fix(etherpad): update image ghcr.io/ether/etherpad 3.3.0 → 3.3.1 (#48988)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/ether/etherpad](https://redirect.github.com/ether/etherpad) |
patch | `e966c52` → `c4bcd4b` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>ether/etherpad (ghcr.io/ether/etherpad)</summary>

###
[`v3.3.1`](https://redirect.github.com/ether/etherpad/blob/HEAD/CHANGELOG.md#331)

[Compare
Source](https://redirect.github.com/ether/etherpad/compare/3.3.0...3.3.1)

3.3.1 is a small bug-fix and hardening follow-up to 3.3.0. It closes a
stored-XSS vector in the numbered-list `start` attribute, hardens the
database layer so a dropped connection to PostgreSQL / Redis / RethinkDB
no longer crashes the process (via ueberdb2 6.1.9), and fixes a handful
of pad and admin regressions — the iOS dark-mode status bar, the
settings language dropdown, the pad-deletion modal under
`allowPadDeletionByAllUsers`, and a single unreadable pad blanking the
admin Manage-pads list.

##### Security

- **Pad editor — escape and integer-coerce the numbered-list `start`
attribute (GHSA-f7h5-v9hm-548j,
[#&#8203;7937](https://redirect.github.com/ether/etherpad/issues/7937)).**
A crafted `<ol start>` value flowed unescaped into `domline.ts`, a
distinct client-side sink from the export-path fix in 3.3.0's
[#&#8203;7905](https://redirect.github.com/ether/etherpad/issues/7905).
The value is now integer-coerced and HTML-escaped before it reaches the
DOM. A jsdom regression test covers the sink.

##### Notable fixes

- **Skin — paint the root canvas so iOS dark mode has no white status
bar
([#&#8203;7606](https://redirect.github.com/ether/etherpad/issues/7606)
/
[#&#8203;7931](https://redirect.github.com/ether/etherpad/issues/7931)).**
iOS Safari paints the top safe area from the `html` root background,
which `theme-color` (an Android address-bar hint) does not affect, so
dark-mode pads showed a white status-bar strip on iOS. Colibris now sets
the root background and `color-scheme` so the safe area matches the
editor.
- **Settings — show the detected language in the dropdown
([#&#8203;7925](https://redirect.github.com/ether/etherpad/issues/7925)
/
[#&#8203;7928](https://redirect.github.com/ether/etherpad/issues/7928)).**
The settings language `<select>` did not reflect the language Etherpad
had actually auto-detected; it now shows the active selection.
- **Pad — don't issue a deletion token (or show its modal) when
`allowPadDeletionByAllUsers` is on
([#&#8203;7929](https://redirect.github.com/ether/etherpad/issues/7929)).**
With pad deletion open to all users the client still minted a deletion
token and surfaced the confirm modal; both are now suppressed in that
configuration.
- **Admin — one unreadable pad no longer empties the Manage-pads list
([#&#8203;7935](https://redirect.github.com/ether/etherpad/issues/7935)
/
[#&#8203;7938](https://redirect.github.com/ether/etherpad/issues/7938)).**
A single pad that failed to read could throw out of the list-hydration
path and blank the entire admin Manage-pads view; the read is now
guarded per-pad so the rest of the list still renders.

##### Internal / contributor-facing

- **CI — downstream client compatibility gate
([#&#8203;7923](https://redirect.github.com/ether/etherpad/issues/7923)
/ [#&#8203;7924](https://redirect.github.com/ether/etherpad/issues/7924)
/
[#&#8203;7927](https://redirect.github.com/ether/etherpad/issues/7927)).**
A new gate smoke-tests the published `etherpad-pad`, `etherpad-cli`, and
`etherpad-desktop` clients against the server build (Phase 1 + Phase 2),
with robust per-client error handling in `run-clients.sh` so one
client's failure is reported rather than masking the others.
- **CI — verify Etherpad boots offline
([#&#8203;7936](https://redirect.github.com/ether/etherpad/issues/7936)).**
Adds a test step that confirms a built Etherpad starts with no network
access.

##### Dependencies

- `ueberdb2` 6.1.8 → 6.1.9 — PostgreSQL pool errors are now handled and
TCP keep-alive is enabled (fixes
[#&#8203;7878](https://redirect.github.com/ether/etherpad/issues/7878)),
and the Redis and RethinkDB drivers attach connection-error handlers so
a dropped database connection no longer crashes the Etherpad process.
- `semver` 7.8.2 → 7.8.3
([#&#8203;7933](https://redirect.github.com/ether/etherpad/issues/7933)),
`rate-limiter-flexible` 11.1.1 → 11.2.0
([#&#8203;7934](https://redirect.github.com/ether/etherpad/issues/7934)),
plus a dev-dependencies group update
([#&#8203;7932](https://redirect.github.com/ether/etherpad/issues/7932)).

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9ldGhlcnBhZCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->

charts/stable/etherpad/Chart.yaml

@@ -9,7 +9,7 @@ annotations:
   trueforge.org/min_helm_version: "3.14"
   trueforge.org/train: stable
 apiVersion: v2
-appVersion: 3.3.0
+appVersion: 3.3.1
 dependencies:
   - name: common
     version: 29.3.4
@@ -39,5 +39,5 @@ sources:
   - https://github.com/ether/etherpad-lite
   - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/etherpad
 type: application
-version: 22.3.0
+version: 22.3.1
 

charts/stable/etherpad/values.yaml

@@ -2,7 +2,7 @@
 image:
   repository: ghcr.io/ether/etherpad
   pullPolicy: IfNotPresent
-  tag: 3.3.0@sha256:e966c526582962bc934edd7732373d60e90a0030f540060422ac3ce4e6fba1bb
+  tag: 3.3.1@sha256:c4bcd4b3365222b6a0e1d596dcebfddccd47bb2c80ebe4ab903d2393d8eeea9c
 securityContext:
   container:
     readOnlyRootFilesystem: false