Skip to content

[UPDATE][triliumnext][1.0.4] Upgrade TriliumNext 0.105.0 to 0.106.1 #3914

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Terminus-Gitbot merged 1 commit into from
Nov 7, 2026
Merged

[UPDATE][triliumnext][1.0.4] Upgrade TriliumNext 0.105.0 to 0.106.1 #3914

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions triliumnext/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,5 +2,5 @@ apiVersion: v2
name: triliumnext
description: TriliumNext is a personal knowledge base with hierarchically structured notes, rich text editor, note linking, scripting, and more.
type: application
version: 1.0.3
appVersion: "0.105.0"
version: 1.0.4
appVersion: "0.106.1"
16 changes: 8 additions & 8 deletions triliumnext/OlaresManifest.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ metadata:
description: TriliumNext is a personal knowledge base with hierarchically structured notes, rich text editor, note linking, scripting, and more.
icon: https://cdn.olares.cn/images/2026/07/05/f5e9688a7a422466d893a33818836028.cropped-1783239809269.png
appid: triliumnext
version: '1.0.3'
version: '1.0.4'
title: TriliumNext
categories:
- Productivity_v112
Expand All @@ -18,16 +18,16 @@ permission:
appData: true
appCache: true
spec:
versionName: '0.105.0'
versionName: '0.106.1'
fullDescription: |
TriliumNext is a personal knowledge base with hierarchically structured notes, rich text editor, note linking, scripting, and more.
upgradeDescription: |
- Add AIDockerCloud to maintainers list.
- Upgrade TriliumNext to 0.105.0.
- Security & MCP: MCP server now requires authentication.
- Text notes: Unsupported HTML tags disabled by default for cleaner pasting.
- UI & Features: Custom note icon packs, note save indicator, custom PDF.js renderer, and updated jQuery 4.
- Bug fixes and stability improvements.
- Upgrade TriliumNext from 0.105.0 to 0.106.1. 0.106.1 is a security release and should be applied to any instance reachable from the network.
- Fixes CVE-2026-111497: the Brotli decoder could write out of bounds. Trilium decompresses Brotli-encoded request bodies before authentication, so any client that could reach the server could send a malicious request; outbound requests such as link previews, image downloads and web search were affected through the responses they receive.
- Drops the revoked eMudhra/emSign certificate authorities from the certificate store bundled with Node.js. While trusted, a man-in-the-middle with the right network position could impersonate HTTPS servers Trilium connects to, including sync between instances, link previews and LLM providers.
- The Docker images now ship Node.js 24.22.1, taking in the October 2026 Node.js security releases with further TLS, HTTP and DNS fixes.
- Includes the 0.106.0 feature work, notably a rebuilt Kanban board: column icons, colors and card limits, collapsible and archivable columns, an Inbox column, card templates, per-board properties, automatic sorting, header filtering and multi-select.
- Data format is unchanged and the existing data volume is reused as-is. If the container reports unhealthy after the upgrade, recreate it and check that no healthcheck override is set in your compose file.
developer: TriliumNext
website: https://github.com/TriliumNext/Trilium
sourceCode: https://github.com/TriliumNext/Trilium
Expand Down
12 changes: 6 additions & 6 deletions triliumnext/i18n/en-US/OlaresManifest.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,9 +5,9 @@ spec:
fullDescription: |
TriliumNext is a personal knowledge base with hierarchically structured notes, rich text editor, note linking, scripting, and more.
upgradeDescription: |
- Add AIDockerCloud to maintainers list.
- Upgrade TriliumNext to 0.105.0.
- Security & MCP: MCP server now requires authentication.
- Text notes: Unsupported HTML tags disabled by default for cleaner pasting.
- UI & Features: Custom note icon packs, note save indicator, custom PDF.js renderer, and updated jQuery 4.
- Bug fixes and stability improvements.
- Upgrade TriliumNext from 0.105.0 to 0.106.1. 0.106.1 is a security release and should be applied to any instance reachable from the network.
- Fixes CVE-2026-111497: the Brotli decoder could write out of bounds. Trilium decompresses Brotli-encoded request bodies before authentication, so any client that could reach the server could send a malicious request; outbound requests such as link previews, image downloads and web search were affected through the responses they receive.
- Drops the revoked eMudhra/emSign certificate authorities from the certificate store bundled with Node.js. While trusted, a man-in-the-middle with the right network position could impersonate HTTPS servers Trilium connects to, including sync between instances, link previews and LLM providers.
- The Docker images now ship Node.js 24.22.1, taking in the October 2026 Node.js security releases with further TLS, HTTP and DNS fixes.
- Includes the 0.106.0 feature work, notably a rebuilt Kanban board: column icons, colors and card limits, collapsible and archivable columns, an Inbox column, card templates, per-board properties, automatic sorting, header filtering and multi-select.
- Data format is unchanged and the existing data volume is reused as-is. If the container reports unhealthy after the upgrade, recreate it and check that no healthcheck override is set in your compose file.
12 changes: 6 additions & 6 deletions triliumnext/i18n/zh-CN/OlaresManifest.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,9 +12,9 @@ spec:
- **强大的脚本支持**：支持使用 JavaScript (前端和后端) 扩展笔记功能，实现自动化任务。
- **版本控制与安全**：内置笔记版本历史管理，并支持对敏感笔记进行高强度加密。
upgradeDescription: |
- 添加 AIDockerCloud 到应用维护者列表。
- 升级 TriliumNext 至 0.105.0。
- 安全与 MCP：MCP 服务现已强制要求身份验证。
- 文本笔记优化：默认禁用不受支持的 HTML 标签，避免复制粘贴时混入杂项内容。
- 界面与功能：支持自定义笔记图标包、新增笔记保存状态指示器、内置基于 PDF.js 的独立 PDF 渲染器，升级 jQuery 4。
- 修复已知问题并提升系统稳定性。
- TriliumNext 从 0.105.0 升级到 0.106.1。0.106.1 是安全修复版本，任何可从网络访问的实例都应及时更新。
- 修复 CVE-2026-111497：Brotli 解码器可能越界写入。Trilium 在身份验证之前就会解压 Brotli 编码的请求体，因此旧版本中任何能访问服务器的客户端都可发送恶意请求；链接预览、图片下载、网页搜索等出站请求也会因接收到的响应受到影响。
- 从 Node.js 内置证书库中移除已被撤销的 eMudhra/emSign 证书颁发机构。这些 CA 在受信任期间，具备相应网络位置的中间人可冒充 Trilium 连接的 HTTPS 服务器，涉及实例间同步、链接预览与 LLM 服务商。
- Docker 镜像改用 Node.js 24.22.1，纳入 2026 年 10 月的 Node.js 安全更新，并包含更多 TLS、HTTP 与 DNS 修复。
- 包含 0.106.0 的功能改进，主要是重构后的看板：列图标、颜色与卡片上限，列可折叠与归档，新增 Inbox 列，支持卡片模板、看板属性、自动排序、表头筛选与多选操作。
- 数据格式未变，原有数据卷沿用。若升级后容器显示 unhealthy，请重建容器，并确认 compose 文件里没有覆盖 healthcheck。
2 changes: 1 addition & 1 deletion triliumnext/templates/triliumnext.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ spec:
spec:
containers:
- name: triliumnext
image: docker.io/triliumnext/trilium:v0.105.0
image: docker.io/triliumnext/trilium:v0.106.1
imagePullPolicy: IfNotPresent
env:
- name: TRILIUM_DATA_DIR
Expand Down
2 changes: 1 addition & 1 deletion triliumnext/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
image:
repository: triliumnext/trilium
tag: 0.105.0
tag: 0.106.1
pullPolicy: IfNotPresent

userspace:
Expand Down
Loading