fix(vaultwarden): update image ghcr.io/dani-garcia/vaultwarden 1.35.3 → 1.35.4 (#45466)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/dani-garcia/vaultwarden](https://redirect.github.com/dani-garcia/vaultwarden) | patch | `1ca2e20` → `43498a9` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>dani-garcia/vaultwarden (ghcr.io/dani-garcia/vaultwarden)</summary> ### [`v1.35.4`](https://redirect.github.com/dani-garcia/vaultwarden/releases/tag/1.35.4) [Compare Source](https://redirect.github.com/dani-garcia/vaultwarden/compare/1.35.3...1.35.4) #### Security Fixes This release contains security fixes for the following advisories. We strongly advice to update as soon as possible. - [GHSA-w9f8-m526-h7fh](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-w9f8-m526-h7fh). This vulnerability would allow an attacker to access a cipher from a different user (fully encrypted) if they already know its internal UUID. - [GHSA-h4hq-rgvh-wh27](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h4hq-rgvh-wh27). This vulnerability allows an attacker with manager-level access within an organization to modify collections they can access, even if they do not have management permissions for them. - [GHSA-r32r-j5jq-3w4m](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-r32r-j5jq-3w4m). This vulnerability allows an attacker with manager-level access within an organization to modify collections they are not assigned. These are private for now, pending CVE assignment. #### What's Changed - Update Rust and Crates and GHA by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6843](https://redirect.github.com/dani-garcia/vaultwarden/pull/6843) - hide remember 2fa token by [@​stefan0xC](https://redirect.github.com/stefan0xC) in [#​6852](https://redirect.github.com/dani-garcia/vaultwarden/pull/6852) - fix(send\_invite): invite links by [@​proofofcopilot](https://redirect.github.com/proofofcopilot) in [#​6824](https://redirect.github.com/dani-garcia/vaultwarden/pull/6824) - Misc organization fixes by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6867](https://redirect.github.com/dani-garcia/vaultwarden/pull/6867) #### New Contributors - [@​proofofcopilot](https://redirect.github.com/proofofcopilot) made their first contribution in [#​6824](https://redirect.github.com/dani-garcia/vaultwarden/pull/6824) **Full Changelog**: <https://github.com/dani-garcia/vaultwarden/compare/1.35.3...1.35.4> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvdmF1bHR3YXJkZW4iLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
This commit is contained in:
@@ -14,7 +14,7 @@ annotations:
|
||||
trueforge.org/min_helm_version: "3.14"
|
||||
trueforge.org/train: stable
|
||||
apiVersion: v2
|
||||
appVersion: 1.35.3
|
||||
appVersion: 1.35.4
|
||||
dependencies:
|
||||
- name: common
|
||||
version: 28.31.19
|
||||
@@ -46,5 +46,5 @@ sources:
|
||||
- https://github.com/dani-garcia/vaultwarden
|
||||
- https://github.com/trueforge-org/truecharts/tree/master/charts/stable/vaultwarden
|
||||
type: application
|
||||
version: 29.16.0
|
||||
version: 29.16.1
|
||||
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
image:
|
||||
repository: ghcr.io/dani-garcia/vaultwarden
|
||||
pullPolicy: IfNotPresent
|
||||
tag: 1.35.3@sha256:1ca2e2098ba9ab9e46004f4ee61a3be6080ffee3ed41018a95c4b0fb6454a54b
|
||||
tag: 1.35.4@sha256:43498a94b22f9563f2a94b53760ab3e710eefc0d0cac2efda4b12b9eb8690664
|
||||
|
||||
betaImage:
|
||||
repository: ghcr.io/timshel/vaultwarden
|
||||
|
||||
Reference in New Issue
Block a user