**Description**
<!--
Please include a summary of the change and which issue is fixed. Please
also include relevant motivation and context. List any dependencies that
are required for this change.
-->
⚒️ Fixes a permission issue within the `guacd` security context that
prevented the correct display of video recordings in the UI. By aligning
the GID of `guacd` with `guacamole`, both services now have the
necessary read access to the shared recordings persistence volume.
**⚙️ Type of change**
- [ ] ⚙️ Feature/App addition
- [x] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code
- [ ] 📜 Documentation Changes
**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->
Verified that video recordings are correctly accessible and playable
within the Guacamole UI after applying the GID alignment, otherwise not.
**📃 Notes:**
<!-- Please enter any other relevant information here -->
The fix involves the following configuration change:
```yaml
guacd:
podSpec:
containers:
guacd:
securityContext:
runAsUser: 1000
runAsGroup: 1001 # modified: the gid for both guacamole and guacd must be the same.
```
**✔️ Checklist:**
- [x] ⚖️ My code follows the style guidelines of this project
- [x] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made changes to the documentation
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [x] ⬆️ I increased versions for any altered app according to semantic
versioning
- [x] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or
`fix(docs):`
**➕ App addition**
If this PR is an app addition please make sure you have done the
following.
- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`
---
_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
|
[docker.io/ghostfolio/ghostfolio](https://redirect.github.com/ghostfolio/ghostfolio)
| minor | `84b7801` → `1ae235b` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Release Notes
<details>
<summary>ghostfolio/ghostfolio
(docker.io/ghostfolio/ghostfolio)</summary>
###
[`v2.254.0`](https://redirect.github.com/ghostfolio/ghostfolio/blob/HEAD/CHANGELOG.md#22540---2026-03-10)
[Compare
Source](https://redirect.github.com/ghostfolio/ghostfolio/compare/2.253.0...2.254.0)
##### Added
- Added loan as an asset sub class
##### Changed
- Extended the asset profile details dialog in the admin control panel
to support editing countries for all asset types
- Extended the asset profile details dialog in the admin control panel
to support editing sectors for all asset types
- Migrated the data collection for the *Open Startup* (`/open`) page to
the queue design pattern
- Improved the language localization for German (`de`)
- Upgraded `lodash` from version `4.17.23` to `4.18.1`
##### Fixed
- Improved the style of the activity type component
###
[`v2.253.0`](https://redirect.github.com/ghostfolio/ghostfolio/blob/HEAD/CHANGELOG.md#22530---2026-03-06)
[Compare
Source](https://redirect.github.com/ghostfolio/ghostfolio/compare/2.252.0...2.253.0)
##### Added
- Added support for filtering by activity type on the activities page
(experimental)
- Extended the admin control panel by adding a copy-to-clipboard button
for the application version
##### Changed
- Extended the terms of service for the *Ghostfolio* SaaS (cloud) to
include *Paid Plans* and *Refund Policy*
- Upgraded `prisma` from version `6.19.0` to `6.19.3`
##### Fixed
- Fixed the allocations by account chart on the allocations page in the
*Presenter View*
- Fixed the allocations by asset class chart on the allocations page in
the *Presenter View*
- Fixed the allocations by currency chart on the allocations page in the
*Presenter View*
- Fixed the allocations by ETF provider chart on the allocations page in
the *Presenter View*
- Fixed the allocations by platform chart on the allocations page in the
*Presenter View*
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvZ2hvc3Rmb2xpbyIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
|
[ghcr.io/goofball222/unifi](https://redirect.github.com/goofball222/unifi)
| minor | `1ad78e0` → `d95e596` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Release Notes
<details>
<summary>goofball222/unifi (ghcr.io/goofball222/unifi)</summary>
###
[`v10.2.105`](https://redirect.github.com/goofball222/unifi/releases/tag/10.2.105)
[Compare
Source](https://redirect.github.com/goofball222/unifi/compare/10.1.89...10.2.105)
- UniFi Network Application v10.2.105 -
<https://community.ui.com/releases/UniFi-Network-Application-10-2-105/cf38dace-ce91-4e4a-8ab7-a1d2db30aa55>
**Full Changelog**:
<https://github.com/goofball222/unifi/compare/10.1.89...10.2.105>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvdW5pZmkiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [docker.io/stashapp/stash](https://stashapp.cc)
([source](https://redirect.github.com/stashapp/stash)) | patch |
`422b4d2` → `df744af` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Release Notes
<details>
<summary>stashapp/stash (docker.io/stashapp/stash)</summary>
###
[`v0.31.1`](https://redirect.github.com/stashapp/stash/releases/tag/v0.31.1)
[Compare
Source](https://redirect.github.com/stashapp/stash/compare/v0.31.0...v0.31.1)
### Release Notes
#### v0.31.1 - 2026-04-13
##### 🎨 Improvements
- Added warning when creating a parent tag using the tag tagger where
the parent tag has no remote site id.
([#​6805](https://redirect.github.com/stashapp/stash/pull/6805))
##### 🐛 Bug fixes
- Fixed tag export outputting studios instead of tags.
([#​6819](https://redirect.github.com/stashapp/stash/pull/6819))
- Fixed memory leak in scanning process.
([#​6796](https://redirect.github.com/stashapp/stash/pull/6796))
- Schema migration 84 now attempts to de-duplicate folder entries to
prevent unique constraint violations.
([#​6792](https://redirect.github.com/stashapp/stash/pull/6792))
- Fixed issue where navigating to a scene from the wall view on the
scene or marker list page would require clicking Back twice to return to
the previous page.
([#​6803](https://redirect.github.com/stashapp/stash/pull/6803))
- Page is now reset when changing the selected folder in the folder
sidebar filter.
([#​6804](https://redirect.github.com/stashapp/stash/pull/6804))
- Fixed stash ID pill overflowing on mobile viewports.
([#​6807](https://redirect.github.com/stashapp/stash/pull/6807))
- Migration process now attempts to create the backup directory if it
does not exist.
([#​6808](https://redirect.github.com/stashapp/stash/pull/6808))
- Fixed tag uniqueness check incorrectly interpreting `_` as a wildcard.
([#​6809](https://redirect.github.com/stashapp/stash/pull/6809))
- Fixed websocket connection error when sending messages containing
certain unicode sequences.
([#​6810](https://redirect.github.com/stashapp/stash/pull/6810))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvc3Rhc2giLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
|
[docker.io/haveagitgat/tdarr_node](https://redirect.github.com/HaveAGitGat/tdarr_express_be)
| minor | `dc23bec` → `6359991` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvdGRhcnItbm9kZSIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| ghcr.io/pmmp/pocketmine-mp | patch | `c5a0e1d` → `eb457a3` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvcG9ja2V0bWluZS1tcCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| ghcr.io/atuinsh/atuin | minor | `9bde3fe` → `ac82855` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvYXR1aW4iLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
|
[oci.trueforge.org/containerforge/nzbget](https://ghcr.io/trueforge-org/nzbget)
([source](https://redirect.github.com/nzbgetcom/nzbget)) | minor |
`d4a4de5` → `b11ed64` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvbnpiZ2V0IiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==-->
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
|
[oci.trueforge.org/containerforge/plex](https://ghcr.io/trueforge-org/plex)
([source](https://redirect.github.com/plexinc/pms-docker)) | patch |
`db6292d` → `22bdcae` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvcGxleCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [public.ecr.aws/docker/library/xwiki](https://hub.docker.com/_/xwiki)
([source](https://redirect.github.com/xwiki-contrib/docker-xwiki)) |
patch | `03a2fd8` → `a0e045d` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAveHdpa2kiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
|
[oci.trueforge.org/containerforge/seerr](https://ghcr.io/trueforge-org/seerr)
([source](https://redirect.github.com/seerr-team/seerr)) | patch |
`95e84d1` → `1ec29a8` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Release Notes
<details>
<summary>seerr-team/seerr
(oci.trueforge.org/containerforge/seerr)</summary>
###
[`v3.1.1`](https://redirect.github.com/seerr-team/seerr/releases/tag/v3.1.1)
[Compare
Source](https://redirect.github.com/seerr-team/seerr/compare/v3.1.0...v3.1.1)
This update addresses a critical security vulnerability discovered in
one of our core dependencies (axios).
**This is not the same vulnerability where axios was hijacked.**
##### 🛡️ Security
- Patch
[CVE-2026-40175](https://redirect.github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx)
- Unrestricted Cloud Metadata Exfiltration via Header Injection Chain -
([3ca6422](https://redirect.github.com/seerr-team/seerr/commit/3ca64222ae48db41476c76f8508a7f5612dc579e))
##### 🐛 Bug Fixes
- *(imageproxy)* Type axios instance -
([74100e9](https://redirect.github.com/seerr-team/seerr/commit/74100e9669d3f2dc67a39f9f8fdfe7c5975b980f))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvc2VlcnIiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
