truecharts

T

TrueCharts Bot 0ebc2eb110 feat(vikunja): update image docker.io/vikunja/vikunja 2.1.0 → 2.2.0 (#46263 )

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[docker.io/vikunja/vikunja](https://redirect.github.com/go-vikunja/vikunja)
| minor | `f13103b` → `fefda8b` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>go-vikunja/vikunja (docker.io/vikunja/vikunja)</summary>

###
[`v2.2.0`](https://redirect.github.com/go-vikunja/vikunja/blob/HEAD/CHANGELOG.md#220---2026-03-20)

[Compare
Source](https://redirect.github.com/go-vikunja/vikunja/compare/v2.1.0...v2.2.0)

##### Bug Fixes

- *(attachments)* Sync kanban store and task ref on attachment changes
- *(auth)* Use SameSite=None for refresh token cookie to fix desktop app
- *(auth)* Make SameSite=None conditional on HTTPS for refresh cookie
- *(caldav)* Eliminate nested db session in CalDAV auth
- *(caldav)* Parse timestamps in configured timezone
- *(caldav)* Use /dav/projects/ as home to make iOS/MacOS reminders work
([#&#8203;2417](https://redirect.github.com/go-vikunja/vikunja/issues/2417))
- *(ci)* Remove HTML comments inside table that break markdown rendering
- *(cli)* Make user deletion confirmation check Windows compatible
([#&#8203;2339](https://redirect.github.com/go-vikunja/vikunja/issues/2339))
- *(db)* Prevent SQLite "database is locked" errors under concurrent
writes
- *(db)* Use immediate txlock for SQLite instead of MaxOpenConns(1)
- *(db)* Use WAL mode for SQLite and temp file for ephemeral databases
- *(desktop)* Disable nodeIntegration and enable
contextIsolation/sandbox
- *(desktop)* Validate URL schemes before shell.openExternal
- *(desktop)* Block same-window navigation to external origins
- *(docker)* Remove COPY for deleted patches directory
- *(e2e)* Drain event handlers and stop browser between tests
- *(events)* Defer task event dispatch until after transaction commit
- *(events)* Defer event dispatch for task sub-entities
- *(events)* Defer event dispatch for project operations
- *(events)* Defer event dispatch for team operations
- *(events)* Defer event dispatch for user creation and task positions
- *(events)* Dispatch pending events in CalDAV handlers after commit
- *(events)* Dispatch pending events in migration and export handlers
- *(frontend)* Add horizontal overflow handling to tables on mobile
- *(frontend)* Use semantic class instead of targeting Tailwind utility
- *(frontend)* Use mbs-2 utility class instead of scoped CSS
- *(gantt)* Always show relation arrows and fix arrow Y positioning
- *(gantt)* Update relation arrows in real-time during drag and resize
- *(gantt)* Make relation arrows smaller and dash precedes lines
- *(gantt)* Spread overlapping relation arrows at shared endpoints
- *(gantt)* Improve parent task bar styling and visual grouping
- *(gantt)* Make collapse/expand triangle smaller
- *(gantt)* Move parent diamonds outward with stroke and remove hover
effect
- *(gantt)* Only set hasDerivedDates when children have actual dates
- *(gantt)* Clamp collapse chevron x position to prevent negative offset
- *(gantt)* Remove unreachable hover rule on relation arrows
- *(gantt)* Render collapse chevron after bars for correct SVG paint
order
- *(menu)* Prevent dropdown from closing when cursor crosses offset gap
([#&#8203;2367](https://redirect.github.com/go-vikunja/vikunja/issues/2367))
- *(menu)* Show all project menu items in sidebar dropdown
- *(migration)* Support space-separated date format in TickTick importer
- *(nav)* Project drag handle position
- *(shortcuts)* Resolve lint errors in shortcut module
- *(shortcuts)* Track active sequences explicitly to prevent misfires
- *(tasks)* Support both expand and expand\[] query parameter formats
([#&#8203;2415](https://redirect.github.com/go-vikunja/vikunja/issues/2415))
- *(test)* Update mobile kanban test to use close button instead of back
button
- *(views)* Assign default position when creating new project views
- Use MinPositionSpacing threshold in calculateNewPositionForTask
([#&#8203;2320](https://redirect.github.com/go-vikunja/vikunja/issues/2320))
([3ca4913](3ca4913fcb6dc287adec552dd62024a3b63f477a))
- Remove invalidateAvatarCache call that broke request deduplication
([#&#8203;2317](https://redirect.github.com/go-vikunja/vikunja/issues/2317))
([7297682](7297682cadae3e2c48f2a09d20a6191b561c1eeb))
- Add /tmp directory to Docker image to fix data export
([84d563c](84d563c51b6cd15000f4af6e058362c5e45c8dc2))
- Update old kolaente.dev URLs to code.vikunja.io
([#&#8203;2342](https://redirect.github.com/go-vikunja/vikunja/issues/2342))
([a160048](a160048cc3259773405654746117bf6dc0565eee))
- Validate default settings timezone on startup
([#&#8203;2345](https://redirect.github.com/go-vikunja/vikunja/issues/2345))
([40bcf2b](40bcf2b36f777c6338a40581a472333974770c93))
- Correct package.json indentation after dependency removal
([f8763d8](f8763d812e2a7c7f9b2d28ff3e502693419f859e))
- Remove duplicate close button on mobile task detail view
([8a4f3a9](8a4f3a916f2eae71f0106c42d257b5ee4dc77928))
- Prevent nil pointer panic in mention notification listeners
([18f1687](18f16878a84952cf5d0ddb583385dc340d1f5ff3))
- Only drop Vikunja-owned tables in WipeEverything
([14e2c95](14e2c95a830eb4206390a58f85b4bc49068f23cd))
- Only dump Vikunja-owned tables
([cd7d405](cd7d40583aaa43e1d9445e9f54ea81d14eb12232))
- Remove debug log statements from task duplicate
([6da0f68](6da0f685624c66806027070d537648be9b100e29))
- Close source file handle when duplicating attachments
([7aad96b](7aad96b1991a981245cc119bce189de327ea36ce))
- Preserve cover image when duplicating task
([9c23e19](9c23e196440830d0b94ca18bfb1002a0db27b54c))
- Allow browser caching for file downloads
([#&#8203;2349](https://redirect.github.com/go-vikunja/vikunja/issues/2349))
([54d9775](54d977532e9e9a99281bc56965583d07f3913b21))
- Handle deleted user in saved filter view event listener
([7288483](72884838790db52852c8643ab17be5f6fc0067f0))
- Include remote IP address in HTTP request logs
([f9cb0a2](f9cb0a2de1d7ed64aa04f74f4209f117ea60186f))
- Use ParadeDB v2 fuzzy prefix matching for search
([#&#8203;2346](https://redirect.github.com/go-vikunja/vikunja/issues/2346))
([0a38ec0](0a38ec08388c9d2716f9e41185af0bcfb0ed7f8d))
- Prefer working directory for service.rootpath default
([d3cbc4f](d3cbc4fc4fb7d7fe054c4c022656f2b4d5c42bde))
- Ensure /tmp is writable by container user in Docker image
([f497e8b](f497e8bb6d78f3b01c2a87540e28d7727e17676e))
- Remove debounce from color picker to prevent stale color on save
([d196af0](d196af0503053d00e05afb8d2585a67b229a5144))
- Send account deletion notification before deleting user row
([79a612a](79a612aa5d95f89cd84148295146a92ccddefa74))
- Register bulk label route correctly for API token permissions
([e19bea8](e19bea8e3a2804485479748b1c91dc58719dbe11))
- Prevent authenticated UI flash when server rejects JWT session
([#&#8203;2387](https://redirect.github.com/go-vikunja/vikunja/issues/2387))
([28cc9e0](28cc9e0571c98bb04d216e5fe47aaa503a1e887b))
- Preserve CalDAV inverse relations when parent has no RELATED-TO
([#&#8203;2389](https://redirect.github.com/go-vikunja/vikunja/issues/2389))
([ada2eba](ada2ebab9e1738bb145db1c498d2dda84d11c10b))
- Collapse view buttons into dropdown when overflowing
([#&#8203;2306](https://redirect.github.com/go-vikunja/vikunja/issues/2306))
([7b6b432](7b6b4323015239098a55adcb134d12dc9785f5cb))
- Invalidate all sessions when enabling TOTP
([3bc0093](3bc009368628fb286632b456f9bf2d575a8bfa43))
- Make mage fmt skip gitignored files
([e74265d](e74265d921b9b12bf89882e791743758b42f5f3d))
- Ensure frontend dist directory exists for lint and fmt commands
([c62b7e6](c62b7e680f82253d89f8cefbfe4bb4b4bb64c5e9))
- Handle S3 backend in user export download
([b0ede53](b0ede53c051d45a3e861450187e64c5342be5362))
- Use file mime type instead of hardcoded application/zip in S3 export
([4cd63f9](4cd63f93a48d784dd2566c26a0642ec0c69d3d8f))
- Configure Echo IPExtractor to prevent rate limit bypass via spoofed
headers ([a498dd6](a498dd69915a006c07e9d82660a2185d7e8136ee))
- Block login for StatusAccountLocked users
([4c80932](4c80932b6475ad54a2e2a81541d89a3b8471a762))
- Prevent password reset from re-enabling admin-disabled accounts
([d8570c6](d8570c603da1f26635ce6048d6af85ede827abfb))
- Reject password reset token requests for disabled users
([708ccab](708ccab895a23ed59b330db4a58a441bf5fbfcb2))
- Prevent email confirmation from re-enabling admin-disabled accounts
([049f4a6](049f4a6be46f9460bd516f489ef9f569574bc70d))
- Update test expectations for new disabled user fixture
([89923eb](89923ebe7090038c57ee3ad23eca86858c9c2eca))
- Reject images exceeding 50M pixels before decode
([af61d0f](af61d0f1a0d6e9394546d2d64dff043cfbe641f7))
- Adapt image preview DoS protection to new FileStorage interface
([be0aaa7](be0aaa70601af919f68fa1153f76bcf6335bc0b5))
- Verify comment belongs to task in URL to prevent IDOR
([bc6d843](bc6d843ed4df82a6c89f10aa676a7a33d27bf2fd))
- Require CanUpdate for project background deletion
([f066eb3](f066eb3ea4d1648ef925a745836e48a71b600a5f))
- Only enforce task\_id check when TaskID is provided
([4941961](49419619bd0052bdd7e727404a9284acd928a903))
- Use require.Error instead of assert.Error for error assertions
([b7a1408](b7a14080983d2781e1428be9b77fae319e7788e4))
- Reject CalDAV basic auth when TOTP is enabled
([cdf5d30](cdf5d30a425d032f749b78b98b828f25ad882615))
- Use user10 instead of user1 for TOTP fixture to avoid breaking login
tests ([659e73a](659e73af05af154dda315d025e8b3a12705e4a7e))
- Update TOTP fixtures and tests to avoid conflicts with existing
enrollment tests ([1ed813c](1ed813caf00224d90c3c89c5b8078788f5730f51))

##### Dependencies

- *(deps)* Update dev-dependencies
- *(deps)* Upgrade serialize-javascript to 7.0.3
- *(deps)* Update dependency
[@&#8203;vue/tsconfig](https://redirect.github.com/vue/tsconfig) to
v0.9.0
- *(deps)* Use forked afero-s3 to fix S3 read performance regression
([#&#8203;2313](https://redirect.github.com/go-vikunja/vikunja/issues/2313))
- *(deps)* Update dependency flexsearch to v0.8.212
- *(deps)* Remove obsolete flexsearch 0.7.43 patch
- *(deps)* Remove
[@&#8203;github/hotkey](https://redirect.github.com/github/hotkey)
dependency
- *(deps)* Update dependency rollup-plugin-visualizer to v6.0.11
- *(deps)* Update dependency electron to v40.7.0
- *(deps)* Update immutable to 5.1.5
- *(deps)* Update svgo to 3.3.3
- *(deps)* Update tar to 7.5.10 and
[@&#8203;tootallnate/once](https://redirect.github.com/tootallnate/once)
to 3.0.1 in desktop
- *(deps)* Update dependency vite-svg-loader to v5.1.1
- *(deps)* Bump dompurify from 3.3.1 to 3.3.2 in /frontend
- *(deps)* Update dependency eslint to v9.39.4
- *(deps)* Update dev-dependencies to v8.57.0
- *(deps)* Update dependency sass-embedded to v1.98.0
- *(deps)* Update dev-dependencies
([#&#8203;2395](https://redirect.github.com/go-vikunja/vikunja/issues/2395))
- *(deps)* Update dependency caniuse-lite to v1.0.30001779
- *(deps)* Override flatted to 3.4.1 to fix unbounded recursion DoS
- *(deps)* Update tar override to 7.5.11 to fix symlink path traversal
- *(deps)* Update dependency vue-tsc to v3.2.6
- *(deps)* Update dependency electron to v40.8.3
- *(deps)* Update dev-dependencies to v4.2.2
- *(deps)* Add daenney/ssrf for webhook SSRF protection
- *(deps)* Update dependency stylelint to v17.5.0

##### Documentation

- Update user search endpoint description for external team bypass
([b5086fe](b5086febc71a80467302584b9d41e10459d9d77e))
- Update rootpath description to mention working directory default
([ddfc565](ddfc565c614761d3dda037902c8309bf5a27fdd1))
- Document database.schema config option for PostgreSQL
([8868b21](8868b214ca2f0b34a6506066af1c4c96e13ca40d))
- Document IP extraction and trusted proxy config options
([015a172](015a172c2a07d3fc3827645d9e1bfe986ee58a03))

##### Features

- *(ci)* Post preview deployment comment on PRs
- *(ci)* Enable merge queue trigger
- *(config)* Add webhooks.allownonroutableips setting
- *(events)* Add DispatchOnCommit/DispatchPending for deferred event
dispatch
- *(frontend)* Upgrade Tailwind CSS from v3 to v4
- *(frontend)* Highlight overdue tasks consistently
([#&#8203;958](https://redirect.github.com/go-vikunja/vikunja/issues/958))
- *(gantt)* Add expand=subtasks to Gantt API params
- *(gantt)* Add task tree builder utility for hierarchy
- *(gantt)* Add dependency arrow data builder
- *(gantt)* Integrate task tree into Gantt rendering with collapse
- *(gantt)* Add collapse/expand chevron and indent indicators
- *(gantt)* Render parent summary bars with diamond endpoints
- *(gantt)* Create arrow SVG overlay component for relations
- *(gantt)* Wire relation arrows into GanttChart with toggle
- *(handlers)* Dispatch pending events after transaction commit
- *(release)* Update frontend package.json version on release
- *(shortcuts)* Add event.code-based shortcut module
- *(webhooks)* Add built-in SSRF protection using daenney/ssrf
- Ensure forms submit on Enter
([#&#8203;959](https://redirect.github.com/go-vikunja/vikunja/issues/959))
([e1d1e7c](e1d1e7c848bb2f0062a5fa522c7a357a2d3c723f))
- Use offical vite plugin for sentry
([#&#8203;873](https://redirect.github.com/go-vikunja/vikunja/issues/873))
([0a9586e](0a9586e8d4351e47edacb63fa6667193d99ff7ee))
- Mini tiptap improvements
([b92735b](b92735b0e907bf7613b106ea633b82efa7f1781a))
- Surface API validation errors to registration form fields
([#&#8203;1902](https://redirect.github.com/go-vikunja/vikunja/issues/1902))
([c6f0d8b](c6f0d8babe6f36e6d25d22a932c9f0a075a5a359))
- Add table registration to db package
([d26936f](d26936f869c8489b06b0d9377af489236765a9e1))
- Register Vikunja tables with db package at init
([3dd2ba4](3dd2ba4aa4309b589e809621de2ecee89ee54159))
- Add RegisteredTableNames helper to db package
([0a8534d](0a8534ded9fca162fb1721a86d835677b30f2cdb))
- Add task duplicate backend model and tests
([d8f3a96](d8f3a96b06fc40d4b30954cc71a3bb43890f8cfc))
- Register task duplicate API route
([77fdf1b](77fdf1b84b27f80f4f332a26e9d7cf1ad032f211))
- Add task duplicate frontend model and service
([52bee37](52bee379d417d37b21b3d6f0cac8e67f83716925))
- Add duplicateTask action to task store
([2014d50](2014d50b953f86fb5a66bf32c74035b8d42c2e7a))
- Add duplicate button to task detail view
([6c9407c](6c9407c58f4ed01c0eac37aa51e7939cd5a11a1d))
- Bypass discoverability settings for external team members
([28b913f](28b913f29f812ef51f3b8fe967d5560c1d8ed927))
- Add InitEventsForTesting and Unfake for real event dispatch in tests
([1b1e8e5](1b1e8e5b19e9dd32a0d6089759d18c81883f8ffc))
- Add mage test:e2e-api target for e2e API tests
([24b800d](24b800d48d27a90447bfb9765f23093e5b9bde41))
- Add conversational email template and rendering
([d4b0302](d4b03026f0b98734a95e9cc22d3e77e89a7d3f4f))
- Convert notifications to conversational email style
([b3572c5](b3572c5932ba9eb7159e48129c1e52f0333cf96e))
- Add translation keys for conversational emails
([def73e2](def73e2f8eeadf807c9b2e2a422e2335444280dd))
- Add user\_id to webhooks and user-directed event infrastructure
([d4577c6](d4577c660f5550a59f1b90a2ef1f5fba49cb73c6))
- Extend WebhookListener for user-level webhooks
([dbbc80a](dbbc80aea613779d43b015479fef0f7301d8e7e2))
- Add API routes for user-level webhooks
([47a0775](47a0775c7378faf6c8b3af3cd1429d3be7c51e70))
- Add user-level webhooks settings page
([2e1648e](2e1648ef4c7b1d1a05542567cd2a682f1038b03c))
- Replace afero-s3 with minimal S3 afero.Fs implementation
([b065c62](b065c6200782bfd6e9eea889847e83f1dead906d))
- Add service.ipextractionmethod and service.trustedproxies config
options ([26324a7](26324a740a73d19748eea3c745c74f91f60cc86b))
- Add StatusAccountLocked user status for TOTP lockouts
([f42a045](f42a045bdc175fbffee4f8ee9592fa8dfedbc8aa))

##### Miscellaneous Tasks

- *(dev)* Update devenv
- *(i18n)* Update translations via Crowdin
- Remove feature request issue template
([06ead58](06ead58ea3bb366970473d587db82bb36db07887))

##### Other

- *(other)* \[skip ci] Updated swagger docs
- *(other)* Add e2e API tests to CI pipeline
- *(other)* Upgrade ParadeDB image to support v2 fuzzy search API

##### Refactor

- *(attachments)* Read from task prop instead of global store
- *(attachments)* Return uploaded attachments instead of writing to
store
- *(attachments)* Use local state instead of global attachment store
- *(attachments)* Remove global attachment store
- *(shortcuts)* Update directive to use new shortcut module
- *(shortcuts)* Update v-shortcut values to event.code format
- *(shortcuts)* Replace eventToHotkeyString with eventToShortcutString
- *(shortcuts)* Use event.code for raw keyboard handlers
- Batch label inserts during task duplication
([e07eeed](e07eeed21156ab2bdc6c02aceede9cbc91468a28))
- Use TaskRelation.Create for copy relation
([692357a](692357a648367f1beb9ba192e3ed3425f8648893))
- Move ListUsers tests from pkg/user to pkg/models
([54c7c4a](54c7c4aef2fbdf7d4c04630d75cd36a0d121daec))
- Enable golangci-lint on magefile, fix errors
([cea8c78](cea8c7807d060e0a187c37c80ba42d02d4aa7637))
- Fix contextcheck lint errors on magefile by passing mage context
([0a1104b](0a1104b75ce1a6fcadb0cd0678400cf3585a0eb1))
- Merge last unique build tag "tools" into go.mod tools section
([1b5f3f4](1b5f3f4ccd15a954d1b3ac4fa49a99c2f299deff))
- Add centralized ResolvePath for rootpath-relative paths
([2a7165a](2a7165aaba736c53be32bb8cf0cf77e6fb7cd501))
- Use config.ResolvePath for all rootpath-relative paths
([a043940](a043940e14f686faa15339ecc06f91dd191d22d1))
- Replace afero with FileStorage interface
([0e1f44e](0e1f44e57efe06d08a47d980fa49bdd260f5fac3))
- Use StatusAccountLocked for TOTP lockouts
([7792bf6](7792bf6cea36ede6c38b9966f587222b476176cb))
- Rename checkProjectBackgroundWriteRights to
checkProjectBackgroundWritePermissions
([4b91e5e](4b91e5efa173c90346567d4b296ab6233a9cc093))

##### Styling

- Fix alignment in config key declarations
([ddd9ef5](ddd9ef5f2206dc5936cc14d359c70312806de233))

##### Testing

- *(shortcuts)* Add unit tests for shortcut parsing logic
- *(webhooks)* Add SSRF protection tests
- *(webhooks)* Allow non-routable IPs in E2E tests
- Update event assertions to work with deferred dispatch
([f516bbe](f516bbe560a7b2a0d348e71ecdab00229c5cf554))
- Add web integration tests for task duplication
([4d494ba](4d494ba442b7bc6b4d7d06a3a3919f8d1bc6e066))
- Add user 11 to external team 14 for discoverability tests
([64e455a](64e455a613134b74c5734570eef19f3631253738))
- Add tests for external team user discoverability bypass
([3a73016](3a730165bc15f0fa2593aa8961e27192e93fcafb))
- Verify email masking for external team name search
([0661789](06617891fafa7c73c1c7110d404cb0a76812842d))
- Add e2e API test package with webhook pipeline verification
([1f3509b](1f3509bf27a9102ac96578d441d3731fb444dfa9))
- Add fixture task with compound word for prefix search testing
([275f714](275f714224cc93f0f9cd7b4590ba2b07a79398e4))
- Add web tests for prefix/substring search
([#&#8203;2346](https://redirect.github.com/go-vikunja/vikunja/issues/2346))
([892b38b](892b38b3b696e024e673dba3c0e302d5afa714fe))
- Rewrite MultiFieldSearch tests with SQL output verification
([ee2723d](ee2723d9cf3c603bd22be9e5411d67f1c9f38799))
- Call real MultiFieldSearch function and branch on db engine
([e6cbd67](e6cbd67ab52e92afadeaf0e9b3dbd96de3b3e1c1))
- Add task
[#&#8203;48](https://redirect.github.com/go-vikunja/vikunja/issues/48)
to expected results in feature tests
([3568aaa](3568aaacee6d102ec8b749409cb1c8ca73c096f8))
- Adjust ParadeDB search tests for fuzzy prefix match broadening
([6268c48](6268c48f15955d812c6a569edb9c2d56e454fc27))
- Fix lint and adjust project search test for ParadeDB fuzzy matching
([b69705e](b69705e64bc45b93a834f877936aea5a7886bd9a))
- Add result count assertions for ParadeDB search tests
([c7c63e8](c7c63e8eadb174d163516590ec5c7ed945670cd5))
- Fix non-ParadeDB project search count assertion
([df0e3a8](df0e3a84a9cdf94b8a3f581ab7bf1690d36a6fe9))
- Fix ParadeDB project search count to 27
([d36ac9d](d36ac9ddda5ddbc781a06017ee6d45ff2f8a45d8))
- Add tests for conversational email system
([aacf650](aacf650ec2c2817447107043620989d1b4c72130))
- Add e2e tests for user-level webhooks
([05cc65f](05cc65fe9e4fa448cda437d58480a9f3f19d69ed))
- Add web tests for bulk label task endpoint
([675dfb3](675dfb3ea47dd882de7e49ab1b0ace79a5e8bb9b))
- Add failing test for bulk label API token route registration
([554593c](554593cdb6bc0d31a1809c4b969b4fda9423edc3))
- Add FileStat assertion to validate storage path in attachment test
([17eccd8](17eccd848fd8688cd18f5dd46d1beb2c6ce96442))
- Add tests for disabled user password reset prevention
([241b0e8](241b0e80b6d9e91cda1f03a9e3a6368710d1fe36))
- Add web test for disabled user password reset rejection
([2260d76](2260d763b56290fcf8bfe5a9acfdee1a4332a65e))
- Add failing test for image preview with oversized dimensions
([f7592e2](f7592e2cfdc11fb06441007a4fb1d2ca5a2f1c5a))
- Add failing test for task comment IDOR
([2da8925](2da89258e53068253dcf8ef17d4dad141dba7d31))
- Add failing test for project background delete with read-only access
([f60f3af](f60f3af70b6d8258dd342a9ac15b71f48326e9af))
- Add TOTP fixture data for user1
([27ef92b](27ef92b9bf36f437b151df13f801a504e73bddc8))
- Add failing test for CalDAV 2FA bypass via basic auth
([bda16e7](bda16e770fa76f212d15b1faec5c83f9046a0bb3))
- Register totp fixture in test setup
([a66bda2](a66bda2f51d4f7df8d353066a100de2d8c0aab32))
- Verify CalDAV token auth bypasses TOTP check
([1f2aef7](1f2aef776ccdd0ac1405fc8bcbb47084091d42eb))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvdmlrdW5qYSIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->

2026-03-20 17:35:57 +01:00

.devcontainer

chore(deps): update oci.trueforge.org/containerforge/devcontainer:3.0.2 docker digest digest to 46884ec (#46237 )

2026-03-20 05:26:31 +01:00

.github

chore(github-action): update actions/cache digest digest to 6682284

2026-03-18 15:36:24 +00:00

.vscode

update extensions

2026-01-25 15:43:25 +00:00

charts

feat(vikunja): update image docker.io/vikunja/vikunja 2.1.0 → 2.2.0 (#46263 )

2026-03-20 17:35:57 +01:00

templates

fix(docs): Fix typo in README.md.tpl for issue link (#45808 )

2026-03-05 12:55:47 +01:00

.all-contributorsrc

more tc to tf

2025-10-10 10:55:00 +02:00

.editorconfig

…

.gitignore

fix(ci): Fix image creation & update forgetool version used (#44390 )

2026-01-31 19:04:08 +01:00

.helmdocsignore

…

.markdownlint.yaml

…

.pre-commit-config.yaml

feat(containers)!: Remove support for building containers from this repo

2025-10-06 18:29:51 +02:00

cr.yaml

…

LICENSE

…

run_common_tests.sh

…

.github/README.md

title

title
TrueCharts

Community Helm Chart Catalog

TrueCharts is a catalog of highly optimised Helm Charts. Made for the community, by the community!

All our charts are supposed to work together and be easy to setup using any helm-compatible deployment tool, above all, give the average user more than enough options to tune things to their liking.

Getting started using TrueCharts

Support

Please check our FAQ, manual and Issue tracker There is a significant chance your issue has been reported before!

Still something not working as expected? Contact us! and we'll figure it out together!

Development

Our development process is fully distributed and agile, so every chart-maintainer is free to set their own roadmap and development speed and does not have to comply to a centralised roadmap. This ensures freedom and flexibility for everyone involved and makes sure you, the end user, always has the latest and greatest of every Chart installed.

Getting into creating Charts

For more information check the website: https://truecharts.org

Contact and Support

To contact the TrueCharts project:

Create an issue on Github issues
Open a Support Ticket
Send us an email
Or join our Discord server

Contributors ✨

Thanks goes to these wonderful people (emoji key):

_{Kjeld Schouten-Lebbing} 💻 🚇 📖 👀 💵	_{Justin Clift} 📖	_whiskerz007 💻	_{Stavros Kois} 💻 📖 🐛 👀 💵	_allen-4 💻	_{Troy Prelog} 💻 📖 💵	_{Dan Sheridan} 💻
_{Sebastien Dupont} 📖 💵	_Vegetto 👀	_{Ellie Nieuwdorp} 💻	_{Nate Walck} 💻	_Lloyd 💻 💵	_{Dave Withnall} 📖	_ksimm1 📖 🐛 💵 🧑‍🏫
_{Aaron Johnson} 📖	_Ralph 💻	_{Joachim Baten} 💻 🐛	_{Michael Yang} 💻	_{Ciaran Farley} 📖	_{Heavybullets8} 📖 💻 🐛 📹 🧑‍🏫 💵	₆₆₂ 💻
_alex171 📖	_{Techno Tim} 📖	_{Mingyao Liu} 💻 🐛	_NightShaman 💻 📖 🐛 💵 🧑‍🏫	_{Andrew Smith} 📖 ⚠️	_{Bob Klosinski} 💻	_Sukarn 💻 📖
_sebs 💻	_{Dyllan Tinoco} 💻	_{StevenMcElligott} 💻 💵 📖 🐛 🧑‍🏫	_brothergomez 💻 🐛	_sagit 💻 🐛 📹 📖 🧑‍🏫	_{Nevan Chow} 💻	_{Daniel Carlsson} 🐛
_{Devon Louie} 🐛	_{Alex-Orsholits} 🐛	_Tails32 🐛	_Menaxerius 🐛	_hidefog 🐛	_{Darren Gibbard} 🐛	_Barti 🐛
_Sunii 🐛	_trbmchs 🐛	_Light 🐛	_Boostflow 🐛	_Trigardon 🐛	_dbb12345 🐛 💻	_karypid 🐛
_Philipp 🐛	_John 🐛 📖	_{John Parton} 🐛	_Marc 🐛	_fdzaebel 🐛	_kloeckwerx 🐛	_{Bradley Bare} 🐛
_{Alexander Thamm} 🐛	_rexit1982 🐛	_iaxx 🐛	_Xstar97 💻 🐛 🧑‍🏫	_ornias 📹	_{Josh Asplund} 💵	_{midnight33233} 💵
_kbftech 💵	_hogenf 💵	_Hawks 💵	_{Jim Russell} 💵	_TheGovnah 💵	_famewolf 💵 🐛	_{Konrad Bujak} 📖
_190n 💻 📖	_{Alexej Kubarev} 📖	_r-vanooyen 📖	_shadofall 📖 🧑‍🏫	_agreppin 💻	_{Stavros Ntentos} 💻 🤔	_{Vlad-Florin Ilie} 💻
_huma2000 🐛	_hugalafutro 🐛 💵	_{yehia Amer} 📖	_{Tyler Stransky} 🐛	_juggie 🐛	_{Ben Tilford} 🐛 💻	_I-nebukad-I 🐛 💻
_{Ethan Leisinger} 💻 📖	_{Cullen Murphy} 💻 🐛	_{Jason Thatcher} 💻 🐛 📖	_{Stefan Schramek} 🐛	_nokaka 🐛	_{Gal Szkolnik} 🐛	_{Evgeny Stepanovych} 🐛
_{Waqar Ahmed} 🐛	_DrSKiZZ 💵	_{Jan Puciłowski} 💻 ⚠️	_{Shaun Coyne} 💵	_Christoph 💵	_{Brandon Rutledge} 🐛	_{Michael Bestas} 🐛
_{Jurģis Rudaks} 🐛	_brunofatia 💵	_TopicsLP 📖	_{Michael Schnerring} 🐛 💻	_{Tamas Nagy} 🐛	_{OpenSpeedTest™️} 💻	_{Richard James Acton} 📖
_lps-rocks 🐛	_Faust 🐛	_uranderu 🐛	_{Tom Cassady} 🐛	_Huftierchen 🐛	_ZasX 📖 🧑‍🏫 💻	_{Kevin T.} 🐛
_{Steven Scott} 📖	_{Watteel Pascal} 💻	_{JamesOsborn-SE} 💻 📖	_NeoToxic 🧑‍🏫 🐛	_jab416171 📖	_Anna 📖	_ChaosBlades 🐛
_{Patric Stout} 💻	_{Ben Kochie} 💻	_{Jeff Bachtel} 📖	_{Ben Woods} 💻	_{Karl Shea} 🐛	_{Balakumaran MN} 📖	_Jesperbelt 📖
_cccs31 🐛	_{Sam Smucny} 💻	_{Keith Cirkel} 💻	_mgale456 💻	_{Alec Fenichel} 💻	_{John Dorman} 💻	_Dan 💻
_u4ium 📖	_{ErroneousBosch} 🐛	_MaverickD650 💻 🐛	_Grogdor 📖	_{Ryan Gooler} 📖	_{Rob Herley} 📖	_{Christian Heimlich} 📖
_l-moon-git 💻	_hughes5 📖	_sdimovv 💻	_AllieQpzm 💻	_Dominik 🐛	_{renovate[bot]} 🔧	_{allcontributors[bot]} 🔧
_{dependabot[bot]} 🔧	_{TrueCharts Bot} 🔧 🚇 💻	_{Mend Renovate} 🔧	_Simone 💻	_{Jean-François Roy} 💻	_Whiskey24 💻	_inmanturbo 📖
_Alex 💻	_{Brian Semrad} 💻	_Christopher 💻 📖	_{Csaba Engedi} 💻	_Cyb3rzombie 💻	_{Eric Cavalcanti} 💻	_{Gavin Chappell} 💻 🐛
_raynay-r 💻	_Jip-Hop 📖	_{Jonas Wrede} 💻	_SilentNyte 📖	_Stan 💻	_{Tiago Gaspar} 💻	_gismo2004 💻
_jsegaert 📖	_{Miguel Angel Nubla} 💻	_xal3xhx 💻	_jeremybox 📖	_{Cameron Sabuda} 📖	_{Jeroen Schepens} 🐛	_{James Wright} 📖
_Malpractis 🐛	_{CommanderStarhump} 🐛	_Vianchiel 🐛	_{Maximilian Ehlers} 🐛	_nautilus7 🐛 💻	_kqmaverick 🐛	_ccalby 🐛
_kofeyh 🐛	_{imjustleaving} 🐛	_{Cristian Torres} 🐛	_schopenhauer 🐛	_Zackptg5 🐛	_{Brad Ackerman} 🐛	_mcspiff313 🐛
_{Fletcher Nichol} 💻 🐛	_{Marco Faggian} 💻	_{John P} 📖	_kryojenik 💻	_Malcolm 📖	_depasseg 📖	_j1mbl3s 📖
_VictorienXP 💻	_yelhouti 💻	_{Jaroslav Lichtblau} 📖	_MaximilianS 📖	_{Dion Larson} 💻 📖	_Physics-Dude 📖	_waflint 💻
_{Henry Wilkinson} 💻 📖	_cedstrom 💻	_v3DJG6GL 🐛 💻	_polarstack 💻	_Keyvan 💻	_{MickaelFontes} 💻	_{David CM} 💻
_{Aamir Azad} 📖	_{Jordan Woyak} 💻	_{Simon Hofman} 💻	_{notyouraveragegamer} 📖	_Varac 💻	_tuxsudo 💻	_TylerRudie 📖
_qnb59bny5x 💻	_{Filip Bednárik} 🐛	_{Serhii Shcherbinin} 💻	_{Quentin Raynaud} 🐛	_{Felix Schäfer} 📖	_{Julien Nicolas de Verteuil} 💻	_{Gabriel Donadel Dall'Agnol} 📖
_{Jon S. Stumpf} 📖	_Tanguille 📖	_Dennis 🐛 📖	_{TheIceCreamTroll} 💻	_{Atanas Pamukchiev} 💻	_Boemeltrein 📖	_{Yiannis Marangos} 💻
_{Michael Ruoss} 💻	_{Aron Kahrs} 💻	_nemesis1982 📖	_{Ed P} 💻	_{Frédéric Nadeau} 📖	_frapbod 💻	_{Max Bachhuber} 💻
_zierbeek 💻	_Ac1dburn 💻	_{Antoine Saget} 📖	_{Ben Bodenmiller} 🐛	_felixfon 📖	_adtwomey 📖	_alfi0812 💻 📖 🐛 👀
_Agassi 💻	_Artur 💻	_{Morgan Hunter} 💻	_{Aleksandr Oleinikov} 💻	_Jamie 💻	_{David Gries} 🐛 💻	_Phreeman33 💻 🐛
_{Jens Wolvers} 💻	_{Bart Willems} 💻	_Caidy 💻	_{Mr Khachaturov} 💻	_LordCrash101 📖	_elendil95 💻	_TheDodger 💻
_{Saad Awan} 💻	_{Felix von Arx} 💻	_yodatak 💻	_{Marcel Henrich} 💻	_{Florent Viel} 💻	_SniperAsh6 💻	_{Alexandre Acebedo} 💻
_{Douglas Chimento} 💻	_{Addison McDermid} 💻	_{Jaël Gareau} 💻	_{Steve Sampson} 📖	_{Albert Romkes} 💻	_{Maja Bojarska} 💻	_astro-stan 💻
_{Oliver Simons} 💻

This project follows the all-contributors specification. Contributions of any kind welcome!

Licence

Truecharts, is primarily based on the AGPL-v3 license, this ensures almost everyone can use and modify our charts. Licences can vary on a per-Chart basis. This can easily be seen by the presence of a "LICENSE" file in that folder.

An exception to this, has been made for every document inside folders labeled as docs or doc and their subfolders: those folders are not licensed under AGPL-v3 and are considered "all rights reserved". Said content can be modified and changes submitted per PR, in accordance to the github End User License Agreement.

SPDX-License-Identifier: AGPL-3.0

Releases 1

luanti-v1.0.0 Latest

2026-07-08 18:51:26 +00:00

Languages

Go Template 97.9%

Shell 2.1%