DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 19 Packages Projects Releases 1 Wiki Activity
57,197 Commits 1 Branch 1 Tag
af89c32a8a3fb898dc20716ef56b7ee8c04ec2bd
Commit Graph

57197 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
TrueCharts Bot af89c32a8a fix(gitea): update image docker.io/gitea/gitea 1.26.3 → 1.26.4 (#49338) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/gitea/gitea](https://redirect.github.com/go-gitea/gitea) |
patch | `4d1d796` → `cd1d261` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>go-gitea/gitea (docker.io/gitea/gitea)</summary>

###
[`v1.26.4`](https://redirect.github.com/go-gitea/gitea/blob/HEAD/CHANGELOG.md#1264---2026-06-21)

[Compare
Source](https://redirect.github.com/go-gitea/gitea/compare/v1.26.3...v1.26.4)

- SECURITY
- fix(auth): do not auto-reactivate disabled users on OAuth2 callback
([#&#8203;38009](https://redirect.github.com/go-gitea/gitea/issues/38009))
([#&#8203;38183](https://redirect.github.com/go-gitea/gitea/issues/38183))

- BUGFIXES
- fix: walk git log context error handling
([#&#8203;38182](https://redirect.github.com/go-gitea/gitea/issues/38182))
([#&#8203;38185](https://redirect.github.com/go-gitea/gitea/issues/38185))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9naXRlYSIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2026-06-21 20:36:10 +02:00
TrueCharts Bot 907730b086 chore(automatic-ripping-machine): update image docker.io/automaticrippingmachine/automatic-ripping-machine digest to 1a8f270 (#49332) 2026-06-21 20:35:43 +02:00
TrueCharts Bot 18c5e5022b feat(tdarr): update image docker.io/haveagitgat/tdarr 2.78.01 → 2.79.01 (#49341) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/haveagitgat/tdarr](https://redirect.github.com/HaveAGitGat/tdarr_express_be)
| minor | `e5163f3` → `d32377a` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC90ZGFyciIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2026-06-21 20:35:42 +02:00
TrueCharts Bot 1556a2a4fa fix(tandoor-recipes): update image ghcr.io/tandoorrecipes/recipes 2.6.9 → 2.6.11 (#49339) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/tandoorrecipes/recipes](https://redirect.github.com/TandoorRecipes/recipes)
| patch | `969c5b3` → `2eb9a80` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>TandoorRecipes/recipes
(ghcr.io/tandoorrecipes/recipes)</summary>

###
[`v2.6.11`](https://redirect.github.com/TandoorRecipes/recipes/releases/tag/2.6.11)

[Compare
Source](https://redirect.github.com/TandoorRecipes/recipes/compare/2.6.10...2.6.11)

- **improved** pantry booking dialog and table
- **fixed** another order parameter

###
[`v2.6.10`](https://redirect.github.com/TandoorRecipes/recipes/releases/tag/2.6.10)

[Compare
Source](https://redirect.github.com/TandoorRecipes/recipes/compare/2.6.9...2.6.10)

- **fixed** recipes marked as private could be viewed trough API utility
endpoints
<https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-cqj3-64qw-4w52>
- **fixed** recipe search and recipe book API endpoints accepting any
order by attribute
<https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-4x57-2q4q-xwpp>
- **fixed** regex ddos possibility in automation engine
<https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-f2gw-c2c7-59v7>
- **fixed** AI Providers could be configured with malicious URLs to
allow SSRF
<https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-wq4h-2r8x-cv65>
- ⚠️ if you are using custom AI backends you need to add them to the new
`AI_ALLOWED_URLS` settings (see
<https://docs.tandoor.dev/system/configuration/#ai-integration>)
- **fixed** bookmarklets of other users in your own space could be
accessed/deleted
<https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-4vw7-c646-g23w>
- **updated** lots of dependencies
- **updated** translations for various languages

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC90YW5kb29yLXJlY2lwZXMiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2026-06-21 20:34:59 +02:00
TrueCharts Bot 30aa35d955 chore(nitter): update image docker.io/zedeus/nitter digest to f724be5 (#49334) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/zedeus/nitter | digest | `2eb2292` → `f724be5` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9uaXR0ZXIiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==-->
 2026-06-21 20:30:38 +02:00
TrueCharts Bot 7d52297319 chore(medusa): update image ghcr.io/linuxserver/medusa digest to 4720869 (#49328) 2026-06-21 14:27:47 +02:00
TrueCharts Bot 76b3891e8e fix(vocechat-server): update image docker.io/privoce/vocechat-server v0.5.19 → v0.5.20 (#49330) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/privoce/vocechat-server | patch | `ce9edf2` → `e5007e9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC92b2NlY2hhdC1zZXJ2ZXIiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2026-06-21 14:27:40 +02:00
TrueCharts Bot f1661d8326 chore(nitter): update image docker.io/zedeus/nitter digest to 2eb2292 (#49329) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/zedeus/nitter | digest | `cb58e02` → `2eb2292` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9uaXR0ZXIiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==-->
 2026-06-21 14:27:01 +02:00
TrueCharts Bot 598dc40402 fix(vocechat-server): update image docker.io/privoce/vocechat-server v0.5.18 → v0.5.19 (#49327) 2026-06-21 08:23:39 +02:00
TrueCharts Bot 9e741f64ce fix(multus-cni): update image docker.io/alpine/crane 0.21.6 → 0.21.7 (#49326) 2026-06-21 08:23:32 +02:00
TrueCharts Bot e4de601c13 chore(steam-headless): update image docker.io/josh5/steam-headless digest to adbc8de (#49324) 2026-06-21 08:23:24 +02:00
TrueCharts Bot 2938c519a8 fix(mstream): update image ghcr.io/linuxserver/mstream 6.11.1 → 6.11.2 (#49325) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/linuxserver/mstream](https://redirect.github.com/linuxserver/docker-mstream/packages)
([source](https://redirect.github.com/linuxserver/docker-mstream)) |
patch | `ce2f683` → `b2ca98d` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9tc3RyZWFtIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==-->
 2026-06-21 08:23:19 +02:00
TrueCharts Bot a6461f8e2e chore(anything-llm): update image ghcr.io/mintplex-labs/anything-llm digest to 31a3d37 (#49321) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/mintplex-labs/anything-llm | digest | `16f75d1` → `31a3d37` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9hbnl0aGluZy1sbG0iLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==-->
 2026-06-21 08:22:19 +02:00
TrueCharts Bot d750988287 chore(nitter): update image docker.io/zedeus/nitter digest to cb58e02 (#49323) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/zedeus/nitter | digest | `1bc87a3` → `cb58e02` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9uaXR0ZXIiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==-->
 2026-06-21 06:21:46 +00:00
TrueCharts Bot 5223ee6efc chore(farmos): update image docker.io/farmos/farmos digest to e297af5 (#49322) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/farmos/farmos | digest | `d083818` → `e297af5` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9mYXJtb3MiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==-->
 2026-06-21 08:21:29 +02:00
TrueCharts-Bot fbf207006c Commit daily changes 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2026-06-21 00:44:28 +00:00
TrueCharts Bot 731d30dcef chore(nitter): update image docker.io/zedeus/nitter digest to 1bc87a3 (#49316) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/zedeus/nitter | digest | `6879f43` → `1bc87a3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9uaXR0ZXIiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==-->
 2026-06-21 02:23:36 +02:00
TrueCharts Bot 3da7fbf450 feat(wekan): update image docker.io/wekanteam/wekan v9.64 → v9.65 (#49320) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/wekanteam/wekan](https://redirect.github.com/wekan/wekan) |
minor | `ed6c960` → `a453464` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>wekan/wekan (docker.io/wekanteam/wekan)</summary>

###
[`v9.65`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v965-2026-06-20-WeKan--release)

[Compare
Source](https://redirect.github.com/wekan/wekan/compare/v9.64...v9.65)

This release adds the following updates:

- Issue triage: closed 13 already-fixed Bug issues (with evidence),
relabeled \~25 mislabeled feature requests to `Feature` with a "Feature
Request:" title prefix, and prefixed \~35 environment-specific reports
"Environment specific:" and gave them the `Bug:Environment-specific`
label.
- Audited labels on all 533 open issues for correctness (type,
`Feature:Area`, `Targets:`, `Severity:`, etc.).
- Added 23 missing GitHub labels found by auditing `docs/Login` and
`docs/Features` against the issue labels, matching the existing label
style and colours (`Feature:*` = `#&#8203;0052cc`, `Targets:*` =
`#fbca04`), and applied them across open and closed issues:
- Login methods (`Feature:User-accounts:*`): ADFS, Azure, B2C, Google,
Header-Login, Nextcloud, Oracle, Zitadel, Autologin, Accounts-Lockout,
Forgot-Password.
- Features: `Feature:LaTeX`, `Feature:Mermaid-Diagram`, `Feature:Emoji`,
`Feature:Python`, `Feature:Cards:Cover`, `Feature:Cards:Location`,
`Feature:Custom-Logo`, `Feature:RTL`, `Feature:Members`,
`Feature:Multitenancy`, `Feature:Allow-private-boards-only`.
  - Platform: `Targets:Apache`.

and adds the following new features:

- [Threaded comment
replies](https://redirect.github.com/wekan/wekan/commit/bdb8e6254): card
comments gain an optional
`parentId`; a "Reply" link links a new comment to its parent, rendered
with an "in reply to" quote. Initial MVP
  (single-level visual threading).
- [Restrict board admins from editing/deleting other users'
comments](https://redirect.github.com/wekan/wekan/commit/bdb8e6254):
new board setting `restrictCommentEditing` (default off). When on, only
a comment's author may edit/delete it;
  enforced server-side via collection hooks.
- [Visible status of
sub-tasks](https://redirect.github.com/wekan/wekan/commit/d7ae93bb2):
each subtask now shows its current
list (prefixed with the board title when on a different board) read-only
next to its title.
- [Drag-and-drop search results into board
columns](https://redirect.github.com/wekan/wekan/commit/b998246c3):
cards in the
search-results list can be dragged onto board lists, reusing the
existing `card.move()`. MVP: drops append to
  the end of the target list (no pixel-precise insertion index yet).
- [Per-user permanent dismissal of the Announcement
banner](https://redirect.github.com/wekan/wekan/commit/bf75efaef): a
user
can permanently close the current announcement so it does not reappear
on reload/board-switch, until the admin
  edits the announcement text (which makes it reappear for everyone).
- [Show how many times a card's due date was
changed](https://redirect.github.com/wekan/wekan/commit/a8ed326a5): the
card detail
now displays a "due date changed N times" count (derived from existing
`a-dueAt` activities) for deadline
  accountability.
- [Restrict adding board members to the same Organization or
Team](https://redirect.github.com/wekan/wekan/commit/371258a6d):
new global admin setting `boardMembersFromSameOrgOrTeamOnly` (default
off). When on, a user can only be added to
a board if they share an Organization or Team with the inviter or an
active board member; enforced server-side in
  the invite/search paths. Site admins bypass.
- [Import Google Calendar `.ics` files into board
cards](https://redirect.github.com/wekan/wekan/commit/0a43d8ac3): MVP,
import-only. New dependency-free iCalendar parser
(`server/lib/icsImport.js`) maps each `VEVENT` to a card with
`startAt`/`dueAt` so events appear on Calendar/Gantt views, plus an
`importIcsToBoard` Meteor method and a REST
endpoint `POST
/api/boards/:boardId/swimlanes/:swimlaneId/lists/:listId/ics`
(documented in the OpenAPI spec, with
an `importics` example in `api.py`). Two-way Google Calendar sync is not
included (see

[wekan-ical-server](https://redirect.github.com/wekan/wekan-ical-server)
for read-only WeKan→calendar export).

and fixes the following bugs:

- [Fixed OIDC/OAuth2 "Log Out" redirecting to the identity provider home
page instead of back to
Wekan](https://redirect.github.com/wekan/wekan/commit/9e50c69eaaec8928b4eb8a122f9cb6f0447464a9).
With autologin (`OIDC_REDIRECTION_ENABLED=true`), clicking Log Out
redirected to the OAuth2 server URL
(for example the Keycloak base URL `https://id.company.com`), which
shows an error page for non-admin
users. Added the new optional `OAUTH2_LOGOUT_ENDPOINT` setting: when set
to the provider's
`end_session_endpoint` (Keycloak example
`/realms/<realm>/protocol/openid-connect/logout`), Wekan now
performs an OIDC RP-initiated logout that ends the identity provider
session and returns the user to
Wekan (`ROOT_URL`) via `post_logout_redirect_uri`. When unset, logout
behaviour is unchanged, so this
is backward compatible. For Keycloak 18+, add your Wekan `ROOT_URL` to
the client's
*Valid post logout redirect URIs*. See
[docs/Login/Keycloak/Keycloak.md](https://redirect.github.com/wekan/wekan/blob/main/docs/Login/Keycloak/Keycloak.md).
  Thanks to zambalee and xet7.
- [Fixed due dates not correctly colour
coded](https://redirect.github.com/wekan/wekan/commit/086254e10): future
due dates
more than 48 hours away are now shaded grey (`not-due`) instead of amber
(`due-soon`). Root cause was a
call to `diff(theDate, now, 'days')` where `'days'` is not a valid unit,
so the threshold compared raw
milliseconds; replaced with a precise hours-based comparison in a single
shared helper.
- [Fixed due date colour mismatch between list and card
detail](https://redirect.github.com/wekan/wekan/commit/086254e10):
an overdue card now shows red in both the minicard/list and the opened
card detail. The card-detail status
colours now use `!important` so overdue red overrides the due-date
yellow base (matching the minicard), and
the colour-decision logic is unified into one shared helper used by both
views.
- [Fixed unable to view all cards by due
date](https://redirect.github.com/wekan/wekan/commit/b3acbd692): removed
the
`limit: 100` cap in the `dueCards` publication so all of a user's due
cards across boards are shown.
- [Fixed unable to scroll past the first cards in the Due Cards view on
mobile](https://redirect.github.com/wekan/wekan/commit/b3acbd692):
the due-cards list now has a scoped scroll container with a
viewport-relative max height.
- [Fixed card-detail sub-popups disappearing on
mobile](https://redirect.github.com/wekan/wekan/commit/5c890baca):
assigning
a user or setting the due date on touch devices no longer closes the
popup (touch events inside the popup no
  longer bubble to the click-outside close handler on mobile viewports).
- [Fixed mobile board layout and tiny Home
button](https://redirect.github.com/wekan/wekan/commit/5c890baca):
minicards now
render one per row (full width) on narrow screens and the header Home /
All Boards button is a proper tap target.
- [Fixed enormous icons/menus/text after
upgrade](https://redirect.github.com/wekan/wekan/commit/5c890baca):
clamped runaway
  icon/label sizing on mobile.
- [Fixed oversized padding/margins and stray ➕ emoji from recent UI
changes](https://redirect.github.com/wekan/wekan/commit/5c890baca):
trimmed excessive padding/margins on mobile; remaining stray plus emojis
are tracked for replacement with a
  Font Awesome icon.
- [Fixed board-level search not including
comments](https://redirect.github.com/wekan/wekan/commit/b998246c3):
in-board search
  now matches text inside card comments, consistent with global search.
- [Fixed "create list" not available in Lists board-view
mode](https://redirect.github.com/wekan/wekan/commit/c18ae388b): the
"Add list" composer now appears in Lists mode (using the board's default
swimlane), not only in Swimlanes mode.
- [Fixed board/list/swimlane numbering breaking first-letter keyboard
navigation](https://redirect.github.com/wekan/wekan/commit/fe4d2a56f):
the move/copy card popups no longer prefix a number to each option, so
options start with their name again and
  digit-named boards are readable.
- [Fixed missing notification and card-history entry when a new
attachment is
uploaded](https://redirect.github.com/wekan/wekan/commit/f59273508):
uploading an attachment now creates an `addAttachment` activity, so card
members and subscribers are notified
(consistent with attachment removal); previously the activity was never
created because the store-strategy
  upload hook was dead code.
- [Fixed copying a card selecting all/unnamed labels on the destination
board](https://redirect.github.com/wekan/wekan/commit/d26d117e3):
`Cards.copy()` now applies the same unnamed-label
guard as `Cards.move()` and persists the remapped labels onto the
inserted card.
- [Fixed copied card losing its cover ("show as
thumb")](https://redirect.github.com/wekan/wekan/commit/a0e701708):
`coverId` is now remapped to the newly copied
attachment instead of pointing at the original (now-unresolvable)
attachment id.
- [Fixed deleting a date on a linked card not taking
effect](https://redirect.github.com/wekan/wekan/commit/09e9c993e):
`unsetReceived/unsetStart/unsetDue/unsetEnd` now
resolve the real card id via `getRealId()` (consistent with the `set*`
methods) so they update the underlying
  linked card, not the link placeholder.
- [Fixed comment-only members being able to archive cards from the
UI](https://redirect.github.com/wekan/wekan/commit/aa412b2a1): the
archive action now respects
`Utils.canModifyCard()` like every other mutating card action (the
server allow-rule already rejected the write;
  this closes the client-side UX gap).
- [Fixed sub-task board being inaccessible until a
reload](https://redirect.github.com/wekan/wekan/commit/45bd7dcc8): the
"view subtask" navigation now guards against a
  not-yet-loaded board, mirroring the sibling handler.
- [Fixed the "When a card is moved to Archive" rule trigger not being
activatable](https://redirect.github.com/wekan/wekan/commit/da7c06ec6):
a CSS class-name mismatch (`js-add-arc-trigger` vs
`js-add-arch-trigger`) between the board-triggers template and its click
handler is fixed, with a regression test.
- [Fixed "select all in list" crossing
swimlanes](https://redirect.github.com/wekan/wekan/commit/300a9751e):
list select-all is now scoped to the current
swimlane in swimlanes view (`allCards()` gained an optional swimlane
scope); list-wide behaviour is preserved
  where there is no swimlane context.
- [Fixed copying a swimlane to another board losing card
labels](https://redirect.github.com/wekan/wekan/commit/9643dcded):
missing board-level labels are now recreated on the
destination board (preserving colour) before the per-card copy so label
assignments survive.
- [Fixed Calendar View ignoring the start-day-of-week
setting](https://redirect.github.com/wekan/wekan/commit/7eec78c04):
FullCalendar's `firstDay` is now derived from
  `getStartDayOfWeek()` instead of the locale default.
- [Fixed deleted-attachment notification crediting the uploader instead
of the
deleter](https://redirect.github.com/wekan/wekan/commit/2ba8882d8): the
`deleteAttachment` activity now records the
  acting user (falling back to the uploader for server/system removals).
- [Fixed updating a card title not firing the outgoing
webhook](https://redirect.github.com/wekan/wekan/commit/9aa97ab8f): a
title change now logs an `a-changedTitle` activity
(rendered in the activity feed) so the existing outgoing-webhook hook
fires, consistent with description/date changes.
- [Fixed @&#8203;mention: pressing Enter to pick a user closed the card
/ submitted the
comment](https://redirect.github.com/wekan/wekan/commit/3ce75dd87), also
[#&#8203;4172](https://redirect.github.com/wekan/wekan/issues/4172)
and [#&#8203;5457](https://redirect.github.com/wekan/wekan/issues/5457):
when the @&#8203;mention autocomplete dropdown is open, Enter now
selects the highlighted user instead of submitting/closing (shared
textcomplete keydown guard hardened).
- [Fixed REST card API move/sort/date/archive
bugs](https://redirect.github.com/wekan/wekan/commit/39e12035e):
consolidated duplicated board-move variable names
([#&#8203;5398](https://redirect.github.com/wekan/wekan/issues/5398));
moving a card to another list via the API now puts it on top of the
destination list like the Move Card
dialog
([#&#8203;5399](https://redirect.github.com/wekan/wekan/issues/5399));
due/received/start/end dates set via the API now
persist instead of being stripped
([#&#8203;5537](https://redirect.github.com/wekan/wekan/issues/5537));
and archived cards can be
inspected via the single-card GET and de-archived without needing a
`list_id`
([#&#8203;5546](https://redirect.github.com/wekan/wekan/issues/5546)).
- [Fixed the per-checklist "Hide checked items" toggle being inverted
and affecting all
checklists](https://redirect.github.com/wekan/wekan/commit/e98aae278):
it is now read per checklist and hides an item exactly
  when it is checked and that checklist's toggle is on.
- [Fixed setting a list/swimlane colour to `silver` saving it as
None](https://redirect.github.com/wekan/wekan/commit/6f8543322):
list/swimlane colours are normalized through a shared
canonical allowed-colour helper, so `silver` (and every offered colour)
is accepted and rendered.
- [Fixed internal caret `^board^` helper boards appearing in board lists
and the REST
API](https://redirect.github.com/wekan/wekan/commit/f819054bb):
caret-wrapped titles and non-`board` types are now
filtered from `/api/users/:userId/boards`, `/api/boards` and the
`Boards.userBoards` helper, consistent with the UI.
- [Fixed being unable to remove a deleted (non-existent) user from a
board's
members](https://redirect.github.com/wekan/wekan/commit/beac9e3d7):
orphaned member entries are now hard-removed by userId
  even when the user account no longer exists.
- [Fixed a custom number field displaying as `NaN` when cleared after
being set](https://redirect.github.com/wekan/wekan/commit/98315c26c): an
empty number value is stored as `''` and rendered as
  empty via a shared `formatNumberValue` helper.
- [Fixed subtask creation producing extra swimlanes/columns and only
allowing one
subtask](https://redirect.github.com/wekan/wekan/commit/4b27313c7), also
[#&#8203;5788](https://redirect.github.com/wekan/wekan/issues/5788),
[#&#8203;2256](https://redirect.github.com/wekan/wekan/issues/2256) and
[#&#8203;4782](https://redirect.github.com/wekan/wekan/issues/4782):
subtask
creation is now server-authoritative (`addSubtaskCard` Meteor method)
and client-side auto-creation of the default
subtasks board/list is guarded to the server, so the client can no
longer create duplicate subtasks boards/swimlanes
  and multiple subtasks can be created reliably.
- [Fixed board "always on card" custom fields not being applied to new
subtask
cards](https://redirect.github.com/wekan/wekan/commit/4b27313c7), also
[#&#8203;3562](https://redirect.github.com/wekan/wekan/issues/3562):
the destination board's automatic custom fields are now added to a new
subtask.
- [Fixed a circular subtask/parent reference hanging the whole
board](https://redirect.github.com/wekan/wekan/commit/4b27313c7): the
parent-chain guard compared array indices instead of
ids; it now compares by value and `setParentId` refuses a cyclic
re-parent.
- [Fixed the board Subtasks "Landing list for subtasks deposited here"
setting not saving / showing the wrong
list](https://redirect.github.com/wekan/wekan/commit/774289f92), also
[#&#8203;3876](https://redirect.github.com/wekan/wekan/issues/3876),
[#&#8203;4849](https://redirect.github.com/wekan/wekan/issues/4849) and
[#&#8203;4947](https://redirect.github.com/wekan/wekan/issues/4947): the
settings popup now reads the deposit board's lists and matches the
stored `subtasksDefaultListId`.
- [Fixed the subtask "View it" button opening the parent card instead of
the subtask](https://redirect.github.com/wekan/wekan/commit/c5cdc7b65):
navigation now targets the subtask's own board/card.
- [Fixed deleting a card not firing the outgoing
webhook](https://redirect.github.com/wekan/wekan/commit/7bb7540ba): card
deletion now creates a `deleteCard` activity (in the
before-remove hook and the REST delete endpoints) so the outgoing
webhook fires; board/list/swimlane deletion already
emitted their delete activities
([#&#8203;2950](https://redirect.github.com/wekan/wekan/issues/2950)).
- [Fixed a configured outgoing webhook making it impossible to set card
members](https://redirect.github.com/wekan/wekan/commit/8863ec24a):
outgoing webhook delivery is now fire-and-forget and
error-isolated, so a slow/unreachable/failing webhook endpoint can no
longer abort the member update.

Thanks to above GitHub users for their contributions and translators for
their translations.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC93ZWthbiIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2026-06-21 02:19:42 +02:00
TrueCharts Bot ac3e3ca2d7 feat(ghostfolio): update image docker.io/ghostfolio/ghostfolio 3.12.0 → 3.13.0 (#49319) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/ghostfolio/ghostfolio](https://redirect.github.com/ghostfolio/ghostfolio)
| minor | `f8728e6` → `1d62d9a` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>ghostfolio/ghostfolio
(docker.io/ghostfolio/ghostfolio)</summary>

###
[`v3.13.0`](https://redirect.github.com/ghostfolio/ghostfolio/blob/HEAD/CHANGELOG.md#3130---2026-06-20)

[Compare
Source](https://redirect.github.com/ghostfolio/ghostfolio/compare/3.12.0...3.13.0)

##### Added

- Added an icon to indicate external links in the page tabs component
- Added the Korean (`ko`) language to the footer
- Added a data gathering frequency (`DAILY` or `HOURLY`) to the asset
profile to control the market data gathering interval

##### Changed

- Changed the *Fear & Greed Index* (market mood) in the markets overview
to use the stored market data instead of a live quote
- Moved the endpoint to get the asset profiles from `GET
api/v1/admin/market-data` to `GET api/v1/asset-profiles`
- Moved the endpoint to get the asset profile details from `GET
api/v1/market-data/:dataSource/:symbol` to `GET
api/v1/asset-profiles/:dataSource/:symbol`
- Added the selected asset profile count to the delete menu item of the
historical market data table in the admin control panel
- Added the selected asset profile count to the deletion confirmation
dialog of the historical market data table in the admin control panel
- Improved the sorting to be case-insensitive in the platform management
of the admin control panel
- Improved the sorting to be case-insensitive in the tag management of
the admin control panel
- Improved the language localization for German (`de`)
- Upgraded `yahoo-finance2` from version `3.14.2` to `3.15.3`

##### Fixed

- Fixed an issue with the localization of the country names
- Fixed an issue in the data provider service where quotes could be
missing for symbols that exist in multiple data sources by keying the
quotes response by the asset profile identifier

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9naG9zdGZvbGlvIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==-->
 2026-06-21 02:19:03 +02:00
TrueCharts Bot 94ec1ff6e5 fix(gitea): update image docker.io/gitea/gitea 1.26.2 → 1.26.3 (#49317) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/gitea/gitea](https://redirect.github.com/go-gitea/gitea) |
patch | `c5c21a7` → `4d1d796` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>go-gitea/gitea (docker.io/gitea/gitea)</summary>

###
[`v1.26.3`](https://redirect.github.com/go-gitea/gitea/releases/tag/v1.26.3)

[Compare
Source](https://redirect.github.com/go-gitea/gitea/compare/v1.26.2...v1.26.3)

- BREAKING

- fix(actions)!: require merged PR to bypass fork PR approval gate
([#&#8203;38010](https://redirect.github.com/go-gitea/gitea/issues/38010))
([#&#8203;38041](https://redirect.github.com/go-gitea/gitea/issues/38041))

- SECURITY
- fix(hostmatcher): patch incorrect private list
([#&#8203;38170](https://redirect.github.com/go-gitea/gitea/issues/38170))
([#&#8203;38173](https://redirect.github.com/go-gitea/gitea/issues/38173))
- fix: Various security fixes
([#&#8203;38103](https://redirect.github.com/go-gitea/gitea/issues/38103))
([#&#8203;38151](https://redirect.github.com/go-gitea/gitea/issues/38151))
- fix: Various sec fixes
([#&#8203;38108](https://redirect.github.com/go-gitea/gitea/issues/38108))
([#&#8203;38147](https://redirect.github.com/go-gitea/gitea/issues/38147))
- fix: allow git clone of private repos with anonymous code access
([#&#8203;38074](https://redirect.github.com/go-gitea/gitea/issues/38074))
([#&#8203;38146](https://redirect.github.com/go-gitea/gitea/issues/38146))
- fix(auth): ignore stale OIDC external login links to organizations
([#&#8203;37875](https://redirect.github.com/go-gitea/gitea/issues/37875))
([#&#8203;38141](https://redirect.github.com/go-gitea/gitea/issues/38141))
- fix(hostmatcher): block reserved IP ranges from external/private
filters
([#&#8203;38039](https://redirect.github.com/go-gitea/gitea/issues/38039))
([#&#8203;38059](https://redirect.github.com/go-gitea/gitea/issues/38059))
- fix(lfs): require Code-unit access for cross-repo LFS object reuse
([#&#8203;38006](https://redirect.github.com/go-gitea/gitea/issues/38006))
([#&#8203;38050](https://redirect.github.com/go-gitea/gitea/issues/38050))
- fix(lfs): reject unknown SSH LFS sub-verbs to prevent auth bypass
([#&#8203;38008](https://redirect.github.com/go-gitea/gitea/issues/38008))
([#&#8203;38015](https://redirect.github.com/go-gitea/gitea/issues/38015))
- fix: bound CODEOWNERS regex match time
([#&#8203;38011](https://redirect.github.com/go-gitea/gitea/issues/38011))
([#&#8203;38025](https://redirect.github.com/go-gitea/gitea/issues/38025))
- fix: bound debian ParseControlFile to a single control stanza
([#&#8203;38044](https://redirect.github.com/go-gitea/gitea/issues/38044))
([#&#8203;38055](https://redirect.github.com/go-gitea/gitea/issues/38055))
- fix(deps): update module golang.org/x/net to v0.55.0 \[security]
([#&#8203;37813](https://redirect.github.com/go-gitea/gitea/issues/37813))
([#&#8203;37829](https://redirect.github.com/go-gitea/gitea/issues/37829))

- API
- feat(api): add Link header in ListForks
([#&#8203;38052](https://redirect.github.com/go-gitea/gitea/issues/38052))
([#&#8203;38063](https://redirect.github.com/go-gitea/gitea/issues/38063))

- BUGFIXES
- fix: Fix the panic when ssh remote lfs endpoint parsing failure
([#&#8203;38026](https://redirect.github.com/go-gitea/gitea/issues/38026))
([#&#8203;38158](https://redirect.github.com/go-gitea/gitea/issues/38158))
- fix(api): nil pointer panic when filtering tracked times by a
non-existent user
([#&#8203;38112](https://redirect.github.com/go-gitea/gitea/issues/38112))
([#&#8203;38115](https://redirect.github.com/go-gitea/gitea/issues/38115))
- fix: keep literal "false" value displayed in workflow\_dispatch choice
dropdowns
([#&#8203;38080](https://redirect.github.com/go-gitea/gitea/issues/38080))
([#&#8203;38096](https://redirect.github.com/go-gitea/gitea/issues/38096))
- fix: parse HEAD ref
([#&#8203;38119](https://redirect.github.com/go-gitea/gitea/issues/38119))
- fix: git cmd
([#&#8203;38084](https://redirect.github.com/go-gitea/gitea/issues/38084))
([#&#8203;38087](https://redirect.github.com/go-gitea/gitea/issues/38087))
- fix(releases): generate notes for initial tag
([#&#8203;37697](https://redirect.github.com/go-gitea/gitea/issues/37697))
([#&#8203;37986](https://redirect.github.com/go-gitea/gitea/issues/37986))
- fix(actions): return 404 when job log blob is missing
([#&#8203;38003](https://redirect.github.com/go-gitea/gitea/issues/38003))
([#&#8203;38004](https://redirect.github.com/go-gitea/gitea/issues/38004))
- fix(actions): exclude `workflow_call` from workflow trigger detection
([#&#8203;37894](https://redirect.github.com/go-gitea/gitea/issues/37894))
([#&#8203;37899](https://redirect.github.com/go-gitea/gitea/issues/37899))
- fix(actions): keep action run title clickable when commit subject is a
URL
([#&#8203;37867](https://redirect.github.com/go-gitea/gitea/issues/37867))
([#&#8203;37898](https://redirect.github.com/go-gitea/gitea/issues/37898))
- fix(actions): reject workflow\_dispatch for workflows without that
trigger
([#&#8203;37660](https://redirect.github.com/go-gitea/gitea/issues/37660))
([#&#8203;37895](https://redirect.github.com/go-gitea/gitea/issues/37895))
- fix(actions): ack re-sent `UpdateLog` finalize idempotently
([#&#8203;37885](https://redirect.github.com/go-gitea/gitea/issues/37885))
([#&#8203;37892](https://redirect.github.com/go-gitea/gitea/issues/37892))
- fix: http content file render
([#&#8203;37850](https://redirect.github.com/go-gitea/gitea/issues/37850))
([#&#8203;37856](https://redirect.github.com/go-gitea/gitea/issues/37856))
- fix(issues): clear stale ReviewTypeRequest when submitting pending
review
([#&#8203;37809](https://redirect.github.com/go-gitea/gitea/issues/37809))
([#&#8203;37815](https://redirect.github.com/go-gitea/gitea/issues/37815))
- fix: Fix issue target branch selection for non-collaborators
([#&#8203;36916](https://redirect.github.com/go-gitea/gitea/issues/36916))
([#&#8203;38164](https://redirect.github.com/go-gitea/gitea/issues/38164))

- BUILD
- fix(deps): update `@playwright/test` to 1.60.0
([#&#8203;38144](https://redirect.github.com/go-gitea/gitea/issues/38144))
- ci: add `tools/ci-tools.ts` for the PR labeler workflow
([#&#8203;37831](https://redirect.github.com/go-gitea/gitea/issues/37831))
- fix(build): swagger css import
([#&#8203;37801](https://redirect.github.com/go-gitea/gitea/issues/37801))
([#&#8203;37803](https://redirect.github.com/go-gitea/gitea/issues/37803))

Instances on **[Gitea Cloud](https://cloud.gitea.com)** will be
automatically upgraded to this version during the specified maintenance
window.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9naXRlYSIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2026-06-21 02:17:24 +02:00
TrueCharts Bot cd72d44acb fix(slink): update image docker.io/anirdev/slink v1.12.0 → v1.12.1 (#49318) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/anirdev/slink](https://docs.slinkapp.io)
([source](https://redirect.github.com/andrii-kryvoviaz/slink)) | patch |
`4de5027` → `2547ac8` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>andrii-kryvoviaz/slink (docker.io/anirdev/slink)</summary>

###
[`v1.12.1`](https://redirect.github.com/andrii-kryvoviaz/slink/releases/tag/v1.12.1)

[Compare
Source](https://redirect.github.com/andrii-kryvoviaz/slink/compare/v1.12.0...v1.12.1)

#### 📦 Patch Notes

##### 🛠️ Improvements & Fixes

- **Upload Page:** General UI/UX improvements and fixes across the
upload page.
- **Volume Permissions:** Fixed a permissions issue affecting mounted
volumes on some NAS systems.
- **Maintenance:** Patched dependencies for security advisories across
the API (jwt-framework, Guzzle, PSR-7, JMESPath) and client (Babel), and
refreshed project dependencies.

**Full Changelog**:
<https://github.com/andrii-kryvoviaz/slink/compare/v1.12.0...v1.12.1>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9zbGluayIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2026-06-21 02:16:52 +02:00
TrueCharts Bot 6d92c38433 chore(lyrion-music-server): update image docker.io/lmscommunity/lyrionmusicserver digest to cebf4dd (#49315) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/lmscommunity/lyrionmusicserver | digest | `56c7d79` →
`cebf4dd` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9seXJpb24tbXVzaWMtc2VydmVyIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9kaWdlc3QiXX0=-->
 2026-06-21 02:16:10 +02:00
Xstar97TheNoob 44e1854dbd chore(deprecate) deprecate overseerr (#49309) 
**Description**
deprecate overseerr in favor of seerr
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code
- [X] 📜 Documentation Changes

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made changes to the documentation
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [X] ⬆️ I increased versions for any altered app according to semantic
versioning
- [X] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or
`fix(docs):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._
 2026-06-20 20:15:32 +02:00
Xstar97TheNoob b3acd3a8cb chore(deprecate) deprecate jellyseerr (#49308) 
**Description**
jellyseerr is deprecated in favor of seerr
⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code
- [X] 📜 Documentation Changes

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [X] ⚖️ My code follows the style guidelines of this project
- [X] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made changes to the documentation
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [X] ⬆️ I increased versions for any altered app according to semantic
versioning
- [X] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or
`fix(docs):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._
 2026-06-20 20:15:29 +02:00
TrueCharts Bot 9dae5e9849 fix(helm-deps): update chart mongodb 17.4.2 → 17.4.3 (#49311) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [mongodb](https://truecharts.org/charts/stable/mongodb)
([source](https://redirect.github.com/bitnami/bitnami-docker-mongodb)) |
patch | `17.4.2` → `17.4.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC95b3V0dWJlZGwtbWF0ZXJpYWwiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2026-06-20 20:13:41 +02:00
TrueCharts Bot f4d47d5546 feat(orcaslicer): update image ghcr.io/linuxserver/orcaslicer 2.3.2 → 2.4.0 (#49313) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/linuxserver/orcaslicer](https://redirect.github.com/linuxserver/docker-orcaslicer/packages)
([source](https://redirect.github.com/linuxserver/docker-orcaslicer)) |
minor | `98d9a0d` → `904a99f` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9vcmNhc2xpY2VyIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==-->
 2026-06-20 20:13:12 +02:00
TrueCharts Bot b94f85c0a9 chore(mylar): update image lscr.io/linuxserver/mylar3 digest to 077e640 (#49310) 2026-06-20 20:11:21 +02:00
TrueCharts Bot 28361648fe feat(shlink-web-client): update image docker.io/shlinkio/shlink-web-client 4.7.1 → 4.8.0 (#49314) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/shlinkio/shlink-web-client](https://redirect.github.com/shlinkio/shlink-web-client)
| minor | `acc95a7` → `ec804a7` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>shlinkio/shlink-web-client
(docker.io/shlinkio/shlink-web-client)</summary>

###
[`v4.8.0`](https://redirect.github.com/shlinkio/shlink-web-client/blob/HEAD/CHANGELOG.md#480---2026-06-20)

[Compare
Source](https://redirect.github.com/shlinkio/shlink-web-client/compare/v4.7.1...v4.8.0)

##### Added

- \[shlink-web-client] Add support for Shlink 5.1.0, by supporting
browser redirect conditions.

##### Changed

- Update dependencies

##### Deprecated

- *Nothing*

##### Removed

- *Nothing*

##### Fixed

- *Nothing*

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9zaGxpbmstd2ViLWNsaWVudCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2026-06-20 20:11:19 +02:00
TrueCharts Bot 9e427576e7 fix(maintainerr): update image docker.io/maintainerr/maintainerr 3.15.1 → 3.15.2 (#49312) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/maintainerr/maintainerr](https://redirect.github.com/Maintainerr/Maintainerr)
| patch | `fc23686` → `dcfd3f0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>Maintainerr/Maintainerr
(docker.io/maintainerr/maintainerr)</summary>

###
[`v3.15.2`](https://redirect.github.com/Maintainerr/Maintainerr/blob/HEAD/CHANGELOG.md#3152-2026-06-20)

[Compare
Source](https://redirect.github.com/Maintainerr/Maintainerr/compare/v3.15.1...v3.15.2)

#### Highlights

- Fixed transient failure handling for Sonarr and Radarr lookups,
preventing data loss during rule evaluations under heavy load
([#&#8203;3125](https://redirect.github.com/Maintainerr/Maintainerr/issues/3125),
[#&#8203;3128](https://redirect.github.com/Maintainerr/Maintainerr/issues/3128),
[#&#8203;3139](https://redirect.github.com/Maintainerr/Maintainerr/issues/3139)).
- Resolved issues with Jellyfin/Emby automatic collections, ensuring
proper handling of empty collections and preventing resurrection of
deleted media-server links
([#&#8203;3129](https://redirect.github.com/Maintainerr/Maintainerr/issues/3129),
[#&#8203;3134](https://redirect.github.com/Maintainerr/Maintainerr/issues/3134),
[#&#8203;3135](https://redirect.github.com/Maintainerr/Maintainerr/issues/3135),
[#&#8203;3137](https://redirect.github.com/Maintainerr/Maintainerr/issues/3137)).
- Improved Streamystats watchlist handling by inheriting parent show
information for season/episode-level rules, preventing unintended
deletions or unmonitoring
([#&#8203;3127](https://redirect.github.com/Maintainerr/Maintainerr/issues/3127),
[#&#8203;3133](https://redirect.github.com/Maintainerr/Maintainerr/issues/3133)).

#### Fixes

- Fixed transient failure handling for Sonarr and Radarr lookups,
ensuring fail-closed behavior to prevent data loss during rule
evaluations under heavy load
([#&#8203;3125](https://redirect.github.com/Maintainerr/Maintainerr/issues/3125),
[#&#8203;3128](https://redirect.github.com/Maintainerr/Maintainerr/issues/3128),
[#&#8203;3139](https://redirect.github.com/Maintainerr/Maintainerr/issues/3139)).
- Resolved issues with Jellyfin/Emby automatic collections:
- Fixed empty collections not healing properly for Jellyfin/Emby servers
([#&#8203;3129](https://redirect.github.com/Maintainerr/Maintainerr/issues/3129),
[#&#8203;3134](https://redirect.github.com/Maintainerr/Maintainerr/issues/3134)).
- Prevented resurrection of deleted media-server links when handling
empty collections
([#&#8203;3135](https://redirect.github.com/Maintainerr/Maintainerr/issues/3135)).
- Removed redundant empty-collection delete logic for Jellyfin/Emby,
retaining only the repopulation path
([#&#8203;3137](https://redirect.github.com/Maintainerr/Maintainerr/issues/3137)).
- Improved Streamystats watchlist handling by inheriting parent show
information for season/episode-level rules, preventing unintended
deletions or unmonitoring
([#&#8203;3127](https://redirect.github.com/Maintainerr/Maintainerr/issues/3127),
[#&#8203;3133](https://redirect.github.com/Maintainerr/Maintainerr/issues/3133)).

#### Dependencies

- Updated 12 dependencies, including
[@&#8203;types/node](https://redirect.github.com/types/node), sharp,
[@&#8203;faker-js/faker](https://redirect.github.com/faker-js/faker),
and typescript-eslint.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9tYWludGFpbmVyciIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
 2026-06-20 20:10:37 +02:00
Xstar97TheNoob 99901a117f feat(seerr) add cnpg to seerr | BREAKING CHANGES (#49307) 
**Description**
Added cnpg to seer, added migration guide in the docs, and general
housekeeping for values.

⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [X] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [X] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [X] 🔃 Refactor of current code
- [X] 📜 Documentation Changes

**🧪 How Has This Been Tested?**
Tested locally with app-template <3

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [X] ⚖️ My code follows the style guidelines of this project
- [X] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [X] 📄 I have made changes to the documentation
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [X] ⬆️ I increased versions for any altered app according to semantic
versioning
- [X] I made sure the title starts with `feat(chart-name):`,
`fix(chart-name):`, `chore(chart-name):`, `docs(chart-name):` or
`fix(docs):`

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._
 2026-06-20 20:00:28 +02:00
TrueCharts Bot 6014a04b7c fix(minecraft-bedrock): update image docker.io/itzg/minecraft-bedrock-server 2026.6.0 → 2026.6.1 (#49285) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/itzg/minecraft-bedrock-server](https://redirect.github.com/itzg/docker-minecraft-bedrock-server)
| patch | `2847bb6` → `35e2cc7` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>itzg/docker-minecraft-bedrock-server
(docker.io/itzg/minecraft-bedrock-server)</summary>

###
[`v2026.6.1`](https://redirect.github.com/itzg/docker-minecraft-bedrock-server/releases/tag/2026.6.1)

[Compare
Source](https://redirect.github.com/itzg/docker-minecraft-bedrock-server/compare/2026.6.0...2026.6.1)

<!-- Release notes generated using configuration in .github/release.yml
at c4d868eba7fdcb761f974be5847975b0de185c28 -->

#### What's Changed

##### Other Changes

- Update dependency itzg/mc-server-runner to v1.14.8 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;647](https://redirect.github.com/itzg/docker-minecraft-bedrock-server/pull/647)
- Update dependency itzg/mc-monitor to v0.16.7 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;646](https://redirect.github.com/itzg/docker-minecraft-bedrock-server/pull/646)
- Update dependency itzg/easy-add to v0.8.14 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;645](https://redirect.github.com/itzg/docker-minecraft-bedrock-server/pull/645)
- Update dependency itzg/mc-server-runner to v1.15.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;648](https://redirect.github.com/itzg/docker-minecraft-bedrock-server/pull/648)

**Full Changelog**:
<https://github.com/itzg/docker-minecraft-bedrock-server/compare/2026.6.0...2026.6.1>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9taW5lY3JhZnQtYmVkcm9jayIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->

---------

Signed-off-by: Alfred Göppel <43101280+alfi0812@users.noreply.github.com>
Co-authored-by: Alfred Göppel <43101280+alfi0812@users.noreply.github.com>
 2026-06-20 16:50:46 +00:00
TrueCharts Bot be75079944 feat(pgadmin): update image docker.io/dpage/pgadmin4 9.15 → 9.16 (#49257) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/dpage/pgadmin4 | minor | `cefc4cc` → `40fa840` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9wZ2FkbWluIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9taW5vciJdfQ==-->

---------

Signed-off-by: Alfred Göppel <43101280+alfi0812@users.noreply.github.com>
Co-authored-by: Alfred Göppel <43101280+alfi0812@users.noreply.github.com>
 2026-06-20 16:43:34 +00:00
TrueCharts Bot e6c4ddf73c fix(helm-deps): update chart mariadb 18.4.0 → 18.4.1 (#49230) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [mariadb](https://truecharts.org/charts/stable/mariadb)
([source](https://redirect.github.com/bitnami/bitnami-docker-mariadb)) |
patch | `18.4.0` → `18.4.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC95b3VybHMiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2026-06-20 14:40:02 +02:00
TrueCharts Bot cb2d0bf992 chore(kiwix-serve): update image ghcr.io/kiwix/kiwix-serve digest to 12df8dc (#49288) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/kiwix/kiwix-serve](https://redirect.github.com/openzim/kiwix-tools)
| digest | `7431be2` → `12df8dc` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9raXdpeC1zZXJ2ZSIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvZGlnZXN0Il19-->
 2026-06-20 12:39:49 +00:00
TrueCharts Bot 5152f4046e feat(helm-deps): update chart kong 3.3.0 → 3.4.0 (#49255) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [kong](https://konghq.com/)
([source](https://redirect.github.com/Kong/charts)) | minor | `3.3.0` →
`3.4.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

---

### Release Notes

<details>
<summary>Kong/charts (kong)</summary>

###
[`v3.4.0`](https://redirect.github.com/Kong/charts/releases/tag/kong-3.4.0)

[Compare
Source](https://redirect.github.com/Kong/charts/compare/kong-3.3.0...kong-3.4.0)

The Cloud-Native Ingress and API-management

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9rdWJlcm5ldGVzLWRhc2hib2FyZCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2026-06-20 14:39:36 +02:00
TrueCharts Bot 9bdb1da5f9 fix(external-service): update image alpine 3.24.0 → 3.24.1 (#49265) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| alpine | patch | `a2d49ea` → `28bd5fe` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9leHRlcm5hbC1zZXJ2aWNlIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9wYXRjaCJdfQ==-->
 2026-06-20 14:38:31 +02:00
TrueCharts Bot 57157d3f72 fix(blocky): update image ghcr.io/0xerr0r/blocky v0.32.0 → v0.32.1 (#49305) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/0xerr0r/blocky](https://redirect.github.com/0xERR0R/blocky) |
patch | `6fddc6f` → `19d856a` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>0xERR0R/blocky (ghcr.io/0xerr0r/blocky)</summary>

###
[`v0.32.1`](https://redirect.github.com/0xERR0R/blocky/releases/tag/v0.32.1)

[Compare
Source](https://redirect.github.com/0xERR0R/blocky/compare/v0.32.0...v0.32.1)

#### Changelog

##### Bug fixes

-
[`d3a1fe5`](https://redirect.github.com/0xERR0R/blocky/commit/d3a1fe57d5ee70b3c573f2bcade0556957f0a028):
fix(dnssec): don't cache transient Indeterminate validation results
([#&#8203;2120](https://redirect.github.com/0xERR0R/blocky/issues/2120))
([#&#8203;2127](https://redirect.github.com/0xERR0R/blocky/issues/2127))
([@&#8203;0xERR0R](https://redirect.github.com/0xERR0R))
-
[`fc353a0`](https://redirect.github.com/0xERR0R/blocky/commit/fc353a009230735e20888e08e373ad88f4bc15bb):
fix(dnssec): only validate public-upstream answers
([#&#8203;2126](https://redirect.github.com/0xERR0R/blocky/issues/2126))
([#&#8203;2128](https://redirect.github.com/0xERR0R/blocky/issues/2128))
([@&#8203;0xERR0R](https://redirect.github.com/0xERR0R))
-
[`53cfbda`](https://redirect.github.com/0xERR0R/blocky/commit/53cfbda3399b256527394ef837ce15a6b2007034):
fix(querylog): add loong64 to unsupported list
([#&#8203;2123](https://redirect.github.com/0xERR0R/blocky/issues/2123))
([@&#8203;rtmongold](https://redirect.github.com/rtmongold))

##### Build and dependencies

-
[`cad2480`](https://redirect.github.com/0xERR0R/blocky/commit/cad2480c4ede15165ddfc034cf5cdf3091f1672d):
build(deps): bump actions/checkout from 6 to 7
([#&#8203;2124](https://redirect.github.com/0xERR0R/blocky/issues/2124))
([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot])
-
[`6ff7db7`](https://redirect.github.com/0xERR0R/blocky/commit/6ff7db7b61202c4e3a7053e67db052f821b4a2b8):
build(deps): bump github.com/moby/moby/api from 1.54.2 to 1.55.0
([#&#8203;2125](https://redirect.github.com/0xERR0R/blocky/issues/2125))
([@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot])

***

#### ❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no
telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its
continued development:

[GitHub Sponsors](https://redirect.github.com/sponsors/0xERR0R) ·
[thanks.dev](https://thanks.dev/u/gh/0xERR0R) ·
[Liberapay](https://liberapay.com/spx01) ·
[Ko-fi](https://ko-fi.com/0xerr0r) ·
[PayPal](https://paypal.me/spx01)

Thank you to everyone supporting Blocky! 🙏

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9ibG9ja3kiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2026-06-20 14:15:28 +02:00
TrueCharts Bot 1999c803a9 chore(tubesync): update image ghcr.io/meeb/tubesync digest to 1c717e2 (#49304) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/meeb/tubesync | digest | `fcdf065` → `1c717e2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC90dWJlc3luYyIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvZGlnZXN0Il19-->
 2026-06-20 14:13:42 +02:00
TrueCharts Bot c1a8689b03 fix(metube): update image ghcr.io/alexta69/metube 2026.06.18 → 2026.06.20 (#49306) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/alexta69/metube | patch | `9bb4b82` → `a07754c` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9tZXR1YmUiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
 2026-06-20 14:13:28 +02:00
TrueCharts Bot ce85568b84 chore(rickroll): update image docker.io/modem7/docker-rickroll digest to 43f0b13 (#49303) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/modem7/docker-rickroll | digest | `412c6f6` → `43f0b13` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9yaWNrcm9sbCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvZGlnZXN0Il19-->
 2026-06-20 14:12:36 +02:00
TrueCharts Bot 6fe9887344 chore(filestash): update image docker.io/machines/filestash digest to a56e3ae (#49300) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/machines/filestash | digest | `d083abd` → `a56e3ae` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9maWxlc3Rhc2giLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==-->
 2026-06-20 14:12:20 +02:00
TrueCharts Bot 8b94ba3b06 chore(newyearcountdownclock): update image docker.io/modem7/newyearcountdown digest to 3174cc8 (#49302) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/modem7/newyearcountdown | digest | `c312cc3` → `3174cc8` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9uZXd5ZWFyY291bnRkb3duY2xvY2siLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==-->
 2026-06-20 12:11:51 +00:00
TrueCharts Bot 687defc048 chore(mongodb): update image docker.io/bitnamisecure/mongodb digest to a6c182f (#49301) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| docker.io/bitnamisecure/mongodb | digest | `e69978e` → `a6c182f` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9tb25nb2RiIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9kaWdlc3QiXX0=-->
 2026-06-20 14:11:25 +02:00
TrueCharts Bot ea619533a1 feat(wekan): update image docker.io/wekanteam/wekan v9.61 → v9.64 (#49299) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/wekanteam/wekan](https://redirect.github.com/wekan/wekan) |
minor | `a193fae` → `ed6c960` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>wekan/wekan (docker.io/wekanteam/wekan)</summary>

###
[`v9.64`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v964-2026-06-20-WeKan--release)

[Compare
Source](https://redirect.github.com/wekan/wekan/compare/v9.63...v9.64)

This release fixes the following CRITICAL SECURITY ISSUE of
[ChecklistBleed](https://wekan.fi/hall-of-fame/checklistbleed/):

- [Fixed ChecklistBleed: any authenticated user can write checklist data
into a private board they are not a member of (cross-board write via
collection allow
rule)](https://redirect.github.com/wekan/wekan/commit/b1ca76007)

([GHSA-gv8h-5p3p-6hx7](https://redirect.github.com/wekan/wekan/security/advisories/GHSA-gv8h-5p3p-6hx7),
CWE-863 Incorrect Authorization). This is the same class as
[BoardBleed](https://wekan.fi/hall-of-fame/boardbleed/)
(GHSA-gm7v-pc38-53jr), but for the card-attached Checklist and
ChecklistItem documents that the
`boardId`-only `denyCrossBoardMove` fix did not cover. Checklists and
checklist items are attached
to a card and carry a denormalized `boardId`; they are MOVED between
cards by `$set`-ting a new
`cardId` (and, for items, a new `checklistId`) in a direct DDP
collection update, after which the
`Checklists.before.update` hook re-derives `boardId` from the
destination card. The collection
allow rules (`server/permissions/checklists.js`,
`server/permissions/checklistItems.js`)
authorized an update by checking only the document's CURRENT (source)
`cardId` — i.e. the
attacker's own board — and never inspected the new destination
`cardId`/`checklistId`/`boardId`.
Because every logged-in user can create a board where they are a
write-capable member, a
low-privileged user with write access to one board could create a
checklist/item on their own
card and then, in a single `/checklists/update` or
`/checklistItems/update` DDP call, set its
`cardId` to a card in a private board where they are not a member (if
they know the target card
id): the allow rule saw the attacker's source card, approved the write,
and the before-update hook
attached the attacker-controlled document to the victim's private board.
The protected
`moveChecklist` Meteor method correctly checks both source and
destination board membership, but a
DDP client can bypass that method and update the collections directly.
CVSS:3.1 Moderate
(AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). Fixed by adding
`denyCrossBoardMoveByCard` and
`denyCrossBoardMoveByChecklistItem` helpers in `server/lib/utils.js` and
a `Checklists.deny`/
`ChecklistItems.deny` `update` rule on each collection that rejects any
update whose destination
board — resolved from a new `boardId`, `cardId`, or `checklistId` in the
modifier — the caller has
no write access to. Legitimate moves into boards the user belongs to and
same-card edits keep
working, and the server-side `moveChecklist` method (which bypasses
allow/deny) is unchanged.
A regression test (`server/lib/tests/checklistbleed.security.tests.js`)
was added.
  Affected Wekan v9.62 and earlier.
  Thanks to DavidCarliez, xet7 and Claude.

and adds the following updates:

- [Fix the Docker pre-build version guard false-failing the
release](https://redirect.github.com/wekan/wekan/commit/069dbc11f).
The bundle-version guard added for the Admin-Panel-version fix assumed
the WeKan app
`package.json` ships as a standalone file with a `v`-prefixed version,
and made "not found"
fatal. Meteor does not ship it that way — it inlines the app
`package.json` into the compiled
`bundle/programs/server/app/app.js` as a JSON module
(`{"name":"wekan","version":"v9.63.0",...}`),
so the guard found no v-prefixed `package.json` and aborted the v9.63
Docker build. The guard now
reads the version from that inlined module (anchored on
`"name":"wekan"`, exactly what
`require('/package.json')` resolves to), and a detection miss is now a
warning that continues
rather than a hard failure — only a confirmed version MISMATCH blocks
the release, since
  `--build-arg VERSION` is the actual guarantee.
  Thanks to xet7 and Claude.

Thanks to above GitHub users for their contributions and translators for
their translations.

###
[`v9.63`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v963-2026-06-19-WeKan--release)

[Compare
Source](https://redirect.github.com/wekan/wekan/compare/v9.61...v9.63)

This release adds the following features:

- [Fix the wekan.fi install page version never updating from a stale
value](https://redirect.github.com/wekan/wekan/commit/40c3ee098).
The `release-all.yml` website job ran every release but the install
page's
version stayed frozen at v9.57: `releases/release-website.sh` updated it
with a
sed anchored on `>v$OLD</span>`, which silently no-op'd once the
published
page's value no longer matched the `old_version` passed for a release.
Anchor
on the stable `<span class="version-number">` instead and re-normalize
whatever
version is there to the new one, with an assert so a miss fails loudly.
Same
self-healing fix applied to the local-flow copy in
`releases/version.sh`. The
  live wekan.fi install page was also corrected to the current version.
  Thanks to xet7 and Claude.

- [Make the remaining release version substitutions
self-healing](https://redirect.github.com/wekan/wekan/commit/1e5ae8f64).
Hardened the last `$OLD_VERSION`-anchored seds in `releases/version.sh`
— the
same fragile pattern that froze the Docker `ARG VERSION` and the install
page.
The snapcraft.yaml bundle download was release-critical (same class as
the
Docker bug: the snap downloads `wekan-<v>-<arch>.zip`, so a stale value
ships
the wrong bundle under the right name) and was stuck at v9.57; it now
anchors
on the `wekan-<v>-` / `releases/download/v<v>/` shapes and asserts. The
sandstorm `appVersion` rewrite is now global and self-healing (the
redundant
`$OLD_NO_DOTS`-anchored fixup is dropped), and the Windows Offline.md
doc links
self-heal with a soft warning (cosmetic, so they must not fail the
release).
snapcraft.yaml and Offline.md were also corrected from their stale
v9.57.
  Thanks to xet7 and Claude.

Thanks to above GitHub users for their contributions and translators for
their translations.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC93ZWthbiIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
 2026-06-20 08:00:36 +02:00
TrueCharts Bot c0a3e74ae3 chore(pyload-ng): update image lscr.io/linuxserver/pyload-ng digest to ca0ea1a (#49297) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| lscr.io/linuxserver/pyload-ng | digest | `00c2e4c` → `ca0ea1a` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9weWxvYWQtbmciLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL2RpZ2VzdCJdfQ==-->
 2026-06-20 07:58:20 +02:00
TrueCharts Bot 72804e9972 chore(tachidesk-docker): update image ghcr.io/suwayomi/tachidesk digest to 3f65ed6 (#49298) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/suwayomi/tachidesk | digest | `afe6d68` → `3f65ed6` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC90YWNoaWRlc2stZG9ja2VyIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9kaWdlc3QiXX0=-->
 2026-06-20 07:57:31 +02:00
TrueCharts Bot 7d662ff38e chore(grafana-image-renderer): update image docker.io/grafana/grafana-image-renderer digest to ad8f461 (#49296) 2026-06-20 07:56:41 +02:00
TrueCharts Bot fa8191b774 chore(adminer): update image adminer digest to 4dae499 (#49295) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| adminer | digest | `9ead7e1` → `4dae499` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9hZG1pbmVyIiwiYXV0b21lcmdlIiwicmVub3ZhdGUvY29udGFpbmVyIiwidHlwZS9kaWdlc3QiXX0=-->
 2026-06-20 07:56:40 +02:00
TrueCharts-Bot 518ebe69a3 Commit daily changes 
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
 2026-06-20 00:41:03 +00:00
TrueCharts Bot e2e7c4f454 feat(homarr): update image ghcr.io/homarr-labs/homarr v1.66.1 → v1.67.0 (#49294) 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/homarr-labs/homarr](https://redirect.github.com/homarr-labs/homarr)
| minor | `27bb36e` → `b2206cd` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>homarr-labs/homarr (ghcr.io/homarr-labs/homarr)</summary>

###
[`v1.67.0`](https://redirect.github.com/homarr-labs/homarr/releases/tag/v1.67.0)

[Compare
Source](https://redirect.github.com/homarr-labs/homarr/compare/v1.66.1...v1.67.0)

##### Features

- **analytics:** migrate from Umami to PostHog server-side analytics
([#&#8203;5983](https://redirect.github.com/homarr-labs/homarr/issues/5983))
([d059023](https://redirect.github.com/homarr-labs/homarr/commit/d059023b51a323df027c1cf033454440bd0d7e57))
- Calculate and display total CPU and memory usage
([#&#8203;5911](https://redirect.github.com/homarr-labs/homarr/issues/5911))
([d9cbd54](https://redirect.github.com/homarr-labs/homarr/commit/d9cbd5427d0e5be3e5dbecca8d6069dc8074d810))

##### Bug Fixes

- **auth:** isolate session cookies from other Auth.js apps on same host
([#&#8203;5996](https://redirect.github.com/homarr-labs/homarr/issues/5996))
([e1a245f](https://redirect.github.com/homarr-labs/homarr/commit/e1a245ff2d8520d08957c4a7dbe01d039607a973))
- **deps:** update tailwindcss monorepo to ^4.3.1
([#&#8203;5988](https://redirect.github.com/homarr-labs/homarr/issues/5988))
([78b6e52](https://redirect.github.com/homarr-labs/homarr/commit/78b6e520ac095129398d3da8f2441df408e93e9f))
- **downloads:** sort stalled torrents last when sorting by finish time
([#&#8203;6011](https://redirect.github.com/homarr-labs/homarr/issues/6011))
([c56d9d6](https://redirect.github.com/homarr-labs/homarr/commit/c56d9d6894c717b5c70ab75d6a100d4d1071c2d3)),
closes
[#&#8203;5416](https://redirect.github.com/homarr-labs/homarr/issues/5416)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9ob21hcnIiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->
 2026-06-20 01:54:37 +02:00