Update docker service images

[renovate]

This PR contains the following updates:

Package	Update	Change
binwiederhier/ntfy (source)	minor	v2.25.0 → v2.26.0
getmeili/meilisearch	minor	v1.48.3 → v1.49.0
sharelatex/sharelatex	patch	6.2.0 → 6.2.1
tailscale/tailscale (source)	patch	v1.98.4 → v1.98.8

---

Release Notes

binwiederhier/ntfy (binwiederhier/ntfy)

v2.26.0

Compare Source

This release hardens message templates, which are now executed with a hard-capped execution timeout. This closes
a denial-of-service hole.

On the web app side, it adds configurable date and time formats, a smoother loading and page-transition experience,
and a fix that strips unsafe URL protocols from rendered Markdown.

Security:

• Prevent a CPU denial of service via message templates (Template: yes) (GHSA-rhwf-xgc9-m9fp, #​1826, thanks to @​alanturing881 for reporting)

Features:

• Web app: Add "Date format" and "Time format" settings (Settings -> Appearance), with ISO 8601, day/month/year (slash or dot) and month/day/year date options and a 12-/24-hour clock option, and base the default format on your browser/system locale rather than the selected display language. When logged in, both settings sync across devices via your account (#​1647, thanks to @​wsw70 for reporting)

Bug fixes + maintenance:

• Web app: Smooth transitions and loading animation, remove flickering
• Web app: GET /account now reads from the primary database instead of a read replica, so the account view no longer shows stale data right after a change when replicas lag behind
• Docs: Document the third-party HelmForge Helm chart as a Kubernetes installation option (#​1727, thanks to @​mberlofa)
• Web app: Strip unsafe URL protocols (javascript:, data:, ...) from links and images in Markdown-rendered messages, so they no longer trigger an uncaught "React has blocked a javascript: URL" error (thanks to @​jvoisin for reporting)

meilisearch/meilisearch (getmeili/meilisearch)

v1.49.0: 🪺

Compare Source

✨ Enhancement

• Improve the synonyms storage by @​Kerollmops in #​6466
  We improve synonyms' performance by changing how we store and retrieve them during query processing. Users may have experienced performance issues when the number of synonyms in an index was high, resulting in a significant impact on search performance. The Meilisearch support team advised moving the settings and synonyms-as-keywords to the dedicated documents. This is no longer an issue; synonyms are loaded lazily, only when a word matches a synonym. You can see performance improvements of up to 13x, depending on the number of synonyms.

🔩 Miscellaneous

• Fix the workflow after broken ranking scores by @​Kerollmops in #​6470
• Make OpenAPI rule less strict for routes returning 202 by @​curquiza in #​6488

tailscale/tailscale (tailscale/tailscale)

v1.98.8

Compare Source

Please refer to the changelog available at https://tailscale.com/changelog

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "before 6am on Saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.