for GPU acceleration on Windows by @​kroese in #​1283
• fix: Add Recreate strategy to Kubernetes deployment by @​kroese in #​1284

New Contributors

• @​dhaw97160 made their first contribution in #​1280

Full Changelog: qemus/qemu@v7.36...v7.37

v7.36

Compare Source

What's Changed

• feat: Add disk validation function by @​kroese in #​1199
• feat: Preserve source image until conversion completes by @​kroese in #​1200
• docs: Readme by @​kroese in #​1201
• feat: Implement audio streaming for noVNC by @​forkymcforkface in #​1203
• feat: Check machine type for audio device by @​kroese in #​1204
• fix: Add USB controller for USB audio by @​kroese in #​1205
• feat: Make the audio device configurable by @​kroese in #​1206
• docs: Document audio support by @​kroese in #​1207
• docs: Document audio support by @​kroese in #​1208
• docs: Document audio support by @​kroese in #​1209
• fix: Initialize audio after display by @​kroese in #​1210
• feat: Use booleans for USB option by @​kroese in #​1211
• docs: Environment variables by @​kroese in #​1212
• docs: Readme by @​kroese in #​1213
• docs: Readme by @​kroese in #​1214
• feat: Disable hotplugging for VirtIO SCSI controllers by @​kroese in #​1215
• fix: Report missing ipcalc dependency by @​kroese in #​1216
• feat: Improve rootless container detection by @​kroese in #​1217
• fix: Forward USER_PORTS explicitly in NAT mode by @​kroese in #​1218
• feat: Improve wget error reporting by @​kroese in #​1220
• fix: Improve NAT port forwarding reliability by @​kroese in #​1219
• feat: Improve wget error reporting by @​kroese in #​1221
• fix: Validate subnet mask by @​kroese in #​1222
• fix: Validate subnet mask by @​kroese in #​1223
• feat: Use cgroup when calculating RAM by @​kroese in #​1224
• fix: Report websocket server startup errors by @​kroese in #​1225
• fix: TPM cleanup when startup fails by @​kroese in #​1226
• fix: Healthcheck in DHCP mode by @​kroese in #​1227
• feat: Make PCI bus configurable by @​kroese in #​1228
• feat: Make PCI bus configurable by @​kroese in #​1229
• feat: Improve webserver configuration by @​kroese in #​1230
• fix: Make failed chown non-fatal by @​kroese in #​1231
• feat: Suppress empty iptables debug sections by @​kroese in #​1232
• feat: Improve boolean helpers by @​kroese in #​1233

New Contributors

• @​forkymcforkface made their first contribution in #​1203

Full Changelog: qemus/qemu@v7.35...v7.36

v7.35

Compare Source

What's Changed

• fix: Set standard DHCP lease time to 1 hour by @​kroese in #​1188
• feat: Add NAT alias to NETWORK option by @​kroese in #​1189
• feat: Add state helpers to utils by @​kroese in #​1190
• docs: Network modes by @​kroese in #​1191
• feat: Default host and user ports to TCP only by @​kroese in #​1192
• feat: Allow all forwarded NAT traffic by @​kroese in #​1193
• fix: Prefer legacy iptables backend for NAT by @​kroese in #​1194
• feat: Deduplicate disk free space checks by @​kroese in #​1195
• feat: Improve iptables backend selection by @​kroese in #​1196
• feat: Improve iptables rule cleanup by @​kroese in #​1197
• feat: Warn about UDP host ports by @​kroese in #​1198

Full Changelog: qemus/qemu@v7.34...v7.35

v7.34

Compare Source

What's Changed

• build: Use heredoc for Dockerfile commands by @​kroese in #​1130
• fix: Max interface length by @​kroese in #​1131
• docs: Readme by @​kroese in #​1132
• docs: Readme by @​kroese in #​1133
• feat: Improved support for non-standard MTU sizes by @​kroese in #​1134
• fix: IP address validation in NAT mode by @​kroese in #​1135
• fix: Do not display MTU warning twice by @​kroese in #​1136
• feat: Improve bus detection by @​kroese in #​1137
• feat: Filter IPv6 DNS records when disabled by @​kroese in #​1138
• feat: Refactor network code by @​kroese in #​1139
• feat: Refactor disk code by @​kroese in #​1140
• feat: Refactored installation code by @​kroese in #​1141
• fix: Load utils inside healthcheck by @​kroese in #​1142
• feat: Refactor entrypoint by @​kroese in #​1143
• feat: Refactor boot code by @​kroese in #​1144
• feat: Refactor ballooning script by @​kroese in #​1145
• feat: Refactor CPU logic by @​kroese in #​1146
• feat: Refactor shutdown logic by @​kroese in #​1147
• feat: Refactor server code by @​kroese in #​1148
• feat: Refactor config code by @​kroese in #​1149
• feat: Refactor memory check by @​kroese in #​1150
• fix: Add returncodes to functions by @​kroese in #​1151
• feat: Add returncodes to functions by @​kroese in #​1152
• feat: Add returncode to function by @​kroese in #​1153
• feat: Check result of file operations by @​kroese in #​1154
• feat: Refactor networking code by @​kroese in #​1155
• fix: Shutdown Passt after DNS failure by @​kroese in #​1156
• fix: Parse Debian ipcalc output correctly by @​kroese in #​1157
• fix: Normalize disk aio and cache settings by @​kroese in #​1158
• feat: Strip suffixes from host ports by @​kroese in #​1159
• fix: Preserve port protocols in passt mode by @​kroese in #​1160
• feat: Read qcow2 virtual size from qemu-img json by @​kroese in #​1161
• feat: Normalize discard mode for qemu drives by @​kroese in #​1162
• fix: Sanitize guest hostname by @​kroese in #​1163
• feat: Normalize disk image format by @​kroese in #​1164
• fix: Avoid aborting legacy ISO detection by @​kroese in #​1165
• fix: Tolerate swtpm setup failure by @​kroese in #​1166
• feat: Improve shutdown logic by @​kroese in #​1167
• fix: Read QEMU pid correctly by @​kroese in #​1168
• feat: Display guest info before mode warning by @​kroese in #​1169
• fix: Add missing function by @​kroese in #​1170
• fix: Add missing function by @​kroese in #​1171
• feat: Always show network information by @​kroese in #​1172
• build: Add util-linux package by @​kroese in #​1173
• fix: Add additional error handling by @​kroese in #​1174
• fix: Check if source file is removed by @​kroese in #​1175
• fix: Validate MAC file writes by @​kroese in #​1176
• feat: Improve webserver initialization by @​kroese in #​1177
• feat: Check permissions on status writes by @​kroese in #​1178
• fix: Validate byte formatting by @​kroese in #​1179
• fix: Check stat after download by @​kroese in #​1180
• feat: Validate network files by @​kroese in #​1181
• fix: Improve file handling by @​kroese in #​1182
• fix: Add extra line after boot by @​kroese in #​1183
• feat: Display base directory in warnings by @​kroese in #​1184
• docs: Document all environment variables by @​kroese in #​1185
• feat: Validate custom QEMU CPU arguments by @​kroese in #​1186
• docs: Refer to environment documentation by @​kroese in #​1187

Full Changelog: qemus/qemu@v7.33...v7.34

v7.33

Compare Source

What's Changed

• fix: Remove legacy timeout by @​kroese in #​1109
• chore(deps): update actions/checkout action to v7 by @​renovate[bot] in #​1110
• feat: Improve IPv6 check by @​kroese in #​1111
• docs: Update stargazers chart by @​kroese in #​1112
• build: Run review steps in parallel by @​kroese in #​1113
• build: Run check steps in parallel by @​kroese in #​1114
• build: Update Passt to v2026_06_11 by @​kroese in #​1115
• build: Remove duplicate checkout by @​kroese in #​1116
• docs: Readme by @​kroese in #​1117
• fix: Prevent AppArmor profile for swtpm by @​kroese in #​1118
• fix: Improve socket cleanup by @​kroese in #​1119
• feat: Improve shutdown logic by @​kroese in #​1120
• docs: Readme by @​kroese in #​1121
• fix: Handle MEDIA_TYPE in finishDisks by @​kroese in #​1122
• feat: Add enabled() function by @​kroese in #​1123
• feat: Add strip() function by @​kroese in #​1124
• feat: Normalize boolean option handling by @​kroese in #​1125
• fix: Update networking check by @​kroese in #​1126
• feat: Sanitize all environment variables by @​kroese in #​1127
• fix: Remove spaces from RAM_SIZE by @​kroese in #​1128
• fix: Sanitize username variable by @​kroese in #​1129

Full Changelog: qemus/qemu@v7.32...v7.33

v7.32

Compare Source

What's Changed

• fix: Remove unused QEMU_PTY by @​kroese in #​1081
• feat: Graceful shutdown by @​kroese in #​1086
• fix: Update display name in shutdown messages by @​kroese in #​1087
• fix: Hide bash termination message by @​kroese in #​1088
• feat: Suppres shutdown messages by @​kroese in #​1089
• feat: Add ballooning PID file by @​kroese in #​1091
• fix: Display signal name by @​kroese in #​1092
• fix: Handle SIGTERM in ballooning script by @​kroese in #​1093
• fix: Disable traps in subshell by @​kroese in #​1094
• feat: Ballooning monitors QEMU process by @​kroese in #​1097
• fix: Error handling during QMP disconnect by @​kroese in #​1098
• fix: Do not print exitcodes above 128 by @​kroese in #​1099
• fix: Disable traps inside subshells by @​kroese in #​1100
• fix: Skip shutdown message when launch failed by @​kroese in #​1101
• fix: Do not trap SIGINT signal by @​kroese in #​1102
• fix: Change ballooning log message by @​kroese in #​1103
• fix: Display container name by @​kroese in #​1104
• feat: Improve entrypoint by @​kroese in #​1105
• fix: Handle unset PID variables by @​kroese in #​1106
• fix: Add fail_level to reviewdog actions by @​kroese in #​1107
• fix: Display signal names by @​kroese in #​1108

Full Changelog: qemus/qemu@v7.31...v7.32

v7.31

Compare Source

What's Changed

• docs: Proxmox added by @​kroese in #​1058
• feat: Improve iptable rules by @​kroese in #​1059
• feat: Flush iptables on container restarts by @​kroese in #​1060
• build: Update Passt to v2026_05_26 by @​kroese in #​1061
• fix: Increase TPM delay by @​kroese in #​1062
• build: Disable shellformat action by @​kroese in #​1063
• fix: Previous XHR not aborted by @​kroese in #​1064
• fix: Network interface detection by @​kroese in #​1065
• fix: Add CharDevice type to KVM hostPath by @​kroese in #​1066
• feat: Update version file path by @​kroese in #​1067
• fix: Throw object for XMLHttpRequest by @​kroese in #​1068
• fix: Limit IO threading by disk type by @​kroese in #​1069
• fix: IP address parsing by @​kroese in #​1070
• fix: Memory balloon copilot review by @​lukakama in #​1071
• feat: Added option to clear NVRAM by @​kroese in #​1072
• feat: Rename /drivers.iso to /mount.iso by @​kroese in #​1073
• fix: Handle iptables-save errors better by @​kroese in #​1074
• feat: Added option to disable data disks by @​kroese in #​1075
• fix: Variable naming by @​kroese in #​1076
• feat: Added finishDisks function by @​kroese in #​1077
• feat: Store IP of the VM in file by @​kroese in #​1078
• feat: Add optional ACPI shutdown by @​kroese in #​1079
• fix: Error handling during shutdown by @​kroese in #​1080

Full Changelog: qemus/qemu@v7.30...v7.31

v7.30

Compare Source

What's Changed

• fix: Correct variable names by @​brunomgalmeida in #​986
• fix: Correct MX Linux version parsing for ISO download by @​viraj-sh in #​990
• build: Update Passt to v2026_01_20 by @​kroese in #​1007
• fix: Select iptables backend by probing instead of /proc/modules by @​auosun in #​996
• build: Update noVNC version to 1.7.0 by @​kroese in #​1010
• feat: Add memory ballooning support by @​lukakama in #​1012
• docs: Dynamic memory allocation by @​kroese in #​1013
• chore(deps): update docker/login-action action to v4 by @​renovate[bot] in #​998
• build(deps): Bump docker/setup-buildx-action from 3 to 4 by @​dependabot[bot] in #​1002
• build(deps): Bump docker/build-push-action from 6 to 7 by @​dependabot[bot] in #​1003
• build(deps): Bump docker/login-action from 3 to 4 by @​dependabot[bot] in #​1005
• build(deps): Bump docker/metadata-action from 5 to 6 by @​dependabot[bot] in #​1004
• fix: Restore previous device configuration by @​kroese in #​1014
• chore(deps): update grantbirki/json-yaml-validate action to v5 by @​renovate[bot] in #​1015
• build: Update Passt to v2026_05_07 by @​kroese in #​1016
• build: Add timeout to wget command by @​kroese in #​1017
• docs: Improve disk resizing instructions by @​kroese in #​1018
• feat: Update image download links by @​kroese in #​1020
• fix: Check for empty BOOT expression by @​kroese in #​1021
• fix: Use different driver for .vhdx files by @​kroese in #​1022
• feat: Remove reliability on iptables multiport extension by @​kroese in #​1024
• fix: Hide ballooning info from standard debug by @​kroese in #​1025
• feat: Improve memory allocation logic by @​kroese in #​1026
• build: Hide pip installation warning by @​kroese in #​1027
• feat: Do not require NET_RAW for dnsmasq by @​kroese in #​1029
• feat: Use iptables multiport extension by @​kroese in #​1030
• fix: Socket detection logic by @​kroese in #​1031
• fix: Slirp portmapping was missing last port by @​kroese in #​1032
• fix: Warning message for missing clock source by @​kroese in #​1033
• fix: Missing colon in default-value assignment by @​kroese in #​1034
• fix: CPU cores validation logic by @​kroese in #​1035
• fix: Simplify checks for UEFI boot files by @​kroese in #​1036
• fix: Undeclared variable in ConvertDisk by @​kroese in #​1037
• fix: Remove quotes from BOOT variable by @​kroese in #​1038
• feat: Improve Dnsmasq error handling by @​kroese in #​1039
• fix: Page alignment/hugepages tolerance size by @​kroese in #​1042
• fix: Do not mask swtmp exit code by @​kroese in #​1043
• fix: CPU cores validation logic by @​kroese in #​1044
• feat: Add warning when macvlan parent is a bridge by @​kroese in #​1045
• feat: Add PROTECT setting for noVNC password by @​kroese in #​1046
• fix: Local variable declaration by @​kroese in #​1047
• fix: Wrong IP was passed to getSlirp by @​kroese in #​1048
• fix: Interface variable by @​kroese in #​1049
• fix: Replace BOOT variable trimming logic by @​kroese in #​1050
• fix: Use vpc driver for .vhdx files by @​kroese in #​1051
• feat: Update warning message by @​kroese in #​1054
• feat: Use default logo when custom is not found by @​kroese in #​1055
• docs: Improve low diskspace warning by @​kroese in #​1056
• feat: Add support for ZimaOS by @​kroese in #​1057

New Contributors

• @​brunomgalmeida made their first contribution in #​986
• @​viraj-sh made their first contribution in #​990
• @​auosun made their first contribution in #​996
• @​lukakama made their first contribution in #​1012

Full Changelog: qemus/qemu@v7.29...v7.30

v7.29

Compare Source

What's Changed

• Add SPICE protocol support by @​slawomir-andreasik in #​978
• fix: Update Workspaces configuration by @​kroese in #​979
• fix: Continue booting when Fiano fails by @​kroese in #​981
• chore(deps): update actions/checkout action to v6 by @​renovate[bot] in #​980
• fix: Avoid duplicating dnsmasq arguments by @​kroese in #​983
• fix: Surpress dnsmasq error in rootless mode by @​kroese in #​984
• build: Remove spice module by @​kroese in #​985

New Contributors

• @​slawomir-andreasik made their first contribution in #​978

Full Changelog: qemus/qemu@v7.28...v7.29

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[deepsource-io]

DeepSource Code Review

We reviewed changes in 64859c3...4eaaefb on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
Docker		Jul 21, 2026 6:50a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.