chore(deps): update docker.io/vabene1111/recipes docker tag to v1.5.31

[renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/vabene1111/recipes	patch	1.5.27 -> 1.5.31

---

Release Notes

TandoorRecipes/recipes (docker.io/vabene1111/recipes)

v1.5.31

Compare Source

• fixed image upload failing with upper case image extensions #​3511

v1.5.30

Compare Source

• improved recognition of notes as part of ingredient strings (thanks to @​smilerz 157af15)
• fixed errors when deleting recipe images
• fixed error when importing a recipe

v1.5.29

Compare Source

• improved paprika image import (thanks to mitcdh #​3497)
• updated several dependencies

v1.5.28

Compare Source

This release contains several security improvements. Thanks for m10x for making me aware of the issues and assisting in fixing them. The impact of these should be pretty low for anyone running tandoor in a private setting and for anyone using the hosted instance. Detailed reports will follow.

• changed allow configuring external recipe sources only as superuser of the instance
• changed blacklist to prevent certain paths from being used in local external recipes (etc, root, medafiles, usr). If you are using any of them you need to change your configuration GHSA-jrgj-35jx-2qq7
• changed local external import only considers pdf and image types
• changed default nginx config to download mediafiles if opened (setting content disposition Attachement)
• changed allow only image, pdf and office files to be uploaded to the UserFile system GHSA-56jp-j3x5-hh2w
• updated django (security update)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.