fix(container): update image deluan/navidrome to v0.54.5 #771

Merged

SeanOMik merged 1 commit from renovate/deluan-navidrome-0.x into main

2025-02-23 19:27:50 +00:00

Renovate commented

2025-02-21 03:03:16 +00:00

Collaborator

This PR contains the following updates:

Package	Update	Change
deluan/navidrome	patch	`0.54.4` -> `0.54.5`

Release Notes

navidrome/navidrome (deluan/navidrome)

`v0.54.5`

Compare Source

This is an important security fix. Please update ASAP.

Security Advisory: https://github.com/navidrome/navidrome/security/advisories/GHSA-c3p4-vm8f-386p

Changelog

Security updates

287079a: sec(subsonic): authentication bypass in Subsonic API with non-existent username (@deluan)

Full Changelog: https://github.com/navidrome/navidrome/compare/v0.54.4...v0.54.5

Helping out

This release is only possible thanks to the support of some awesome people!

Want to be one of them?
You can sponsor, pay me a Ko-fi, or contribute with code.

Where to go next?

Read installation instructions on our website.
Host Navidrome on PikaPods for a simple cloud solution.
Reach out on Discord, Reddit and Twitter!

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [deluan/navidrome](https://github.com/navidrome/navidrome) | patch | `0.54.4` -> `0.54.5` | --- ### Release Notes <details> <summary>navidrome/navidrome (deluan/navidrome)</summary> ### [`v0.54.5`](https://github.com/navidrome/navidrome/releases/tag/v0.54.5) [Compare Source](https://github.com/navidrome/navidrome/compare/v0.54.4...v0.54.5) ##### This is an important security fix. Please update ASAP. Security Advisory: https://github.com/navidrome/navidrome/security/advisories/GHSA-c3p4-vm8f-386p ##### Changelog ##### Security updates - [`287079a`](https://github.com/navidrome/navidrome/commit/287079a9e409fb6b9708ca384d7daa7b5185c1a0): sec(subsonic): authentication bypass in Subsonic API with non-existent username ([@deluan](https://github.com/deluan)) **Full Changelog**: https://github.com/navidrome/navidrome/compare/v0.54.4...v0.54.5 ##### Helping out This release is only possible thanks to the support of some **awesome people**! Want to be one of them? You can [sponsor](https://github.com/sponsors/deluan), pay me a [Ko-fi](https://ko-fi.com/deluan), or [contribute with code](https://www.navidrome.org/docs/developers/). ##### Where to go next? - Read installation instructions on our [website](https://www.navidrome.org/docs/installation/). - Host Navidrome on [PikaPods](https://www.pikapods.com/pods/navidrome) for a simple cloud solution. - Reach out on [Discord](https://discord.gg/xh7j7yF), [Reddit](https://www.reddit.com/r/navidrome/) and [Twitter](https://twitter.com/navidrome)! </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

Renovate added 1 commit 2025-02-21 03:03:17 +00:00