TrueCharts Bot
158b4aa056
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/ether/etherpad](https://redirect.github.com/ether/etherpad) | patch | `e966c52` → `c4bcd4b` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>ether/etherpad (ghcr.io/ether/etherpad)</summary> ### [`v3.3.1`](https://redirect.github.com/ether/etherpad/blob/HEAD/CHANGELOG.md#331) [Compare Source](https://redirect.github.com/ether/etherpad/compare/3.3.0...3.3.1) 3.3.1 is a small bug-fix and hardening follow-up to 3.3.0. It closes a stored-XSS vector in the numbered-list `start` attribute, hardens the database layer so a dropped connection to PostgreSQL / Redis / RethinkDB no longer crashes the process (via ueberdb2 6.1.9), and fixes a handful of pad and admin regressions — the iOS dark-mode status bar, the settings language dropdown, the pad-deletion modal under `allowPadDeletionByAllUsers`, and a single unreadable pad blanking the admin Manage-pads list. ##### Security - **Pad editor — escape and integer-coerce the numbered-list `start` attribute (GHSA-f7h5-v9hm-548j, [#​7937](https://redirect.github.com/ether/etherpad/issues/7937)).** A crafted `<ol start>` value flowed unescaped into `domline.ts`, a distinct client-side sink from the export-path fix in 3.3.0's [#​7905](https://redirect.github.com/ether/etherpad/issues/7905). The value is now integer-coerced and HTML-escaped before it reaches the DOM. A jsdom regression test covers the sink. ##### Notable fixes - **Skin — paint the root canvas so iOS dark mode has no white status bar ([#​7606](https://redirect.github.com/ether/etherpad/issues/7606) / [#​7931](https://redirect.github.com/ether/etherpad/issues/7931)).** iOS Safari paints the top safe area from the `html` root background, which `theme-color` (an Android address-bar hint) does not affect, so dark-mode pads showed a white status-bar strip on iOS. Colibris now sets the root background and `color-scheme` so the safe area matches the editor. - **Settings — show the detected language in the dropdown ([#​7925](https://redirect.github.com/ether/etherpad/issues/7925) / [#​7928](https://redirect.github.com/ether/etherpad/issues/7928)).** The settings language `<select>` did not reflect the language Etherpad had actually auto-detected; it now shows the active selection. - **Pad — don't issue a deletion token (or show its modal) when `allowPadDeletionByAllUsers` is on ([#​7929](https://redirect.github.com/ether/etherpad/issues/7929)).** With pad deletion open to all users the client still minted a deletion token and surfaced the confirm modal; both are now suppressed in that configuration. - **Admin — one unreadable pad no longer empties the Manage-pads list ([#​7935](https://redirect.github.com/ether/etherpad/issues/7935) / [#​7938](https://redirect.github.com/ether/etherpad/issues/7938)).** A single pad that failed to read could throw out of the list-hydration path and blank the entire admin Manage-pads view; the read is now guarded per-pad so the rest of the list still renders. ##### Internal / contributor-facing - **CI — downstream client compatibility gate ([#​7923](https://redirect.github.com/ether/etherpad/issues/7923) / [#​7924](https://redirect.github.com/ether/etherpad/issues/7924) / [#​7927](https://redirect.github.com/ether/etherpad/issues/7927)).** A new gate smoke-tests the published `etherpad-pad`, `etherpad-cli`, and `etherpad-desktop` clients against the server build (Phase 1 + Phase 2), with robust per-client error handling in `run-clients.sh` so one client's failure is reported rather than masking the others. - **CI — verify Etherpad boots offline ([#​7936](https://redirect.github.com/ether/etherpad/issues/7936)).** Adds a test step that confirms a built Etherpad starts with no network access. ##### Dependencies - `ueberdb2` 6.1.8 → 6.1.9 — PostgreSQL pool errors are now handled and TCP keep-alive is enabled (fixes [#​7878](https://redirect.github.com/ether/etherpad/issues/7878)), and the Redis and RethinkDB drivers attach connection-error handlers so a dropped database connection no longer crashes the Etherpad process. - `semver` 7.8.2 → 7.8.3 ([#​7933](https://redirect.github.com/ether/etherpad/issues/7933)), `rate-limiter-flexible` 11.1.1 → 11.2.0 ([#​7934](https://redirect.github.com/ether/etherpad/issues/7934)), plus a dev-dependencies group update ([#​7932](https://redirect.github.com/ether/etherpad/issues/7932)). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9ldGhlcnBhZCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
title
| title |
|---|
| TrueCharts |
Community Helm Chart Catalog
TrueCharts is a catalog of highly optimised Helm Charts. Made for the community, by the community!
All our charts are supposed to work together and be easy to setup using any helm-compatible deployment tool, above all, give the average user more than enough options to tune things to their liking.
Getting started using TrueCharts
Support
Please check our FAQ, manual and Issue tracker There is a significant chance your issue has been reported before!
Still something not working as expected? Contact us! and we'll figure it out together!
Development
Our development process is fully distributed and agile, so every chart-maintainer is free to set their own roadmap and development speed and does not have to comply to a centralised roadmap. This ensures freedom and flexibility for everyone involved and makes sure you, the end user, always has the latest and greatest of every Chart installed.
Getting into creating Charts
For more information check the website: https://truecharts.org
Contact and Support
To contact the TrueCharts project:
-
Create an issue on Github issues
-
Open a Support Ticket
-
Send us an email
Contributors ✨
Thanks goes to these wonderful people (emoji key):
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?v=4?s=100)
![allcontributors[bot]](https://avatars.githubusercontent.com/in/23186?v=4?s=100)
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4?s=100)
This project follows the all-contributors specification. Contributions of any kind welcome!
Licence
Truecharts, is primarily based on the AGPL-v3 license, this ensures almost everyone can use and modify our charts. Licences can vary on a per-Chart basis. This can easily be seen by the presence of a "LICENSE" file in that folder.
An exception to this, has been made for every document inside folders labeled as docs or doc and their subfolders: those folders are not licensed under AGPL-v3 and are considered "all rights reserved". Said content can be modified and changes submitted per PR, in accordance to the github End User License Agreement.
SPDX-License-Identifier: AGPL-3.0
