From ea60a1fe891cbdc8991ccc3c7ea7e6ad346c5dfb Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Sun, 28 Jun 2026 02:20:59 +0200 Subject: [PATCH] =?UTF-8?q?fix(sftpgo):=20update=20image=20ghcr.io/drakkan?= =?UTF-8?q?/sftpgo=20v2.7.3=20=E2=86=92=20v2.7.4=20(#49582)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/drakkan/sftpgo](https://redirect.github.com/drakkan/sftpgo) | patch | `4d47ba4` → `d915394` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes
drakkan/sftpgo (ghcr.io/drakkan/sftpgo) ### [`v2.7.4`](https://redirect.github.com/drakkan/sftpgo/releases/tag/v2.7.4) [Compare Source](https://redirect.github.com/drakkan/sftpgo/compare/v2.7.3...v2.7.4) ##### New features - Symbolic links: the new `symlink_mode` setting selects, per backend, whether clients holding the `create_symlinks` permission may create symbolic links on the local filesystem, the SFTP backend, or both. It is disabled by default. Creating a link requires `create_symlinks` on both the link's directory and the directory it points into, so per-directory permissions are enforced consistently on the path the client requests. - OIDC redirect: the WebClient OIDC login now preserves a `next` redirect target across the IdP round-trip. ##### Bug fixes - httpd: return after a CSRF failure in the web client login. The login POST handler rendered the CSRF error page but did not return, so execution fell through into the post-connect hook and the credential verification pipeline. Added the missing `return` to match the admin login, password reset, and setup handlers. ##### Hardening - Improve symbolic links handling and add more test cases. - httpd: clean and unify the WebClient post-login redirect target validation.
--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- charts/stable/sftpgo/Chart.yaml | 4 ++-- charts/stable/sftpgo/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/stable/sftpgo/Chart.yaml b/charts/stable/sftpgo/Chart.yaml index 35106b8ae49..e9f93f92138 100644 --- a/charts/stable/sftpgo/Chart.yaml +++ b/charts/stable/sftpgo/Chart.yaml @@ -9,7 +9,7 @@ annotations: trueforge.org/min_helm_version: "3.14" trueforge.org/train: stable apiVersion: v2 -appVersion: 2.7.3 +appVersion: 2.7.4 dependencies: - name: common version: 29.6.0 @@ -36,5 +36,5 @@ sources: - https://github.com/drakkan/sftpgo - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/sftpgo type: application -version: 10.5.0 +version: 10.5.1 diff --git a/charts/stable/sftpgo/values.yaml b/charts/stable/sftpgo/values.yaml index f9d3b1e7601..05924e94622 100644 --- a/charts/stable/sftpgo/values.yaml +++ b/charts/stable/sftpgo/values.yaml @@ -2,7 +2,7 @@ image: pullPolicy: IfNotPresent repository: ghcr.io/drakkan/sftpgo - tag: v2.7.3-plugins@sha256:4d47ba4007a1ddf08739ff4af61b7cec94e8327e57721776bd3f204c029b90d0 + tag: v2.7.4-plugins@sha256:d9153947a0758c5eba37441554b5d8ce977a81013cbeea1f9c2d72db607fcbbf securityContext: container: runAsNonRoot: false