fix(vaultwarden): update image ghcr.io/dani-garcia/vaultwarden 1.35.4 → 1.35.7 (#46930)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/dani-garcia/vaultwarden](https://redirect.github.com/dani-garcia/vaultwarden) | patch | `43498a9` → `9a8eec7` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>dani-garcia/vaultwarden (ghcr.io/dani-garcia/vaultwarden)</summary> ### [`v1.35.7`](https://redirect.github.com/dani-garcia/vaultwarden/releases/tag/1.35.7) [Compare Source](https://redirect.github.com/dani-garcia/vaultwarden/compare/1.35.6...1.35.7) #### What's Changed - Fix 2FA for Android by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7093](https://redirect.github.com/dani-garcia/vaultwarden/pull/7093) **Full Changelog**: <https://github.com/dani-garcia/vaultwarden/compare/1.35.6...1.35.7> ### [`v1.35.6`](https://redirect.github.com/dani-garcia/vaultwarden/releases/tag/1.35.6) [Compare Source](https://redirect.github.com/dani-garcia/vaultwarden/compare/1.35.5...1.35.6) #### Notes The previous release contained an issue where Two Factor Remember Tokens and Recovery Tokens were not accepted at all. This has been fixed now in this release. #### What's Changed - Fix MFA Remember by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7085](https://redirect.github.com/dani-garcia/vaultwarden/pull/7085) **Full Changelog**: <https://github.com/dani-garcia/vaultwarden/compare/1.35.5...1.35.6> ### [`v1.35.5`](https://redirect.github.com/dani-garcia/vaultwarden/releases/tag/1.35.5) [Compare Source](https://redirect.github.com/dani-garcia/vaultwarden/compare/1.35.4...1.35.5) #### Security Fixes This release contains security fixes for the following advisories. We strongly advice to update as soon as possible. - [GHSA-937x-3j8m-7w7p](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-937x-3j8m-7w7p) Unconfirmed Owner Can Purge Entire Organization Vault. - [GHSA-569v-845w-g82p](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-569v-845w-g82p) Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization - [GHSA-6j4w-g4jh-xjfx](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6j4w-g4jh-xjfx) Refresh tokens not invalidated on security stamp rotation These are private for now, pending CVE assignment. #### Notes - The admin templates have changed, please update them if you override these via templates. - Two Factor Remember Tokens are now valid for max 30 days. Old tokens are invalid directly after upgrading. #### What's Changed - apply policies only to confirmed members by [@​stefan0xC](https://redirect.github.com/stefan0xC) in [#​6892](https://redirect.github.com/dani-garcia/vaultwarden/pull/6892) - Feat(config): add feature flag for Safari account switching by [@​DerPlayer2001](https://redirect.github.com/DerPlayer2001) in [#​6891](https://redirect.github.com/dani-garcia/vaultwarden/pull/6891) - fix: add ForcePasswordReset to api key login by [@​montdidier](https://redirect.github.com/montdidier) in [#​6904](https://redirect.github.com/dani-garcia/vaultwarden/pull/6904) - Add Webauthn related origins flag to known flags. by [@​pasarenicu](https://redirect.github.com/pasarenicu) in [#​6900](https://redirect.github.com/dani-garcia/vaultwarden/pull/6900) - Add 30s cache to SSO exchange\_refresh\_token by [@​Timshel](https://redirect.github.com/Timshel) in [#​6866](https://redirect.github.com/dani-garcia/vaultwarden/pull/6866) - Add cxp-import-mobile and cxp-export-mobile: feature flags on mobile by [@​phoeagon](https://redirect.github.com/phoeagon) in [#​6853](https://redirect.github.com/dani-garcia/vaultwarden/pull/6853) - Misc updates and fixes by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6910](https://redirect.github.com/dani-garcia/vaultwarden/pull/6910) - Support new desktop origin on CORS by [@​dani-garcia](https://redirect.github.com/dani-garcia) in [#​6920](https://redirect.github.com/dani-garcia/vaultwarden/pull/6920) - Fix `checkout` action version by [@​dfunkt](https://redirect.github.com/dfunkt) in [#​6921](https://redirect.github.com/dani-garcia/vaultwarden/pull/6921) - Fix apikey login by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6922](https://redirect.github.com/dani-garcia/vaultwarden/pull/6922) - Fix email header base64 padding by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6961](https://redirect.github.com/dani-garcia/vaultwarden/pull/6961) - Update Feature Flags by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6981](https://redirect.github.com/dani-garcia/vaultwarden/pull/6981) - Update crates and GHA by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6980](https://redirect.github.com/dani-garcia/vaultwarden/pull/6980) - Use protected CI environment by [@​dani-garcia](https://redirect.github.com/dani-garcia) in [#​7004](https://redirect.github.com/dani-garcia/vaultwarden/pull/7004) - Fix 2FA Remember to actually be 30 days by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6929](https://redirect.github.com/dani-garcia/vaultwarden/pull/6929) - Misc Updates by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7027](https://redirect.github.com/dani-garcia/vaultwarden/pull/7027) - Switch to `attest` action by [@​dfunkt](https://redirect.github.com/dfunkt) in [#​7017](https://redirect.github.com/dani-garcia/vaultwarden/pull/7017) - Rotate refresh-tokens on sstamp reset by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7031](https://redirect.github.com/dani-garcia/vaultwarden/pull/7031) - Misc org fixes by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7032](https://redirect.github.com/dani-garcia/vaultwarden/pull/7032) - Fix empty string FolderId by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7048](https://redirect.github.com/dani-garcia/vaultwarden/pull/7048) - Disable deployments for release env by [@​dfunkt](https://redirect.github.com/dfunkt) in [#​7033](https://redirect.github.com/dani-garcia/vaultwarden/pull/7033) - Fix Send icons by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7051](https://redirect.github.com/dani-garcia/vaultwarden/pull/7051) - prevent managers from creating collections by [@​stefan0xC](https://redirect.github.com/stefan0xC) in [#​6890](https://redirect.github.com/dani-garcia/vaultwarden/pull/6890) - Change SQLite backup to use VACUUM INTO query by [@​getaaron](https://redirect.github.com/getaaron) in [#​6989](https://redirect.github.com/dani-garcia/vaultwarden/pull/6989) - Handle `SIGTERM` and `SIGQUIT` shutdown signals. by [@​0x484558](https://redirect.github.com/0x484558) in [#​7008](https://redirect.github.com/dani-garcia/vaultwarden/pull/7008) - Do not display unavailable 2FA options by [@​0x484558](https://redirect.github.com/0x484558) in [#​7013](https://redirect.github.com/dani-garcia/vaultwarden/pull/7013) - Fix logout push identifiers and send logout before clearing devices by [@​qaz741wsd856](https://redirect.github.com/qaz741wsd856) in [#​7047](https://redirect.github.com/dani-garcia/vaultwarden/pull/7047) - Fix windows build issues by [@​idontneedonetho](https://redirect.github.com/idontneedonetho) in [#​7065](https://redirect.github.com/dani-garcia/vaultwarden/pull/7065) - Crate and GHA updates by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7081](https://redirect.github.com/dani-garcia/vaultwarden/pull/7081) #### New Contributors - [@​DerPlayer2001](https://redirect.github.com/DerPlayer2001) made their first contribution in [#​6891](https://redirect.github.com/dani-garcia/vaultwarden/pull/6891) - [@​montdidier](https://redirect.github.com/montdidier) made their first contribution in [#​6904](https://redirect.github.com/dani-garcia/vaultwarden/pull/6904) - [@​pasarenicu](https://redirect.github.com/pasarenicu) made their first contribution in [#​6900](https://redirect.github.com/dani-garcia/vaultwarden/pull/6900) - [@​phoeagon](https://redirect.github.com/phoeagon) made their first contribution in [#​6853](https://redirect.github.com/dani-garcia/vaultwarden/pull/6853) - [@​getaaron](https://redirect.github.com/getaaron) made their first contribution in [#​6989](https://redirect.github.com/dani-garcia/vaultwarden/pull/6989) - [@​0x484558](https://redirect.github.com/0x484558) made their first contribution in [#​7008](https://redirect.github.com/dani-garcia/vaultwarden/pull/7008) - [@​qaz741wsd856](https://redirect.github.com/qaz741wsd856) made their first contribution in [#​7047](https://redirect.github.com/dani-garcia/vaultwarden/pull/7047) - [@​idontneedonetho](https://redirect.github.com/idontneedonetho) made their first contribution in [#​7065](https://redirect.github.com/dani-garcia/vaultwarden/pull/7065) **Full Changelog**: <https://github.com/dani-garcia/vaultwarden/compare/1.35.4...1.35.5> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvdmF1bHR3YXJkZW4iLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
This commit is contained in:
TrueCharts Bot
@@ -8,7 +8,7 @@ annotations:
|
||||
trueforge.org/min_helm_version: "3.14"
|
||||
trueforge.org/train: stable
|
||||
apiVersion: v2
|
||||
appVersion: 1.35.4
|
||||
appVersion: 1.35.7
|
||||
dependencies:
|
||||
- name: common
|
||||
version: 29.0.10
|
||||
@@ -40,5 +40,5 @@ sources:
|
||||
- https://github.com/dani-garcia/vaultwarden
|
||||
- https://github.com/trueforge-org/truecharts/tree/master/charts/stable/vaultwarden
|
||||
type: application
|
||||
version: 30.0.1
|
||||
version: 30.0.2
|
||||
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
image:
|
||||
repository: ghcr.io/dani-garcia/vaultwarden
|
||||
pullPolicy: IfNotPresent
|
||||
tag: 1.35.4@sha256:43498a94b22f9563f2a94b53760ab3e710eefc0d0cac2efda4b12b9eb8690664
|
||||
tag: 1.35.7@sha256:9a8eec71f4a52411cc43edc7a50f33e9b6f62b5baca0dd95f0c6e7fd60f1a341
|
||||
|
||||
betaImage:
|
||||
repository: ghcr.io/timshel/vaultwarden
|
||||
|
||||
Reference in New Issue
Block a user