Update lukevella/rallly Docker tag to v4.15.5 #142

Merged

jlab-renovate-bot merged 1 commits from renovate/lukevella-rallly-4.15.x into main 2026-10-19 15:01:56 +02:00

Conversation 0 Commits 1 Files Changed 1

+2 -2

jlab-renovate-bot commented 2026-10-19 10:04:36 +02:00

Member

Copy link

Copy source

This PR contains the following updates:

Package	Type	Update	Change
lukevella/rallly	app-version	patch	4.15.4 → 4.15.5

---

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

lukevella/rallly

v4.15.5

Compare Source

🔒 Security fix: denial of service through Server Actions

This patch fixes a high severity vulnerability in an upstream dependency. Please upgrade as soon as possible.

Rallly v4.15.4 and earlier ship a version of Next.js affected by GHSA-p3m5-59mp-jv5r (high). A crafted request to a Server Action can tie up the server's CPU so it stops answering other requests.

Rallly uses Server Actions throughout, and the request needs no sign in, so anyone who can reach your instance can send it.

This release upgrades Next.js from 16.3.8 to 16.4.2, which contains the fix. Nothing else changes. There is no workaround short of upgrading.

What's Changed

• 🔒️ Upgrade Next.js to 16.4.2 to patch Server Actions DoS (#​3564)

Full Changelog: https://github.com/lukevella/rallly/compare/v4.15.4...v4.15.5

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [lukevella/rallly](https://github.com/lukevella/rallly) | app-version | patch | `4.15.4` → `4.15.5` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/4) for more information. --- ### Release Notes <details> <summary>lukevella/rallly</summary> ### [`v4.15.5`](https://github.com/lukevella/rallly/releases/tag/v4.15.5) [Compare Source](https://github.com/lukevella/rallly/compare/v4.15.4...v4.15.5) #### 🔒 Security fix: denial of service through Server Actions *This patch fixes a high severity vulnerability in an upstream dependency. Please upgrade as soon as possible.* Rallly v4.15.4 and earlier ship a version of Next.js affected by [GHSA-p3m5-59mp-jv5r](https://github.com/advisories/GHSA-p3m5-59mp-jv5r) (high). A crafted request to a Server Action can tie up the server's CPU so it stops answering other requests. Rallly uses Server Actions throughout, and the request needs no sign in, so anyone who can reach your instance can send it. This release upgrades Next.js from 16.3.8 to 16.4.2, which contains the fix. Nothing else changes. There is no workaround short of upgrading. ##### What's Changed - 🔒️ Upgrade Next.js to 16.4.2 to patch Server Actions DoS ([#&#8203;3564](https://github.com/lukevella/rallly/issues/3564)) **Full Changelog**: <https://github.com/lukevella/rallly/compare/v4.15.4...v4.15.5> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjYuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE2Ni4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhcHAtdmVyc2lvbiIsInJlbm92YXRlIl19-->

jlab-renovate-bot added the renovate label 2026-10-19 10:04:36 +02:00

jlab-renovate-bot added 1 commit 2026-10-19 10:04:36 +02:00

Update lukevella/rallly Docker tag to v4.15.5 da46744bb8

jlab-renovate-bot scheduled this pull request to auto merge when all checks succeed 2026-10-19 10:04:38 +02:00

jklein approved these changes 2026-10-19 15:01:55 +02:00

jlab-renovate-bot merged commit da46744bb8 into main 2026-10-19 15:01:56 +02:00

jlab-renovate-bot deleted branch renovate/lukevella-rallly-4.15.x 2026-10-19 15:01:56 +02:00

Sign in to join this conversation.

Reviewers

No Reviewers

jklein

Labels

Clear labels

inhouse-chart

Inhouse-Chart aus der JLab-Git-Paketregistry

renovate

Von Renovate angelegt

No labels renovate

Milestone

No items

No Milestone

Assignees

Clear assignees

jklein (Justin Klein) jlab-bot (jlab-git-bot) jlab-renovate-bot (jlab-renovate-bot)

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: jlab-cluster/helm-charts#142