This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [registry.gitlab.com/crafty-controller/crafty-4](https://craftycontrol.com/) ([source](https://gitlab.com/crafty-controller/crafty-4)) | minor | `4.10.8` → `4.11.0` |
---
> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/91) for more information.
---
### Release Notes
<details>
<summary>crafty-controller/crafty-4 (registry.gitlab.com/crafty-controller/crafty-4)</summary>
### [`v4.11.0`](https://gitlab.com/crafty-controller/crafty-4/blob/HEAD/CHANGELOG.md#----4110---20260916)
[Compare Source](https://gitlab.com/crafty-controller/crafty-4/compare/v4.10.8...v4.11.0)
##### New features
- Add OpenGraph social media previews/embeds link customization ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1029))
- Custom Branding and "Customize Crafty" page redesign ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1037))
- Resolve glob patterns in logfile paths for Hytale logs ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1039))
- Add historical/rotated log viewing to the Logs tab ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1085))
- Automatically grab latest server term when tab wakes up ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1089))
##### Bug fixes
- Fix all-numeric usernames rejected as invalid JSON schema ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/994))
- Remove update center listing from those who do not have access ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1084))
- Fix config.json self delete flag not working ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1086))
- Fix intermittent bug where users see first run message multiple times ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1087))
- \[`CVE-2026-18516`] Security: Fix XSS in activity logs ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1078))
- \[`CVE-2026-90821`] Security: Fix XSS in webhooks ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1082))
- Catch `jsondecodeerror` on player cache read ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1092))
- Fix notification bell when no annoucements are present ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1093))
- Remove webhook entry when server is deleted ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1094))
##### Tweaks
- Add compatability for OTP on bitwarden ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1088))
- Update stale tests to match current crafty behaviour ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1091))
- Remove unused package dependencies ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1090))
- Add a ban reason prompt ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/1083))
<br><br>
</details>
---
### Configuration
📅 **Schedule**: (in timezone America/New_York)
- Branch creation
- "after 3am and before 6am"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjcuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE2Ny4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvbWF0ZWQtdXBkYXRlIiwiZGVwZW5kZW5jaWVzIl19-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
4.10.8→4.11.0Release Notes
crafty-controller/crafty-4 (registry.gitlab.com/crafty-controller/crafty-4)
v4.11.0Compare Source
New features
Bug fixes
CVE-2026-18516] Security: Fix XSS in activity logs (Merge Request)CVE-2026-90821] Security: Fix XSS in webhooks (Merge Request)jsondecodeerroron player cache read (Merge Request)Tweaks
Configuration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.