Update ghcr.io/tandoorrecipes/recipes Docker tag to v2.7.2 #29

renovate-bot · 2026-10-23T21:26:19+02:00

renovate-bot commented

2026-10-23 21:26:19 +02:00

This PR contains the following updates:

Package	Update	Change
ghcr.io/tandoorrecipes/recipes	minor	`2.6.15` → `2.7.2`

Release Notes

TandoorRecipes/recipes (ghcr.io/tandoorrecipes/recipes)

`v2.7.2`

Compare Source

improved hide "accept privacy" checkbox when no privacy url is given
improved AI recipe import reliability #4829
fixed unauthorized error message on login page and recipe share page #4889
fixed missing LDAP dependency #4887
fixed missing CSRF token on SignUp page failing signup from invite link #4891
fixed InviteLinks not working on pages with disabled signup
fixed permission for prometheus view #4888
fixed account redirects in sub path setups (thanks to sebastianlipponer #4885)

`v2.7.1`

Compare Source

improved error messages when AI service providers are overloaded
improved email confirmation wording on signup page
fixed meal plan servings being overriden on save #4830 (thanks to jin-codes #4840)
fixe MealPlan titles

`v2.7.0`

Compare Source

Migrated all old authentication views to the new frontend and updated the logic/backend
- added ACCOUNT_EMAIL_VERIFICATION setting with default optional (options "mandatory", "optional", "none")
- changed ENABLE_SIGNUP setting to also prvent social signups when disabled
- removed SOCIALACCOUNT_ONLY setting, HIDE_LOGIN_FORM still exists and allows login trough the admin login page
- removed SOCIALACCOUNT_LOGIN_ON_GET setting (not needed for frontend flow)
- removed SOCIALACCOUNT_AUTO_SIGNUP as signup forms for social providers are not supported for now (should not be needed)
- removed api-token-auth/ endpoint to create an AccessToken for the API with a username/password. Please refer to the authentication docs to see how to authenticate with 3rd party clients.
- ⚠️ LDAP and proxy auth have NOT been tested. If it does not work feel free to PR a fix or change to a supported provider.
improved error message when URL import failes due to 403 rejections from external server #4871
improved error messages when ingredients are truncated while parsing #4790 (thanks Themazecrawler to #4832)
improved allow decimals for servings in cook log (thanks to manikantavarma2889 #4762)
improved mealie importer by better using the progress bar (thanks to disconn3ct #4862)
improved strip unnecessary characters from AI json response (thanks to jin-codes #4838)
improved RecipeSage import (thanks to LaoChouPro #4823)
fixed food batch editing dialog
fixed adding to shopping selection of shopping list not working #4865
fixed favorite and times_cooked search filters not working #4720 (#4722 thanks to Abhijay-29r)
fixed meal master import creating ingredients as foods (tanks to Juice-de-Orange #4864)
fixed mealie importer failing due to duplicate properites #4791
fixed shopping list bulk API endpoint accepted IDs from foreign spaces https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-5p9v-743w-79h3
fixed XML parser could read local files in rezepsuite and cookamte importers https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-5f74-7rgh-pc97
fixed shopping list recipe api could reveal overview of recipes marked as private https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-pcq2-64qw-jm4x
fixed group permission check cache not invalidated properly on space change https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-69q3-5q6x-7hmx
fixed pestle impoter SSRF issue https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-xq7g-9q95-vjc6
fixed recipe book entries could be moved to other peoples books https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-748x-xc8h-95hj
fixed meal plan api revealing recipes from other spaces https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-c7mc-c9jr-38hf
fixed wrong IDs compared in sharing https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-vc5c-xh64-79vp
changed meal plan title now takes presedence over the recipe name
updated lots of dependencies (serveral security issues)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/tandoorrecipes/recipes](https://github.com/TandoorRecipes/recipes) | minor | `2.6.15` → `2.7.2` | --- ### Release Notes <details> <summary>TandoorRecipes/recipes (ghcr.io/tandoorrecipes/recipes)</summary> ### [`v2.7.2`](https://github.com/TandoorRecipes/recipes/releases/tag/2.7.2) [Compare Source](https://github.com/TandoorRecipes/recipes/compare/2.7.1...2.7.2) - **improved** hide "accept privacy" checkbox when no privacy url is given - **improved** AI recipe import reliability [#4829](https://github.com/TandoorRecipes/recipes/issues/4829) - **fixed** unauthorized error message on login page and recipe share page [#4889](https://github.com/TandoorRecipes/recipes/issues/4889) - **fixed** missing LDAP dependency [#4887](https://github.com/TandoorRecipes/recipes/issues/4887) - **fixed** missing CSRF token on SignUp page failing signup from invite link [#4891](https://github.com/TandoorRecipes/recipes/issues/4891) - **fixed** InviteLinks not working on pages with disabled signup - **fixed** permission for prometheus view [#4888](https://github.com/TandoorRecipes/recipes/issues/4888) - **fixed** account redirects in sub path setups (thanks to [sebastianlipponer](https://github.com/sebastianlipponer) [#4885](https://github.com/TandoorRecipes/recipes/issues/4885)) ### [`v2.7.1`](https://github.com/TandoorRecipes/recipes/releases/tag/2.7.1) [Compare Source](https://github.com/TandoorRecipes/recipes/compare/2.7.0...2.7.1) - **improved** error messages when AI service providers are overloaded - **improved** email confirmation wording on signup page - **fixed** meal plan servings being overriden on save [#4830](https://github.com/TandoorRecipes/recipes/issues/4830) (thanks to [jin-codes](https://github.com/jin-codes) [#4840](https://github.com/TandoorRecipes/recipes/issues/4840)) - **fixe** MealPlan titles ### [`v2.7.0`](https://github.com/TandoorRecipes/recipes/releases/tag/2.7.0) [Compare Source](https://github.com/TandoorRecipes/recipes/compare/2.6.15...2.7.0) - Migrated all old authentication views to the new frontend and updated the logic/backend - **added** `ACCOUNT_EMAIL_VERIFICATION` setting with default `optional` (options "mandatory", "optional", "none") - **changed** `ENABLE_SIGNUP` setting to also prvent social signups when disabled - **removed** `SOCIALACCOUNT_ONLY` setting, `HIDE_LOGIN_FORM` still exists and allows login trough the admin login page - **removed** `SOCIALACCOUNT_LOGIN_ON_GET` setting (not needed for frontend flow) - **removed** `SOCIALACCOUNT_AUTO_SIGNUP` as signup forms for social providers are not supported for now (should not be needed) - **removed** `api-token-auth/` endpoint to create an AccessToken for the API with a username/password. Please refer to the [authentication docs](https://docs.tandoor.dev/features/authentication/) to see how to authenticate with 3rd party clients. - ⚠️ LDAP and proxy auth have NOT been tested. If it does not work feel free to PR a fix or change to a supported provider. - **improved** error message when URL import failes due to 403 rejections from external server [#4871](https://github.com/TandoorRecipes/recipes/issues/4871) - **improved** error messages when ingredients are truncated while parsing [#4790](https://github.com/TandoorRecipes/recipes/issues/4790) (thanks [Themazecrawler](https://github.com/Themazecrawler) to [#4832](https://github.com/TandoorRecipes/recipes/issues/4832)) - **improved** allow decimals for servings in cook log (thanks to [manikantavarma2889](https://github.com/manikantavarma2889) [#4762](https://github.com/TandoorRecipes/recipes/issues/4762)) - **improved** mealie importer by better using the progress bar (thanks to [disconn3ct](https://github.com/disconn3ct) [#4862](https://github.com/TandoorRecipes/recipes/issues/4862)) - **improved** strip unnecessary characters from AI json response (thanks to [jin-codes](https://github.com/jin-codes) [#4838](https://github.com/TandoorRecipes/recipes/issues/4838)) - **improved** RecipeSage import (thanks to [LaoChouPro](https://github.com/LaoChouPro) [#4823](https://github.com/TandoorRecipes/recipes/issues/4823)) - **fixed** food batch editing dialog - **fixed** adding to shopping selection of shopping list not working [#4865](https://github.com/TandoorRecipes/recipes/issues/4865) - **fixed** favorite and times\_cooked search filters not working [#4720](https://github.com/TandoorRecipes/recipes/issues/4720) ([#4722](https://github.com/TandoorRecipes/recipes/issues/4722) thanks to [Abhijay-29r](https://github.com/Abhijay-29r)) - **fixed** meal master import creating ingredients as foods (tanks to [Juice-de-Orange](https://github.com/Juice-de-Orange) [#4864](https://github.com/TandoorRecipes/recipes/issues/4864)) - **fixed** mealie importer failing due to duplicate properites [#4791](https://github.com/TandoorRecipes/recipes/issues/4791) - **fixed** shopping list bulk API endpoint accepted IDs from foreign spaces <https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-5p9v-743w-79h3> - **fixed** XML parser could read local files in rezepsuite and cookamte importers <https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-5f74-7rgh-pc97> - **fixed** shopping list recipe api could reveal overview of recipes marked as private <https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-pcq2-64qw-jm4x> - **fixed** group permission check cache not invalidated properly on space change <https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-69q3-5q6x-7hmx> - **fixed** pestle impoter SSRF issue <https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-xq7g-9q95-vjc6> - **fixed** recipe book entries could be moved to other peoples books <https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-748x-xc8h-95hj> - **fixed** meal plan api revealing recipes from other spaces <https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-c7mc-c9jr-38hf> - **fixed** wrong IDs compared in sharing <https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-vc5c-xh64-79vp> - **changed** meal plan title now takes presedence over the recipe name - **updated** lots of dependencies (serveral security issues) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-10-23 21:26:19 +02:00

Update ghcr.io/tandoorrecipes/recipes Docker tag to v2.7.1 fdc456e0c5

renovate-bot force-pushed renovate/ghcr.io-tandoorrecipes-recipes-2.x from fdc456e0c5 to 913953668b

2026-10-27 08:25:43 +01:00

Compare

renovate-bot changed title from ~~Update ghcr.io/tandoorrecipes/recipes Docker tag to v2.7.1~~ to Update ghcr.io/tandoorrecipes/recipes Docker tag to v2.7.2

2026-10-27 08:25:45 +01:00

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin 'renovate/ghcr.io-tandoorrecipes-recipes-2.x:renovate/ghcr.io-tandoorrecipes-recipes-2.x'

git switch 'renovate/ghcr.io-tandoorrecipes-recipes-2.x'

Merge

Merge the changes and update on Forgejo.

git switch 'master'

git merge --no-ff 'renovate/ghcr.io-tandoorrecipes-recipes-2.x'

git switch 'renovate/ghcr.io-tandoorrecipes-recipes-2.x'

git rebase 'master'

git switch 'master'

git merge --ff-only 'renovate/ghcr.io-tandoorrecipes-recipes-2.x'

git switch 'renovate/ghcr.io-tandoorrecipes-recipes-2.x'

git rebase 'master'

git switch 'master'

git merge --no-ff 'renovate/ghcr.io-tandoorrecipes-recipes-2.x'

git switch 'master'

git merge --squash 'renovate/ghcr.io-tandoorrecipes-recipes-2.x'

git switch 'master'

git merge --ff-only 'renovate/ghcr.io-tandoorrecipes-recipes-2.x'

git switch 'master'

git merge 'renovate/ghcr.io-tandoorrecipes-recipes-2.x'

git push origin 'master'

Sign in to join this conversation.

No reviewers

No labels

No milestone

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

rick/infra!29

Rows
Columns