Bump 5 PHP apps to upstream images patched for PHP2Shell (CVE-2026-109618, CVE-2026-109619)

- nextcloud: 34.0.0 -> 34.0.5 (PHP 8.5.12)
- mediawiki: 1.43.1 -> 1.43.11 (PHP 8.3.36)
- firefly-iii: 6.6.3 -> 6.7.7 (PHP 8.5.12)
- bookstack: 26.05.1 -> 26.09.2 (PHP patched)
- limesurvey: 6.17.5 -> 6.17.18 (PHP 8.4.27)

AGENTS.md

@@ -19,11 +19,11 @@ These sources will oftentimes not use the latest version. Check to make sure you
 
 ## App package development lifecycle
 
-- when developing a new app, test on the `test-cloud` instance in the `/home/payne/repos/wild-cloud-dev/wild-cloud-redmond-data` wild data dir. Prefer the `wild` CLI for managing app lifecycle as it takes care of copying and compiling kustomize templates. Example commands:
-    - `wild instance use test-cloud`
-    - `wild app add <app>`
-    - `wild app deploy <app>`
-    - `wild app delete`
+- when developing a new app, test on the `test-cloud` instance in the `/home/payne/repos/wild-cloud-dev/wild-cloud-redmond-data` wild data dir. Prefer the `wildcloud` CLI for managing app lifecycle as it takes care of copying and compiling kustomize templates. Example commands:
+    - `wildcloud instance use test-cloud`
+    - `wildcloud app add <app>`
+    - `wildcloud app deploy <app>`
+    - `wildcloud app delete`
 - But you can always use `kubectl` directly. Just make sure you use the `test-cloud` `kubeconfig` and, when applying resources, use the `-k` flag so kustomize templates get copied.
     - kubectl --kubeconfig=/home/payne/repos/wild-cloud-redmond-data/instances/test-cloud/kubeconfig get pods -n <app>
 - While we test in `/home/payne/repos/wild-cloud-dev/wild-cloud-redmond-data/instances/test-cloud`, the final product (our app package) must be in `/home/payne/repos/wild-cloud-dev/wild-directory`. Always make sure that, in the end, whatever is in `wild-directory` can be deployed into `test-cloud`.

README.md

@@ -31,29 +31,29 @@ The easiest way to manage apps is through the Wild Cloud web app:
 
 ### CLI
 
-For terminal-based workflows, use the Wild CLI:
+For terminal-based workflows, use the Wild Cloud CLI:
 
 ```bash
 # List available apps
-wild app list
+wildcloud app list
 
 # Add app to instance
-wild app add <app-name>
+wildcloud app add <app-name>
 
 # Deploy app
-wild app deploy <app-name>
+wildcloud app deploy <app-name>
 
 # List deployed apps
-wild app list-deployed
+wildcloud app list-deployed
 
 # Get app status
-wild app status <app-name>
+wildcloud app status <app-name>
 
 # Delete app
-wild app delete <app-name>
+wildcloud app delete <app-name>
 ```
 
-The CLI connects to the Wild Central API (default: `http://localhost:5055`). You can override with `--daemon-url` or set `WILD_API_URI` environment variable.
+The CLI connects to the Wild Cloud API (default: `http://localhost:5056`). You can override with `--daemon-url` or set `WILD_API_URI` environment variable.
 
 ### API
 

bookstack/versions/26/deployment.yaml

@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: bookstack
-          image: lscr.io/linuxserver/bookstack:26.05.1
+          image: lscr.io/linuxserver/bookstack:26.09.2
           ports:
             - name: http
               containerPort: 80

bookstack/versions/26/manifest.yaml

@@ -1,4 +1,4 @@
-version: 26.05.1-3
+version: 26.09.2-1
 requires:
 - name: mysql
 - name: smtp

firefly-iii/versions/6/deployment.yaml

@@ -20,7 +20,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: firefly-iii
-          image: fireflyiii/core:version-6.6.3
+          image: fireflyiii/core:version-6.7.7
           ports:
             - name: http
               containerPort: 8080

firefly-iii/versions/6/manifest.yaml

@@ -1,4 +1,4 @@
-version: 6.6.3-2
+version: 6.7.7-1
 requires:
 - name: postgres
 defaultConfig:

limesurvey/versions/6/deployment.yaml

@@ -24,7 +24,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: limesurvey
-          image: martialblog/limesurvey:6.17.5-260527-apache
+          image: martialblog/limesurvey:6.17.18-261021-apache
           ports:
             - name: http
               containerPort: 8080

limesurvey/versions/6/manifest.yaml

@@ -1,4 +1,4 @@
-version: 6.17.5-2
+version: 6.17.18-1
 requires:
 - name: postgres
 - name: smtp

mediawiki/versions/1/deployment.yaml

@@ -24,7 +24,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: mediawiki
-          image: mediawiki:1.43.1
+          image: mediawiki:1.43.11
           ports:
             - name: http
               containerPort: 80

mediawiki/versions/1/manifest.yaml

@@ -1,4 +1,4 @@
-version: 1.43.1-2
+version: 1.43.11-1
 requires:
 - name: mysql
 - name: smtp

nextcloud/versions/34/deployment.yaml

@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: nextcloud
-          image: nextcloud:34.0.0-apache
+          image: nextcloud:34.0.5-apache
           ports:
             - name: http
               containerPort: 80

nextcloud/versions/34/manifest.yaml

@@ -1,4 +1,4 @@
-version: 34.0.0-2
+version: 34.0.5-1
 requires:
 - name: postgres
 - name: redis

vaultwarden/versions/1/deployment.yaml

@@ -22,7 +22,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: vaultwarden
-          image: vaultwarden/server:1.36.0
+          image: vaultwarden/server:1.37.1
           ports:
             - name: http
               containerPort: 80

vaultwarden/versions/1/manifest.yaml

@@ -1,4 +1,4 @@
-version: 1.36.0-1
+version: 1.37.1-1
 requires:
 - name: postgres
 - name: smtp