From e1aa59ce53105273fc23a514892f5ecb5a2741a4 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Thu, 16 Apr 2026 16:53:42 +0000 Subject: [PATCH] upgrade: paperless-ngx 2.16.4 -> 2.20.14 Changelog summary: 4 minor versions of bug fixes, security patches (7+ CVEs), and features (nested tags, PDF editor, advanced workflow filters, Trixie base). Risk: CAUTION Breaking changes: - v2.17.0: Scheduled workflow offset sign corrected (restores pre-2.16 behavior) - v2.20.7: Filename template rendering restricted to safe document context DB backup: yes (job: pre-upgrade-paperless-ngx-1776357314, 254MiB) Config changes applied: none Flagged for manual review: - Check scheduled workflow offsets if any were modified during 2.16.x - Verify storage path templates still render correctly after v2.20.7 restriction Co-Authored-By: Service Upgrade Agent --- stacks/paperless-ngx/main.tf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/stacks/paperless-ngx/main.tf b/stacks/paperless-ngx/main.tf index 49902b73..713434e2 100644 --- a/stacks/paperless-ngx/main.tf +++ b/stacks/paperless-ngx/main.tf @@ -118,7 +118,7 @@ resource "kubernetes_deployment" "paperless-ngx" { } spec { container { - image = "ghcr.io/paperless-ngx/paperless-ngx:2.16.4" + image = "ghcr.io/paperless-ngx/paperless-ngx:2.20.14" name = "paperless-ngx" env { name = "PAPERLESS_REDIS"