TrueCharts Bot
158b4aa056
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/ether/etherpad](https://redirect.github.com/ether/etherpad) | patch | `e966c52` → `c4bcd4b` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>ether/etherpad (ghcr.io/ether/etherpad)</summary> ### [`v3.3.1`](https://redirect.github.com/ether/etherpad/blob/HEAD/CHANGELOG.md#331) [Compare Source](https://redirect.github.com/ether/etherpad/compare/3.3.0...3.3.1) 3.3.1 is a small bug-fix and hardening follow-up to 3.3.0. It closes a stored-XSS vector in the numbered-list `start` attribute, hardens the database layer so a dropped connection to PostgreSQL / Redis / RethinkDB no longer crashes the process (via ueberdb2 6.1.9), and fixes a handful of pad and admin regressions — the iOS dark-mode status bar, the settings language dropdown, the pad-deletion modal under `allowPadDeletionByAllUsers`, and a single unreadable pad blanking the admin Manage-pads list. ##### Security - **Pad editor — escape and integer-coerce the numbered-list `start` attribute (GHSA-f7h5-v9hm-548j, [#​7937](https://redirect.github.com/ether/etherpad/issues/7937)).** A crafted `<ol start>` value flowed unescaped into `domline.ts`, a distinct client-side sink from the export-path fix in 3.3.0's [#​7905](https://redirect.github.com/ether/etherpad/issues/7905). The value is now integer-coerced and HTML-escaped before it reaches the DOM. A jsdom regression test covers the sink. ##### Notable fixes - **Skin — paint the root canvas so iOS dark mode has no white status bar ([#​7606](https://redirect.github.com/ether/etherpad/issues/7606) / [#​7931](https://redirect.github.com/ether/etherpad/issues/7931)).** iOS Safari paints the top safe area from the `html` root background, which `theme-color` (an Android address-bar hint) does not affect, so dark-mode pads showed a white status-bar strip on iOS. Colibris now sets the root background and `color-scheme` so the safe area matches the editor. - **Settings — show the detected language in the dropdown ([#​7925](https://redirect.github.com/ether/etherpad/issues/7925) / [#​7928](https://redirect.github.com/ether/etherpad/issues/7928)).** The settings language `<select>` did not reflect the language Etherpad had actually auto-detected; it now shows the active selection. - **Pad — don't issue a deletion token (or show its modal) when `allowPadDeletionByAllUsers` is on ([#​7929](https://redirect.github.com/ether/etherpad/issues/7929)).** With pad deletion open to all users the client still minted a deletion token and surfaced the confirm modal; both are now suppressed in that configuration. - **Admin — one unreadable pad no longer empties the Manage-pads list ([#​7935](https://redirect.github.com/ether/etherpad/issues/7935) / [#​7938](https://redirect.github.com/ether/etherpad/issues/7938)).** A single pad that failed to read could throw out of the list-hydration path and blank the entire admin Manage-pads view; the read is now guarded per-pad so the rest of the list still renders. ##### Internal / contributor-facing - **CI — downstream client compatibility gate ([#​7923](https://redirect.github.com/ether/etherpad/issues/7923) / [#​7924](https://redirect.github.com/ether/etherpad/issues/7924) / [#​7927](https://redirect.github.com/ether/etherpad/issues/7927)).** A new gate smoke-tests the published `etherpad-pad`, `etherpad-cli`, and `etherpad-desktop` clients against the server build (Phase 1 + Phase 2), with robust per-client error handling in `run-clients.sh` so one client's failure is reported rather than masking the others. - **CI — verify Etherpad boots offline ([#​7936](https://redirect.github.com/ether/etherpad/issues/7936)).** Adds a test step that confirms a built Etherpad starts with no network access. ##### Dependencies - `ueberdb2` 6.1.8 → 6.1.9 — PostgreSQL pool errors are now handled and TCP keep-alive is enabled (fixes [#​7878](https://redirect.github.com/ether/etherpad/issues/7878)), and the Redis and RethinkDB drivers attach connection-error handlers so a dropped database connection no longer crashes the Etherpad process. - `semver` 7.8.2 → 7.8.3 ([#​7933](https://redirect.github.com/ether/etherpad/issues/7933)), `rate-limiter-flexible` 11.1.1 → 11.2.0 ([#​7934](https://redirect.github.com/ether/etherpad/issues/7934)), plus a dev-dependencies group update ([#​7932](https://redirect.github.com/ether/etherpad/issues/7932)). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9ldGhlcnBhZCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
title
| title |
|---|
| README |
General Info
For more information about this Chart, please check the docs on the TrueCharts website
This chart is not maintained by the upstream project and any issues with the chart should be raised here
Installation
Helm-Chart installation
To install TrueCharts Helm charts using Helm, you can use our OCI Repository.
helm install mychart oci://oci.trueforge.org/truecharts/etherpad
For more information on how to install TrueCharts Helm charts, checkout the instructions on the website
Chart Specific Guides and information
All our charts have dedicated documentation pages. The documentation for this chart can be found here: https://truecharts.org/charts/stable/etherpad
Configuration Options
To view the chart specific options, please view Values.yaml included in the chart. The most recent version of which, is available here: https://github.com/trueforge-org/truecharts/blob/master/charts/stable/etherpad/values.yaml
All our Charts use a shared "common" library chart that contains most of the templating and options. For the complete overview of all available options, please checkout the documentation for them on the common docs on our website
For information about the common chart and all defaults included with it, please review its values.yaml file available here: https://github.com/trueforge-org/truecharts/blob/master/charts/library/common/values.yaml
Support
Sponsor TrueCharts
TrueCharts can only exist due to the incredible effort of our staff. Please consider making a donation or contributing back to the project any way you can!
All Rights Reserved - The TrueCharts Project