feat(container): update ghcr.io/mchestr/gotenberg docker tag to v8.12.0

[mchesterbot]

This PR contains the following updates:

Package	Update	Change
ghcr.io/mchestr/gotenberg	minor	8.11.1 -> 8.12.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

gotenberg/gotenberg (ghcr.io/mchestr/gotenberg)

v8.12.0: 8.12.0

Compare Source

New Features

Bind IP

The new flag --api-bind-ip allows to set the IP address the API should bind to for incoming connections, instead of the default 0.0.0.0.

For instance: --api-bind-ip=127.0.0.1.

Thanks @​dani for the suggestion!

Scope Extra HTTP Headers (Chromium)

You can add an optional scope token to a header value to restrict its application using a regular expression.

For instance:

curl \
--request POST http://localhost:3000/forms/chromium/convert/url \
--form url=https://my.url \
--form-string 'extraHttpHeaders={"X-Scoped-Header":"value;scope=https?:\\/\\/([a-zA-Z0-9-]+\\.)*domain\\.com\\/.*"}' \
-o my.pdf

This new scope token is only processed by Gotenberg and is never sent with the header value.

Thanks @​forg002-ctrl and @​OsoianMarcel for the help!

pdfcpu CLI

In earlier versions of Gotenberg, we used the pdfcpu Golang library directly. However, there wasn't a clean way to terminate the process in case of a timeout, which could lead to resource leaks. We now rely on the pdfcpu CLI, allowing us to effectively handle timeouts, resulting in a more stable PDF engine.

Chore

Updates Go dependencies.

---

You may now sponsor this open-source project. Thanks ❤️

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[mchesterbot]

--- kubernetes/apps/default/paperless/app Kustomization: flux-system/cluster-apps-paperless HelmRelease: default/paperless

+++ kubernetes/apps/default/paperless/app Kustomization: flux-system/cluster-apps-paperless HelmRelease: default/paperless

@@ -34,13 +34,13 @@

         containers:
           app:
             env:
               DISABLE_GOOGLE_CHROME: '1'
             image:
               repository: ghcr.io/mchestr/gotenberg
-              tag: 8.11.1
+              tag: 8.12.0
             securityContext:
               allowPrivilegeEscalation: false
               capabilities:
                 drop:
                 - ALL
               fsGroup: 65539

[mchesterbot]

--- HelmRelease: default/paperless Deployment: default/paperless-gotenburg

+++ HelmRelease: default/paperless Deployment: default/paperless-gotenburg

@@ -33,13 +33,13 @@

       hostPID: false
       dnsPolicy: ClusterFirst
       containers:
       - env:
         - name: DISABLE_GOOGLE_CHROME
           value: '1'
-        image: ghcr.io/mchestr/gotenberg:8.11.1
+        image: ghcr.io/mchestr/gotenberg:8.12.0
         name: app
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL