chore(helm): update image docker.io/wekanteam/wekan v7.97 → v7.99 (#40625)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/wekanteam/wekan](https://redirect.github.com/wekan/wekan) |
minor | `4c33ae9` -> `a154d7f` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>wekan/wekan (docker.io/wekanteam/wekan)</summary>

###
[`v7.99`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v799-2025-10-11-WeKan--release)

[Compare
Source](https://redirect.github.com/wekan/wekan/compare/v7.98...v7.99)

This release fixed the following bugs:

- [Improve automatic Snap
upgrades](aab671398c).
  Thanks to xet7.

Thanks to above GitHub users for their contributions and translators for
their translations.

###
[`v7.98`](https://redirect.github.com/wekan/wekan/blob/HEAD/CHANGELOG.md#v798-2025-10-11-WeKan--release)

[Compare
Source](https://redirect.github.com/wekan/wekan/compare/v7.97...v7.98)

This release adds the following CRITICAL SECURITY FIXES:

- [Security Fix: IDOR CWE-639 that affected WeKan
7.80-7.93](b87cff1289).
  Thanks to Romain Korpas at apitech.fr and xet7.
- [Security Fix: Computational Resource Abuse in Export
endpoints](d0f118e7af).
  Thanks to Anynymous Security Researcher and xet7.
- [Security Fix FG-VD-22-078: Prevent SVG Billion Laughs
Attack](30c1597b65).
  Thanks to Nguyen Thanh Nguyen of Fortinet's FortiGuard Labs and xet7.
- [Security Fix usd-2022-0041: CWE-284 Improper Access
Control](f6591d7820).
  Thanks to Christian Pöschl of usd AG and xet7.
- [Security Fix JVN#14269684: Broken access
control](9720e703fd).
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7.
- [Security Fix JVN#74210258: Stored
XSS](e1fa607f87).
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7.
- [Security Fix JVN#86586539: Stored
XSS](ee79cab7b2).
Thanks to Ryoya Koyama of Mitsui Bussan Secure Directions, Inc and xet7.
- [Security Fix JVN#15385465: CWE-79 XSS, that affected WeKan
7.94](81c3dc1d95).
  Thanks to Sho Sugiyama and xet7.
- Security Fix
[JVN#80785288](https://redirect.github.com/JVN/wekan/issues/80785288):
CWE-79 XSS, that affected WeKan 3.94 and v3.95. This was already
previously fixed.
  Thanks to xet7.

and adds the following new features:

- [Mobile one board per row. Board zoom size percent. Board toggle
mobile/desktop mode. In
Progress](752699d1c2).
  Thanks to xet7.
- \[Drag any files from file manager to minicard or opened card.
[Part
1](3e9481c5bd),
[Part
2](cdd7d69c66).
  Thanks to xet7.
- [Use attachments from old CollectionFS database structure, when not
yet migrated to Meteor-Files/ostrio-files, without needing to migrate
database
structure](a8de2f224f).
  Thanks to xet7.
- [Show console.log 'Legacy attachments route loaded' only when
environment variable
DEBUG=true](1c84b19f24).
  Thanks to xet7.
- [Make possible for lists to have different names at different
swimlanes. Make possible to drag list from one swimlane to another
swimlane](719ef87efc).
  Thanks to xet7.
- [Add support for Docker/Compose Secrets for passwords to
Docker/Snap/Bundle
platforms](107e2ac900).
  Thanks to Roemer and xet7.
- Add Snap automatic upgrades.
[Part
1](0549bc0b0c),
[Part
2](f1e1fd3593).
  Thanks to xet7.

and fixes the following bugs:

- Fix DOMPurify paths.
[Part
1](90899f0928),
[Part
2](7769124401),
[Part
3](21ba0a9606),
[Part
4](2119c6ab0c).
  Thanks to xet7.
- [Fix sizes of drag handles at desktop
mode](734165f3c7).
  Thanks to xet7.
- [Fixed showing translations always, regardsless of is ROOT\_URL set
correctly or
not](1a7bd65e59).
  Thanks to xet7.
- [Snap: Removed double mongo3 that's already at
migratemongo](2a24918a9c).
  Thanks to xet7.
- [Updated release scripts of snapcraft pack command
syntax](d88d197de9).
  Thanks to xet7.
- [Try to fix Snap automatic
upgrade](4ec4e19e63).
  Thanks to xet7.
- [Added missing metadata fields to
snapcraft.yaml](cd948fb576).
  Thanks to xet7.

Thanks to above GitHub users for their contributions and translators for
their translations.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44Mi4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjgyLjEwIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvbWlub3IiXX0=-->

charts/stable/wekan/Chart.yaml

@@ -11,7 +11,7 @@ annotations:
   truecharts.org/min_kubernetes_version: 1.24.0
   truecharts.org/train: stable
 apiVersion: v2
-appVersion: 7.97.0
+appVersion: 7.99.0
 dependencies:
   - name: common
     version: 28.22.0
@@ -29,8 +29,8 @@ dependencies:
     import-values: []
 deprecated: false
 description: WeKan - Open Source kanban
-home: https://trueforge.org/truecharts/stable/wekan
-icon: https://trueforge.org/img/hotlink-ok/chart-icons/wekan.webp
+home: https://truecharts.org/charts/stable/wekan
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/wekan.webp
 keywords:
   - wekan
   - kanban
@@ -41,10 +41,11 @@ maintainers:
     url: https://truecharts.org
 name: wekan
 sources:
+  - https://github.com/truecharts/charts/tree/master/charts/stable/wekan
   - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/wekan
   - https://github.com/wekan/wekan
   - https://hub.docker.com/r/wekanteam/wekan
   - https://wekan.github.io/
 type: application
-version: 17.21.0
+version: 17.22.0
 

charts/stable/wekan/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: docker.io/wekanteam/wekan
-  tag: v7.97@sha256:4c33ae9938717c0ee1c11b948b53fabf326a0853f3382675e497768597220ccc
+  tag: v7.99@sha256:a154d7f7d75f88ec65ca10e7c567ccd7946d0b5e13a0cf8d0423d574d17372a8
   pullPolicy: IfNotPresent
 service:
   main: