feat(wekan): update image docker.io/wekanteam/wekan v9.64 → v9.65 (#49320)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/wekanteam/wekan](https://redirect.github.com/wekan/wekan) | minor | `ed6c960` → `a453464` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>wekan/wekan (docker.io/wekanteam/wekan)</summary> ### [`v9.65`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v965-2026-06-20-WeKan--release) [Compare Source](https://redirect.github.com/wekan/wekan/compare/v9.64...v9.65) This release adds the following updates: - Issue triage: closed 13 already-fixed Bug issues (with evidence), relabeled \~25 mislabeled feature requests to `Feature` with a "Feature Request:" title prefix, and prefixed \~35 environment-specific reports "Environment specific:" and gave them the `Bug:Environment-specific` label. - Audited labels on all 533 open issues for correctness (type, `Feature:Area`, `Targets:`, `Severity:`, etc.). - Added 23 missing GitHub labels found by auditing `docs/Login` and `docs/Features` against the issue labels, matching the existing label style and colours (`Feature:*` = `#​0052cc`, `Targets:*` = `#fbca04`), and applied them across open and closed issues: - Login methods (`Feature:User-accounts:*`): ADFS, Azure, B2C, Google, Header-Login, Nextcloud, Oracle, Zitadel, Autologin, Accounts-Lockout, Forgot-Password. - Features: `Feature:LaTeX`, `Feature:Mermaid-Diagram`, `Feature:Emoji`, `Feature:Python`, `Feature:Cards:Cover`, `Feature:Cards:Location`, `Feature:Custom-Logo`, `Feature:RTL`, `Feature:Members`, `Feature:Multitenancy`, `Feature:Allow-private-boards-only`. - Platform: `Targets:Apache`. and adds the following new features: - [Threaded comment replies](https://redirect.github.com/wekan/wekan/commit/bdb8e6254): card comments gain an optional `parentId`; a "Reply" link links a new comment to its parent, rendered with an "in reply to" quote. Initial MVP (single-level visual threading). - [Restrict board admins from editing/deleting other users' comments](https://redirect.github.com/wekan/wekan/commit/bdb8e6254): new board setting `restrictCommentEditing` (default off). When on, only a comment's author may edit/delete it; enforced server-side via collection hooks. - [Visible status of sub-tasks](https://redirect.github.com/wekan/wekan/commit/d7ae93bb2): each subtask now shows its current list (prefixed with the board title when on a different board) read-only next to its title. - [Drag-and-drop search results into board columns](https://redirect.github.com/wekan/wekan/commit/b998246c3): cards in the search-results list can be dragged onto board lists, reusing the existing `card.move()`. MVP: drops append to the end of the target list (no pixel-precise insertion index yet). - [Per-user permanent dismissal of the Announcement banner](https://redirect.github.com/wekan/wekan/commit/bf75efaef): a user can permanently close the current announcement so it does not reappear on reload/board-switch, until the admin edits the announcement text (which makes it reappear for everyone). - [Show how many times a card's due date was changed](https://redirect.github.com/wekan/wekan/commit/a8ed326a5): the card detail now displays a "due date changed N times" count (derived from existing `a-dueAt` activities) for deadline accountability. - [Restrict adding board members to the same Organization or Team](https://redirect.github.com/wekan/wekan/commit/371258a6d): new global admin setting `boardMembersFromSameOrgOrTeamOnly` (default off). When on, a user can only be added to a board if they share an Organization or Team with the inviter or an active board member; enforced server-side in the invite/search paths. Site admins bypass. - [Import Google Calendar `.ics` files into board cards](https://redirect.github.com/wekan/wekan/commit/0a43d8ac3): MVP, import-only. New dependency-free iCalendar parser (`server/lib/icsImport.js`) maps each `VEVENT` to a card with `startAt`/`dueAt` so events appear on Calendar/Gantt views, plus an `importIcsToBoard` Meteor method and a REST endpoint `POST /api/boards/:boardId/swimlanes/:swimlaneId/lists/:listId/ics` (documented in the OpenAPI spec, with an `importics` example in `api.py`). Two-way Google Calendar sync is not included (see [wekan-ical-server](https://redirect.github.com/wekan/wekan-ical-server) for read-only WeKan→calendar export). and fixes the following bugs: - [Fixed OIDC/OAuth2 "Log Out" redirecting to the identity provider home page instead of back to Wekan](https://redirect.github.com/wekan/wekan/commit/9e50c69eaaec8928b4eb8a122f9cb6f0447464a9). With autologin (`OIDC_REDIRECTION_ENABLED=true`), clicking Log Out redirected to the OAuth2 server URL (for example the Keycloak base URL `https://id.company.com`), which shows an error page for non-admin users. Added the new optional `OAUTH2_LOGOUT_ENDPOINT` setting: when set to the provider's `end_session_endpoint` (Keycloak example `/realms/<realm>/protocol/openid-connect/logout`), Wekan now performs an OIDC RP-initiated logout that ends the identity provider session and returns the user to Wekan (`ROOT_URL`) via `post_logout_redirect_uri`. When unset, logout behaviour is unchanged, so this is backward compatible. For Keycloak 18+, add your Wekan `ROOT_URL` to the client's *Valid post logout redirect URIs*. See [docs/Login/Keycloak/Keycloak.md](https://redirect.github.com/wekan/wekan/blob/main/docs/Login/Keycloak/Keycloak.md). Thanks to zambalee and xet7. - [Fixed due dates not correctly colour coded](https://redirect.github.com/wekan/wekan/commit/086254e10): future due dates more than 48 hours away are now shaded grey (`not-due`) instead of amber (`due-soon`). Root cause was a call to `diff(theDate, now, 'days')` where `'days'` is not a valid unit, so the threshold compared raw milliseconds; replaced with a precise hours-based comparison in a single shared helper. - [Fixed due date colour mismatch between list and card detail](https://redirect.github.com/wekan/wekan/commit/086254e10): an overdue card now shows red in both the minicard/list and the opened card detail. The card-detail status colours now use `!important` so overdue red overrides the due-date yellow base (matching the minicard), and the colour-decision logic is unified into one shared helper used by both views. - [Fixed unable to view all cards by due date](https://redirect.github.com/wekan/wekan/commit/b3acbd692): removed the `limit: 100` cap in the `dueCards` publication so all of a user's due cards across boards are shown. - [Fixed unable to scroll past the first cards in the Due Cards view on mobile](https://redirect.github.com/wekan/wekan/commit/b3acbd692): the due-cards list now has a scoped scroll container with a viewport-relative max height. - [Fixed card-detail sub-popups disappearing on mobile](https://redirect.github.com/wekan/wekan/commit/5c890baca): assigning a user or setting the due date on touch devices no longer closes the popup (touch events inside the popup no longer bubble to the click-outside close handler on mobile viewports). - [Fixed mobile board layout and tiny Home button](https://redirect.github.com/wekan/wekan/commit/5c890baca): minicards now render one per row (full width) on narrow screens and the header Home / All Boards button is a proper tap target. - [Fixed enormous icons/menus/text after upgrade](https://redirect.github.com/wekan/wekan/commit/5c890baca): clamped runaway icon/label sizing on mobile. - [Fixed oversized padding/margins and stray ➕ emoji from recent UI changes](https://redirect.github.com/wekan/wekan/commit/5c890baca): trimmed excessive padding/margins on mobile; remaining stray plus emojis are tracked for replacement with a Font Awesome icon. - [Fixed board-level search not including comments](https://redirect.github.com/wekan/wekan/commit/b998246c3): in-board search now matches text inside card comments, consistent with global search. - [Fixed "create list" not available in Lists board-view mode](https://redirect.github.com/wekan/wekan/commit/c18ae388b): the "Add list" composer now appears in Lists mode (using the board's default swimlane), not only in Swimlanes mode. - [Fixed board/list/swimlane numbering breaking first-letter keyboard navigation](https://redirect.github.com/wekan/wekan/commit/fe4d2a56f): the move/copy card popups no longer prefix a number to each option, so options start with their name again and digit-named boards are readable. - [Fixed missing notification and card-history entry when a new attachment is uploaded](https://redirect.github.com/wekan/wekan/commit/f59273508): uploading an attachment now creates an `addAttachment` activity, so card members and subscribers are notified (consistent with attachment removal); previously the activity was never created because the store-strategy upload hook was dead code. - [Fixed copying a card selecting all/unnamed labels on the destination board](https://redirect.github.com/wekan/wekan/commit/d26d117e3): `Cards.copy()` now applies the same unnamed-label guard as `Cards.move()` and persists the remapped labels onto the inserted card. - [Fixed copied card losing its cover ("show as thumb")](https://redirect.github.com/wekan/wekan/commit/a0e701708): `coverId` is now remapped to the newly copied attachment instead of pointing at the original (now-unresolvable) attachment id. - [Fixed deleting a date on a linked card not taking effect](https://redirect.github.com/wekan/wekan/commit/09e9c993e): `unsetReceived/unsetStart/unsetDue/unsetEnd` now resolve the real card id via `getRealId()` (consistent with the `set*` methods) so they update the underlying linked card, not the link placeholder. - [Fixed comment-only members being able to archive cards from the UI](https://redirect.github.com/wekan/wekan/commit/aa412b2a1): the archive action now respects `Utils.canModifyCard()` like every other mutating card action (the server allow-rule already rejected the write; this closes the client-side UX gap). - [Fixed sub-task board being inaccessible until a reload](https://redirect.github.com/wekan/wekan/commit/45bd7dcc8): the "view subtask" navigation now guards against a not-yet-loaded board, mirroring the sibling handler. - [Fixed the "When a card is moved to Archive" rule trigger not being activatable](https://redirect.github.com/wekan/wekan/commit/da7c06ec6): a CSS class-name mismatch (`js-add-arc-trigger` vs `js-add-arch-trigger`) between the board-triggers template and its click handler is fixed, with a regression test. - [Fixed "select all in list" crossing swimlanes](https://redirect.github.com/wekan/wekan/commit/300a9751e): list select-all is now scoped to the current swimlane in swimlanes view (`allCards()` gained an optional swimlane scope); list-wide behaviour is preserved where there is no swimlane context. - [Fixed copying a swimlane to another board losing card labels](https://redirect.github.com/wekan/wekan/commit/9643dcded): missing board-level labels are now recreated on the destination board (preserving colour) before the per-card copy so label assignments survive. - [Fixed Calendar View ignoring the start-day-of-week setting](https://redirect.github.com/wekan/wekan/commit/7eec78c04): FullCalendar's `firstDay` is now derived from `getStartDayOfWeek()` instead of the locale default. - [Fixed deleted-attachment notification crediting the uploader instead of the deleter](https://redirect.github.com/wekan/wekan/commit/2ba8882d8): the `deleteAttachment` activity now records the acting user (falling back to the uploader for server/system removals). - [Fixed updating a card title not firing the outgoing webhook](https://redirect.github.com/wekan/wekan/commit/9aa97ab8f): a title change now logs an `a-changedTitle` activity (rendered in the activity feed) so the existing outgoing-webhook hook fires, consistent with description/date changes. - [Fixed @​mention: pressing Enter to pick a user closed the card / submitted the comment](https://redirect.github.com/wekan/wekan/commit/3ce75dd87), also [#​4172](https://redirect.github.com/wekan/wekan/issues/4172) and [#​5457](https://redirect.github.com/wekan/wekan/issues/5457): when the @​mention autocomplete dropdown is open, Enter now selects the highlighted user instead of submitting/closing (shared textcomplete keydown guard hardened). - [Fixed REST card API move/sort/date/archive bugs](https://redirect.github.com/wekan/wekan/commit/39e12035e): consolidated duplicated board-move variable names ([#​5398](https://redirect.github.com/wekan/wekan/issues/5398)); moving a card to another list via the API now puts it on top of the destination list like the Move Card dialog ([#​5399](https://redirect.github.com/wekan/wekan/issues/5399)); due/received/start/end dates set via the API now persist instead of being stripped ([#​5537](https://redirect.github.com/wekan/wekan/issues/5537)); and archived cards can be inspected via the single-card GET and de-archived without needing a `list_id` ([#​5546](https://redirect.github.com/wekan/wekan/issues/5546)). - [Fixed the per-checklist "Hide checked items" toggle being inverted and affecting all checklists](https://redirect.github.com/wekan/wekan/commit/e98aae278): it is now read per checklist and hides an item exactly when it is checked and that checklist's toggle is on. - [Fixed setting a list/swimlane colour to `silver` saving it as None](https://redirect.github.com/wekan/wekan/commit/6f8543322): list/swimlane colours are normalized through a shared canonical allowed-colour helper, so `silver` (and every offered colour) is accepted and rendered. - [Fixed internal caret `^board^` helper boards appearing in board lists and the REST API](https://redirect.github.com/wekan/wekan/commit/f819054bb): caret-wrapped titles and non-`board` types are now filtered from `/api/users/:userId/boards`, `/api/boards` and the `Boards.userBoards` helper, consistent with the UI. - [Fixed being unable to remove a deleted (non-existent) user from a board's members](https://redirect.github.com/wekan/wekan/commit/beac9e3d7): orphaned member entries are now hard-removed by userId even when the user account no longer exists. - [Fixed a custom number field displaying as `NaN` when cleared after being set](https://redirect.github.com/wekan/wekan/commit/98315c26c): an empty number value is stored as `''` and rendered as empty via a shared `formatNumberValue` helper. - [Fixed subtask creation producing extra swimlanes/columns and only allowing one subtask](https://redirect.github.com/wekan/wekan/commit/4b27313c7), also [#​5788](https://redirect.github.com/wekan/wekan/issues/5788), [#​2256](https://redirect.github.com/wekan/wekan/issues/2256) and [#​4782](https://redirect.github.com/wekan/wekan/issues/4782): subtask creation is now server-authoritative (`addSubtaskCard` Meteor method) and client-side auto-creation of the default subtasks board/list is guarded to the server, so the client can no longer create duplicate subtasks boards/swimlanes and multiple subtasks can be created reliably. - [Fixed board "always on card" custom fields not being applied to new subtask cards](https://redirect.github.com/wekan/wekan/commit/4b27313c7), also [#​3562](https://redirect.github.com/wekan/wekan/issues/3562): the destination board's automatic custom fields are now added to a new subtask. - [Fixed a circular subtask/parent reference hanging the whole board](https://redirect.github.com/wekan/wekan/commit/4b27313c7): the parent-chain guard compared array indices instead of ids; it now compares by value and `setParentId` refuses a cyclic re-parent. - [Fixed the board Subtasks "Landing list for subtasks deposited here" setting not saving / showing the wrong list](https://redirect.github.com/wekan/wekan/commit/774289f92), also [#​3876](https://redirect.github.com/wekan/wekan/issues/3876), [#​4849](https://redirect.github.com/wekan/wekan/issues/4849) and [#​4947](https://redirect.github.com/wekan/wekan/issues/4947): the settings popup now reads the deposit board's lists and matches the stored `subtasksDefaultListId`. - [Fixed the subtask "View it" button opening the parent card instead of the subtask](https://redirect.github.com/wekan/wekan/commit/c5cdc7b65): navigation now targets the subtask's own board/card. - [Fixed deleting a card not firing the outgoing webhook](https://redirect.github.com/wekan/wekan/commit/7bb7540ba): card deletion now creates a `deleteCard` activity (in the before-remove hook and the REST delete endpoints) so the outgoing webhook fires; board/list/swimlane deletion already emitted their delete activities ([#​2950](https://redirect.github.com/wekan/wekan/issues/2950)). - [Fixed a configured outgoing webhook making it impossible to set card members](https://redirect.github.com/wekan/wekan/commit/8863ec24a): outgoing webhook delivery is now fire-and-forget and error-isolated, so a slow/unreachable/failing webhook endpoint can no longer abort the member update. Thanks to above GitHub users for their contributions and translators for their translations. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC93ZWthbiIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
This commit is contained in:
TrueCharts Bot
@@ -9,7 +9,7 @@ annotations:
|
||||
trueforge.org/min_helm_version: "3.14"
|
||||
trueforge.org/train: stable
|
||||
apiVersion: v2
|
||||
appVersion: 9.64.0
|
||||
appVersion: 9.65.0
|
||||
dependencies:
|
||||
- name: common
|
||||
version: 29.5.3
|
||||
@@ -44,5 +44,5 @@ sources:
|
||||
- https://hub.docker.com/r/wekanteam/wekan
|
||||
- https://wekan.github.io/
|
||||
type: application
|
||||
version: 21.30.1
|
||||
version: 21.31.0
|
||||
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
# yaml-language-server: $schema=./values.schema.json
|
||||
image:
|
||||
repository: docker.io/wekanteam/wekan
|
||||
tag: v9.64@sha256:ed6c960b41ec41ed37f1013c69f7d92a74eb073a1b3abca7c6fc7b5285a09244
|
||||
tag: v9.65@sha256:a453464d0f2d8314238e01f9c12d0aa8ea25ef8d45ee7bbf7025a051556ed1e2
|
||||
pullPolicy: IfNotPresent
|
||||
service:
|
||||
main:
|
||||
|
||||
Reference in New Issue
Block a user