🎨 Renovate: Update ghcr.io/paperless-ngx/paperless-ngx Docker tag to v2.20.3

[SpiritLooper]

This PR contains the following updates:

Package	Update	Change
ghcr.io/paperless-ngx/paperless-ngx	patch	2.20.1 -> 2.20.3

---

Release Notes

paperless-ngx/paperless-ngx (ghcr.io/paperless-ngx/paperless-ngx)

v2.20.3: Paperless-ngx v2.20.3

Compare Source

[!NOTE]
This release addresses a security issue (GHSA-7cq3-mhxq-w946) and is recommended for all users. Thank you to the community members who reported this.

paperless-ngx 2.20.3

v2.20.2: Paperless-ngx v2.20.2

Compare Source

[!NOTE]
This release addresses two security issues (GHSA-6653-vcx4-69mc and GHSA-24x5-wp64-9fcc) and is recommended for all users. Thank you to the community members who reported these.

paperless-ngx 2.20.2

Features / Enhancements

• Tweakhancement: dim inactive users in users-groups list @​shamoon (#​11537)

Bug Fixes

• Fix: Expanded SVG validation whitelist and additional checks @​stumpylog (#​11590)
• Fix: normalize allowed SVG tag and attribute names, add version @​shamoon (#​11586)
• Fix: pass additional arguments to TagSerializer for permissions @​shamoon (#​11576)

Maintenance

• Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @​dependabot[bot] (#​11515)

Dependencies

6 changes

• Chore: update Angular dependencies to 20.3.15 @​shamoon (#​11568)
• Chore(deps): Bump actions/checkout from 5 to 6 in the actions group @​dependabot[bot] (#​11515)
• Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @​dependabot[bot] (#​11513)
• Chore(deps-dev): Bump @​playwright/test from 1.56.1 to 1.57.0 in /src-ui @​dependabot[bot] (#​11514)
• Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @​dependabot[bot] (#​11512)
• docker(deps): bump astral-sh/uv from 0.9.14-python3.12-trixie-slim to 0.9.15-python3.12-trixie-slim @​dependabot[bot] (#​11533)

All App Changes

12 changes

• Fix: Expanded SVG validation whitelist and additional checks @​stumpylog (#​11590)
• Fixhancement: pass ordering to tag children @​shamoon (#​11556)
• Performance: avoid unnecessary filename operations on bulk custom field updates @​shamoon (#​11558)
• Fix: normalize allowed SVG tag and attribute names, add version @​shamoon (#​11586)
• Chore: refactor workflows code @​shamoon (#​11563)
• Fix: pass additional arguments to TagSerializer for permissions @​shamoon (#​11576)
• Chore: update Angular dependencies to 20.3.15 @​shamoon (#​11568)
• Chore(deps-dev): Bump webpack from 5.102.1 to 5.103.0 in /src-ui @​dependabot[bot] (#​11513)
• Chore(deps-dev): Bump @​playwright/test from 1.56.1 to 1.57.0 in /src-ui @​dependabot[bot] (#​11514)
• Chore(deps-dev): Bump the frontend-eslint-dependencies group in /src-ui with 3 updates @​dependabot[bot] (#​11512)
• Tweakhancement: dim inactive users in users-groups list @​shamoon (#​11537)
• Chore: add some output of social login errors @​shamoon (#​11527)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

Here is the diff to main:

--- k8s/apps/docs Kustomization: flux-system/docs HelmRelease: docs/paperless

+++ k8s/apps/docs Kustomization: flux-system/docs HelmRelease: docs/paperless

@@ -60,7 +60,7 @@

           secretKeyRef:
             key: PAPERLESS_SOCIALACCOUNT_PROVIDERS
             name: paperless-secret
-      image: ghcr.io/paperless-ngx/paperless-ngx:2.20.1
+      image: ghcr.io/paperless-ngx/paperless-ngx:2.20.3
       ingress:
         domain: paperless.egghead.infrao.top
       name: paperless-ngx