From 0458f946b3fc7fa28c00470f511f07ab9d92cabe Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Fri, 28 Nov 2025 01:07:06 +0100 Subject: [PATCH] =?UTF-8?q?chore(helm):=20update=20image=20ghcr.io/manyfol?= =?UTF-8?q?d3d/manyfold=200.129.2=20=E2=86=92=200.129.3=20(#42213)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/manyfold3d/manyfold](https://redirect.github.com/manyfold3d/manyfold) | patch | `c90e33e` -> `8f6d732` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes
manyfold3d/manyfold (ghcr.io/manyfold3d/manyfold) ### [`v0.129.3`](https://redirect.github.com/manyfold3d/manyfold/releases/tag/v0.129.3) [Compare Source](https://redirect.github.com/manyfold3d/manyfold/compare/v0.129.2...v0.129.3) Another patch release, this time focused on security improvements from our recent audit. There are also a few bugfixes, including an important one from the last release that potentially breaks model pages for new users! #### What's Changed ##### 🔒 Security 🔒 - Obfuscate password input fields in user admin area by [@​Floppy](https://redirect.github.com/Floppy) in [#​5094](https://redirect.github.com/manyfold3d/manyfold/pull/5094) - Sanitize upload filenames to prevent path traversal by [@​Floppy](https://redirect.github.com/Floppy) in [#​5098](https://redirect.github.com/manyfold3d/manyfold/pull/5098) - Only object owners can set sharing permissions by [@​Floppy](https://redirect.github.com/Floppy) in [#​5099](https://redirect.github.com/manyfold3d/manyfold/pull/5099) - Obfuscate OAuth client secret on screen (with reveal and copy options) by [@​Floppy](https://redirect.github.com/Floppy) in [#​5100](https://redirect.github.com/manyfold3d/manyfold/pull/5100) - OIDC: Don't match accounts by unverified emails by [@​Floppy](https://redirect.github.com/Floppy) in [#​5101](https://redirect.github.com/manyfold3d/manyfold/pull/5101) - Improve and test rate limiting, including OAuth and OIDC endpoints by [@​Floppy](https://redirect.github.com/Floppy) in [#​5104](https://redirect.github.com/manyfold3d/manyfold/pull/5104) - Add explicit sanitization to fields that come in from the Fediverse by [@​Floppy](https://redirect.github.com/Floppy) in [#​5111](https://redirect.github.com/manyfold3d/manyfold/pull/5111) ##### 🐛 Bug Fixes 🐛 - Include slicer app images locally to avoid CORS errors by [@​Floppy](https://redirect.github.com/Floppy) in [#​5077](https://redirect.github.com/manyfold3d/manyfold/pull/5077) - Fix server scheme in API documentation by [@​Floppy](https://redirect.github.com/Floppy) in [#​5102](https://redirect.github.com/manyfold3d/manyfold/pull/5102) - Fix tour error on model page blocking entire UI by [@​Floppy](https://redirect.github.com/Floppy) in [#​5106](https://redirect.github.com/manyfold3d/manyfold/pull/5106) - Fix error when rendering remote actors in federated search by [@​Floppy](https://redirect.github.com/Floppy) in [#​5110](https://redirect.github.com/manyfold3d/manyfold/pull/5110) **Full Changelog**:
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- charts/stable/manyfold/Chart.yaml | 4 ++-- charts/stable/manyfold/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/stable/manyfold/Chart.yaml b/charts/stable/manyfold/Chart.yaml index 103a18e14f7..ffed81120c3 100644 --- a/charts/stable/manyfold/Chart.yaml +++ b/charts/stable/manyfold/Chart.yaml @@ -11,7 +11,7 @@ annotations: truecharts.org/min_kubernetes_version: 1.24.0 truecharts.org/train: stable apiVersion: v2 -appVersion: 0.129.2 +appVersion: 0.129.3 dependencies: - name: common version: 28.29.2 @@ -44,5 +44,5 @@ sources: - https://ghcr.io/manyfold3d/manyfold - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/manyfold type: application -version: 4.38.1 +version: 4.38.2 diff --git a/charts/stable/manyfold/values.yaml b/charts/stable/manyfold/values.yaml index 32e85917a9d..0783dd489a0 100644 --- a/charts/stable/manyfold/values.yaml +++ b/charts/stable/manyfold/values.yaml @@ -1,6 +1,6 @@ image: repository: ghcr.io/manyfold3d/manyfold - tag: 0.129.2@sha256:c90e33e9a1590e71f6baf162dc9d1d91e7ee93212d22522a2c99f495405b8bdc + tag: 0.129.3@sha256:8f6d732b647cc4eb5621640b76fb8c7a805b54674b3fb0163bcf8e84687d358d pullPolicy: IfNotPresent securityContext: container: