This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/mealie-recipes/mealie](https://github.com/mealie-recipes/mealie) | minor | `v3.7.0` → `v3.8.0` |
---
### Release Notes
<details>
<summary>mealie-recipes/mealie (ghcr.io/mealie-recipes/mealie)</summary>
### [`v3.8.0`](https://github.com/mealie-recipes/mealie/releases/tag/v3.8.0)
[Compare Source](https://github.com/mealie-recipes/mealie/compare/v3.7.0...v3.8.0)
### 🍴🍴🍴🍴🍴🍴
#### 🎉 Highlights
##### Security Fixes
[#​6743](https://github.com/mealie-recipes/mealie/issues/6743) fixes two security issues
- A security issue which allows users to access arbitrary system files
- Updates SafeMarkdown to be more aggressive with which HTML attributes we allow.
Both security issues required access to Mealie in order to exploit them.
#### ✨ New features
- feat: Optionally include URL when importing via HTML/JSON [@​michael-genson](https://github.com/michael-genson) ([#​6709](https://github.com/mealie-recipes/mealie/issues/6709))
#### 🐛 Bug fixes
- fix: Disable submit on enter when editing timeline events [@​michael-genson](https://github.com/michael-genson) ([#​6707](https://github.com/mealie-recipes/mealie/issues/6707))
- fix: Improved bulk deletion by reducing refreshs [@​davidschinkel](https://github.com/davidschinkel) ([#​6634](https://github.com/mealie-recipes/mealie/issues/6634))
- fix: Put tooltips behind app bar [@​michael-genson](https://github.com/michael-genson) ([#​6711](https://github.com/mealie-recipes/mealie/issues/6711))
- fix: More lenient postgres override parsing [@​michael-genson](https://github.com/michael-genson) ([#​6712](https://github.com/mealie-recipes/mealie/issues/6712))
- fix: localize text validators message [@​p0lycarpio](https://github.com/p0lycarpio) ([#​6719](https://github.com/mealie-recipes/mealie/issues/6719))
- fix: Security Patches [@​michael-genson](https://github.com/michael-genson) ([#​6743](https://github.com/mealie-recipes/mealie/issues/6743))
#### 🧰 Maintenance
<details>
<summary>10 changes</summary>
- chore(l10n): New Crowdin updates [@​hay-kot](https://github.com/hay-kot) ([#​6706](https://github.com/mealie-recipes/mealie/issues/6706))
- chore: Miscellaneous cleanup [@​michael-genson](https://github.com/michael-genson) ([#​6708](https://github.com/mealie-recipes/mealie/issues/6708))
- chore(l10n): New Crowdin updates [@​hay-kot](https://github.com/hay-kot) ([#​6710](https://github.com/mealie-recipes/mealie/issues/6710))
- chore(l10n): Crowdin locale sync [@​github-actions](https://github.com/github-actions) ([#​6716](https://github.com/mealie-recipes/mealie/issues/6716))
- chore(l10n): New Crowdin updates [@​hay-kot](https://github.com/hay-kot) ([#​6722](https://github.com/mealie-recipes/mealie/issues/6722))
- chore(l10n): New Crowdin updates [@​hay-kot](https://github.com/hay-kot) ([#​6725](https://github.com/mealie-recipes/mealie/issues/6725))
- chore(auto): Update pre-commit hooks [@​github-actions](https://github.com/github-actions) ([#​6724](https://github.com/mealie-recipes/mealie/issues/6724))
- chore(l10n): New Crowdin updates [@​hay-kot](https://github.com/hay-kot) ([#​6729](https://github.com/mealie-recipes/mealie/issues/6729))
- chore(l10n): New Crowdin updates [@​hay-kot](https://github.com/hay-kot) ([#​6733](https://github.com/mealie-recipes/mealie/issues/6733))
- chore(l10n): New Crowdin updates [@​hay-kot](https://github.com/hay-kot) ([#​6736](https://github.com/mealie-recipes/mealie/issues/6736))
</details>
#### ⬆️ Dependency updates
<details>
<summary>8 changes</summary>
- fix(deps): update dependency fastapi to v0.124.4 [@​renovate](https://github.com/renovate) ([#​6702](https://github.com/mealie-recipes/mealie/issues/6702))
- fix(deps): update dependency authlib to v1.6.6 [@​renovate](https://github.com/renovate) ([#​6700](https://github.com/mealie-recipes/mealie/issues/6700))
- fix(deps): update dependency tzdata to v2025.3 [@​renovate](https://github.com/renovate) ([#​6713](https://github.com/mealie-recipes/mealie/issues/6713))
- chore(deps): update dependency mypy to v1.19.1 [@​renovate](https://github.com/renovate) ([#​6723](https://github.com/mealie-recipes/mealie/issues/6723))
- chore(deps): update dependency pre-commit to v4.5.1 [@​renovate](https://github.com/renovate) ([#​6734](https://github.com/mealie-recipes/mealie/issues/6734))
- fix(deps): update dependency fastapi to v0.125.0 [@​renovate](https://github.com/renovate) ([#​6740](https://github.com/mealie-recipes/mealie/issues/6740))
- chore(deps): update dependency ruff to v0.14.10 [@​renovate](https://github.com/renovate) ([#​6742](https://github.com/mealie-recipes/mealie/issues/6742))
- fix(deps): update dependency openai to v2.13.0 [@​renovate](https://github.com/renovate) ([#​6726](https://github.com/mealie-recipes/mealie/issues/6726))
</details>
### 🍴🍴🍴🍴🍴🍴
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42NC4xIiwidXBkYXRlZEluVmVyIjoiNDIuNjQuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v3.7.0→v3.8.0Release Notes
mealie-recipes/mealie (ghcr.io/mealie-recipes/mealie)
v3.8.0Compare Source
🍴🍴🍴🍴🍴🍴
🎉 Highlights
Security Fixes
#6743 fixes two security issues
Both security issues required access to Mealie in order to exploit them.
✨ New features
🐛 Bug fixes
🧰 Maintenance
10 changes
⬆️ Dependency updates
8 changes
🍴🍴🍴🍴🍴🍴
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.