helm-charts icon indicating copy to clipboard operation
helm-charts copied to clipboard

Published 20 hours ago • verified publisher icon nautobot

chore(deps): update ghcr.io/nautobot/nautobot docker tag to v2.2.4

Open renovate[bot] opened this issue 9 months ago • 1 comments

Mend Renovate

This PR contains the following updates:

Package Update Change
ghcr.io/nautobot/nautobot patch 2.2.3-py3.11 -> 2.2.4-py3.11

Release Notes

nautobot/nautobot (ghcr.io/nautobot/nautobot)

v2.2.4: - 2024-05-13

Compare Source

What's Changed

Security
  • #​1858 - Added sanitization of HTML tags in the content of BANNER_TOP, BANNER_BOTTOM, and BANNER_LOGIN configuration to prevent against potential injection of malicious scripts (stored XSS) via these features (GHSA-r2hr-4v48-fjv3).
  • #​5672 - Updated Jinja2 dependency to 3.1.4 to address CVE-2024-34064.
Added
  • #​1858 - Added support in BRANDING_FILEPATHS configuration to specify a custom css and/or javascript file to be added to Nautobot page content.
  • #​1858 - Added Markdown support to the BANNER_TOP, BANNER_BOTTOM, and BANNER_LOGIN configuration settings.
Fixed
  • #​4986 - Fixed inconsistent use of super causing active_tab context to be missing from several views.
  • #​5644 - Made the uniqueness constraints between the ContactAssociation model and the related API serializer consistent.
  • #​5684 - Fixed standard CSV export when using export templates.
  • #​5689 - Fixed change logging for bulk delete operations so that user is included in the log.
Documentation
  • #​5661 - Updated documentation to organize installation instructions and provide easier to use functions from mkdocs.
Housekeeping
  • #​5263 - Updated nh3 to 0.2.17 in poetry.lock.
  • #​5637 - Removed "version" from development docker-compose.yml files as newer versions of Docker complain about it being obsolete.
  • #​5637 - Fixed behavior of invoke stop so that it also stops the optional mkdocs container if present.

Contributors

Full Changelog: https://github.com/nautobot/nautobot/compare/v2.2.3...v2.2.4

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • [ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] avatar May 13 '24 22:05 renovate[bot]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: charts/nautobot/values.yaml
Post-upgrade command 'scripts/update_version.sh "{{{prTitle}}}"' has not been added to the allowed list in allowedPostUpgradeCommands

renovate[bot] avatar May 13 '24 22:05 renovate[bot]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate[bot] avatar May 28 '24 08:05 renovate[bot]