Update ghcr.io/mealie-recipes/mealie Docker tag to v2.5.0 #404

Merged
AverageMarcus merged 1 commits from renovate/ghcr.io-mealie-recipes-mealie-2.x into master 2025-01-23 06:45:37 +00:00
Collaborator

This PR contains the following updates:

Package Update Change
ghcr.io/mealie-recipes/mealie minor v2.4.2 -> v2.5.0

Release Notes

mealie-recipes/mealie (ghcr.io/mealie-recipes/mealie)

v2.5.0: - More Household Features, Security Fixes

Compare Source

🍴🍴🍴🍴🍴🍴

🎉 Highlights

Features
  • Migrated the "Last Made" and "On Hand" features to the household level for improved organization and usability.
  • Redesigned the FAQ section in our documentation, featuring collapsible spoilers for better readability.
🔒 Security

As part of this release, we are addressing three security vulnerabilities kindly reported by @​m10x. These vulnerabilities involved privilege escalation at the household level, allowing users to manipulate their own household permissions, such as invitations, data management, and more. Additionally, one vulnerability allowed users to create share links for recipes belonging to other groups if they had access to the recipe ID.

It is important to note that these vulnerabilities could only be exploited by users with an existing account on your Mealie instance. Nonetheless, we recommend updating to this version.

🕐Kitchen Timer

In this release, we are removing the kitchen timer from the recipe page. After discussion about enhancing this feature (#​4467), we concluded that we cannot support a timer that functions only when the screen is on and the app is in the foreground.

New features

🐛 Bug fixes

🧰 Maintenance

12 changes

📚 Documentation

🔨 Internal development

⬆️ Dependency updates

23 changes

🙏 New Contributors

🍴🍴🍴🍴🍴🍴


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/mealie-recipes/mealie](https://github.com/mealie-recipes/mealie) | minor | `v2.4.2` -> `v2.5.0` | --- ### Release Notes <details> <summary>mealie-recipes/mealie (ghcr.io/mealie-recipes/mealie)</summary> ### [`v2.5.0`](https://github.com/mealie-recipes/mealie/releases/tag/v2.5.0): - More Household Features, Security Fixes [Compare Source](https://github.com/mealie-recipes/mealie/compare/v2.4.2...v2.5.0) ### 🍴🍴🍴🍴🍴🍴 #### 🎉 Highlights ##### Features - Migrated the "Last Made" and "On Hand" features to the household level for improved organization and usability. - Redesigned the FAQ section in our documentation, featuring collapsible spoilers for better readability. ##### 🔒 Security As part of this release, we are addressing three security vulnerabilities kindly reported by [@&#8203;m10x](https://github.com/m10x). These vulnerabilities involved privilege escalation at the household level, allowing users to manipulate their own household permissions, such as invitations, data management, and more. Additionally, one vulnerability allowed users to create share links for recipes belonging to other groups if they had access to the recipe ID. It is important to note that these vulnerabilities could only be exploited by users with an existing account on your Mealie instance. Nonetheless, we recommend updating to this version. ##### 🕐Kitchen Timer In this release, we are removing the kitchen timer from the recipe page. After discussion about enhancing this feature ([#&#8203;4467](https://github.com/mealie-recipes/mealie/issues/4467)), we concluded that we cannot support a timer that functions only when the screen is on and the app is in the foreground. #### ✨ New features - feat: add make_admin script [@&#8203;Kuchenpirat](https://github.com/Kuchenpirat) ([#&#8203;4853](https://github.com/mealie-recipes/mealie/issues/4853)) - feat: Move "on hand" and "last made" to household [@&#8203;michael-genson](https://github.com/michael-genson) ([#&#8203;4616](https://github.com/mealie-recipes/mealie/issues/4616)) - feat: add delete option to three dots menu [@&#8203;johnpc](https://github.com/johnpc) ([#&#8203;4842](https://github.com/mealie-recipes/mealie/issues/4842)) #### 🐛 Bug fixes - fix: Allow scraping calories as number [@&#8203;parumpum](https://github.com/parumpum) ([#&#8203;4854](https://github.com/mealie-recipes/mealie/issues/4854)) - fix: remove edit scale icon when not scalable [@&#8203;Kuchenpirat](https://github.com/Kuchenpirat) ([#&#8203;4849](https://github.com/mealie-recipes/mealie/issues/4849)) - fix: remove kitchen timer [@&#8203;Kuchenpirat](https://github.com/Kuchenpirat) ([#&#8203;4857](https://github.com/mealie-recipes/mealie/issues/4857)) - fix: Preserve orientation when converting to .webp [@&#8203;ConduciveMocha](https://github.com/ConduciveMocha) ([#&#8203;4803](https://github.com/mealie-recipes/mealie/issues/4803)) - fix: Recipe comments display a username/id rather than … [@&#8203;shethshlok](https://github.com/shethshlok) ([#&#8203;4726](https://github.com/mealie-recipes/mealie/issues/4726)) - fix: Refresh recipe section when clicking card tag chip [@&#8203;parumpum](https://github.com/parumpum) ([#&#8203;4810](https://github.com/mealie-recipes/mealie/issues/4810)) - fix: PWA - Allow CORS and add UseCredentials to nuxt.config.js [@&#8203;Borriborri](https://github.com/Borriborri) ([#&#8203;4902](https://github.com/mealie-recipes/mealie/issues/4902)) - fix: Show All Recipes in Cookbook Regardless of Sort [@&#8203;michael-genson](https://github.com/michael-genson) ([#&#8203;4908](https://github.com/mealie-recipes/mealie/issues/4908)) - fix: prevent recipe sharing from different group [@&#8203;Kuchenpirat](https://github.com/Kuchenpirat) ([#&#8203;4929](https://github.com/mealie-recipes/mealie/issues/4929)) - fix: prevent users from updating their own household privileges [@&#8203;Kuchenpirat](https://github.com/Kuchenpirat) ([#&#8203;4928](https://github.com/mealie-recipes/mealie/issues/4928)) #### 🧰 Maintenance <details> <summary>12 changes</summary> - chore(l10n): New Crowdin updates [@&#8203;hay-kot](https://github.com/hay-kot) ([#&#8203;4852](https://github.com/mealie-recipes/mealie/issues/4852)) - chore(l10n): New Crowdin updates [@&#8203;hay-kot](https://github.com/hay-kot) ([#&#8203;4862](https://github.com/mealie-recipes/mealie/issues/4862)) - chore(l10n): New Crowdin updates [@&#8203;hay-kot](https://github.com/hay-kot) ([#&#8203;4869](https://github.com/mealie-recipes/mealie/issues/4869)) - chore(l10n): New Crowdin updates [@&#8203;hay-kot](https://github.com/hay-kot) ([#&#8203;4875](https://github.com/mealie-recipes/mealie/issues/4875)) - chore(l10n): New Crowdin updates [@&#8203;hay-kot](https://github.com/hay-kot) ([#&#8203;4877](https://github.com/mealie-recipes/mealie/issues/4877)) - chore(l10n): New Crowdin updates [@&#8203;hay-kot](https://github.com/hay-kot) ([#&#8203;4882](https://github.com/mealie-recipes/mealie/issues/4882)) - chore(auto): Update pre-commit hooks [@&#8203;github-actions](https://github.com/github-actions) ([#&#8203;4886](https://github.com/mealie-recipes/mealie/issues/4886)) - chore(l10n): New Crowdin updates [@&#8203;hay-kot](https://github.com/hay-kot) ([#&#8203;4896](https://github.com/mealie-recipes/mealie/issues/4896)) - chore(l10n): New Crowdin updates [@&#8203;hay-kot](https://github.com/hay-kot) ([#&#8203;4900](https://github.com/mealie-recipes/mealie/issues/4900)) - chore(l10n): New Crowdin updates [@&#8203;hay-kot](https://github.com/hay-kot) ([#&#8203;4906](https://github.com/mealie-recipes/mealie/issues/4906)) - chore(auto): Update pre-commit hooks [@&#8203;github-actions](https://github.com/github-actions) ([#&#8203;4917](https://github.com/mealie-recipes/mealie/issues/4917)) - chore(l10n): New Crowdin updates [@&#8203;hay-kot](https://github.com/hay-kot) ([#&#8203;4926](https://github.com/mealie-recipes/mealie/issues/4926)) </details> #### 📚 Documentation - docs(auto): Update image tag, for release v2.4.2 [@&#8203;github-actions](https://github.com/github-actions) ([#&#8203;4845](https://github.com/mealie-recipes/mealie/issues/4845)) - docs: Update FAQ to include Nutritional Values and enabling per recipe / household [@&#8203;ChipSkylark37](https://github.com/ChipSkylark37) ([#&#8203;4887](https://github.com/mealie-recipes/mealie/issues/4887)) - docs: Fix Spelling Errors on Nutritional Values [@&#8203;ChipSkylark37](https://github.com/ChipSkylark37) ([#&#8203;4888](https://github.com/mealie-recipes/mealie/issues/4888)) - docs: move faq into details / spoilers [@&#8203;Kuchenpirat](https://github.com/Kuchenpirat) ([#&#8203;4891](https://github.com/mealie-recipes/mealie/issues/4891)) - docs: remove titles from within individual FAQs [@&#8203;Kuchenpirat](https://github.com/Kuchenpirat) ([#&#8203;4899](https://github.com/mealie-recipes/mealie/issues/4899)) - docs: Add to FAQ: When / how to use Linked Ingredients [@&#8203;ChipSkylark37](https://github.com/ChipSkylark37) ([#&#8203;4897](https://github.com/mealie-recipes/mealie/issues/4897)) - docs: Add community guide for integrating the Mealie-Bring-API [@&#8203;felixschndr](https://github.com/felixschndr) ([#&#8203;4920](https://github.com/mealie-recipes/mealie/issues/4920)) #### 🔨 Internal development - dev: remove PR type from PR description [@&#8203;Kuchenpirat](https://github.com/Kuchenpirat) ([#&#8203;4847](https://github.com/mealie-recipes/mealie/issues/4847)) #### ⬆️ Dependency updates <details> <summary>23 changes</summary> - fix(deps): update dependency pillow to v11.1.0 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4814](https://github.com/mealie-recipes/mealie/issues/4814)) - fix(deps): update dependency openai to v1.59.4 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4855](https://github.com/mealie-recipes/mealie/issues/4855)) - fix(deps): update dependency pydantic-settings to v2.7.1 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4805](https://github.com/mealie-recipes/mealie/issues/4805)) - fix(deps): update dependency openai to v1.59.5 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4864](https://github.com/mealie-recipes/mealie/issues/4864)) - fix(deps): update dependency orjson to v3.10.14 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4865](https://github.com/mealie-recipes/mealie/issues/4865)) - fix(deps): update dependency apprise to v1.9.2 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4867](https://github.com/mealie-recipes/mealie/issues/4867)) - fix(deps): update dependency pydantic to v2.10.5 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4870](https://github.com/mealie-recipes/mealie/issues/4870)) - chore(deps): update dependency pytest-asyncio to v0.25.2 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4863](https://github.com/mealie-recipes/mealie/issues/4863)) - fix(deps): update dependency openai to v1.59.6 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4872](https://github.com/mealie-recipes/mealie/issues/4872)) - fix(deps): update dependency sqlalchemy to v2.0.37 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4873](https://github.com/mealie-recipes/mealie/issues/4873)) - chore(deps): update dependency ruff to ^0.9.0 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4871](https://github.com/mealie-recipes/mealie/issues/4871)) - fix(deps): update dependency openai to v1.59.7 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4890](https://github.com/mealie-recipes/mealie/issues/4890)) - chore(deps): update dependency ruff to v0.9.1 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4889](https://github.com/mealie-recipes/mealie/issues/4889)) - fix(deps): update dependency recipe-scrapers to v15.4.0 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4898](https://github.com/mealie-recipes/mealie/issues/4898)) - fix(deps): update dependency aniso8601 to v10 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4874](https://github.com/mealie-recipes/mealie/issues/4874)) - chore(deps): update dependency ruff to v0.9.2 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4905](https://github.com/mealie-recipes/mealie/issues/4905)) - chore(deps): update dependency mkdocs-material to v9.5.50 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4910](https://github.com/mealie-recipes/mealie/issues/4910)) - fix(deps): update dependency openai to v1.59.8 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4909](https://github.com/mealie-recipes/mealie/issues/4909)) - fix(deps): update dependency alembic to v1.14.1 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4915](https://github.com/mealie-recipes/mealie/issues/4915)) - fix(deps): update dependency orjson to v3.10.15 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4911](https://github.com/mealie-recipes/mealie/issues/4911)) - fix(deps): update dependency openai to v1.59.9 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4919](https://github.com/mealie-recipes/mealie/issues/4919)) - chore(deps): update dependency pre-commit to v4.1.0 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4922](https://github.com/mealie-recipes/mealie/issues/4922)) - fix(deps): update dependency openai to v1.60.0 [@&#8203;renovate](https://github.com/renovate) ([#&#8203;4932](https://github.com/mealie-recipes/mealie/issues/4932)) </details> #### 🙏 New Contributors - [@&#8203;parumpum](https://github.com/parumpum) made their first contribution in [#&#8203;4854](https://github.com/mealie-recipes/mealie/issues/4854) - [@&#8203;ChipSkylark37](https://github.com/ChipSkylark37) made their first contribution in [#&#8203;4887](https://github.com/mealie-recipes/mealie/issues/4887) - [@&#8203;johnpc](https://github.com/johnpc) made their first contribution in [#&#8203;4842](https://github.com/mealie-recipes/mealie/issues/4842) - [@&#8203;Borriborri](https://github.com/Borriborri) made their first contribution in [#&#8203;4902](https://github.com/mealie-recipes/mealie/issues/4902) - [@&#8203;felixschndr](https://github.com/felixschndr) made their first contribution in [#&#8203;4920](https://github.com/mealie-recipes/mealie/issues/4920) ### 🍴🍴🍴🍴🍴🍴 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjEyNC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
renovate added 1 commit 2025-01-23 03:19:47 +00:00
AverageMarcus merged commit 6c797b065d into master 2025-01-23 06:45:37 +00:00
AverageMarcus deleted branch renovate/ghcr.io-mealie-recipes-mealie-2.x 2025-01-23 06:45:37 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: AverageMarcus/cluster.fun#404
No description provided.