Open renovate[bot] opened 2 weeks ago
[!IMPORTANT]
Review skipped
Bot user detected.
To trigger a single review, invoke the
@coderabbitai review
command.You can disable this status message by setting the
reviews.review_status
tofalse
in the CodeRabbit configuration file.
The Dockerfile for the Bookstack application has been updated to reflect a new version of the application. The BOOKSTACK_VERSION
argument has been changed from v24.05.3
to v24.05.4
, indicating an upgrade. This modification is focused solely on the version specification, with no other structural changes to the Dockerfile.
File | Change Summary |
---|---|
bookstack/Dockerfile |
Updated BOOKSTACK_VERSION from v24.05.3 to v24.05.4 |
(No sequence diagrams generated as the changes are too simple.)
🐰 In the garden where I play,
A new version hops in today!
Bookstack's fresh, oh what a sight,
Upgraded version, pure delight!
With every change, we leap and bound,
In this code, new joys are found! 🌼
This PR contains the following updates:
v24.05.3
->v24.05.4
Release Notes
BookStackApp/BookStack (BookStackApp/BookStack)
### [`v24.05.4`](https://togithub.com/BookStackApp/BookStack/releases/tag/v24.05.4): BookStack v24.05.4 [Compare Source](https://togithub.com/BookStackApp/BookStack/compare/v24.05.3...v24.05.4) ##### Security Release - [Update Instructions](https://www.bookstackapp.com/docs/admin/updates) - [Update details on blog](https://www.bookstackapp.com/blog/bookstack-release-v24-05-4/) BookStack v24.05.4 has been released. This is a security release to address issues found in LDAP group syncing, where in certain scenarios a user could be matched to extra roles incorrectly, and an issue with content visibility in "book-show" API responses which would not have permissions applied properly. Upgrade is strongly advised for instances where LDAP authentication is used with group syncing, or where the REST API is used to fetch contents of books ("books-read" endpoint). Thanks to Linus Nagel and their team at WorkSimple GmbH for reporting this API vulnerability. ##### Full List of Changes - Updated API docs with consistent parameter types. ([#5183](https://togithub.com/BookStackApp/BookStack/issues/5183)) - Updated default content iframe embed max-width to align with other content types. ([#5130](https://togithub.com/BookStackApp/BookStack/issues/5130)) - Updated LDAP group sync to query via full DN. - Updated translations with latest Crowdin changes. ([#5118](https://togithub.com/BookStackApp/BookStack/pull/5118)) - Fixed books read API response not applying visibility control to chapter contents. - Fixed API docs users response showing extra property. ([#5178](https://togithub.com/BookStackApp/BookStack/issues/5178)) - Fixed database error thrown when using out dev docker setup. ([#5124](https://togithub.com/BookStackApp/BookStack/issues/5124)) - Fixed RTL display issues with tasklist checkboxes. ([#5134](https://togithub.com/BookStackApp/BookStack/issues/5134))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.