Skip to content

feat(container)!: Update image ghcr.io/plankanban/planka ( 1.26.3 → 2.2.1 ) - #3271

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-plankanban-planka-2.x
Open

feat(container)!: Update image ghcr.io/plankanban/planka ( 1.26.3 → 2.2.1 )#3271
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-plankanban-planka-2.x

Conversation

@renovate

@renovate renovate Bot commented Mar 22, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
ghcr.io/plankanban/planka (source) major 1.26.32.2.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

plankanban/planka (ghcr.io/plankanban/planka)

v2.2.1

Compare Source

PLANKA Community 2.2.1 — Security release

This is an emergency release fixing a security vulnerability. We recommend
updating as soon as possible.

Security
  • Fixed a path traversal vulnerability (CWE-22) in the JWT-protected static
    file routes (/user-avatars, /background-images, /favicons). On instances
    using local file storage, an authenticated user could read arbitrary files
    readable by the PLANKA process. Fixed by enforcing that resolved paths stay
    within the uploads root. S3-backed storage was not affected.

    Reported responsibly by Alpastx — thank you.

    Details: [GHSA link]

Full Changelog: plankanban/planka@v2.2.0...v2.2.1

v2.2.0

Compare Source

A Helm chart to deploy PLANKA and it's dependencies.

v2.1.1

Compare Source

What's Changed

New Contributors

Full Changelog: plankanban/planka@v2.1.0...v2.1.1

v2.1.0

Compare Source

A Helm chart to deploy PLANKA and it's dependencies.

v2.0.3

Compare Source

A Helm chart to deploy PLANKA and it's dependencies.

v2.0.2

Compare Source

A Helm chart to deploy PLANKA and it's dependencies.

v2.0.1

Compare Source

A Helm chart to deploy PLANKA and it's dependencies.

v2.0.0

Compare Source

A Helm chart to deploy PLANKA and it's dependencies.


Configuration

📅 Schedule: (in timezone America/Chicago)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Mar 22, 2026

Copy link
Copy Markdown

Path: main/homelab/planka

--- /tmp/tmp.UkvvZv1wq5	2026-08-10 19:57:49.274872432 +0000
+++ /tmp/tmp.IqzwAhTN2t	2026-08-10 19:57:50.107865411 +0000
@@ -90,7 +90,7 @@
           envFrom:
             - secretRef:
                 name: planka-secret
-          image: ghcr.io/plankanban/planka:1.26.3@sha256:e469d724985db3f560ef0aa2218d54536212459bf8ecbdbc9fd995fc3cbe29db
+          image: ghcr.io/plankanban/planka:2.2.1@sha256:125f45330853210c678fed1132bedc0912b4a11a27779b79802fbca108e069e2
           name: main
           resources:
             limits:

@renovate
renovate Bot force-pushed the renovate/ghcr.io-plankanban-planka-2.x branch from f939485 to ed76289 Compare April 18, 2026 17:02
@renovate renovate Bot changed the title feat(container)!: Update image ghcr.io/plankanban/planka ( 1.26.3 → 2.1.0 ) feat(container)!: Update image ghcr.io/plankanban/planka ( 1.26.3 → 2.1.1 ) Apr 18, 2026
@renovate
renovate Bot force-pushed the renovate/ghcr.io-plankanban-planka-2.x branch from ed76289 to 8ae47de Compare April 18, 2026 19:27
@renovate renovate Bot changed the title feat(container)!: Update image ghcr.io/plankanban/planka ( 1.26.3 → 2.1.1 ) feat(container)!: Update image ghcr.io/plankanban/planka ( 1.26.3 → 2.2.0 ) Aug 9, 2026
@renovate
renovate Bot force-pushed the renovate/ghcr.io-plankanban-planka-2.x branch from 8ae47de to e925ed6 Compare August 9, 2026 21:47
….2.1 )

| datasource | package                   | from   | to    |
| ---------- | ------------------------- | ------ | ----- |
| docker     | ghcr.io/plankanban/planka | 1.26.3 | 2.2.1 |


Signed-off-by: Roger Rumao <rogerrum@users.noreply.github.com>
@renovate
renovate Bot force-pushed the renovate/ghcr.io-plankanban-planka-2.x branch from e925ed6 to 759b7f6 Compare August 10, 2026 19:57
@renovate renovate Bot changed the title feat(container)!: Update image ghcr.io/plankanban/planka ( 1.26.3 → 2.2.0 ) feat(container)!: Update image ghcr.io/plankanban/planka ( 1.26.3 → 2.2.1 ) Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants