Update ghcr.io/gchq/cyberchef Docker tag to v11.4.0

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/gchq/cyberchef	minor	11.2.0 → 11.4.0

---

Release Notes

gchq/CyberChef (ghcr.io/gchq/cyberchef)

v11.4.0

Compare Source

This release includes a security fix

• Security: patch XSS in Regular expression module [@​Ne0re0]
• chore (deps): bump @​codemirror/view from 6.43.8 to 6.43.9 in the patch-updates group | [#​2731]
• chore (deps): bump @​codemirror/commands from 6.10.4 to 6.11.0 in the minor-updates group | [#​2732]
• Add XPRESS (MS-XCA) decompression operations [@​MP-GOWTHAM] | [#​2722]
• Feat/node 26 support [@​alleria173] | [#​2699]
• chore(root): update allowlist [@​evenstensberg] | [#​2713]
• chore (deps): bump the patch-updates group across 1 directory with 7 updates | [#​2730]
• chore (deps): bump the minor-updates group across 1 directory with 9 updates | [#​2729]
• chore (deps): bump docker/login-action from 4.5.2 to 4.6.0 in the actions-dependencies group | [#​2716]
• chore (deps): bump node from a0b9bf0 to d32cdf6 in the docker-dependencies group | [#​2723]
• docs(root): improve docs a bit [@​evenstensberg] | [#​2718]
• fix: use js-yaml for both JSON to YAML and YAML to JSON [@​bartvanandel] | [#​2710]
• chore (deps): bump the patch-updates group across 1 directory with 6 updates | [#​2712]
• chore (deps): bump the minor-updates group across 1 directory with 3 updates | [#​2705]
• chore (deps): bump the actions-dependencies group with 2 updates | [#​2703]
• fix: replace shasum / sha256sum / sed calls with node built-ins [@​bartvanandel] | [#​2019]
• chore (deps): bump fast-uri from 3.1.4 to 3.1.5 | [#​2709]
• chore (deps): bump ip-address from 10.2.0 to 10.4.0 | [#​2708]
• fix: stop Parse QR Code from participating in Magic (#​2610) [@​Sanjays2402] | [#​2613]
• Restrict A1Z26 Magic checks to valid ranges [@​vetrovk] | [#​2644]
• feat: Extend automated ingredient validation to include argSelector ingredients (#​2641) [@​mansiverma897993] | [#​2643]
• Add Modular Exponentiation operation [@​p-leriche] | [#​2149]
• Add npm allowScripts policy for npm v12 [@​zainnadeem786] | [#​2682]
• chore (deps): bump assorted vulnerable dependencies [@​GCHQDeveloper581] | [#​2689]
• chore (deps): bump shell-quote from 1.8.4 to 1.10.0 | [#​2690]
• chore (deps): bump the patch-updates group across 1 directory with 9 updates | [#​2686]
• chore (deps): bump the actions-dependencies group across 1 directory with 2 updates | [#​2685]
• chore (deps): bump nginxinc/nginx-unprivileged from fd3314e to 44e3633 in the docker-dependencies group | [#​2684]

v11.3.0

Compare Source

This release includes a security fix ([#​2687])

• Security: Fix pretty recipe parser ReDoS [@​zainnadeem786] | [#​2687]
• feat: add modulo operation [@​thomasnemer] [@​GCHQDeveloper581] | [#​2103]
• Add HMAC regression tests for Decimal key parsing [@​alleria173] | [#​2680]
• fix: await Node API operations whose run() returns a non-async Promise [@​roberson-io] | [#​2659]
• chore (deps): bump morgan from 1.10.1 to 1.11.0 | [#​2676]
• fix: fromDecimal Auto delimiter now correctly parses multiple numbers [@​min23asdw] | [#​2270]
• Add Generate Prime Number operation [@​p-leriche] | [#​2212]
• Add Modular Inverse operation [@​p-leriche] | [#​2207]
• Consolidate HTML entity tables into a single spec-generated source (#​2645) [@​roberson-io] | [#​2671]
• Add Extended GCD operation [@​p-leriche] | [#​2206]
• Add COBS encoding/decoding operations [@​giesmininkas] | [#​2185]
• chore (deps): bump websocket-driver from 0.7.4 to 0.7.5 | [#​2673]
• fix: remove stray punctuation from malformed To HTML Entity table values [@​roberson-io] | [#​2660]
• chore (deps): bump the actions-dependencies group across 1 directory with 6 updates | [#​2668]
• chore (deps): bump the minor-updates group across 1 directory with 3 updates | [#​2669]
• chore (deps): bump the patch-updates group with 5 updates | [#​2654]
• feat: add TEA and XTEA block ciphers [@​thomasxm] | [#​2225]
• feat: add PRESENT and Twofish ciphers [@​thomasxm] | [#​2157]
• fix: support constructor and proto parameters in Parse URI (#​2578) [@​mansiverma897993] | [#​2581]
• feat: Implement automated option-type ingredient validation [@​mansiverma897993] | [#​2625]
• Add Ascon (NIST SP 800-232) operations: Hash, MAC, Encrypt, Decrypt [@​thomasxm] | [#​2155]
• chore (deps): bump the patch-updates group across 1 directory with 6 updates | [#​2638]
• chore (deps): bump webpack from 5.107.2 to 5.108.3 in the minor-updates group | [#​2635]
• chore (deps): bump nginxinc/nginx-unprivileged from 458ecbe to fd3314e in the docker-dependencies group | [#​2633]
• Feature: automatically expire PRs if CLA remains unsigned for an extended period [@​GCHQDeveloper581] | [#​2636]
• fix/2445 HOTP (and 2426 TOTP) type errors [@​alleria173] | [#​2620]
• Fix base32 unicode alphabet [@​loki1205] | [#​2380]
• Add a workflow to automatically flag PRs without a signed CLA [@​GCHQDeveloper581] | [#​2627]
• fix/2444 TOTP input validation for correct otpauth uri generation [@​alleria173] | [#​2621]
• Validate Wrap line width [@​vetrovk] [@​GCHQDeveloper581] [@​C85297] | [#​2606]
• Handle malformed image parser errors in View Bit Plane [@​zainnadeem786] | [#​2612]
• Fixes #​2446 hotp otpauth uri validation [@​alleria173] | [#​2614]
• Handle invalid bcrypt salt errors in Bcrypt compare [@​zainnadeem786] | [#​2615]
• Validate empty Show On Map options [@​vetrovk] | [#​2631]
• Create AGENTS.md file [@​C85297] | [#​2619]
• Set parameter validation Metadata for GenerateImage operations [@​GCHQDeveloper581] | [#​2611]
• Update 4 vulnerable dependencies [@​GCHQDeveloper581] | [#​2616]
• Fix BigNumber deserialisation in Dish, and add tests [@​GCHQDeveloper581] | [#​2607]
• chore (deps): bump the docker-dependencies group with 2 updates | [#​2600]
• chore (deps): bump the patch-updates group with 8 updates | [#​2602]
• chore (deps): bump actions/checkout from 6.0.3 to 7.0.0 in the actions-dependencies group | [#​2601]
• chore (deps): bump the minor-updates group with 2 updates | [#​2603]
• Handle empty Generate Image mode [@​vetrovk] | [#​2598]
• Fix stale presenter after expected operation errors [@​zainnadeem786] [@​GCHQDeveloper581] | [#​2589]
• Clean up/rationalise webpack paths and thereby increase compatibility for Win… [@​GCHQDeveloper581] | [#​2585]
• Improve parameter validation for a number of operations where exceptions otherwise caused. [@​GCHQDeveloper581] | [#​2586]
• Fix uncaught TypeError in "Show on map" operation. [@​lzandman] | [#​2453]
• fix: jsonata $base64decode/$base64encode in Web Worker [@​min23asdw] | [#​2275]
• fix Dechunk HTTP Response leaks terminating chunk and trailers into output [@​williballenthin] | [#​2290]
• fix: MIME Decoding corrupts non-ASCII characters in Base64-encoded words [@​williballenthin] | [#​2291]
• fix: Gzip comment with header checksum produces corrupt streams [@​williballenthin] | [#​2288]
• fix TLV Parser BER long-form length parsing [@​williballenthin] | [#​2289]
• fix: Unescape Unicode Characters accepts 4-6 hex digits for U+ prefix [@​williballenthin] | [#​2287]
• fix Set Difference and Set Intersection preserve duplicates from first sample [@​williballenthin] | [#​2286]
• fix: From Base operation produces wrong results for fractional inputs [@​williballenthin] | [#​2285]
• fix Median operation returns incorrect result for unsorted odd-length inputs [@​williballenthin] | [#​2284]
• Added RenderPDF functionality [@​Shailendra1703] [@​GCHQDeveloper581] | [#​2105]
• Fix URL encoding incorrectly converting input to UTF-8 [@​C85297] | [#​2340]
• feat: Add automated parameter validation framework [@​mansiverma897993] | [#​2561]
• Fix: added viewport styles to img tag in RenderImage Dish [@​Shailendra1703] [@​C85297] | [#​2109]
• chore (deps): bump form-data from 4.0.5 to 4.0.6 | [#​2572]
• chore (deps): bump the patch-updates group with 5 updates [@​GCHQDeveloper581] | [#​2580]
• chore (deps): bump the docker-dependencies group with 2 updates | [#​2579]
• Fix operation description rendering [@​C85297] | [#​2577]
• chore (deps): bump launch-editor from 2.13.1 to 2.14.1 | [#​2574]
• chore (deps): bump dompurify from 3.4.8 to 3.4.9 | [#​2573]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

• Chores
  • Updated the CyberChef service to version 11.4.0.
  • Includes the latest CyberChef improvements and fixes.

[xRahul]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: a360c484-e745-47be-bae3-f5ed42f5bc5c

📥 Commits

Reviewing files that changed from the base of the PR and between 4881875 and 548e253.

📒 Files selected for processing (1)

• docker-compose.yml

Included review availability: 4 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 5 reviews per hour.

---

📝 Walkthrough

Walkthrough

The Docker Compose CyberChef service image is updated from 11.2.0 to 11.4.0.

Changes

CyberChef image update

Layer / File(s)	Summary
Update CyberChef container image docker-compose.yml	The CyberChef service now references ghcr.io/gchq/cyberchef:11.4.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: 🔵 Low · up to 548e2

The deployment tag and PR description reference different CyberChef releases, so merging without confirmation could deploy an unintended version. The PR is otherwise mergeable once the intended target is confirmed.

Suggested reviewers: xrahul

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the Docker tag update shown in the changeset.

---

_{Comment @coderabbitai help to get the list of available commands.}