From 2b381a0d6e9a46626f7f31f0809934083c200f88 Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Mon, 13 Apr 2026 18:33:31 +0200 Subject: [PATCH] =?UTF-8?q?fix(kanboard):=20update=20image=20ghcr.io/kanbo?= =?UTF-8?q?ard/kanboard=20v1.2.51=20=E2=86=92=20v1.2.52=20(#46854)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/kanboard/kanboard](https://kanboard.org) ([source](https://redirect.github.com/kanboard/kanboard)) | patch | `d4667ba` → `8cd4667` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes
kanboard/kanboard (ghcr.io/kanboard/kanboard) ### [`v1.2.52`](https://redirect.github.com/kanboard/kanboard/releases/tag/v1.2.52): Kanboard 1.2.52 [Compare Source](https://redirect.github.com/kanboard/kanboard/compare/v1.2.51...v1.2.52) - Enforce comment visibility rules for public and unauthenticated users: - Restricted comments are no longer exposed in public task views. - Users cannot create comments with a visibility level higher than their role. - Revoke public access tokens for inactive users. - Use timing-safe comparisons (`hash_equals`) for API and webhook token validation to mitigate timing attacks. - Replace raw SQL interpolation with parameterized queries in: - Task queries (`TaskFinderModel`) - iCalendar export conditions - Validate task ownership in bulk operations: - Ensure tasks belong to the specified project before applying bulk changes.
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- charts/stable/kanboard/Chart.yaml | 4 ++-- charts/stable/kanboard/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/stable/kanboard/Chart.yaml b/charts/stable/kanboard/Chart.yaml index fcf924fd8bd..c5e19bf2f27 100644 --- a/charts/stable/kanboard/Chart.yaml +++ b/charts/stable/kanboard/Chart.yaml @@ -8,7 +8,7 @@ annotations: trueforge.org/min_helm_version: "3.14" trueforge.org/train: stable apiVersion: v2 -appVersion: 1.2.51 +appVersion: 1.2.52 dependencies: - name: common version: 29.0.10 @@ -35,5 +35,5 @@ sources: - https://github.com/kanboard/kanboard - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/kanboard type: application -version: 20.0.1 +version: 20.0.2 diff --git a/charts/stable/kanboard/values.yaml b/charts/stable/kanboard/values.yaml index 8f4a3e31c94..4f0b8f6ce39 100644 --- a/charts/stable/kanboard/values.yaml +++ b/charts/stable/kanboard/values.yaml @@ -1,7 +1,7 @@ # yaml-language-server: $schema=./values.schema.json image: repository: ghcr.io/kanboard/kanboard - tag: "v1.2.51@sha256:d4667ba3d12e076740ae6a4a74c782a23e8e1ce10c19407ef2ad10a09e66c517" + tag: "v1.2.52@sha256:8cd46677f1f3b97bb45e8bcf30512ab92f30a9578cee51b406d2dd297a223859" pullPolicy: IfNotPresent service: main: