chore(helm): update image docker.io/wekanteam/wekan v8.15 → v8.16 (#41350)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/wekanteam/wekan](https://redirect.github.com/wekan/wekan) |
minor | `53fc007` -> `bc18efd` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>wekan/wekan (docker.io/wekanteam/wekan)</summary>

###
[`v8.16`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v816-2025-11-02-WeKan--release)

[Compare
Source](https://redirect.github.com/wekan/wekan/compare/v8.15...v8.16)

This release fixes SpaceBleed that is the following CRITICAL SECURITY
ISSUES:

- [Fix SECURITY ISSUE 1: File Attachments enables stored XSS
(High)](e9a727301d).
  Thanks to Siam Thanat Hack (STH) and xet7.
- [Fix SECURITY ISSUE 2: Access to boards of any Orgs/Teams, and avatar
permissions](f26d582018).
  Thanks to Siam Thanat Hack (STH) and xet7.
- [Fix SECURITY ISSUE 3: Unauthenticated (or any) user can update board
sort](ea310d7508).
  Thanks to Siam Thanat Hack (STH) and xet7.
- [Fix SECURITY ISSUE 4: Members can forge others’ votes (Low). Bonus:
Similar fixes to planning poker too done by
xet7](0a1a075f31).
  Thanks to Siam Thanat Hack (STH) and xet7.
- [Fix SECURITY ISSUE 5: Attachment API uses bearer value as userId and
DoS
(Low)](ccd9034339).
  Thanks to Siam Thanat Hack (STH) and xet7.

and adds the following new features:

- [List menu / More / Delete duplicate lists that do not have any
cards](91b846e2cd).
  Thanks to xet7.
- [Disabled migrations that happen when opening board. Defaulting to
per-swimlane lists and drag drop list to same or different
swimlane](034dc08269).
  Thanks to xet7.

and fixes the following bugs:

- [Fix changing swimlane color to not reload
webpage](ecf2418347).
  Thanks to xet7.

Thanks to above GitHub users for their contributions and translators for
their translations.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44Mi4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjgyLjEwIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->

charts/stable/wekan/Chart.yaml

@@ -11,7 +11,7 @@ annotations:
   truecharts.org/min_kubernetes_version: 1.24.0
   truecharts.org/train: stable
 apiVersion: v2
-appVersion: 8.15.0
+appVersion: 8.16.0
 dependencies:
   - name: common
     version: 28.26.2
@@ -47,5 +47,5 @@ sources:
   - https://hub.docker.com/r/wekanteam/wekan
   - https://wekan.github.io/
 type: application
-version: 18.5.4
+version: 18.6.0
 

charts/stable/wekan/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: docker.io/wekanteam/wekan
-  tag: v8.15@sha256:53fc00710d11ffff8999c26afdb2e3f0d546a5f197c815deb8063bb37aded9ee
+  tag: v8.16@sha256:bc18efdee3fdbcc50d97c950b2333ba618dcfd0bf74a02ff6e074998d10e56ca
   pullPolicy: IfNotPresent
 service:
   main: