From cc9a12bb765f929325afc38119c830ef44dd6cea Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Tue, 14 Apr 2026 05:53:42 +0200 Subject: [PATCH] =?UTF-8?q?fix(vaultwarden):=20update=20image=20ghcr.io/da?= =?UTF-8?q?ni-garcia/vaultwarden=201.35.4=20=E2=86=92=201.35.7=20(#46930)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/dani-garcia/vaultwarden](https://redirect.github.com/dani-garcia/vaultwarden) | patch | `43498a9` → `9a8eec7` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes
dani-garcia/vaultwarden (ghcr.io/dani-garcia/vaultwarden) ### [`v1.35.7`](https://redirect.github.com/dani-garcia/vaultwarden/releases/tag/1.35.7) [Compare Source](https://redirect.github.com/dani-garcia/vaultwarden/compare/1.35.6...1.35.7) #### What's Changed - Fix 2FA for Android by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7093](https://redirect.github.com/dani-garcia/vaultwarden/pull/7093) **Full Changelog**: ### [`v1.35.6`](https://redirect.github.com/dani-garcia/vaultwarden/releases/tag/1.35.6) [Compare Source](https://redirect.github.com/dani-garcia/vaultwarden/compare/1.35.5...1.35.6) #### Notes The previous release contained an issue where Two Factor Remember Tokens and Recovery Tokens were not accepted at all. This has been fixed now in this release. #### What's Changed - Fix MFA Remember by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7085](https://redirect.github.com/dani-garcia/vaultwarden/pull/7085) **Full Changelog**: ### [`v1.35.5`](https://redirect.github.com/dani-garcia/vaultwarden/releases/tag/1.35.5) [Compare Source](https://redirect.github.com/dani-garcia/vaultwarden/compare/1.35.4...1.35.5) #### Security Fixes This release contains security fixes for the following advisories. We strongly advice to update as soon as possible. - [GHSA-937x-3j8m-7w7p](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-937x-3j8m-7w7p) Unconfirmed Owner Can Purge Entire Organization Vault. - [GHSA-569v-845w-g82p](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-569v-845w-g82p) Cross-Org Group Binding Enables Unauthorized Read And Write Access Into Another Organization - [GHSA-6j4w-g4jh-xjfx](https://redirect.github.com/dani-garcia/vaultwarden/security/advisories/GHSA-6j4w-g4jh-xjfx) Refresh tokens not invalidated on security stamp rotation These are private for now, pending CVE assignment. #### Notes - The admin templates have changed, please update them if you override these via templates. - Two Factor Remember Tokens are now valid for max 30 days. Old tokens are invalid directly after upgrading. #### What's Changed - apply policies only to confirmed members by [@​stefan0xC](https://redirect.github.com/stefan0xC) in [#​6892](https://redirect.github.com/dani-garcia/vaultwarden/pull/6892) - Feat(config): add feature flag for Safari account switching by [@​DerPlayer2001](https://redirect.github.com/DerPlayer2001) in [#​6891](https://redirect.github.com/dani-garcia/vaultwarden/pull/6891) - fix: add ForcePasswordReset to api key login by [@​montdidier](https://redirect.github.com/montdidier) in [#​6904](https://redirect.github.com/dani-garcia/vaultwarden/pull/6904) - Add Webauthn related origins flag to known flags. by [@​pasarenicu](https://redirect.github.com/pasarenicu) in [#​6900](https://redirect.github.com/dani-garcia/vaultwarden/pull/6900) - Add 30s cache to SSO exchange\_refresh\_token by [@​Timshel](https://redirect.github.com/Timshel) in [#​6866](https://redirect.github.com/dani-garcia/vaultwarden/pull/6866) - Add cxp-import-mobile and cxp-export-mobile: feature flags on mobile by [@​phoeagon](https://redirect.github.com/phoeagon) in [#​6853](https://redirect.github.com/dani-garcia/vaultwarden/pull/6853) - Misc updates and fixes by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6910](https://redirect.github.com/dani-garcia/vaultwarden/pull/6910) - Support new desktop origin on CORS by [@​dani-garcia](https://redirect.github.com/dani-garcia) in [#​6920](https://redirect.github.com/dani-garcia/vaultwarden/pull/6920) - Fix `checkout` action version by [@​dfunkt](https://redirect.github.com/dfunkt) in [#​6921](https://redirect.github.com/dani-garcia/vaultwarden/pull/6921) - Fix apikey login by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6922](https://redirect.github.com/dani-garcia/vaultwarden/pull/6922) - Fix email header base64 padding by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6961](https://redirect.github.com/dani-garcia/vaultwarden/pull/6961) - Update Feature Flags by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6981](https://redirect.github.com/dani-garcia/vaultwarden/pull/6981) - Update crates and GHA by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6980](https://redirect.github.com/dani-garcia/vaultwarden/pull/6980) - Use protected CI environment by [@​dani-garcia](https://redirect.github.com/dani-garcia) in [#​7004](https://redirect.github.com/dani-garcia/vaultwarden/pull/7004) - Fix 2FA Remember to actually be 30 days by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​6929](https://redirect.github.com/dani-garcia/vaultwarden/pull/6929) - Misc Updates by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7027](https://redirect.github.com/dani-garcia/vaultwarden/pull/7027) - Switch to `attest` action by [@​dfunkt](https://redirect.github.com/dfunkt) in [#​7017](https://redirect.github.com/dani-garcia/vaultwarden/pull/7017) - Rotate refresh-tokens on sstamp reset by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7031](https://redirect.github.com/dani-garcia/vaultwarden/pull/7031) - Misc org fixes by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7032](https://redirect.github.com/dani-garcia/vaultwarden/pull/7032) - Fix empty string FolderId by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7048](https://redirect.github.com/dani-garcia/vaultwarden/pull/7048) - Disable deployments for release env by [@​dfunkt](https://redirect.github.com/dfunkt) in [#​7033](https://redirect.github.com/dani-garcia/vaultwarden/pull/7033) - Fix Send icons by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7051](https://redirect.github.com/dani-garcia/vaultwarden/pull/7051) - prevent managers from creating collections by [@​stefan0xC](https://redirect.github.com/stefan0xC) in [#​6890](https://redirect.github.com/dani-garcia/vaultwarden/pull/6890) - Change SQLite backup to use VACUUM INTO query by [@​getaaron](https://redirect.github.com/getaaron) in [#​6989](https://redirect.github.com/dani-garcia/vaultwarden/pull/6989) - Handle `SIGTERM` and `SIGQUIT` shutdown signals. by [@​0x484558](https://redirect.github.com/0x484558) in [#​7008](https://redirect.github.com/dani-garcia/vaultwarden/pull/7008) - Do not display unavailable 2FA options by [@​0x484558](https://redirect.github.com/0x484558) in [#​7013](https://redirect.github.com/dani-garcia/vaultwarden/pull/7013) - Fix logout push identifiers and send logout before clearing devices by [@​qaz741wsd856](https://redirect.github.com/qaz741wsd856) in [#​7047](https://redirect.github.com/dani-garcia/vaultwarden/pull/7047) - Fix windows build issues by [@​idontneedonetho](https://redirect.github.com/idontneedonetho) in [#​7065](https://redirect.github.com/dani-garcia/vaultwarden/pull/7065) - Crate and GHA updates by [@​BlackDex](https://redirect.github.com/BlackDex) in [#​7081](https://redirect.github.com/dani-garcia/vaultwarden/pull/7081) #### New Contributors - [@​DerPlayer2001](https://redirect.github.com/DerPlayer2001) made their first contribution in [#​6891](https://redirect.github.com/dani-garcia/vaultwarden/pull/6891) - [@​montdidier](https://redirect.github.com/montdidier) made their first contribution in [#​6904](https://redirect.github.com/dani-garcia/vaultwarden/pull/6904) - [@​pasarenicu](https://redirect.github.com/pasarenicu) made their first contribution in [#​6900](https://redirect.github.com/dani-garcia/vaultwarden/pull/6900) - [@​phoeagon](https://redirect.github.com/phoeagon) made their first contribution in [#​6853](https://redirect.github.com/dani-garcia/vaultwarden/pull/6853) - [@​getaaron](https://redirect.github.com/getaaron) made their first contribution in [#​6989](https://redirect.github.com/dani-garcia/vaultwarden/pull/6989) - [@​0x484558](https://redirect.github.com/0x484558) made their first contribution in [#​7008](https://redirect.github.com/dani-garcia/vaultwarden/pull/7008) - [@​qaz741wsd856](https://redirect.github.com/qaz741wsd856) made their first contribution in [#​7047](https://redirect.github.com/dani-garcia/vaultwarden/pull/7047) - [@​idontneedonetho](https://redirect.github.com/idontneedonetho) made their first contribution in [#​7065](https://redirect.github.com/dani-garcia/vaultwarden/pull/7065) **Full Changelog**:
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- charts/stable/vaultwarden/Chart.yaml | 4 ++-- charts/stable/vaultwarden/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/stable/vaultwarden/Chart.yaml b/charts/stable/vaultwarden/Chart.yaml index 0eeb580d4d5..d882cccfd6d 100644 --- a/charts/stable/vaultwarden/Chart.yaml +++ b/charts/stable/vaultwarden/Chart.yaml @@ -8,7 +8,7 @@ annotations: trueforge.org/min_helm_version: "3.14" trueforge.org/train: stable apiVersion: v2 -appVersion: 1.35.4 +appVersion: 1.35.7 dependencies: - name: common version: 29.0.10 @@ -40,5 +40,5 @@ sources: - https://github.com/dani-garcia/vaultwarden - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/vaultwarden type: application -version: 30.0.1 +version: 30.0.2 diff --git a/charts/stable/vaultwarden/values.yaml b/charts/stable/vaultwarden/values.yaml index 9c7523f3583..33e3ccf357e 100644 --- a/charts/stable/vaultwarden/values.yaml +++ b/charts/stable/vaultwarden/values.yaml @@ -2,7 +2,7 @@ image: repository: ghcr.io/dani-garcia/vaultwarden pullPolicy: IfNotPresent - tag: 1.35.4@sha256:43498a94b22f9563f2a94b53760ab3e710eefc0d0cac2efda4b12b9eb8690664 + tag: 1.35.7@sha256:9a8eec71f4a52411cc43edc7a50f33e9b6f62b5baca0dd95f0c6e7fd60f1a341 betaImage: repository: ghcr.io/timshel/vaultwarden