Skip to content

feat(container): update image gotenberg/gotenberg ( 8.34.0 → 8.35.0 ) - #3151

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/gotenberg-gotenberg-8.x
Open

feat(container): update image gotenberg/gotenberg ( 8.34.0 → 8.35.0 )#3151
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/gotenberg-gotenberg-8.x

Conversation

@renovate

@renovate renovate Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
gotenberg/gotenberg minor 8.34.08.35.0

Release Notes

gotenberg/gotenberg (gotenberg/gotenberg)

v8.35.0: 8.35.0

Compare Source

Security Fixes ⚠️

  • Sanitize the Gotenberg-Output-Filename header. filepath.Base ignores \ on Linux, so a crafted header reached archive entry names on splitMode conversions, giving a Windows-side Zip Slip.
  • Bound scope matching per conversion. The extraHttpHeaders match timeout capped one match, not their number. Matching now shares a per-conversion budget, and extraHttpHeaders accepts at most 64 headers with a 1024-character scope.

New Features

  • Authenticated proxy from environment variables. Four opt-in flags route outbound traffic through HTTP_PROXY, HTTPS_PROXY, and NO_PROXY, credentials included: --chromium-enable-environment-proxy, --libreoffice-enable-environment-proxy, --api-download-from-enable-environment-proxy, and --webhook-enable-environment-proxy. All default to false. Breaking: the outbound client no longer inherits HTTP_PROXY and HTTPS_PROXY implicitly.

Bug Fixes

  • LibreOffice returned 400 for server-side failures (#​1588). 400 now requires an implicated client input, nativePageRanges, password, or an unreadable document; everything else is 500. Thanks @​ctunon-align.
  • generateDocumentOutline was a silent no-op (#​1579). It now enables generateTaggedPdf, which Chromium needs to build the outline. Thanks @​paradoxloop.
  • Pinning proxy latched after a Chromium start timeout. Starts are now serialized.
  • LibreOffice leaked a document after a failed export. unoconverter now releases it.

Chore

  • Updated Chromium to 151.0.7922.71.
  • Updated pdfcpu to v0.13.0.
  • Updated unoconverter to v0.4.0.
  • Bumped Go to 1.26.5.
  • Updated Go dependencies.

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource | package             | from   | to     |
| ---------- | ------------------- | ------ | ------ |
| docker     | gotenberg/gotenberg | 8.34.0 | 8.35.0 |
@github-actions

github-actions Bot commented Aug 7, 2026

Copy link
Copy Markdown
Contributor
Changes
spec.values.controllers.gotenberg.containers.gotenberg.image.tag  (helm.toolkit.fluxcd.io/v2/HelmRelease/tools/paperless-ngx)
  ± value change
    - 8.34.0
    + 8.35.0

spec.template.spec.containers.gotenberg.image  (apps/v1/Deployment/tools/paperless-ngx-gotenberg)
  ± value change
    - gotenberg/gotenberg:8.34.0
    + gotenberg/gotenberg:8.35.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants