This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/semaphoreui/semaphore](https://redirect.github.com/semaphoreui/semaphore) | patch | `c393396` → `9d9eaaf` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>semaphoreui/semaphore (docker.io/semaphoreui/semaphore)</summary> ### [`v2.18.20`](https://redirect.github.com/semaphoreui/semaphore/releases/tag/v2.18.20) [Compare Source](https://redirect.github.com/semaphoreui/semaphore/compare/v2.18.19...v2.18.20) #### Bugfixes - Validate playbook path ### [`v2.18.19`](https://redirect.github.com/semaphoreui/semaphore/releases/tag/v2.18.19) [Compare Source](https://redirect.github.com/semaphoreui/semaphore/compare/v2.18.18...v2.18.19) #### v2.18.19 Release Summary This patch release includes several important security and validation fixes. ##### Security fixes - Added validation for Git repository URLs to prevent Git option injection. - Added `--end-of-options` to Git commands to make repository URL and branch handling safer. - Fixed branch override handling: task-level Git branch override is now applied only when the template explicitly allows it. - Prevented custom roles from shadowing built-in role slugs such as owner or manager. - Fixed permission resolution so built-in roles always use their built-in permissions instead of database-defined custom roles. - Added validation to prevent access keys from being updated with a different ID or moved to another project. ##### Reliability and tests - Added tests for Git URL validation and Git command injection protection. - Added tests for access key update validation. - Added tests for custom role validation and reserved role slugs. - Refactored Git branch resolution into a dedicated helper to make task behavior more consistent. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9zZW1hcGhvcmUiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
title
| title |
|---|
| TrueCharts |
Community Helm Chart Catalog
TrueCharts is a catalog of highly optimised Helm Charts. Made for the community, by the community!
All our charts are supposed to work together and be easy to setup using any helm-compatible deployment tool, above all, give the average user more than enough options to tune things to their liking.
Getting started using TrueCharts
Support
Please check our FAQ, manual and Issue tracker There is a significant chance your issue has been reported before!
Still something not working as expected? Contact us! and we'll figure it out together!
Development
Our development process is fully distributed and agile, so every chart-maintainer is free to set their own roadmap and development speed and does not have to comply to a centralised roadmap. This ensures freedom and flexibility for everyone involved and makes sure you, the end user, always has the latest and greatest of every Chart installed.
Getting into creating Charts
For more information check the website: https://truecharts.org
Contact and Support
To contact the TrueCharts project:
-
Create an issue on Github issues
-
Open a Support Ticket
-
Send us an email
Contributors ✨
Thanks goes to these wonderful people (emoji key):
This project follows the all-contributors specification. Contributions of any kind welcome!
Licence
Truecharts, is primarily based on the AGPL-v3 license, this ensures almost everyone can use and modify our charts. Licences can vary on a per-Chart basis. This can easily be seen by the presence of a "LICENSE" file in that folder.
An exception to this, has been made for every document inside folders labeled as docs or doc and their subfolders: those folders are not licensed under AGPL-v3 and are considered "all rights reserved". Said content can be modified and changes submitted per PR, in accordance to the github End User License Agreement.
SPDX-License-Identifier: AGPL-3.0