From 356bdd9babbb97bc6e19d9efbe9eff548dca0099 Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Sun, 2 Nov 2025 14:41:25 +0100 Subject: [PATCH] =?UTF-8?q?chore(helm):=20update=20image=20docker.io/wekan?= =?UTF-8?q?team/wekan=20v8.15=20=E2=86=92=20v8.16=20(#41350)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/wekanteam/wekan](https://redirect.github.com/wekan/wekan) | minor | `53fc007` -> `bc18efd` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes
wekan/wekan (docker.io/wekanteam/wekan) ### [`v8.16`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v816-2025-11-02-WeKan--release) [Compare Source](https://redirect.github.com/wekan/wekan/compare/v8.15...v8.16) This release fixes SpaceBleed that is the following CRITICAL SECURITY ISSUES: - [Fix SECURITY ISSUE 1: File Attachments enables stored XSS (High)](https://redirect.github.com/wekan/wekan/commit/e9a727301d7b4f1689a703503df668c0f4f4cab8). Thanks to Siam Thanat Hack (STH) and xet7. - [Fix SECURITY ISSUE 2: Access to boards of any Orgs/Teams, and avatar permissions](https://redirect.github.com/wekan/wekan/commit/f26d58201855e861bab1cd1fda4d62c664efdb81). Thanks to Siam Thanat Hack (STH) and xet7. - [Fix SECURITY ISSUE 3: Unauthenticated (or any) user can update board sort](https://redirect.github.com/wekan/wekan/commit/ea310d7508b344512e5de0dfbc9bdfd38145c5c5). Thanks to Siam Thanat Hack (STH) and xet7. - [Fix SECURITY ISSUE 4: Members can forge othersโ€™ votes (Low). Bonus: Similar fixes to planning poker too done by xet7](https://redirect.github.com/wekan/wekan/commit/0a1a075f3153e71d9a858576f1c68d2925230d9c). Thanks to Siam Thanat Hack (STH) and xet7. - [Fix SECURITY ISSUE 5: Attachment API uses bearer value as userId and DoS (Low)](https://redirect.github.com/wekan/wekan/commit/ccd90343394f433b287733ad0a33c08e0a71f53c). Thanks to Siam Thanat Hack (STH) and xet7. and adds the following new features: - [List menu / More / Delete duplicate lists that do not have any cards](https://redirect.github.com/wekan/wekan/commit/91b846e2cdee9154b045d11b4b4c1a7ae1d79016). Thanks to xet7. - [Disabled migrations that happen when opening board. Defaulting to per-swimlane lists and drag drop list to same or different swimlane](https://redirect.github.com/wekan/wekan/commit/034dc08269520ca31c780cce64e0150969e9228e). Thanks to xet7. and fixes the following bugs: - [Fix changing swimlane color to not reload webpage](https://redirect.github.com/wekan/wekan/commit/ecf2418347cae4329deb292b534f68eb099d3f90). Thanks to xet7. Thanks to above GitHub users for their contributions and translators for their translations.
--- ### Configuration ๐Ÿ“… **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). ๐Ÿšฆ **Automerge**: Enabled. โ™ป **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. ๐Ÿ”• **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- charts/stable/wekan/Chart.yaml | 4 ++-- charts/stable/wekan/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/stable/wekan/Chart.yaml b/charts/stable/wekan/Chart.yaml index afe8d1ea5e0..131a184e860 100644 --- a/charts/stable/wekan/Chart.yaml +++ b/charts/stable/wekan/Chart.yaml @@ -11,7 +11,7 @@ annotations: truecharts.org/min_kubernetes_version: 1.24.0 truecharts.org/train: stable apiVersion: v2 -appVersion: 8.15.0 +appVersion: 8.16.0 dependencies: - name: common version: 28.26.2 @@ -47,5 +47,5 @@ sources: - https://hub.docker.com/r/wekanteam/wekan - https://wekan.github.io/ type: application -version: 18.5.4 +version: 18.6.0 diff --git a/charts/stable/wekan/values.yaml b/charts/stable/wekan/values.yaml index f1ffbf0f4c0..9e2939ad97e 100644 --- a/charts/stable/wekan/values.yaml +++ b/charts/stable/wekan/values.yaml @@ -1,6 +1,6 @@ image: repository: docker.io/wekanteam/wekan - tag: v8.15@sha256:53fc00710d11ffff8999c26afdb2e3f0d546a5f197c815deb8063bb37aded9ee + tag: v8.16@sha256:bc18efdee3fdbcc50d97c950b2333ba618dcfd0bf74a02ff6e074998d10e56ca pullPolicy: IfNotPresent service: main: