chore(helm): update image docker.io/2fauth/2fauth 5.3.1 → 5.4.2

[truecharts-admin]

This PR contains the following updates:

Package	Update	Change
docker.io/2fauth/2fauth	minor	ef60fa4 -> 3946951

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Release Notes

Bubka/2FAuth (docker.io/2fauth/2fauth)

v5.4.2

Compare Source

Changed

• CSP has been turned off (for now) since it breaks the app under Google Chrome. (#​417)

v5.4.1

Compare Source

Security release

• Fix XSS & SSRF vulnerabilities (thx to the XBOW team).
• Content Security Policy is now available and enable by default. CSP helps to prevent or minimize the risk of certain types of security threats.
  If CSP is already enable on your server, you can set the CONTENT_SECURITY_POLICY environment variable to false to disable it at 2FAuth level.

v5.4.0

Compare Source

Changed

• The links in the footer (Settings, [Admin,] Sign out) have been replaced by the email address of the logged in user. Clicking on this email shows a navigation menu containing the links that were previously visible in the footer. The former display is still available if you don't like the new one, just uncheck the new Show email in footer user option in Settings. (#​404)

Added

• Administrators can now configure 2FAuth to register 2FA icons in the database (see the new Store icons to database setting in the admin panel). When enabled, existing icons in the local file system are automatically registered in the database. These files are retained and then used for caching purposes only. 2FAuth will automatically re-create cache files if they are missing, so you only have to consider the database when backing up your instance. When disabled, 2FAuth will check that all registered icons in the database have a corresponding local file before flushing out the db icons table. (#​364).
• The ability to export 2FA accounts as a list of otpauth URIs (#​386).

Fixed

• Part of the content of some pages (such as the error page) could be hidden by the footer on small screens.

API [1.6.0]

• New otpauth query parameter for the GET operation of path /api/v1/twofaccounts/export to force data export as otpauth URIs instead of the 2FAuth json format.

v5.3.2

Compare Source

Fixed

• issue #​402 Error asking me to log out when using multiple devices, pressing back logs me in anyway

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

✅ Deploy Preview ready!

Name	Link
🔨 Latest commit	d756a8c
🔍 Latest deploy log	https://github.com/truecharts/public/actions/runs/11904720215
😎 Deploy Preview Url
🌳 Environment

---

[PrivatePuffin]

Auto approved automated PR