TrueCharts BotandGitHub
158b4aa056
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/ether/etherpad](https://redirect.github.com/ether/etherpad) | patch | `e966c52` → `c4bcd4b` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>ether/etherpad (ghcr.io/ether/etherpad)</summary> ### [`v3.3.1`](https://redirect.github.com/ether/etherpad/blob/HEAD/CHANGELOG.md#331) [Compare Source](https://redirect.github.com/ether/etherpad/compare/3.3.0...3.3.1) 3.3.1 is a small bug-fix and hardening follow-up to 3.3.0. It closes a stored-XSS vector in the numbered-list `start` attribute, hardens the database layer so a dropped connection to PostgreSQL / Redis / RethinkDB no longer crashes the process (via ueberdb2 6.1.9), and fixes a handful of pad and admin regressions — the iOS dark-mode status bar, the settings language dropdown, the pad-deletion modal under `allowPadDeletionByAllUsers`, and a single unreadable pad blanking the admin Manage-pads list. ##### Security - **Pad editor — escape and integer-coerce the numbered-list `start` attribute (GHSA-f7h5-v9hm-548j, [#​7937](https://redirect.github.com/ether/etherpad/issues/7937)).** A crafted `<ol start>` value flowed unescaped into `domline.ts`, a distinct client-side sink from the export-path fix in 3.3.0's [#​7905](https://redirect.github.com/ether/etherpad/issues/7905). The value is now integer-coerced and HTML-escaped before it reaches the DOM. A jsdom regression test covers the sink. ##### Notable fixes - **Skin — paint the root canvas so iOS dark mode has no white status bar ([#​7606](https://redirect.github.com/ether/etherpad/issues/7606) / [#​7931](https://redirect.github.com/ether/etherpad/issues/7931)).** iOS Safari paints the top safe area from the `html` root background, which `theme-color` (an Android address-bar hint) does not affect, so dark-mode pads showed a white status-bar strip on iOS. Colibris now sets the root background and `color-scheme` so the safe area matches the editor. - **Settings — show the detected language in the dropdown ([#​7925](https://redirect.github.com/ether/etherpad/issues/7925) / [#​7928](https://redirect.github.com/ether/etherpad/issues/7928)).** The settings language `<select>` did not reflect the language Etherpad had actually auto-detected; it now shows the active selection. - **Pad — don't issue a deletion token (or show its modal) when `allowPadDeletionByAllUsers` is on ([#​7929](https://redirect.github.com/ether/etherpad/issues/7929)).** With pad deletion open to all users the client still minted a deletion token and surfaced the confirm modal; both are now suppressed in that configuration. - **Admin — one unreadable pad no longer empties the Manage-pads list ([#​7935](https://redirect.github.com/ether/etherpad/issues/7935) / [#​7938](https://redirect.github.com/ether/etherpad/issues/7938)).** A single pad that failed to read could throw out of the list-hydration path and blank the entire admin Manage-pads view; the read is now guarded per-pad so the rest of the list still renders. ##### Internal / contributor-facing - **CI — downstream client compatibility gate ([#​7923](https://redirect.github.com/ether/etherpad/issues/7923) / [#​7924](https://redirect.github.com/ether/etherpad/issues/7924) / [#​7927](https://redirect.github.com/ether/etherpad/issues/7927)).** A new gate smoke-tests the published `etherpad-pad`, `etherpad-cli`, and `etherpad-desktop` clients against the server build (Phase 1 + Phase 2), with robust per-client error handling in `run-clients.sh` so one client's failure is reported rather than masking the others. - **CI — verify Etherpad boots offline ([#​7936](https://redirect.github.com/ether/etherpad/issues/7936)).** Adds a test step that confirms a built Etherpad starts with no network access. ##### Dependencies - `ueberdb2` 6.1.8 → 6.1.9 — PostgreSQL pool errors are now handled and TCP keep-alive is enabled (fixes [#​7878](https://redirect.github.com/ether/etherpad/issues/7878)), and the Redis and RethinkDB drivers attach connection-error handlers so a dropped database connection no longer crashes the Etherpad process. - `semver` 7.8.2 → 7.8.3 ([#​7933](https://redirect.github.com/ether/etherpad/issues/7933)), `rate-limiter-flexible` 11.1.1 → 11.2.0 ([#​7934](https://redirect.github.com/ether/etherpad/issues/7934)), plus a dev-dependencies group update ([#​7932](https://redirect.github.com/ether/etherpad/issues/7932)). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9ldGhlcnBhZCIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
52 lines
1.4 KiB
YAML
52 lines
1.4 KiB
YAML
# yaml-language-server: $schema=./values.schema.json
|
|
image:
|
|
repository: ghcr.io/ether/etherpad
|
|
pullPolicy: IfNotPresent
|
|
tag: 3.3.1@sha256:c4bcd4b3365222b6a0e1d596dcebfddccd47bb2c80ebe4ab903d2393d8eeea9c
|
|
securityContext:
|
|
container:
|
|
readOnlyRootFilesystem: false
|
|
runAsNonRoot: false
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
service:
|
|
main:
|
|
ports:
|
|
main:
|
|
port: 10060
|
|
targetPort: 9001
|
|
workload:
|
|
main:
|
|
podSpec:
|
|
containers:
|
|
main:
|
|
env:
|
|
DB_TYPE: "postgres"
|
|
DB_NAME: "{{ .Values.cnpg.main.database }}"
|
|
DB_USER: "{{ .Values.cnpg.main.user }}"
|
|
DB_PORT: "5432"
|
|
DB_PASS:
|
|
secretKeyRef:
|
|
name: cnpg-main-user
|
|
key: password
|
|
DB_HOST:
|
|
secretKeyRef:
|
|
name: cnpg-main-urls
|
|
key: host
|
|
# User Defined
|
|
|
|
TITLE: "Etherpad"
|
|
FAVICON: "favicon.ico"
|
|
DEFAULT_PAD_TEXT: "Welcome to Etherpad! This pad text is synchronized as you type, so that everyone viewing this page sees the same text. This allows you to collaborate seamlessly on documents! Get involved with Etherpad at https://etherpad.org"
|
|
ADMIN_PASSWORD: "adminpass"
|
|
USER_PASSWORD: "firstuserpass"
|
|
persistence:
|
|
data:
|
|
enabled: true
|
|
mountPath: "/opt/etherpad-lite/var"
|
|
cnpg:
|
|
main:
|
|
enabled: true
|
|
user: etherpad
|
|
database: etherpad
|