fix(vaultwarden): update image ghcr.io/dani-garcia/vaultwarden 1.35.3 → 1.35.4 (#45466)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/dani-garcia/vaultwarden](https://redirect.github.com/dani-garcia/vaultwarden)
| patch | `1ca2e20` → `43498a9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden
(ghcr.io/dani-garcia/vaultwarden)</summary>

###
[`v1.35.4`](https://redirect.github.com/dani-garcia/vaultwarden/releases/tag/1.35.4)

[Compare
Source](https://redirect.github.com/dani-garcia/vaultwarden/compare/1.35.3...1.35.4)

#### Security Fixes

This release contains security fixes for the following advisories. We
strongly advice to update as soon as possible.

-
[GHSA-w9f8-m526-h7fh](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-w9f8-m526-h7fh).
This vulnerability would allow an attacker to access a cipher from a
different user (fully encrypted) if they already know its internal UUID.
-
[GHSA-h4hq-rgvh-wh27](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h4hq-rgvh-wh27).
This vulnerability allows an attacker with manager-level access within
an organization to modify collections they can access, even if they do
not have management permissions for them.
-
[GHSA-r32r-j5jq-3w4m](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-r32r-j5jq-3w4m).
This vulnerability allows an attacker with manager-level access within
an organization to modify collections they are not assigned.

These are private for now, pending CVE assignment.

#### What's Changed

- Update Rust and Crates and GHA by
[@&#8203;BlackDex](https://redirect.github.com/BlackDex) in
[#&#8203;6843](https://redirect.github.com/dani-garcia/vaultwarden/pull/6843)
- hide remember 2fa token by
[@&#8203;stefan0xC](https://redirect.github.com/stefan0xC) in
[#&#8203;6852](https://redirect.github.com/dani-garcia/vaultwarden/pull/6852)
- fix(send\_invite): invite links by
[@&#8203;proofofcopilot](https://redirect.github.com/proofofcopilot) in
[#&#8203;6824](https://redirect.github.com/dani-garcia/vaultwarden/pull/6824)
- Misc organization fixes by
[@&#8203;BlackDex](https://redirect.github.com/BlackDex) in
[#&#8203;6867](https://redirect.github.com/dani-garcia/vaultwarden/pull/6867)

#### New Contributors

- [@&#8203;proofofcopilot](https://redirect.github.com/proofofcopilot)
made their first contribution in
[#&#8203;6824](https://redirect.github.com/dani-garcia/vaultwarden/pull/6824)

**Full Changelog**:
<https://github.com/dani-garcia/vaultwarden/compare/1.35.3...1.35.4>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvdmF1bHR3YXJkZW4iLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
This commit is contained in:
TrueCharts Bot
2026-02-24 02:06:48 +01:00
committed by GitHub
parent 3bb77c3a32
commit 855c4251e5
2 changed files with 3 additions and 3 deletions
+2 -2
View File
@@ -14,7 +14,7 @@ annotations:
trueforge.org/min_helm_version: "3.14"
trueforge.org/train: stable
apiVersion: v2
appVersion: 1.35.3
appVersion: 1.35.4
dependencies:
- name: common
version: 28.31.19
@@ -46,5 +46,5 @@ sources:
- https://github.com/dani-garcia/vaultwarden
- https://github.com/trueforge-org/truecharts/tree/master/charts/stable/vaultwarden
type: application
version: 29.16.0
version: 29.16.1
+1 -1
View File
@@ -2,7 +2,7 @@
image:
repository: ghcr.io/dani-garcia/vaultwarden
pullPolicy: IfNotPresent
tag: 1.35.3@sha256:1ca2e2098ba9ab9e46004f4ee61a3be6080ffee3ed41018a95c4b0fb6454a54b
tag: 1.35.4@sha256:43498a94b22f9563f2a94b53760ab3e710eefc0d0cac2efda4b12b9eb8690664
betaImage:
repository: ghcr.io/timshel/vaultwarden