🤖 Update image ghcr.io/paperless-ngx/paperless-ngx to v2.20.3

[foundation-fondue]

This PR contains the following updates:

Package	Update	Change
ghcr.io/paperless-ngx/paperless-ngx	patch	2.20.0 → 2.20.3

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

paperless-ngx/paperless-ngx (ghcr.io/paperless-ngx/paperless-ngx)

v2.20.3: Paperless-ngx v2.20.3

Compare Source

[!NOTE]
This release addresses a security issue (GHSA-7cq3-mhxq-w946) and is recommended for all users. Thank you to the community members who reported this.

paperless-ngx 2.20.3

v2.20.2: Paperless-ngx v2.20.2

Compare Source

[!NOTE]
This release addresses two security issues (GHSA-6653-vcx4-69mc and GHSA-24x5-wp64-9fcc) and is recommended for all users. Thank you to the community members who reported these.

paperless-ngx 2.20.2

Features / Enhancements

• Tweakhancement: dim inactive users in users-groups list @​shamoon (#​11537)

Bug Fixes

• Fix: Expanded SVG validation whitelist and additional checks @​stumpylog (#​11590)
• Fix: normalize allowed SVG tag and attribute names, add version @​shamoon (#​11586)
• Fix: pass additional arguments to TagSerializer for permissions @​shamoon (#​11576)

Maintenance

• Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @​dependabot[bot] (#​11515)

Dependencies

6 changes

• Chore: update Angular dependencies to 20.3.15 @​shamoon (#​11568)
• Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @​dependabot[bot] (#​11515)
• Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @​dependabot[bot] (#​11513)
• Chore(deps-dev): Bump @​playwright/test from 1.56.1 to 1.57.0 in /src-ui @​dependabot[bot] (#​11514)
• Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @​dependabot[bot] (#​11512)
• docker(deps): bump astral-sh/uv from 0.9.14-python3.12-trixie-slim to 0.9.15-python3.12-trixie-slim @​dependabot[bot] (#​11533)

All App Changes

12 changes

• Fix: Expanded SVG validation whitelist and additional checks @​stumpylog (#​11590)
• Fixhancement: pass ordering to tag children @​shamoon (#​11556)
• Performance: avoid unnecessary filename operations on bulk custom field updates @​shamoon (#​11558)
• Fix: normalize allowed SVG tag and attribute names, add version @​shamoon (#​11586)
• Chore: refactor workflows code @​shamoon (#​11563)
• Fix: pass additional arguments to TagSerializer for permissions @​shamoon (#​11576)
• Chore: update Angular dependencies to 20.3.15 @​shamoon (#​11568)
• Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @​dependabot[bot] (#​11513)
• Chore(deps-dev): Bump @​playwright/test from 1.56.1 to 1.57.0 in /src-ui @​dependabot[bot] (#​11514)
• Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @​dependabot[bot] (#​11512)
• Tweakhancement: dim inactive users in users-groups list @​shamoon (#​11537)
• Chore: add some output of social login errors @​shamoon (#​11527)

v2.20.1: Paperless-ngx v2.20.1

Compare Source

paperless-ngx 2.20.1

Bug Fixes

• Fix: set search term when using advanced search from global search @​shamoon (#​11503)
• Fix: change async handling of select custom field updates @​shamoon (#​11490)
• Fix: skip SSL for MariaDB ping in init script @​danielrheinbay (#​11491)
• Fix: handle allauth groups location breaking change @​shamoon (#​11471)

Dependencies

• docker(deps): Bump astral-sh/uv from 0.9.10-python3.12-trixie-slim to 0.9.11-python3.12-trixie-slim @​dependabot[bot] (#​11450)
• Chore(deps): Bump @​angular/common from 20.3.12 to 20.3.14 in /src-ui @​dependabot[bot] (#​11481)

All App Changes

4 changes

• Fix: set search term when using advanced search from global search @​shamoon (#​11503)
• Fix: change async handling of select custom field updates @​shamoon (#​11490)
• Chore(deps): Bump @​angular/common from 20.3.12 to 20.3.14 in /src-ui @​dependabot[bot] (#​11481)
• Fix: handle allauth groups location breaking change @​shamoon (#​11471)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.