Update adguard/adguardhome Docker tag to v0.107.38

[chemical-soup]

This PR contains the following updates:

Package	Update	Change
adguard/adguardhome	patch	v0.107.36 -> v0.107.38

---

Release Notes

AdguardTeam/AdGuardHome (adguard/adguardhome)

v0.107.38

Compare Source

See also the v0.107.38 GitHub milestone.

Fixed

• Incorrect original answer when a response is filtered (#​6183).
• Comments in the Fallback DNS servers field in the UI (#​6182).
• Empty or default Safe Browsing and Parental Control settings (#​6181).
• Various UI issues.

v0.107.37

Compare Source

See also the [v0.107.37 GitHub milestone][ms-v0.107.37].

Security

• Go version has been updated to prevent the possibility of exploiting the
  CVE-2023-39318, CVE-2023-39319, and CVE-2023-39320 Go vulnerabilities fixed in
  [Go 1.20.8][go-1.20.8].

Added

• AdBlock-style syntax support for ignored domains in logs and statistics
  ([#​5720]).
• [Strict-Transport-Security][hsts] header in the HTTP API and DNS-over-HTTPS
  responses when HTTPS is forced ([#​2998]). See [RFC 6797][rfc6797].
• UI for the schedule of the service-blocking pause ([#​951]).
• IPv6 hints are now filtered in case IPv6 addresses resolving is disabled
  ([#​6122]).
• The ability to set fallback DNS servers in the configuration file and the UI
  ([#​3701]).
• While adding or updating blocklists, the title can now be parsed from
  ! Title: definition of the blocklist's source ([#​6020]).
• The ability to filter DNS HTTPS records including IPv4 and IPv6 hints
  ([#​6053]).
• Two new metrics showing total number of responses from each upstream DNS
  server and their average processing time in the Web UI ([#​1453]).
• The ability to set the port for the pprof debug API, see configuration
  changes below.

Changed

• $dnsrewrite rules containing IPv4-mapped IPv6 addresses are now working
  consistently with legacy DNS rewrites and match the AAAA requests.
• For non-A and non-AAAA requests, which has been filtered, the NODATA response
  is returned if the blocking mode isn't set to Null IP. In previous versions
  it returned NXDOMAIN response in such cases.

Configuration Changes

In this release, the schema version has changed from 24 to 27.

• Ignore rules blocking . in querylog.ignored and statistics.ignored have
  been migrated to AdBlock syntax (|.^). To rollback this change, restore the
  rules and change the schema_version back to 26.

• Filtering-related settings have been moved from dns section of the YAML
  configuration file to the new section filtering:

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[eiddor]

Running in production.

[eiddor]

Running in production.