enpls/docker-services
Watch
5
0
Fork
You've already forked docker-services
 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Update semaphoreui/semaphore Docker tag to v2.18.28 #279

Open
renovate-bot wants to merge 1 commit from renovate/semaphoreui-semaphore-2.x into main
pull from: renovate/semaphoreui-semaphore-2.x
merge into: enpls:main
Conversation 0 Commits 1 Files changed 1 +1 -1
renovate-bot commented 2026-05-12 16:37:06 +02:00
Collaborator
Copy link

This PR contains the following updates:

Package Update Change
semaphoreui/semaphore patch v2.18.2 → v2.18.28

Release Notes

semaphoreui/semaphore (semaphoreui/semaphore)

v2.18.28

Compare Source

Bugfixes

  • Validate schedule cron format using backend endpoint instead of JS library

v2.18.27

Compare Source

Changelog

  • 240e595 fix(templates): validate app

v2.18.26

Compare Source

Changelog

  • ee781a0 feat(auth): verify current password to fix CWE-620

v2.18.25

Compare Source

Changelog

  • 7c3789c fix(runners): close connections

v2.18.24

Compare Source

v2.18.23

Compare Source

Changelog

  • 74d8dd5 feat(ui): placeholder for enterprise storages

v2.18.22

Compare Source

Changelog

  • debf7a0 feat(ui): return extra vars for secrets

v2.18.21

Compare Source

Changelog

  • 2d6e2e3 feat: secure flag for session when https enabled

v2.18.20

Compare Source

Bugfixes

  • Validate playbook path

v2.18.19

Compare Source

v2.18.19 Release Summary

This patch release includes several important security and validation fixes.

Security fixes
  • Added validation for Git repository URLs to prevent Git option injection.
  • Added --end-of-options to Git commands to make repository URL and branch handling safer.
  • Fixed branch override handling: task-level Git branch override is now applied only when the template explicitly allows it.
  • Prevented custom roles from shadowing built-in role slugs such as owner or manager.
  • Fixed permission resolution so built-in roles always use their built-in permissions instead of database-defined custom roles.
  • Added validation to prevent access keys from being updated with a different ID or moved to another project.
Reliability and tests
  • Added tests for Git URL validation and Git command injection protection.
  • Added tests for access key update validation.
  • Added tests for custom role validation and reserved role slugs.
  • Refactored Git branch resolution into a dedicated helper to make task behavior more consistent.

v2.18.18

Compare Source

v2.18.17

Compare Source

v2.18.16

Compare Source

Bugfixes

  • Fix variable groups sync functionality

v2.18.15

Compare Source

v2.18.14

Compare Source

v2.18.12

Compare Source

Features

  • Checkbox Skip Galaxy install

v2.18.10

Compare Source

v2.18.9

Compare Source

Changelog

  • 0a37ea2 feat(cli): allow create token

v2.18.8

Compare Source

Changelog

v2.18.5

Compare Source

v2.18.4

Compare Source

Changelog

  • 7ca373d fix(docker): check reg token file

What's Changed

New Contributors

Full Changelog: https://github.com/semaphoreui/semaphore/compare/v2.18.2...v2.18.4

v2.18.3

Compare Source

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [semaphoreui/semaphore](https://github.com/semaphoreui/semaphore) | patch | `v2.18.2` → `v2.18.28` | --- ### Release Notes <details> <summary>semaphoreui/semaphore (semaphoreui/semaphore)</summary> ### [`v2.18.28`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.28) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.27...v2.18.28) #### Bugfixes - Validate schedule cron format using backend endpoint instead of JS library ### [`v2.18.27`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.27) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.26...v2.18.27) #### Changelog - [`240e595`](https://github.com/semaphoreui/semaphore/commit/240e5952239f7168e26cd81680de58d865d1919a) fix(templates): validate app ### [`v2.18.26`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.26) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.25...v2.18.26) #### Changelog - [`ee781a0`](https://github.com/semaphoreui/semaphore/commit/ee781a032ccb58c61de6b9a70993f9b6dc77dcf8) feat(auth): verify current password to fix CWE-620 ### [`v2.18.25`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.25) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.24...v2.18.25) #### Changelog - [`7c3789c`](https://github.com/semaphoreui/semaphore/commit/7c3789c890d7e92fb8ca2a63ad74babf460a13fa) fix(runners): close connections ### [`v2.18.24`](https://github.com/semaphoreui/semaphore/compare/v2.18.23...v2.18.24) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.23...v2.18.24) ### [`v2.18.23`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.23) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.22...v2.18.23) #### Changelog - [`74d8dd5`](https://github.com/semaphoreui/semaphore/commit/74d8dd572c056ce943080a344d87e29dd036df33) feat(ui): placeholder for enterprise storages ### [`v2.18.22`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.22) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.21...v2.18.22) #### Changelog - [`debf7a0`](https://github.com/semaphoreui/semaphore/commit/debf7a0618b46a529a08c11408d2a378d97af13b) feat(ui): return extra vars for secrets ### [`v2.18.21`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.21) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.20...v2.18.21) #### Changelog - [`2d6e2e3`](https://github.com/semaphoreui/semaphore/commit/2d6e2e3eb10e8bf688e2ab59609b909a012fad4c) feat: secure flag for session when https enabled ### [`v2.18.20`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.20) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.19...v2.18.20) #### Bugfixes - Validate playbook path ### [`v2.18.19`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.19) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.18...v2.18.19) #### v2.18.19 Release Summary This patch release includes several important security and validation fixes. ##### Security fixes - Added validation for Git repository URLs to prevent Git option injection. - Added `--end-of-options` to Git commands to make repository URL and branch handling safer. - Fixed branch override handling: task-level Git branch override is now applied only when the template explicitly allows it. - Prevented custom roles from shadowing built-in role slugs such as owner or manager. - Fixed permission resolution so built-in roles always use their built-in permissions instead of database-defined custom roles. - Added validation to prevent access keys from being updated with a different ID or moved to another project. ##### Reliability and tests - Added tests for Git URL validation and Git command injection protection. - Added tests for access key update validation. - Added tests for custom role validation and reserved role slugs. - Refactored Git branch resolution into a dedicated helper to make task behavior more consistent. ### [`v2.18.18`](https://github.com/semaphoreui/semaphore/compare/v2.18.17...v2.18.18) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.17...v2.18.18) ### [`v2.18.17`](https://github.com/semaphoreui/semaphore/compare/v2.18.16...v2.18.17) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.16...v2.18.17) ### [`v2.18.16`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.16) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.15...v2.18.16) #### Bugfixes - Fix variable groups sync functionality ### [`v2.18.15`](https://github.com/semaphoreui/semaphore/compare/v2.18.14...v2.18.15) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.14...v2.18.15) ### [`v2.18.14`](https://github.com/semaphoreui/semaphore/compare/v2.18.12...v2.18.14) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.12...v2.18.14) ### [`v2.18.12`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.12) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.10...v2.18.12) #### Features - Checkbox Skip Galaxy install ### [`v2.18.10`](https://github.com/semaphoreui/semaphore/compare/v2.18.9...v2.18.10) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.9...v2.18.10) ### [`v2.18.9`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.9) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.8...v2.18.9) #### Changelog - [`0a37ea2`](https://github.com/semaphoreui/semaphore/commit/0a37ea29f286c68b60bc80639363fa687eeac620) feat(cli): allow create token ### [`v2.18.8`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.8) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.5...v2.18.8) #### Changelog - [`459ccee`](https://github.com/semaphoreui/semaphore/commit/459ccee8ee67b779fd87ba4309698f5296356703) ci: fix branch ### [`v2.18.5`](https://github.com/semaphoreui/semaphore/compare/v2.18.4...v2.18.5) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.4...v2.18.5) ### [`v2.18.4`](https://github.com/semaphoreui/semaphore/releases/tag/v2.18.4) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.3...v2.18.4) #### Changelog - [`7ca373d`](https://github.com/semaphoreui/semaphore/commit/7ca373de70acb3845b4b286e99b2214464848f8e) fix(docker): check reg token file #### What's Changed - truncate commit message by runes, not bytes by [@&#8203;4n70w4](https://github.com/4n70w4) in [#&#8203;3836](https://github.com/semaphoreui/semaphore/pull/3836) - fix(db): honor legacy environment\_id when saving templates by [@&#8203;cursor](https://github.com/cursor)\[bot] in [#&#8203;3841](https://github.com/semaphoreui/semaphore/pull/3841) - api-docs: align spec with actual REST API behavior by [@&#8203;Omicron7](https://github.com/Omicron7) in [#&#8203;3852](https://github.com/semaphoreui/semaphore/pull/3852) #### New Contributors - [@&#8203;4n70w4](https://github.com/4n70w4) made their first contribution in [#&#8203;3836](https://github.com/semaphoreui/semaphore/pull/3836) **Full Changelog**: <https://github.com/semaphoreui/semaphore/compare/v2.18.2...v2.18.4> ### [`v2.18.3`](https://github.com/semaphoreui/semaphore/compare/v2.18.2...v2.18.3) [Compare Source](https://github.com/semaphoreui/semaphore/compare/v2.18.2...v2.18.3) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNzAuOSIsInVwZGF0ZWRJblZlciI6IjQzLjI3MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.3 to Update semaphoreui/semaphore Docker tag to v2.18.4 2026-05-18 21:48:24 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 3e6a7c894b to 5db64a7230 2026-05-18 21:48:26 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.4 to Update semaphoreui/semaphore Docker tag to v2.18.5 2026-05-23 18:46:36 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 5db64a7230 to d105c585cd 2026-05-23 18:46:37 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.5 to Update semaphoreui/semaphore Docker tag to v2.18.8 2026-06-02 19:48:45 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from d105c585cd to d408617740 2026-06-02 19:48:46 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.8 to Update semaphoreui/semaphore Docker tag to v2.18.9 2026-06-03 14:03:58 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from d408617740 to 6dffa6f58d 2026-06-03 14:03:59 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.9 to Update semaphoreui/semaphore Docker tag to v2.18.10 2026-06-03 23:46:21 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 6dffa6f58d to cc68e25fd3 2026-06-03 23:46:22 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.10 to Update semaphoreui/semaphore Docker tag to v2.18.12 2026-06-08 20:28:10 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from cc68e25fd3 to 7c11291e89 2026-06-08 20:28:11 +02:00 Compare
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 7c11291e89 to b064b76cd0 2026-06-14 18:09:44 +02:00 Compare
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from b064b76cd0 to 7c74c8e544 2026-06-16 23:39:17 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.12 to Update semaphoreui/semaphore Docker tag to v2.18.14 2026-07-01 18:14:31 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 7c74c8e544 to c65e4913c5 2026-07-01 18:14:33 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.14 to Update semaphoreui/semaphore Docker tag to v2.18.16 2026-07-04 18:21:38 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from c65e4913c5 to 43f2e4adce 2026-07-04 18:21:39 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.16 to Update semaphoreui/semaphore Docker tag to v2.18.17 2026-07-05 13:51:34 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 43f2e4adce to d514263ade 2026-07-05 13:51:36 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.17 to Update semaphoreui/semaphore Docker tag to v2.18.18 2026-07-05 14:55:15 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from d514263ade to cd9e035bd6 2026-07-05 14:55:16 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.18 to Update semaphoreui/semaphore Docker tag to v2.18.19 2026-07-05 20:44:08 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from cd9e035bd6 to 90e07ea8a7 2026-07-05 20:44:10 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.19 to Update semaphoreui/semaphore Docker tag to v2.18.20 2026-07-05 21:45:34 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 90e07ea8a7 to 502f18ebc2 2026-07-05 21:45:34 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.20 to Update semaphoreui/semaphore Docker tag to v2.18.21 2026-07-07 22:04:26 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 502f18ebc2 to 53a7478d2d 2026-07-07 22:04:26 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.21 to Update semaphoreui/semaphore Docker tag to v2.18.22 2026-07-08 18:19:22 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 53a7478d2d to 960f12c729 2026-07-08 18:19:22 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.22 to Update semaphoreui/semaphore Docker tag to v2.18.23 2026-07-08 23:01:22 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 960f12c729 to 591e04c466 2026-07-08 23:01:23 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.23 to Update semaphoreui/semaphore Docker tag to v2.18.24 2026-07-09 12:37:15 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 591e04c466 to 6abae30f36 2026-07-09 12:37:17 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.24 to Update semaphoreui/semaphore Docker tag to v2.18.25 2026-07-09 17:20:29 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 6abae30f36 to db6e279363 2026-07-09 17:20:29 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.25 to Update semaphoreui/semaphore Docker tag to v2.18.26 2026-07-12 14:15:04 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from db6e279363 to 1c01e0bdb6 2026-07-12 14:15:04 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.26 to Update semaphoreui/semaphore Docker tag to v2.18.27 2026-07-13 09:05:45 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from 1c01e0bdb6 to e33cc17f47 2026-07-13 09:05:47 +02:00 Compare
renovate-bot changed title from Update semaphoreui/semaphore Docker tag to v2.18.27 to Update semaphoreui/semaphore Docker tag to v2.18.28 2026-07-22 14:59:55 +02:00
renovate-bot force-pushed renovate/semaphoreui-semaphore-2.x from e33cc17f47 to 64cd0bf5a6 2026-07-22 14:59:55 +02:00 Compare
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/semaphoreui-semaphore-2.x:renovate/semaphoreui-semaphore-2.x
git switch renovate/semaphoreui-semaphore-2.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/semaphoreui-semaphore-2.x
git switch renovate/semaphoreui-semaphore-2.x
git rebase main
git switch main
git merge --ff-only renovate/semaphoreui-semaphore-2.x
git switch renovate/semaphoreui-semaphore-2.x
git rebase main
git switch main
git merge --no-ff renovate/semaphoreui-semaphore-2.x
git switch main
git merge --squash renovate/semaphoreui-semaphore-2.x
git switch main
git merge --ff-only renovate/semaphoreui-semaphore-2.x
git switch main
git merge renovate/semaphoreui-semaphore-2.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
enpls/docker-services!279
No description provided.