Bump 5 PHP apps to upstream images patched for PHP2Shell (CVE-2026-109618, CVE-2026-109619)

- nextcloud: 34.0.0 -> 34.0.5 (PHP 8.5.12)
- mediawiki: 1.43.1 -> 1.43.11 (PHP 8.3.36)
- firefly-iii: 6.6.3 -> 6.7.7 (PHP 8.5.12)
- bookstack: 26.05.1 -> 26.09.2 (PHP patched)
- limesurvey: 6.17.5 -> 6.17.18 (PHP 8.4.27)

bookstack/versions/26/deployment.yaml

@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: bookstack
-          image: lscr.io/linuxserver/bookstack:26.05.1
+          image: lscr.io/linuxserver/bookstack:26.09.2
           ports:
             - name: http
               containerPort: 80

bookstack/versions/26/manifest.yaml

@@ -1,4 +1,4 @@
-version: 26.05.1-3
+version: 26.09.2-1
 requires:
 - name: mysql
 - name: smtp

firefly-iii/versions/6/deployment.yaml

@@ -20,7 +20,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: firefly-iii
-          image: fireflyiii/core:version-6.6.3
+          image: fireflyiii/core:version-6.7.7
           ports:
             - name: http
               containerPort: 8080

firefly-iii/versions/6/manifest.yaml

@@ -1,4 +1,4 @@
-version: 6.6.3-2
+version: 6.7.7-1
 requires:
 - name: postgres
 defaultConfig:

limesurvey/versions/6/deployment.yaml

@@ -24,7 +24,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: limesurvey
-          image: martialblog/limesurvey:6.17.5-260527-apache
+          image: martialblog/limesurvey:6.17.18-261021-apache
           ports:
             - name: http
               containerPort: 8080

limesurvey/versions/6/manifest.yaml

@@ -1,4 +1,4 @@
-version: 6.17.5-2
+version: 6.17.18-1
 requires:
 - name: postgres
 - name: smtp

mediawiki/versions/1/deployment.yaml

@@ -24,7 +24,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: mediawiki
-          image: mediawiki:1.43.1
+          image: mediawiki:1.43.11
           ports:
             - name: http
               containerPort: 80

mediawiki/versions/1/manifest.yaml

@@ -1,4 +1,4 @@
-version: 1.43.1-2
+version: 1.43.11-1
 requires:
 - name: mysql
 - name: smtp

nextcloud/versions/34/deployment.yaml

@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: nextcloud
-          image: nextcloud:34.0.0-apache
+          image: nextcloud:34.0.5-apache
           ports:
             - name: http
               containerPort: 80

nextcloud/versions/34/manifest.yaml

@@ -1,4 +1,4 @@
-version: 34.0.0-2
+version: 34.0.5-1
 requires:
 - name: postgres
 - name: redis