TrueCharts Bot
f7c92506ff
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/tautulli/tautulli](https://redirect.github.com/Tautulli/Tautulli) | minor | `5f36033` → `9c73937` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>Tautulli/Tautulli (ghcr.io/tautulli/tautulli)</summary> ### [`v2.17.0`](https://redirect.github.com/Tautulli/Tautulli/blob/HEAD/CHANGELOG.md#v2170-2026-03-27) [Compare Source](https://redirect.github.com/Tautulli/Tautulli/compare/v2.16.1...v2.17.0) - Important Note! - Several security vulnerabilities have been identified in Tautulli versions <=2.16.1. Users are strongly encouraged to update to the latest Tautulli version 2.17.x. - Notifications: - Fix: Prevent RCE in notification text evaluation. (CVE-2026-28505) (Thanks [@​q1uf3ng](https://redirect.github.com/q1uf3ng)) - Newsletters: - Fix: Media from other video libraries using the modern Plex agents not showing up on newsletter. - Fix: Unauthenticated path traversal in /newsletter/image/images endpoint. (CVE-2026-31831) (Thanks [@​JakePeralta7](https://redirect.github.com/JakePeralta7)) - Exporter: - Fix: Logo images incorrectly exported as jpg instead of png. - New: Added ability to export square art images. - New: Added ability to export theme music. ([#​2654](https://redirect.github.com/Tautulli/Tautulli/issues/2654)) - Graphs: - Fix: History modal not opening when clicking on graphs. ([#​2652](https://redirect.github.com/Tautulli/Tautulli/issues/2652)) - API: - Fix: SQL injection in get\_home\_stats API command. (CVE-2026-31799) (Thanks [@​mandreko](https://redirect.github.com/mandreko)) - Fix: Unsanitized JSONP callback parameter. (CVE-2026-32275) (Thanks [@​mandreko](https://redirect.github.com/mandreko)) - New: Added rating to get\_home\_stats API command. ([#​2655](https://redirect.github.com/Tautulli/Tautulli/issues/2655)) (Thanks [@​jma1ice](https://redirect.github.com/jma1ice)) - Removed: get\_apikey API command. - Other: - Fix: Validate log path for Plex log files. ([#​2632](https://redirect.github.com/Tautulli/Tautulli/issues/2632)) - Fix: Add authentication to /pms\_image\_proxy endpoint. (CVE-2026-31804) (Thanks [@​mandreko](https://redirect.github.com/mandreko)) - New: Updated third party donation logos. ([#​2646](https://redirect.github.com/Tautulli/Tautulli/issues/2646)) (Thanks [@​aisgbnok](https://redirect.github.com/aisgbnok)) - New: Update Bootstrap CSS to v3.4.1 and decouple overrides ([#​2662](https://redirect.github.com/Tautulli/Tautulli/issues/2662)) (Thanks [@​aisgbnok](https://redirect.github.com/aisgbnok)) - New: Update Bootstrap-select to v1.13.18 ([#​2666](https://redirect.github.com/Tautulli/Tautulli/issues/2666)) (Thanks [@​aisgbnok](https://redirect.github.com/aisgbnok)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yOS4yIiwidXBkYXRlZEluVmVyIjoiNDMuMjkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhcHAvdGF1dHVsbGkiLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL21pbm9yIl19-->