From 5a414adc1ae9b286ce900b66d21353630ff8dc58 Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Mon, 18 May 2026 07:07:02 +0200 Subject: [PATCH] =?UTF-8?q?feat(ntfy):=20update=20image=20docker.io/binwie?= =?UTF-8?q?derhier/ntfy=20v2.22.0=20=E2=86=92=20v2.23.0=20(#48323)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/binwiederhier/ntfy](https://ntfy.sh/) ([source](https://redirect.github.com/binwiederhier/ntfy)) | minor | `d8b3408` → `b32b422` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes
binwiederhier/ntfy (docker.io/binwiederhier/ntfy) ### [`v2.23.0`](https://redirect.github.com/binwiederhier/ntfy/releases/tag/v2.23.0) [Compare Source](https://redirect.github.com/binwiederhier/ntfy/compare/v2.22.0...v2.23.0) **Features:** - Add per-visitor rate limit on new topic creations (`visitor-topic-creation-limit-burst` / `visitor-topic-creation-limit-replenish`, defaults 100 burst / 1m replenish) to mitigate topic-enumeration / squatting attacks that inflate the in-memory topic map **Bug fixes + maintenance:** - Remove `stacktrace-js`, `stacktrace-gps`, `humanize-duration`, and `js-base64` from the web app to reduce dependency and security footprint - Restrict the publish dialog's local file preview to safe image types (png/jpg/gif/webp) to prevent same-origin script execution from blob URLs when previewing a crafted SVG ([GHSA-j8hr-p342-xrmh](https://redirect.github.com/binwiederhier/ntfy/security/advisories/GHSA-j8hr-p342-xrmh), thanks to [@​Venukamatchi](https://redirect.github.com/Venukamatchi) for reporting)
--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- charts/stable/ntfy/Chart.yaml | 4 ++-- charts/stable/ntfy/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/stable/ntfy/Chart.yaml b/charts/stable/ntfy/Chart.yaml index 11047a0d1ec..f7b72539157 100644 --- a/charts/stable/ntfy/Chart.yaml +++ b/charts/stable/ntfy/Chart.yaml @@ -9,7 +9,7 @@ annotations: trueforge.org/min_helm_version: "3.14" trueforge.org/train: stable apiVersion: v2 -appVersion: 2.22.0 +appVersion: 2.23.0 dependencies: - name: common version: 29.3.4 @@ -35,5 +35,5 @@ sources: - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/ntfy - https://hub.docker.com/r/binwiederhier/ntfy type: application -version: 13.6.0 +version: 13.7.0 diff --git a/charts/stable/ntfy/values.yaml b/charts/stable/ntfy/values.yaml index df29eb306d4..e32c4dad4a8 100644 --- a/charts/stable/ntfy/values.yaml +++ b/charts/stable/ntfy/values.yaml @@ -1,7 +1,7 @@ # yaml-language-server: $schema=./values.schema.json image: repository: docker.io/binwiederhier/ntfy - tag: v2.22.0@sha256:d8b3408c75d5ae78e03339af6103e7e6195e56573eea6f1ad34bb4dc4f44f340 + tag: v2.23.0@sha256:b32b4221a64ec2e7c000f0782b2feef24022e1a09a24e531640f4cbba6cfa1e6 pullPolicy: IfNotPresent service: main: