Update ghcr.io/paperless-ngx/paperless-ngx Docker tag to v2.20.2
No problems upgrading the Docker container with a Docker compose yaml file within Portainer and by means of Portainer DevOps resp. GitOps with dependency update facilitated by Mend's Renovate Bot.
This MR contains the following updates:
| Package | Update | Change |
|---|---|---|
| ghcr.io/paperless-ngx/paperless-ngx | patch | 2.20.1 -> 2.20.2 |
Release Notes
paperless-ngx/paperless-ngx (ghcr.io/paperless-ngx/paperless-ngx)
v2.20.2: Paperless-ngx v2.20.2
[!NOTE]
This release addresses two security issues (GHSA-6653-vcx4-69mc and GHSA-24x5-wp64-9fcc) and is recommended for all users. Thank you to the community members who reported these.
paperless-ngx 2.20.2
Features / Enhancements
Bug Fixes
- Fix: Expanded SVG validation whitelist and additional checks @stumpylog (#11590)
- Fix: normalize allowed SVG tag and attribute names, add version @shamoon (#11586)
- Fix: pass additional arguments to TagSerializer for permissions @shamoon (#11576)
Maintenance
- Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @dependabot[bot] (#11515)
Dependencies
6 changes
- Chore: update Angular dependencies to 20.3.15 @shamoon (#11568)
- Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @dependabot[bot] (#11515)
- Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @dependabot[bot] (#11513)
- Chore(deps-dev): Bump @playwright/test from 1.56.1 to 1.57.0 in /src-ui @dependabot[bot] (#11514)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @dependabot[bot] (#11512)
- docker(deps): bump astral-sh/uv from 0.9.14-python3.12-trixie-slim to 0.9.15-python3.12-trixie-slim @dependabot[bot] (#11533)
All App Changes
12 changes
- Fix: Expanded SVG validation whitelist and additional checks @stumpylog (#11590)
- Fixhancement: pass ordering to tag children @shamoon (#11556)
- Performance: avoid unnecessary filename operations on bulk custom field updates @shamoon (#11558)
- Fix: normalize allowed SVG tag and attribute names, add version @shamoon (#11586)
- Chore: refactor workflows code @shamoon (#11563)
- Fix: pass additional arguments to TagSerializer for permissions @shamoon (#11576)
- Chore: update Angular dependencies to 20.3.15 @shamoon (#11568)
- Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @dependabot[bot] (#11513)
- Chore(deps-dev): Bump @playwright/test from 1.56.1 to 1.57.0 in /src-ui @dependabot[bot] (#11514)
- Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @dependabot[bot] (#11512)
- Tweakhancement: dim inactive users in users-groups list @shamoon (#11537)
- Chore: add some output of social login errors @shamoon (#11527)
