chore(helm): update image docker.io/wekanteam/wekan v8.15 → v8.16 (#41350)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/wekanteam/wekan](https://redirect.github.com/wekan/wekan) |
minor | `53fc007` -> `bc18efd` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>wekan/wekan (docker.io/wekanteam/wekan)</summary>

###
[`v8.16`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v816-2025-11-02-WeKan--release)

[Compare
Source](https://redirect.github.com/wekan/wekan/compare/v8.15...v8.16)

This release fixes SpaceBleed that is the following CRITICAL SECURITY
ISSUES:

- [Fix SECURITY ISSUE 1: File Attachments enables stored XSS
(High)](https://redirect.github.com/wekan/wekan/commit/e9a727301d7b4f1689a703503df668c0f4f4cab8).
  Thanks to Siam Thanat Hack (STH) and xet7.
- [Fix SECURITY ISSUE 2: Access to boards of any Orgs/Teams, and avatar
permissions](https://redirect.github.com/wekan/wekan/commit/f26d58201855e861bab1cd1fda4d62c664efdb81).
  Thanks to Siam Thanat Hack (STH) and xet7.
- [Fix SECURITY ISSUE 3: Unauthenticated (or any) user can update board
sort](https://redirect.github.com/wekan/wekan/commit/ea310d7508b344512e5de0dfbc9bdfd38145c5c5).
  Thanks to Siam Thanat Hack (STH) and xet7.
- [Fix SECURITY ISSUE 4: Members can forge others’ votes (Low). Bonus:
Similar fixes to planning poker too done by
xet7](https://redirect.github.com/wekan/wekan/commit/0a1a075f3153e71d9a858576f1c68d2925230d9c).
  Thanks to Siam Thanat Hack (STH) and xet7.
- [Fix SECURITY ISSUE 5: Attachment API uses bearer value as userId and
DoS
(Low)](https://redirect.github.com/wekan/wekan/commit/ccd90343394f433b287733ad0a33c08e0a71f53c).
  Thanks to Siam Thanat Hack (STH) and xet7.

and adds the following new features:

- [List menu / More / Delete duplicate lists that do not have any
cards](https://redirect.github.com/wekan/wekan/commit/91b846e2cdee9154b045d11b4b4c1a7ae1d79016).
  Thanks to xet7.
- [Disabled migrations that happen when opening board. Defaulting to
per-swimlane lists and drag drop list to same or different
swimlane](https://redirect.github.com/wekan/wekan/commit/034dc08269520ca31c780cce64e0150969e9228e).
  Thanks to xet7.

and fixes the following bugs:

- [Fix changing swimlane color to not reload
webpage](https://redirect.github.com/wekan/wekan/commit/ecf2418347cae4329deb292b534f68eb099d3f90).
  Thanks to xet7.

Thanks to above GitHub users for their contributions and translators for
their translations.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44Mi4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjgyLjEwIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->

charts/stable/wekan/Chart.yaml

@@ -11,7 +11,7 @@ annotations:
   truecharts.org/min_kubernetes_version: 1.24.0
   truecharts.org/train: stable
 apiVersion: v2
-appVersion: 8.15.0
+appVersion: 8.16.0
 dependencies:
   - name: common
     version: 28.26.2
@@ -47,5 +47,5 @@ sources:
   - https://hub.docker.com/r/wekanteam/wekan
   - https://wekan.github.io/
 type: application
-version: 18.5.4
+version: 18.6.0
 

charts/stable/wekan/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: docker.io/wekanteam/wekan
-  tag: v8.15@sha256:53fc00710d11ffff8999c26afdb2e3f0d546a5f197c815deb8063bb37aded9ee
+  tag: v8.16@sha256:bc18efdee3fdbcc50d97c950b2333ba618dcfd0bf74a02ff6e074998d10e56ca
   pullPolicy: IfNotPresent
 service:
   main: