fix(deps): update ryanlelek/raneto 0.18.0 → 0.18.1

[truecharts-admin]

This PR contains the following updates:

Package	Update	Change
ryanlelek/Raneto	patch	0.18.0 → 0.18.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

ryanlelek/Raneto (ryanlelek/Raneto)

v0.18.1

Compare Source

• [BREAKING] Minimum Node.js is v24.x LTS
• [Fix] Filepath location for language translations
• [Fix] Path traversal vulnerability
• [Fix] Sitemap string escaping
• [Fix] Better escaping and sanitization for markdown rendering
• [Fix] GitHub Actions repository permissions: read-only
• [Fix] Search ReDoS with lunr
• [Fix] Login password comparison
• [Fix] Path traversal outside of content directory
• [Fix] Authentication redirect continues with flow
• [Fix] Prevent error details leakage
• [Fix] Editor escaping Markdown content and base_url
• [Fix] Ensure redirect "return" is relative path only
• [Fix] Using callback for logout
• [Fix] Explicitly specify "Lax" for cookies
• [Add] Rate Limiting (200 req/min)
• [Add] Configuration verification function
• [Add] CSP Nonce with res.locals.csp_nonce
• [Edit] Refactoring (simplify, use native functions)
• [Deps] Upgrading marked from v16.4.2 to v17.0.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[Crow-Control]

Auto approved automated PR

[trueforge-bot]

📦 App Size Analysis

Note

Comparing ghcr.io/trueforge-org/raneto:rolling ➔ ghcr.io/trueforge-org/raneto:sandbox

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	341.93 MB	346.26 MB	+4.32 MB (+1.26%)	🔼
linux/arm64	336.24 MB	340.83 MB	+4.6 MB (+1.37%)	🔼