chore(helm): update image docker.io/wekanteam/wekan v7.97 → v7.99 (#40625)
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [docker.io/wekanteam/wekan](https://redirect.github.com/wekan/wekan) |
minor | `4c33ae9` -> `a154d7f` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Release Notes
<details>
<summary>wekan/wekan (docker.io/wekanteam/wekan)</summary>
###
[`v7.99`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v799-2025-10-11-WeKan--release)
[Compare
Source](https://redirect.github.com/wekan/wekan/compare/v7.98...v7.99)
This release fixed the following bugs:
- [Improve automatic Snap
upgrades](https://redirect.github.com/wekan/wekan/commit/aab671398c7ee3d7ea4934c6c9c977ad630fa74f).
Thanks to xet7.
Thanks to above GitHub users for their contributions and translators for
their translations.
###
[`v7.98`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v798-2025-10-11-WeKan--release)
[Compare
Source](https://redirect.github.com/wekan/wekan/compare/v7.97...v7.98)
This release adds the following CRITICAL SECURITY FIXES:
- [Security Fix: IDOR CWE-639 that affected WeKan
7.80-7.93](https://redirect.github.com/wekan/wekan/commit/b87cff1289d2c98ef84d69e171f112ecedb4d843).
Thanks to Romain Korpas at apitech.fr and xet7.
- [Security Fix: Computational Resource Abuse in Export
endpoints](https://redirect.github.com/wekan/wekan/commit/d0f118e7af0b2ede517d6d051226c38fa8e557b6).
Thanks to Anynymous Security Researcher and xet7.
- [Security Fix FG-VD-22-078: Prevent SVG Billion Laughs
Attack](https://redirect.github.com/wekan/wekan/commit/30c1597b658b0ef50fd2efc56786e8b0f08ac72c).
Thanks to Nguyen Thanh Nguyen of Fortinet's FortiGuard Labs and xet7.
- [Security Fix usd-2022-0041: CWE-284 Improper Access
Control](https://redirect.github.com/wekan/wekan/commit/f6591d7820e01075cba93612a5fdbf692fbe49dc).
Thanks to Christian Pöschl of usd AG and xet7.
- [Security Fix JVN#14269684: Broken access
control](https://redirect.github.com/wekan/wekan/commit/9720e703fd9432bf0e1bfea2358f8c7ea078f1b1).
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7.
- [Security Fix JVN#74210258: Stored
XSS](https://redirect.github.com/wekan/wekan/commit/e1fa607f87d821accb846f2deef1f388003848d1).
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7.
- [Security Fix JVN#86586539: Stored
XSS](https://redirect.github.com/wekan/wekan/commit/ee79cab7b27f73fab62a00ec49add73fd6f7bcaa).
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7.
- [Security Fix JVN#15385465: CWE-79 XSS, that affected WeKan
7.94](https://redirect.github.com/wekan/wekan/commit/81c3dc1d956cd7040655940f6569653d7b98fa9a).
Thanks to Sho Sugiyama and xet7.
- Security Fix
[JVN#80785288](https://redirect.github.com/JVN/wekan/issues/80785288):
CWE-79 XSS, that affected WeKan 3.94 and v3.95. This was already
previously fixed.
Thanks to xet7.
and adds the following new features:
- [Mobile one board per row. Board zoom size percent. Board toggle
mobile/desktop mode. In
Progress](https://redirect.github.com/wekan/wekan/commit/752699d1c2fb8ea9ff0f3ec9ae0b2b776443d826).
Thanks to xet7.
- \[Drag any files from file manager to minicard or opened card.
[Part
1](https://redirect.github.com/wekan/wekan/commit/3e9481c5bd2c02ba501bd0a6ef1d1e6ce82bb1d9),
[Part
2](https://redirect.github.com/wekan/wekan/commit/cdd7d69c660d0b6ac06b7b75d4f59985b8a9322a).
Thanks to xet7.
- [Use attachments from old CollectionFS database structure, when not
yet migrated to Meteor-Files/ostrio-files, without needing to migrate
database
structure](https://redirect.github.com/wekan/wekan/commit/a8de2f224f61d0e5c7061fefb1cdd4f45f3bb020).
Thanks to xet7.
- [Show console.log 'Legacy attachments route loaded' only when
environment variable
DEBUG=true](https://redirect.github.com/wekan/wekan/commit/1c84b19f246ebe6d3cad4f56726013147756d9c3).
Thanks to xet7.
- [Make possible for lists to have different names at different
swimlanes. Make possible to drag list from one swimlane to another
swimlane](https://redirect.github.com/wekan/wekan/commit/719ef87efceacfe91461a8eeca7cf74d11f4cc0a).
Thanks to xet7.
- [Add support for Docker/Compose Secrets for passwords to
Docker/Snap/Bundle
platforms](https://redirect.github.com/wekan/wekan/commit/107e2ac90043138ea8aa09aadd92f4af355289c0).
Thanks to Roemer and xet7.
- Add Snap automatic upgrades.
[Part
1](https://redirect.github.com/wekan/wekan/commit/0549bc0b0c7dd4a5db53d645662dd4362ef4d1f3),
[Part
2](https://redirect.github.com/wekan/wekan/commit/f1e1fd359364dbe6366501ac4f6a150d73509f17).
Thanks to xet7.
and fixes the following bugs:
- Fix DOMPurify paths.
[Part
1](https://redirect.github.com/wekan/wekan/commit/90899f0928274cbc30ed3d6df0227664efcd2584),
[Part
2](https://redirect.github.com/wekan/wekan/commit/77691244018f3a1e44c28973b40a363bf77f99b2),
[Part
3](https://redirect.github.com/wekan/wekan/commit/21ba0a96066a495e885fcf186f026cf1c7ddf45d),
[Part
4](https://redirect.github.com/wekan/wekan/commit/2119c6ab0c2d76c8a9b22fa712b35b38345fc040).
Thanks to xet7.
- [Fix sizes of drag handles at desktop
mode](https://redirect.github.com/wekan/wekan/commit/734165f3c78e9ba9643826da62f78844273f18f6).
Thanks to xet7.
- [Fixed showing translations always, regardsless of is ROOT\_URL set
correctly or
not](https://redirect.github.com/wekan/wekan/commit/1a7bd65e596a4a1030e2686a787186b6d1c61abe).
Thanks to xet7.
- [Snap: Removed double mongo3 that's already at
migratemongo](https://redirect.github.com/wekan/wekan/commit/2a24918a9c31e541f4d6424b77cfd76a8d9f2b06).
Thanks to xet7.
- [Updated release scripts of snapcraft pack command
syntax](https://redirect.github.com/wekan/wekan/commit/d88d197de964fd71e61ea6c932521f1e5abe7630).
Thanks to xet7.
- [Try to fix Snap automatic
upgrade](https://redirect.github.com/wekan/wekan/commit/4ec4e19e637b86b05b11afd076fae09d3698b8de).
Thanks to xet7.
- [Added missing metadata fields to
snapcraft.yaml](https://redirect.github.com/wekan/wekan/commit/cd948fb5765efdf5a7d792180a25ffa26bab2730).
Thanks to xet7.
Thanks to above GitHub users for their contributions and translators for
their translations.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44Mi4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjgyLjEwIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->
TrueCharts Bot
a47c1a0ff2