chore(deps): update ghcr.io/paperless-ngx/paperless-ngx docker tag to v2.20.3 #543

Merged

catalin merged 1 commit from renovate/ghcr.io-paperless-ngx-paperless-ngx-2.x into main 2026-01-09 10:26:10 +00:00

Conversation 0 Commits 1 Files changed 1 +1 -1

renovate-bot commented 2026-01-06 02:25:12 +00:00

Collaborator

Copy link

This PR contains the following updates:

Package	Update	Change
ghcr.io/paperless-ngx/paperless-ngx	patch	2.20.0 -> 2.20.3

---

Release Notes

paperless-ngx/paperless-ngx (ghcr.io/paperless-ngx/paperless-ngx)

v2.20.3: Paperless-ngx v2.20.3

Compare Source

[!NOTE]
This release addresses a security issue (GHSA-7cq3-mhxq-w946) and is recommended for all users. Thank you to the community members who reported this.

paperless-ngx 2.20.3

v2.20.2: Paperless-ngx v2.20.2

Compare Source

[!NOTE]
This release addresses two security issues (GHSA-6653-vcx4-69mc and GHSA-24x5-wp64-9fcc) and is recommended for all users. Thank you to the community members who reported these.

paperless-ngx 2.20.2

Features / Enhancements

• Tweakhancement: dim inactive users in users-groups list @​shamoon (#​11537)

Bug Fixes

• Fix: Expanded SVG validation whitelist and additional checks @​stumpylog (#​11590)
• Fix: normalize allowed SVG tag and attribute names, add version @​shamoon (#​11586)
• Fix: pass additional arguments to TagSerializer for permissions @​shamoon (#​11576)

Maintenance

• Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @​dependabot[bot] (#​11515)

Dependencies

6 changes

• Chore: update Angular dependencies to 20.3.15 @​shamoon (#​11568)
• Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @​dependabot[bot] (#​11515)
• Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @​dependabot[bot] (#​11513)
• Chore(deps-dev): Bump @​playwright/test from 1.56.1 to 1.57.0 in /src-ui @​dependabot[bot] (#​11514)
• Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @​dependabot[bot] (#​11512)
• docker(deps): bump astral-sh/uv from 0.9.14-python3.12-trixie-slim to 0.9.15-python3.12-trixie-slim @​dependabot[bot] (#​11533)

All App Changes

12 changes

• Fix: Expanded SVG validation whitelist and additional checks @​stumpylog (#​11590)
• Fixhancement: pass ordering to tag children @​shamoon (#​11556)
• Performance: avoid unnecessary filename operations on bulk custom field updates @​shamoon (#​11558)
• Fix: normalize allowed SVG tag and attribute names, add version @​shamoon (#​11586)
• Chore: refactor workflows code @​shamoon (#​11563)
• Fix: pass additional arguments to TagSerializer for permissions @​shamoon (#​11576)
• Chore: update Angular dependencies to 20.3.15 @​shamoon (#​11568)
• Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @​dependabot[bot] (#​11513)
• Chore(deps-dev): Bump @​playwright/test from 1.56.1 to 1.57.0 in /src-ui @​dependabot[bot] (#​11514)
• Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @​dependabot[bot] (#​11512)
• Tweakhancement: dim inactive users in users-groups list @​shamoon (#​11537)
• Chore: add some output of social login errors @​shamoon (#​11527)

v2.20.1: Paperless-ngx v2.20.1

Compare Source

paperless-ngx 2.20.1

Bug Fixes

• Fix: set search term when using advanced search from global search @​shamoon (#​11503)
• Fix: change async handling of select custom field updates @​shamoon (#​11490)
• Fix: skip SSL for MariaDB ping in init script @​danielrheinbay (#​11491)
• Fix: handle allauth groups location breaking change @​shamoon (#​11471)

Dependencies

• docker(deps): Bump astral-sh/uv from 0.9.10-python3.12-trixie-slim to 0.9.11-python3.12-trixie-slim @​dependabot[bot] (#​11450)
• Chore(deps): Bump @​angular/common from 20.3.12 to 20.3.14 in /src-ui @​dependabot[bot] (#​11481)

All App Changes

4 changes

• Fix: set search term when using advanced search from global search @​shamoon (#​11503)
• Fix: change async handling of select custom field updates @​shamoon (#​11490)
• Chore(deps): Bump @​angular/common from 20.3.12 to 20.3.14 in /src-ui @​dependabot[bot] (#​11481)
• Fix: handle allauth groups location breaking change @​shamoon (#​11471)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/paperless-ngx/paperless-ngx](https://github.com/paperless-ngx/paperless-ngx) | patch | `2.20.0` -> `2.20.3` | --- ### Release Notes <details> <summary>paperless-ngx/paperless-ngx (ghcr.io/paperless-ngx/paperless-ngx)</summary> ### [`v2.20.3`](https://github.com/paperless-ngx/paperless-ngx/releases/tag/v2.20.3): Paperless-ngx v2.20.3 [Compare Source](https://github.com/paperless-ngx/paperless-ngx/compare/v2.20.2...v2.20.3) > \[!NOTE] > This release addresses a security issue (GHSA-7cq3-mhxq-w946) and is recommended for all users. Thank you to the community members who reported this. #### paperless-ngx 2.20.3 ### [`v2.20.2`](https://github.com/paperless-ngx/paperless-ngx/releases/tag/v2.20.2): Paperless-ngx v2.20.2 [Compare Source](https://github.com/paperless-ngx/paperless-ngx/compare/v2.20.1...v2.20.2) > \[!NOTE] > This release addresses two security issues (GHSA-6653-vcx4-69mc and GHSA-24x5-wp64-9fcc) and is recommended for all users. Thank you to the community members who reported these. #### paperless-ngx 2.20.2 ##### Features / Enhancements - Tweakhancement: dim inactive users in users-groups list [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11537](https://github.com/paperless-ngx/paperless-ngx/pull/11537)) ##### Bug Fixes - Fix: Expanded SVG validation whitelist and additional checks [@&#8203;stumpylog](https://github.com/stumpylog) ([#&#8203;11590](https://github.com/paperless-ngx/paperless-ngx/pull/11590)) - Fix: normalize allowed SVG tag and attribute names, add version [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11586](https://github.com/paperless-ngx/paperless-ngx/pull/11586)) - Fix: pass additional arguments to TagSerializer for permissions [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11576](https://github.com/paperless-ngx/paperless-ngx/pull/11576)) ##### Maintenance - Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11515](https://github.com/paperless-ngx/paperless-ngx/pull/11515)) ##### Dependencies <details> <summary>6 changes</summary> - Chore: update Angular dependencies to 20.3.15 [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11568](https://github.com/paperless-ngx/paperless-ngx/pull/11568)) - Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11515](https://github.com/paperless-ngx/paperless-ngx/pull/11515)) - Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11513](https://github.com/paperless-ngx/paperless-ngx/pull/11513)) - Chore(deps-dev): Bump @&#8203;<!---->playwright/test from 1.56.1 to 1.57.0 in /src-ui @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11514](https://github.com/paperless-ngx/paperless-ngx/pull/11514)) - Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11512](https://github.com/paperless-ngx/paperless-ngx/pull/11512)) - docker(deps): bump astral-sh/uv from 0.9.14-python3.12-trixie-slim to 0.9.15-python3.12-trixie-slim @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11533](https://github.com/paperless-ngx/paperless-ngx/pull/11533)) </details> ##### All App Changes <details> <summary>12 changes</summary> - Fix: Expanded SVG validation whitelist and additional checks [@&#8203;stumpylog](https://github.com/stumpylog) ([#&#8203;11590](https://github.com/paperless-ngx/paperless-ngx/pull/11590)) - Fixhancement: pass ordering to tag children [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11556](https://github.com/paperless-ngx/paperless-ngx/pull/11556)) - Performance: avoid unnecessary filename operations on bulk custom field updates [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11558](https://github.com/paperless-ngx/paperless-ngx/pull/11558)) - Fix: normalize allowed SVG tag and attribute names, add version [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11586](https://github.com/paperless-ngx/paperless-ngx/pull/11586)) - Chore: refactor workflows code [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11563](https://github.com/paperless-ngx/paperless-ngx/pull/11563)) - Fix: pass additional arguments to TagSerializer for permissions [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11576](https://github.com/paperless-ngx/paperless-ngx/pull/11576)) - Chore: update Angular dependencies to 20.3.15 [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11568](https://github.com/paperless-ngx/paperless-ngx/pull/11568)) - Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11513](https://github.com/paperless-ngx/paperless-ngx/pull/11513)) - Chore(deps-dev): Bump @&#8203;<!---->playwright/test from 1.56.1 to 1.57.0 in /src-ui @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11514](https://github.com/paperless-ngx/paperless-ngx/pull/11514)) - Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11512](https://github.com/paperless-ngx/paperless-ngx/pull/11512)) - Tweakhancement: dim inactive users in users-groups list [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11537](https://github.com/paperless-ngx/paperless-ngx/pull/11537)) - Chore: add some output of social login errors [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11527](https://github.com/paperless-ngx/paperless-ngx/pull/11527)) </details> ### [`v2.20.1`](https://github.com/paperless-ngx/paperless-ngx/releases/tag/v2.20.1): Paperless-ngx v2.20.1 [Compare Source](https://github.com/paperless-ngx/paperless-ngx/compare/v2.20.0...v2.20.1) #### paperless-ngx 2.20.1 ##### Bug Fixes - Fix: set search term when using advanced search from global search [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11503](https://github.com/paperless-ngx/paperless-ngx/pull/11503)) - Fix: change async handling of select custom field updates [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11490](https://github.com/paperless-ngx/paperless-ngx/pull/11490)) - Fix: skip SSL for MariaDB ping in init script [@&#8203;danielrheinbay](https://github.com/danielrheinbay) ([#&#8203;11491](https://github.com/paperless-ngx/paperless-ngx/pull/11491)) - Fix: handle allauth groups location breaking change [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11471](https://github.com/paperless-ngx/paperless-ngx/pull/11471)) ##### Dependencies - docker(deps): Bump astral-sh/uv from 0.9.10-python3.12-trixie-slim to 0.9.11-python3.12-trixie-slim @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11450](https://github.com/paperless-ngx/paperless-ngx/pull/11450)) - Chore(deps): Bump @&#8203;<!---->angular/common from 20.3.12 to 20.3.14 in /src-ui @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11481](https://github.com/paperless-ngx/paperless-ngx/pull/11481)) ##### All App Changes <details> <summary>4 changes</summary> - Fix: set search term when using advanced search from global search [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11503](https://github.com/paperless-ngx/paperless-ngx/pull/11503)) - Fix: change async handling of select custom field updates [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11490](https://github.com/paperless-ngx/paperless-ngx/pull/11490)) - Chore(deps): Bump @&#8203;<!---->angular/common from 20.3.12 to 20.3.14 in /src-ui @&#8203;[dependabot\[bot\]](https://github.com/apps/dependabot) ([#&#8203;11481](https://github.com/paperless-ngx/paperless-ngx/pull/11481)) - Fix: handle allauth groups location breaking change [@&#8203;shamoon](https://github.com/shamoon) ([#&#8203;11471](https://github.com/paperless-ngx/paperless-ngx/pull/11471)) </details> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4yNC4xIiwidXBkYXRlZEluVmVyIjoiNDIuMjQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

renovate-bot added 1 commit 2026-01-06 02:25:15 +00:00

chore(deps): update ghcr.io/paperless-ngx/paperless-ngx docker tag to v2.20.3 f451beba92

catalin merged commit 2354f5971b into main 2026-01-09 10:26:10 +00:00

catalin deleted branch renovate/ghcr.io-paperless-ngx-paperless-ngx-2.x 2026-01-09 10:26:12 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

catalin/fukuops!543

No description provided.