This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/dgtlmoon/changedetection.io](https://redirect.github.com/dgtlmoon/changedetection.io) | patch | `e7e886d` -> `6e9dcf4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>dgtlmoon/changedetection.io (ghcr.io/dgtlmoon/changedetection.io)</summary> ### [`v0.47.06`](https://redirect.github.com/dgtlmoon/changedetection.io/releases/tag/0.47.06): CVE-2024-51998 - file:/ path traversal access should not be allowed to access a file without ALLOW_FILE_URI set (requires a chrome/webdriver browser) [Compare Source](https://redirect.github.com/dgtlmoon/changedetection.io/compare/0.47.05...0.47.06) CVE-2024-51998 - file:/ path traversal access should not be allowed to access a file without ALLOW_FILE_URI (single forward slash) #### What's Changed - Pinning werkzeug by [@​dgtlmoon](https://redirect.github.com/dgtlmoon) in [https://github.com/dgtlmoon/changedetection.io/pull/2757](https://redirect.github.com/dgtlmoon/changedetection.io/pull/2757) - Price tracker - fix for sites that supply an empty additional price by [@​dgtlmoon](https://redirect.github.com/dgtlmoon) in [https://github.com/dgtlmoon/changedetection.io/pull/2758](https://redirect.github.com/dgtlmoon/changedetection.io/pull/2758) - Update docker-compose.yml by [@​arthurnn](https://redirect.github.com/arthurnn) in [https://github.com/dgtlmoon/changedetection.io/pull/2767](https://redirect.github.com/dgtlmoon/changedetection.io/pull/2767) #### New Contributors - [@​arthurnn](https://redirect.github.com/arthurnn) made their first contribution in [https://github.com/dgtlmoon/changedetection.io/pull/2767](https://redirect.github.com/dgtlmoon/changedetection.io/pull/2767) **Full Changelog**: https://github.com/dgtlmoon/changedetection.io/compare/0.47.05...0.47.06 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xNDIuNyIsInVwZGF0ZWRJblZlciI6IjM4LjE0Mi43IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
33 lines
585 B
YAML
33 lines
585 B
YAML
image:
|
|
repository: ghcr.io/dgtlmoon/changedetection.io
|
|
pullPolicy: IfNotPresent
|
|
tag: 0.47.06@sha256:6e9dcf4abc1cfb0b1eeba6b6ff52a4b6f790110d6cdc8b7942c6cecf34e56265
|
|
|
|
service:
|
|
main:
|
|
ports:
|
|
main:
|
|
protocol: http
|
|
targetPort: 5000
|
|
port: 5000
|
|
|
|
workload:
|
|
main:
|
|
podSpec:
|
|
containers:
|
|
main:
|
|
env:
|
|
BASE_URL: ""
|
|
USE_X_SETTINGS: true
|
|
HIDE_REFERER: true
|
|
FETCH_WORKERS: 10
|
|
|
|
persistence:
|
|
datastore:
|
|
enabled: true
|
|
mountPath: "/datastore"
|
|
|
|
portal:
|
|
open:
|
|
enabled: true
|