fix(tandoor-recipes): update image ghcr.io/tandoorrecipes/recipes 2.6.9 → 2.6.11 (#49339)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/tandoorrecipes/recipes](https://redirect.github.com/TandoorRecipes/recipes)
| patch | `969c5b3` → `2eb9a80` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>TandoorRecipes/recipes
(ghcr.io/tandoorrecipes/recipes)</summary>

###
[`v2.6.11`](https://redirect.github.com/TandoorRecipes/recipes/releases/tag/2.6.11)

[Compare
Source](https://redirect.github.com/TandoorRecipes/recipes/compare/2.6.10...2.6.11)

- **improved** pantry booking dialog and table
- **fixed** another order parameter

###
[`v2.6.10`](https://redirect.github.com/TandoorRecipes/recipes/releases/tag/2.6.10)

[Compare
Source](https://redirect.github.com/TandoorRecipes/recipes/compare/2.6.9...2.6.10)

- **fixed** recipes marked as private could be viewed trough API utility
endpoints
<https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-cqj3-64qw-4w52>
- **fixed** recipe search and recipe book API endpoints accepting any
order by attribute
<https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-4x57-2q4q-xwpp>
- **fixed** regex ddos possibility in automation engine
<https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-f2gw-c2c7-59v7>
- **fixed** AI Providers could be configured with malicious URLs to
allow SSRF
<https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-wq4h-2r8x-cv65>
- ⚠️ if you are using custom AI backends you need to add them to the new
`AI_ALLOWED_URLS` settings (see
<https://docs.tandoor.dev/system/configuration/#ai-integration>)
- **fixed** bookmarklets of other users in your own space could be
accessed/deleted
<https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-4vw7-c646-g23w>
- **updated** lots of dependencies
- **updated** translations for various languages

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC90YW5kb29yLXJlY2lwZXMiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
This commit is contained in:
TrueCharts Bot
2026-06-21 20:34:59 +02:00
committed by GitHub
parent 30aa35d955
commit 1556a2a4fa
2 changed files with 3 additions and 3 deletions
+2 -2
View File
@@ -9,7 +9,7 @@ annotations:
trueforge.org/min_helm_version: "3.14"
trueforge.org/train: stable
apiVersion: v2
appVersion: 2.6.9
appVersion: 2.6.11
dependencies:
- name: common
version: 29.5.3
@@ -38,5 +38,5 @@ sources:
- https://github.com/TandoorRecipes/recipes/pkgs/container/recipes
- https://github.com/trueforge-org/truecharts/tree/master/charts/stable/tandoor-recipes
type: application
version: 21.5.0
version: 21.5.1
+1 -1
View File
@@ -2,7 +2,7 @@
image:
repository: ghcr.io/tandoorrecipes/recipes
pullPolicy: IfNotPresent
tag: 2.6.9@sha256:969c5b3552ffbf18a6f82b3ad5babbae89bfbd30ab6e3195fd3c158bcf3062ed
tag: 2.6.11@sha256:2eb9a80a0b03f905eaa9cea18b0d31ae0c49f37dbd53e0f55215070e7e9b7108
securityContext:
container:
readOnlyRootFilesystem: false