TrueCharts Bot
2b381a0d6e
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/kanboard/kanboard](https://kanboard.org) ([source](https://redirect.github.com/kanboard/kanboard)) | patch | `d4667ba` → `8cd4667` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>kanboard/kanboard (ghcr.io/kanboard/kanboard)</summary> ### [`v1.2.52`](https://redirect.github.com/kanboard/kanboard/releases/tag/v1.2.52): Kanboard 1.2.52 [Compare Source](https://redirect.github.com/kanboard/kanboard/compare/v1.2.51...v1.2.52) - Enforce comment visibility rules for public and unauthenticated users: - Restricted comments are no longer exposed in public task views. - Users cannot create comments with a visibility level higher than their role. - Revoke public access tokens for inactive users. - Use timing-safe comparisons (`hash_equals`) for API and webhook token validation to mitigate timing attacks. - Replace raw SQL interpolation with parameterized queries in: - Task queries (`TaskFinderModel`) - iCalendar export conditions - Validate task ownership in bulk operations: - Ensure tasks belong to the specified project before applying bulk changes. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAva2FuYm9hcmQiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
51 lines
1.2 KiB
YAML
51 lines
1.2 KiB
YAML
# yaml-language-server: $schema=./values.schema.json
|
|
image:
|
|
repository: ghcr.io/kanboard/kanboard
|
|
tag: "v1.2.52@sha256:8cd46677f1f3b97bb45e8bcf30512ab92f30a9578cee51b406d2dd297a223859"
|
|
pullPolicy: IfNotPresent
|
|
service:
|
|
main:
|
|
ports:
|
|
main:
|
|
port: 10015
|
|
targetPort: 80
|
|
persistence:
|
|
data:
|
|
enabled: true
|
|
mountPath: "/var/www/app/data"
|
|
ssl:
|
|
enabled: true
|
|
mountPath: "/etc/nginx/ssl"
|
|
cnpg:
|
|
main:
|
|
enabled: true
|
|
user: kanboard
|
|
database: kanboard
|
|
|
|
securityContext:
|
|
container:
|
|
readOnlyRootFilesystem: false
|
|
runAsNonRoot: false
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
workload:
|
|
main:
|
|
podSpec:
|
|
containers:
|
|
main:
|
|
env:
|
|
MAIL_CONFIGURATION: false
|
|
LOG_DRIVER: stdout
|
|
DB_DRIVER: "postgres"
|
|
DB_NAME: "{{ .Values.cnpg.main.database }}"
|
|
DB_USERNAME: "{{ .Values.cnpg.main.user }}"
|
|
DB_PORT: "5432"
|
|
DB_PASSWORD:
|
|
secretKeyRef:
|
|
name: cnpg-main-user
|
|
key: password
|
|
DB_HOSTNAME:
|
|
secretKeyRef:
|
|
name: cnpg-main-urls
|
|
key: host
|