mirror of
https://github.com/authelia/authelia.git
synced 2026-10-28 09:34:52 +08:00
master
10879
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 renovate[bot]andAmir Zarrinkafsh
|
e66fbbe5ff |
build(deps): update dependency baseline-browser-mapping to v2.11.33 (#13579)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [baseline-browser-mapping](https://redirect.github.com/web-platform-dx/baseline-browser-mapping) | [`2.11.31` → `2.11.33`](https://renovatebot.com/diffs/npm/baseline-browser-mapping/2.11.31/2.11.33) |  |  | --- ### Release Notes <details> <summary>web-platform-dx/baseline-browser-mapping (baseline-browser-mapping)</summary> ### [`v2.11.33`](https://redirect.github.com/web-platform-dx/baseline-browser-mapping/compare/v2.11.32...v2.11.33) [Compare Source](https://redirect.github.com/web-platform-dx/baseline-browser-mapping/compare/v2.11.32...v2.11.33) ### [`v2.11.32`](https://redirect.github.com/web-platform-dx/baseline-browser-mapping/compare/v2.11.31...v2.11.32) [Compare Source](https://redirect.github.com/web-platform-dx/baseline-browser-mapping/compare/v2.11.31...v2.11.32) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
1cca08daa3 |
build(deps): update dependency @eslint-react/eslint-plugin to v5.28.8 (#13578)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@eslint-react/eslint-plugin](https://redirect.github.com/Rel1cx/eslint-react) ([source](https://redirect.github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin)) | [`5.28.6` → `5.28.8`](https://renovatebot.com/diffs/npm/@eslint-react%2feslint-plugin/5.28.6/5.28.8) |  |  | --- ### Release Notes <details> <summary>Rel1cx/eslint-react (@​eslint-react/eslint-plugin)</summary> ### [`v5.28.8`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5288-2026-10-24) [Compare Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.28.7...v5.28.8) ##### 🐞 Fixes - `react-x/purity`: builtin member resolution no longer follows computed or unknown middle segments (ex: `window[fetch]`, `window.myLibrary.fetch`), preventing false reports of non-builtin calls. ([#​2074](https://redirect.github.com/Rel1cx/eslint-react/issues/2074)) ##### 🏗️ Internal - `@eslint-react/eslint`: added dual-purpose `getText` for direct or callback-style source text extraction, replacing repeated `context.sourceCode.getText` wrappers across packages. ([#​2073](https://redirect.github.com/Rel1cx/eslint-react/issues/2073)) **Full Changelog**: <https://github.com/Rel1cx/eslint-react/compare/v5.28.7...v5.28.8> ### [`v5.28.7`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5287-2026-10-23) [Compare Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.28.6...v5.28.7) ##### 🐞 Fixes - `react-x/purity`: now reports `Date` calls during render, including `Date()`, `Date(arg)`, and `window.Date()`; unlike `new Date(arg)`, `Date(arg)` ignores its arguments and always returns the current time. ([#​2071](https://redirect.github.com/Rel1cx/eslint-react/issues/2071)) Thanks to [@​aki05162525](https://redirect.github.com/aki05162525)! ##### 🏗️ Internal - Bumped `effect` and `@effect/platform-node` to `4.0.6`, `@tanstack/react-router` to `1.170.46`, `@tanstack/react-start` to `1.169.4`, and `eslint-plugin-de-morgan` to `2.3.0`. ##### New Contributors - **TAKAGI AKIHIRO** ([@​aki05162525](https://redirect.github.com/aki05162525)) made their first contribution in [#​2071](https://redirect.github.com/Rel1cx/eslint-react/issues/2071). **Full Changelog**: <https://github.com/Rel1cx/eslint-react/compare/v5.28.6...v5.28.7> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
5692581314 |
build(deps): update haproxy:3.4.7-alpine docker digest to 2caaf8b (#13577)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [haproxy](https://hub.docker.com/_/haproxy) ([source](https://redirect.github.com/docker-library/haproxy)) | final | digest | `3c8c1df` → `2caaf8b` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
3e18ed9496 |
build(deps): update dependency react-i18next to v17.1.9 (#13583)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [react-i18next](https://redirect.github.com/i18next/react-i18next) | [`17.1.3` → `17.1.9`](https://renovatebot.com/diffs/npm/react-i18next/17.1.3/17.1.9) |  |  | --- ### Release Notes <details> <summary>i18next/react-i18next (react-i18next)</summary> ### [`v17.1.9`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1719) [Compare Source](https://redirect.github.com/i18next/react-i18next/compare/v17.1.8...v17.1.9) - fix(useTranslation): namespaces added to or removed from the `ns` array are now picked up. The hook used the array itself as the `useMemo` dependency list, and React only compares the entries both lists have in common when its length changes, so going from `useTranslation(['nsA'])` to `useTranslation(['nsA', 'nsB'])` kept returning `['nsA']`: React warned that the dependency array changed size, `nsB` was never loaded, and with `nsMode: 'fallback'` keys only in `nsB` rendered as the key. Removing a namespace kept the old list the same way. The namespaces are now compared by content, so a growing list loads the new namespace (suspending until it is loaded, as switching from `'nsA'` to `'nsB'` already does) and `t` uses it. Lists that keep their length behave as before. Thanks [@​lprnmns](https://redirect.github.com/lprnmns) ([#​1945](https://redirect.github.com/i18next/react-i18next/pull/1945)). ### [`v17.1.8`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1718) [Compare Source](https://redirect.github.com/i18next/react-i18next/compare/v17.1.7...v17.1.8) - fix(Trans): an interpolation variable named `format` is no longer dropped. `Trans` reads `format` in an interpolation object as the formatter name (`{{ value, format }}`), so with `{{ format }}` as the only key nothing was left: `<Trans>Export as {{ format }}</Trans>` warned `TRANS_INVALID_OBJ` and used the default string `Export as ` instead of `Export as {{format}}`. When `format` is the object's only key it is now treated as the variable. `{{ value, format }}` works as before. Without an `i18nKey`, the key derived from the children changes accordingly, from `Export as ` to `Export as {{format}}`. i18next-cli serializes `Trans` children with react-i18next, so extracting with this version produces the same key. Thanks [@​Pharex38](https://redirect.github.com/Pharex38) ([#​1944](https://redirect.github.com/i18next/react-i18next/pull/1944)). ### [`v17.1.7`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1717) [Compare Source](https://redirect.github.com/i18next/react-i18next/compare/v17.1.6...v17.1.7) - fix(IcuTrans): each HTML entity in a translation is now decoded exactly once. Named, decimal and hexadecimal entities were decoded in three passes, and each pass decoded the output of the previous one, so an escaped numeric entity was decoded twice: `"Write &#​169; to get &#​169;"` rendered `Write © to get ©` instead of `Write &#​169; to get ©`, and `&#​60;` rendered `<` instead of `&#​60;`. This also hit interpolated values with `escapeValue: true`, where a value containing `&#​60;` is escaped to `&#​60;`. Escaped named entities like `&lt;` already stayed `<`, as browsers and `Trans` decode them. Unknown named entities and entities above U+10FFFF still stay as written. Thanks [@​Pharex38](https://redirect.github.com/Pharex38) ([#​1943](https://redirect.github.com/i18next/react-i18next/pull/1943)). ### [`v17.1.6`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1716) [Compare Source](https://redirect.github.com/i18next/react-i18next/compare/v17.1.5...v17.1.6) - fix(Trans): a `count` passed in `tOptions` is now used. `Trans` spread `tOptions` and then set its own `count` prop, so a count only in `tOptions` was overwritten with `undefined`: `<Trans i18nKey="items" tOptions={{ count: 5 }} />` rendered the key `items` instead of `5 items`, and with children `Trans` could pick the wrong plural form. Like `context`, `Trans` now falls back to `tOptions.count`, handled the same way as the `count` prop. A `count` prop, a count in the children or `values.count` still take precedence, and `tOptions` is not modified. Thanks [@​nk-batman21](https://redirect.github.com/nk-batman21) ([#​1942](https://redirect.github.com/i18next/react-i18next/pull/1942)). ### [`v17.1.5`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1715) [Compare Source](https://redirect.github.com/i18next/react-i18next/compare/v17.1.4...v17.1.5) - fix(Trans): with an array of keys and no children, `Trans` now falls back to the last key when none of them has a translation, as `t()` does. It used the array itself as `defaultValue`, which i18next handles as an object, so `<Trans i18nKey={['notifications.crm_item_created', 'crm_item_created']} components={[<strong />]} />` rendered `key 'crm_item_created (en)' returned an object instead of string.` instead of `crm_item_created`. An array of selectors falls back to the key of the last selector. The first key that has a translation still wins, and `children`, `defaults` and `tOptions.defaultValue` are used as before. With `saveMissing`, these calls now report the missing key, like a single `i18nKey` does. Thanks [@​nk-batman21](https://redirect.github.com/nk-batman21) ([#​1941](https://redirect.github.com/i18next/react-i18next/pull/1941)). ### [`v17.1.4`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1714) [Compare Source](https://redirect.github.com/i18next/react-i18next/compare/v17.1.3...v17.1.4) - fix(types): without `allowObjectInHTMLChildren`, the `children` of HTML elements now use React's own type (`DOMAttributes<T>['children']`) instead of the `ReactI18NextChildren | Iterable<ReactI18NextChildren>` union. Both accept the same children, so nothing compiles differently. For default installs the global `HTMLAttributes` augmentation now repeats whatever `@types/react` declares, so changes in React's types flow through instead of meeting a copy, and type errors on element children no longer list an extra `Iterable<...>`. With `allowObjectInHTMLChildren: true` nothing changes. First step of [#​1928](https://redirect.github.com/i18next/react-i18next/issues/1928). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
c8cbfb053e |
build(deps): update traefik docker tag to v3.7.16 (#13584)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://hub.docker.com/_/traefik) ([source](https://redirect.github.com/traefik/traefik)) | patch | `v3.7.15` → `v3.7.16` | --- ### Release Notes <details> <summary>traefik/traefik (traefik)</summary> ### [`v3.7.16`](https://redirect.github.com/traefik/traefik/blob/HEAD/CHANGELOG.md#v3716-2026-10-20) [Compare Source](https://redirect.github.com/traefik/traefik/compare/v3.7.15...v3.7.16) [All Commits](https://redirect.github.com/traefik/traefik/compare/v3.7.15...v3.7.16) **Bug fixes:** - **\[authentication, service, k8s/ingress-nginx]** Support NTLM and Kerberos in ForwardAuth and ingress-nginx auth-url ([#​14091](https://redirect.github.com/traefik/traefik/pull/14091) [@​juliens](https://redirect.github.com/juliens)) - **\[authentication, service]** Support NTLM and Kerberos authentication in ForwardAuth ([#​14084](https://redirect.github.com/traefik/traefik/pull/14084) [@​juliens](https://redirect.github.com/juliens)) - **\[k8s/gatewayapi]** Fix Gateway API conformance suite setup with the containerd image store ([#​14089](https://redirect.github.com/traefik/traefik/pull/14089) [@​Neffi42](https://redirect.github.com/Neffi42)) **Documentation:** - **\[k8s/ingress-nginx]** Document that rewrite is supported in configuration-snippet ([#​14070](https://redirect.github.com/traefik/traefik/pull/14070) [@​bingtang9](https://redirect.github.com/bingtang9)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
83a780b2ac |
build(deps): update dependency i18next-http-backend to v4.0.6 (#13582)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [i18next-http-backend](https://redirect.github.com/i18next/i18next-http-backend) | [`4.0.4` → `4.0.6`](https://renovatebot.com/diffs/npm/i18next-http-backend/4.0.4/4.0.6) |  |  | --- ### Release Notes <details> <summary>i18next/i18next-http-backend (i18next-http-backend)</summary> ### [`v4.0.6`](https://redirect.github.com/i18next/i18next-http-backend/blob/HEAD/CHANGELOG.md#406) [Compare Source](https://redirect.github.com/i18next/i18next-http-backend/compare/v4.0.5...v4.0.6) - fix: when `XMLHttpRequest` throws synchronously (`open()` with an invalid URL, `setRequestHeader()` with an invalid `customHeaders` name, `send()`), the error is now passed to the callback. It was only logged with `console.log`, so the load never finished and i18next `init()` did not resolve. Now i18next takes its usual failed-load path. The XHR path is used when no `fetch` is available and for `file:` URLs. An XHR that completes inside `send()` (some polyfills and fake XHRs) is not called back a second time when its callback throws. Thanks [@​lprnmns](https://redirect.github.com/lprnmns) ([#​203](https://redirect.github.com/i18next/i18next-http-backend/pull/203)) ### [`v4.0.5`](https://redirect.github.com/i18next/i18next-http-backend/blob/HEAD/CHANGELOG.md#405) [Compare Source](https://redirect.github.com/i18next/i18next-http-backend/compare/v4.0.4...v4.0.5) - fix: a `loadPath` function whose promise rejects now reports the error to i18next. The read callback was never called, so `init()` / `loadNamespaces()` never settled (a react-i18next Suspense fallback stayed up for good) and in Node the unhandled rejection ended the process. i18next now takes its usual failed-load path (`failedLoading` event, "loading namespace ... failed" log) and `init()` resolves. The error is passed on without retry, like the other non-network errors. Thanks [@​nk-batman21](https://redirect.github.com/nk-batman21) ([#​201](https://redirect.github.com/i18next/i18next-http-backend/pull/201)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
38f84af5d1 |
build(deps): update pnpm/get.pnpm.io digest to 0feb888 (#13574)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | pnpm/get.pnpm.io | digest | `b7cf47f` → `0feb888` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
6b19acf420 |
build(deps): update authelia/base:latest docker digest to e372a26 (#13573)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | authelia/base | final | digest | `c261389` → `e372a26` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
Amir Zarrinkafsh
|
62d22296b5 |
ci(renovate): remove pr hourly limit and tidy config (#13590)
`config:recommended` no longer extends `:prHourlyLimit2`, so ignoring that preset stopped doing anything once the 2-per-hour limit became Renovate's built-in `prHourlyLimit` default. Extend `:prHourlyLimitNone` instead so the limit is actually lifted. Drop `branchPrefixOld` since no `renovate-` branches remain to migrate, make the traefik `matchPackageNames` an array as the schema expects, and rename `.renovaterc` to `.renovaterc.json` so editors apply JSON syntax highlighting. Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
Authelia[bot]andautheliabot
|
28f43b63f4 |
build(deps): update dependency body-parser to v2.4.0 [security] (#13572)
<!-- authelia-security-overrides --> ## 🛡️ Security Vulnerability Override Pins `body-parser` to `2.4.0` via pnpm `overrides` in **2** workspace(s), then regenerates each affected lockfile. ### Vulnerabilities Addressed | Severity | Package | Pinned | Advisory | Workspace | Manifest | |----------|---------|--------|----------|-----------|----------| | 🟠 high | `body-parser` | `2.4.0` | [GHSA-27r3-jxmh-p828](https://github.com/authelia/authelia/security/dependabot/280) | `internal/suites/example/compose/duo-api` | `internal/suites/example/compose/duo-api/pnpm-lock.yaml` | | 🟠 high | `body-parser` | `2.4.0` | [GHSA-27r3-jxmh-p828](https://github.com/authelia/authelia/security/dependabot/281) | `web` | `web/pnpm-lock.yaml` | ### Workspaces - `internal/suites/example/compose/duo-api/pnpm-workspace.yaml` - `web/pnpm-workspace.yaml` ### Changed Files - `internal/suites/example/compose/duo-api/pnpm-lock.yaml` - `internal/suites/example/compose/duo-api/pnpm-workspace.yaml` - `web/pnpm-lock.yaml` - `web/pnpm-workspace.yaml` ### Notes This branch is rebuilt from `master` on every reconciliation, so it is always exactly `master` plus this one override commit. Comment `/rebase` to force a rebuild. If a new workspace later becomes affected by the same advisory, this PR is updated in place rather than a second one being opened. ### Review Checklist 1. Verify the override in each `pnpm-workspace.yaml`. 2. Confirm each `pnpm-lock.yaml` resolves the patched version. 3. Run CI for regressions. Co-authored-by: autheliabot <autheliabot@users.noreply.github.com> |
||
|
Authelia[bot]andautheliabot
|
a54044c919 |
build(deps): update dependency zod to v4.6.7 [security] (#13588)
<!-- authelia-security-overrides --> ## 🛡️ Security Vulnerability Override Pins `zod` to `4.6.7` via pnpm `overrides` in **2** workspace(s), then regenerates each affected lockfile. ### Vulnerabilities Addressed | Severity | Package | Pinned | Advisory | Workspace | Manifest | |----------|---------|--------|----------|-----------|----------| | 🟠 high | `zod` | `4.6.7` | [GHSA-mrhx-c7xc-m3w5](https://github.com/authelia/authelia/security/dependabot/278) | `internal/templates/src` | `internal/templates/src/pnpm-lock.yaml` | | 🟠 high | `zod` | `4.6.7` | [GHSA-mrhx-c7xc-m3w5](https://github.com/authelia/authelia/security/dependabot/279) | `web` | `web/pnpm-lock.yaml` | ### Workspaces - `internal/templates/src/pnpm-workspace.yaml` - `web/pnpm-workspace.yaml` ### Changed Files - `internal/templates/src/pnpm-lock.yaml` - `internal/templates/src/pnpm-workspace.yaml` - `web/pnpm-lock.yaml` - `web/pnpm-workspace.yaml` ### Notes This branch is rebuilt from `master` on every reconciliation, so it is always exactly `master` plus this one override commit. Comment `/rebase` to force a rebuild. If a new workspace later becomes affected by the same advisory, this PR is updated in place rather than a second one being opened. ### Review Checklist 1. Verify the override in each `pnpm-workspace.yaml`. 2. Confirm each `pnpm-lock.yaml` resolves the patched version. 3. Run CI for regressions. Co-authored-by: autheliabot <autheliabot@users.noreply.github.com> |
||
|
renovate[bot]
|
a72665715b |
build(deps): update traefik docker tag to v2.11.60 (#13571)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://hub.docker.com/_/traefik) ([source](https://redirect.github.com/traefik/traefik)) | patch | `v2.11.59` → `v2.11.60` | --- ### Release Notes <details> <summary>traefik/traefik (traefik)</summary> ### [`v2.11.60`](https://redirect.github.com/traefik/traefik/blob/HEAD/CHANGELOG.md#v21160-2026-10-20) [Compare Source](https://redirect.github.com/traefik/traefik/compare/v2.11.59...v2.11.60) [All Commits](https://redirect.github.com/traefik/traefik/compare/v2.11.59...v2.11.60) **Bug fixes:** - **\[authentication, service]** Support NTLM and Kerberos authentication in ForwardAuth ([#​14084](https://redirect.github.com/traefik/traefik/pull/14084) [@​juliens](https://redirect.github.com/juliens)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
96c6de37e6 |
build(deps): update step-security/harden-runner action to v2.22.2 (#13570)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [step-security/harden-runner](https://redirect.github.com/step-security/harden-runner) | action | patch | `v2.22.1` → `v2.22.2` | --- ### Release Notes <details> <summary>step-security/harden-runner</summary> ### [`v2.22.2`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.22.2) [Compare Source](https://redirect.github.com/step-security/harden-runner/compare/v2.22.1...v2.22.2) ##### What's Changed - Fixed inbound (ingress) network traffic being incorrectly classified as outbound (egress) traffic on macOS - Fixed implicit endpoints intended for self-hosted runners being applied to custom VM environments on Linux (enterprise tier) - Improved network and DNS tracing, enforcement logic, and process information correlation on Linux (enterprise tier) **Full Changelog**: <https://github.com/step-security/harden-runner/compare/v2.22.1...v2.22.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdpdGh1Yl9hY3Rpb25zIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
362a9ae085 |
build(deps): update github/codeql-action action to v4.39.1 (#13568)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.39.0` → `v4.39.1` | --- ### Release Notes <details> <summary>github/codeql-action</summary> ### [`v4.39.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.39.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.39.0...v4.39.1) - Update default CodeQL bundle version to [2.27.3](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.3). [#​4256](https://redirect.github.com/github/codeql-action/pull/4256) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdpdGh1Yl9hY3Rpb25zIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
9143abc0e0 |
build(deps): update nginx docker tag to v1.31.8 (#13569)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [nginx](https://hub.docker.com/_/nginx) ([source](https://redirect.github.com/nginx/docker-nginx)) | patch | `1.31.7-alpine` → `1.31.8-alpine` | --- ### Release Notes <details> <summary>nginx/docker-nginx (nginx)</summary> ### [`v1.31.8`](https://redirect.github.com/nginx/docker-nginx/compare/1.31.7...1.31.8) [Compare Source](https://redirect.github.com/nginx/docker-nginx/compare/1.31.7...1.31.8) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
f1b48ed0ca |
build(deps): update envoyproxy/envoy docker tag to v1.40.1 (#13567)
This PR contains the following updates: | Package | Update | Change | |---|---|---| | envoyproxy/envoy | patch | `v1.40.0` → `v1.40.1` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
07d97f74c3 |
build(deps): update dependency vite to v8.3.5 (#13566)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`8.3.4` → `8.3.5`](https://renovatebot.com/diffs/npm/vite/8.3.4/8.3.5) |  |  | --- ### Release Notes <details> <summary>vitejs/vite (vite)</summary> ### [`v8.3.5`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-835-2026-10-21-small) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v8.3.4...v8.3.5) ##### Bug Fixes - **build:** handle missing chunk import maps ([#​23777](https://redirect.github.com/vitejs/vite/issues/23777)) ([8d7623d](https://redirect.github.com/vitejs/vite/commit/8d7623d9b5647714a5b20cbd787a5401ca846229)) - **build:** include preload dependencies to chunk import map hashing ([#​23793](https://redirect.github.com/vitejs/vite/issues/23793)) ([4d16e7c](https://redirect.github.com/vitejs/vite/commit/4d16e7c14d5e1c361f148238b1e81131238ab8e9)) - **bundled-dev:** apply `server.origin` to asset URLs ([#​23683](https://redirect.github.com/vitejs/vite/issues/23683)) ([52ba877](https://redirect.github.com/vitejs/vite/commit/52ba877693c8633458d163117504a8259beb3cf5)) - **bundled-dev:** declare utf-8 charset in fallback page ([#​23846](https://redirect.github.com/vitejs/vite/issues/23846)) ([197daf6](https://redirect.github.com/vitejs/vite/commit/197daf6c4c7bfdaa005bebcc41dd2ff22fa3a5b6)) - **bundled-dev:** ignore build.chunkImportMap ([#​23685](https://redirect.github.com/vitejs/vite/issues/23685)) ([cfe917d](https://redirect.github.com/vitejs/vite/commit/cfe917d67d279a13f20ae9449e3befa736b64b07)) - **bundled-dev:** include user `import.meta.env.*` defines in the `import.meta.env` object ([#​23713](https://redirect.github.com/vitejs/vite/issues/23713)) ([6019aa7](https://redirect.github.com/vitejs/vite/commit/6019aa79975465516da7c6f532d568422b019a25)) - **bundled-dev:** map forwarded error stacks through the bundle source maps ([#​23741](https://redirect.github.com/vitejs/vite/issues/23741)) ([11fe1e4](https://redirect.github.com/vitejs/vite/commit/11fe1e46ff0c136cb90fbe263ba03993bc94df18)) - **bundled-dev:** normalize served output files ([#​23684](https://redirect.github.com/vitejs/vite/issues/23684)) ([df4e02c](https://redirect.github.com/vitejs/vite/commit/df4e02cc8317a62f21edefc79a9690571ffed1f3)) - **bundled-dev:** stop hmr propagation at modules that are no longer imported ([#​23839](https://redirect.github.com/vitejs/vite/issues/23839)) ([7471e8c](https://redirect.github.com/vitejs/vite/commit/7471e8c3b32d3d55243590bb7713e602c9fb0212)) - **css:** don't fail on a literal `%` in `url()` ([#​23676](https://redirect.github.com/vitejs/vite/issues/23676)) ([50b382d](https://redirect.github.com/vitejs/vite/commit/50b382d31835b8b4bc8b6964738ac03146e44261)) - **deps:** update all non-major dependencies ([#​23731](https://redirect.github.com/vitejs/vite/issues/23731)) ([cf80aa5](https://redirect.github.com/vitejs/vite/commit/cf80aa552cac02eac0293330ccd5fde3c7ae8d29)) - **deps:** update all non-major dependencies ([#​23826](https://redirect.github.com/vitejs/vite/issues/23826)) ([77d8373](https://redirect.github.com/vitejs/vite/commit/77d8373510da1b26ce057eb2248e570b7f63fde9)) - **deps:** update rolldown-related dependencies ([#​23733](https://redirect.github.com/vitejs/vite/issues/23733)) ([43f0d05](https://redirect.github.com/vitejs/vite/commit/43f0d052e514c3ad2dea2f7dc44b0720e1f62f48)) - **deps:** update rolldown-related dependencies ([#​23827](https://redirect.github.com/vitejs/vite/issues/23827)) ([c2e0418](https://redirect.github.com/vitejs/vite/commit/c2e04187e49aab7ab809989f0537b4906653acab)) - **optimizer:** fall back to yarn.lock for lockfile hash ([#​23667](https://redirect.github.com/vitejs/vite/issues/23667)) ([f206096](https://redirect.github.com/vitejs/vite/commit/f20609630faa93026924275115d1426fdc08629e)) - **optimizer:** scan `oxc.jsxInject` imports ([#​23758](https://redirect.github.com/vitejs/vite/issues/23758)) ([38f3cb4](https://redirect.github.com/vitejs/vite/commit/38f3cb45b1490ed24775547ceafa677b91a57714)) - **optimizer:** skip patches dir check for yarn.lock fallback ([#​23725](https://redirect.github.com/vitejs/vite/issues/23725)) ([8e890e1](https://redirect.github.com/vitejs/vite/commit/8e890e1ce438bfbc07ea4931ce332e40589940fa)) - **optimizer:** skip patches dir hash for nub lockfile ([#​23761](https://redirect.github.com/vitejs/vite/issues/23761)) ([a7d5696](https://redirect.github.com/vitejs/vite/commit/a7d56967ef0050a09c0507e63a18164bc7a0d486)) - **resolve:** support subpath imports with multiple `#` ([#​23631](https://redirect.github.com/vitejs/vite/issues/23631)) ([0d86b34](https://redirect.github.com/vitejs/vite/commit/0d86b3485fbbd0fcb9a1f70a14adedfcb7a1fff1)) - **resolve:** update resolve.exports to 2.0.4 ([#​23739](https://redirect.github.com/vitejs/vite/issues/23739)) ([4ea708a](https://redirect.github.com/vitejs/vite/commit/4ea708a3ae9a324c6aabca59fade4082bf72f3e5)) - **server:** handle socket errors on upgrade requests not taken by the HMR server ([#​23728](https://redirect.github.com/vitejs/vite/issues/23728)) ([c2c9ef4](https://redirect.github.com/vitejs/vite/commit/c2c9ef4dcd05b3e4d88844ea3a13dc23819ca2a5)) - **server:** only strip base when path matches a full segment ([#​23641](https://redirect.github.com/vitejs/vite/issues/23641)) ([3dfde87](https://redirect.github.com/vitejs/vite/commit/3dfde87b90a9f80b125d710e3e5d4fc795662db6)) ##### Performance Improvements - **ssr:** extract inline source maps without a regexp ([#​23775](https://redirect.github.com/vitejs/vite/issues/23775)) ([6a02780](https://redirect.github.com/vitejs/vite/commit/6a0278055d8501bbaf65b8d34ec094722b4e877a)) ##### Miscellaneous Chores - migrate to Oxlint ([#​23746](https://redirect.github.com/vitejs/vite/issues/23746)) ([5b73935](https://redirect.github.com/vitejs/vite/commit/5b73935881424ed5919571036dd89d3868590f92)) ##### Code Refactoring - **deps:** replace `@vercel/detect-agent` with `std-env` ([#​23744](https://redirect.github.com/vitejs/vite/issues/23744)) ([ce4293f](https://redirect.github.com/vitejs/vite/commit/ce4293f15cc5cd221c5ed60f5cd64e82ca5cbaf5)) - **dev:** consolidate moduleURL to file path utilities ([#​23828](https://redirect.github.com/vitejs/vite/issues/23828)) ([df7b40e](https://redirect.github.com/vitejs/vite/commit/df7b40ee9d691e9f4e2413244f6665ef5482dce3)) - **dev:** separate import resolution from URL conversion ([#​23791](https://redirect.github.com/vitejs/vite/issues/23791)) ([6116689](https://redirect.github.com/vitejs/vite/commit/611668983d4b717f5e5e66cf9f7125bd94f92bf7)) - **dev:** share ModuleURL and BrowserURL conversions ([#​23790](https://redirect.github.com/vitejs/vite/issues/23790)) ([446954c](https://redirect.github.com/vitejs/vite/commit/446954c69c806795c83fe2f97c28ae8f9ef83731)) - **dev:** use ModuleURLs throughout HTML transforms ([#​23815](https://redirect.github.com/vitejs/vite/issues/23815)) ([a162990](https://redirect.github.com/vitejs/vite/commit/a16299092c0f0f3f90e05d4bb5f0168b293c2b52)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
ef68a7c54c |
build(deps): update dependency react-i18next to v17.1.3 (#13565)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [react-i18next](https://redirect.github.com/i18next/react-i18next) | [`17.1.0` → `17.1.3`](https://renovatebot.com/diffs/npm/react-i18next/17.1.0/17.1.3) |  |  | --- ### Release Notes <details> <summary>i18next/react-i18next (react-i18next)</summary> ### [`v17.1.3`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1713) [Compare Source](https://redirect.github.com/i18next/react-i18next/compare/v17.1.2...v17.1.3) - fix(IcuTrans): numeric HTML entities above U+FFFF, like emoji, now decode to the right character. `"Hello 👋 <0>friend</0> &#​127881;"` rendered U+F44B and U+F389, private-use glyphs that usually show as a box, instead of 👋 and 🎉: the decoder used `String.fromCharCode`, which keeps only the low 16 bits of the code point. This shows up with translations that a TMS or CMS exports HTML-encoded. Entities above U+10FFFF, which are no valid code points, now stay as written instead of becoming U+0000. Entities below U+10000, including surrogate pairs written as two entities, decode as before. Thanks [@​nk-batman21](https://redirect.github.com/nk-batman21) ([#​1940](https://redirect.github.com/i18next/react-i18next/pull/1940)). ### [`v17.1.2`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1712) [Compare Source](https://redirect.github.com/i18next/react-i18next/compare/v17.1.1...v17.1.2) - fix(Trans): when the only child is a string, a tag whose index the children don't have now renders its own text. `<Trans i18nKey="welcome">Welcome</Trans>` with `"Welcome <1>friend</1>"` rendered `Welcome e`, and `defaults="Hi <1>there</1>"` with the child `Hi` rendered `Hi i`. The fallback for a single object of components (`{{ 1: <strong /> }}`) looked the tag up on the string and rendered one of its characters. It now applies only when that child is an object, so `{{ 1: <strong /> }}` renders as before, and the tag falls back to its inner text, as it already did with several children or with a number or an element as the only child. This also stops a single-entry array child holding `null` (`{[null]}`, e.g. from a `.map` that returned `null`) from throwing `Cannot read properties of null`. Thanks [@​Cayan](https://redirect.github.com/Cayan) ([#​1939](https://redirect.github.com/i18next/react-i18next/pull/1939)). ### [`v17.1.1`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#1711) [Compare Source](https://redirect.github.com/i18next/react-i18next/compare/v17.1.0...v17.1.1) - fix(Trans): with `components` as an object with index keys, the component for key `0` is now rendered. `components={{ 0: <a href={path} /> }}` with `"You're eligible. <0>Get started here.</0>"` rendered the text without the link, a self-closing `<0/>` rendered nothing, and in `<0>a <1>b</1></0>` both elements were lost, while keys `1` and up and the array form worked. The object was passed on as the indexed children, so `<0>` resolved to the object itself. It is now looked up by key, like a named components map. This also fixes an array `components` next to `react.transDefaultProps.components`, which the merge turns into such an object (`{ Bold, 0, 1 }`) and so lost its first entry, and a self-closing named tag in a mixed object (`{ 0: <a />, Bold: <b /> }` with `<Bold/>`), which rendered as the text `<Bold />`. Arrays, named maps and index objects starting at `1` render as before. Thanks [@​nk-batman21](https://redirect.github.com/nk-batman21) ([#​1938](https://redirect.github.com/i18next/react-i18next/pull/1938)). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
7548da8734 |
build(deps): update node.js to 40cd011 (#13560)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://hub.docker.com/_/node) ([source](https://redirect.github.com/nodejs/node)) | final | digest | `ae8e1c1` → `40cd011` | | [node](https://hub.docker.com/_/node) ([source](https://redirect.github.com/nodejs/node)) | stage | digest | `ae8e1c1` → `40cd011` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
42bfd1e1d5 |
build(deps): update dependency i18next to v26.5.6 (#13564)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [i18next](https://www.i18next.com) ([source](https://redirect.github.com/i18next/i18next)) | [`26.5.3` → `26.5.6`](https://renovatebot.com/diffs/npm/i18next/26.5.3/26.5.6) |  |  | --- ### Release Notes <details> <summary>i18next/i18next (i18next)</summary> ### [`v26.5.6`](https://redirect.github.com/i18next/i18next/blob/HEAD/CHANGELOG.md#2656) [Compare Source](https://redirect.github.com/i18next/i18next/compare/v26.5.5...v26.5.6) - fix: `cloneInstance({ forkResourceStore: true })` now copies the resources at every level. It copied them only down to the namespace objects, so nested keys and arrays stayed shared with the original instance: `addResource()` with a nested key (`fork.addResource('en', 'translation', 'greeting.hello', 'Hi')`) or a deep `addResourceBundle()` on the fork also changed the original instance and every other fork. Flat keys were already isolated. Forking a large store takes a bit longer: with 300k keys in nested groups, about 11 ms instead of 3 ms per fork. Clones without `forkResourceStore` still share the store as before. Thanks [@​nk-batman21](https://redirect.github.com/nk-batman21) ([#​2456](https://redirect.github.com/i18next/i18next/pull/2456), follow-up to [#​2270](https://redirect.github.com/i18next/i18next/issues/2270)). ### [`v26.5.5`](https://redirect.github.com/i18next/i18next/blob/HEAD/CHANGELOG.md#2655) [Compare Source](https://redirect.github.com/i18next/i18next/compare/v26.5.4...v26.5.5) - fix: with the default `skipOnVariables: true`, a `{{placeholder}}` inside a value inserted with an unescaped `{{- var}}` now stays literal, as it already did for `{{var}}`. The escape pass ran after the unescaped values were written and scanned them again, so `t('{{- a}}', { a: '{{b}}', b: 'c' })` returned `'c'` instead of `'{{b}}'`. With pre-built HTML that carries user text, like `t('You may contact {{name}} at {{- emailHTML}}.', { name, emailHTML })`, that text could pull another variable of the same `t()` call into the output. Results with `skipOnVariables: false`, and values without placeholders, are unchanged. Compatibility note: a `{{- var}}` value whose placeholders were meant to be filled from the same `t()` call now keeps them literally; `skipOnVariables: false` restores the old behavior. Thanks [@​nk-batman21](https://redirect.github.com/nk-batman21) ([#​2455](https://redirect.github.com/i18next/i18next/pull/2455), reported in [#​1595](https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814611747)). ### [`v26.5.4`](https://redirect.github.com/i18next/i18next/blob/HEAD/CHANGELOG.md#2654) [Compare Source](https://redirect.github.com/i18next/i18next/compare/v26.5.3...v26.5.4) - fix: with the default `skipOnVariables: true`, a `{{placeholder}}` inside an interpolated value now stays literal also when the same placeholder appears later in the translation. Each value was written with `String.replace`, which replaces the first copy of the placeholder text, and that could be the copy inside an earlier value: `t('{{name}} has {{count}} items', { name: '{{count}}', count: 5 })` returned `'5 has {{count}} items'` instead of `'{{count}} has 5 items'`. The value is now written at the position of the matched placeholder. Results with `skipOnVariables: false` are unchanged. Thanks [@​nk-batman21](https://redirect.github.com/nk-batman21) ([#​2454](https://redirect.github.com/i18next/i18next/pull/2454), reported in [#​1595](https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814609503)). - fix: with `useRawValueToEscape: true`, a non-string value in an unescaped `{{- var}}` placeholder or with `escapeValue: false` no longer throws `val.replace is not a function`; it is converted to a string like any other value. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
c608d22a75 |
build(deps): update authelia/base:latest docker digest to c261389 (#13562)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | authelia/base | final | digest | `57f8254` → `c261389` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
d00d5b0f67 |
build(deps): update dependency baseline-browser-mapping to v2.11.31 (#13563)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [baseline-browser-mapping](https://redirect.github.com/web-platform-dx/baseline-browser-mapping) | [`2.11.30` → `2.11.31`](https://renovatebot.com/diffs/npm/baseline-browser-mapping/2.11.30/2.11.31) |  |  | --- ### Release Notes <details> <summary>web-platform-dx/baseline-browser-mapping (baseline-browser-mapping)</summary> ### [`v2.11.31`](https://redirect.github.com/web-platform-dx/baseline-browser-mapping/compare/v2.11.30...v2.11.31) [Compare Source](https://redirect.github.com/web-platform-dx/baseline-browser-mapping/compare/v2.11.30...v2.11.31) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
ffa215442f |
build(deps): update dependency @eslint-react/eslint-plugin to v5.28.6 (#13561)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@eslint-react/eslint-plugin](https://redirect.github.com/Rel1cx/eslint-react) ([source](https://redirect.github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin)) | [`5.28.3` → `5.28.6`](https://renovatebot.com/diffs/npm/@eslint-react%2feslint-plugin/5.28.3/5.28.6) |  |  | --- ### Release Notes <details> <summary>Rel1cx/eslint-react (@​eslint-react/eslint-plugin)</summary> ### [`v5.28.6`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5286-2026-10-22) [Compare Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.28.5...v5.28.6) ##### 🐞 Fixes - `react-x/set-state-in-effect`: the ref-derived parameter exemption now also applies to helpers wrapped in `useCallback` (ex: `measure(ref.current)` where `measure = useCallback((el) => { setWidth(el.offsetWidth); }, [])`). ([#​2065](https://redirect.github.com/Rel1cx/eslint-react/issues/2065)) Thanks to [@​amhunt](https://redirect.github.com/amhunt)! - `react-x/set-state-in-effect`: a helper call behind a ref-derived guard (`if`, ternary, short-circuit, or early return) now exempts the `setState` calls it reaches, as a `setState` written in its place would be (ex: `if (!anchorRef.current) return; commitPosition(0, true);`); call sites are judged individually. ([#​2065](https://redirect.github.com/Rel1cx/eslint-react/issues/2065)) Thanks to [@​amhunt](https://redirect.github.com/amhunt)! ##### New Contributors - **Andrew Hunt** ([@​amhunt](https://redirect.github.com/amhunt)) made their first contribution in [#​2065](https://redirect.github.com/Rel1cx/eslint-react/issues/2065). **Full Changelog**: <https://github.com/Rel1cx/eslint-react/compare/v5.28.5...v5.28.6> ### [`v5.28.5`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5285-2026-10-22) [Compare Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.28.4...v5.28.5) ##### ✨ New - `react-dom/no-unsafe-target-blank`: the suggested fix now adds `rel="noreferrer"` instead of `rel="noreferrer noopener"`, since `noreferrer` already implies `noopener` per the HTML spec; values combining both tokens remain valid. ([#​2068](https://redirect.github.com/Rel1cx/eslint-react/issues/2068)) ##### 🏗️ Internal - Removed redundant transitive dependency overrides. ([#​2064](https://redirect.github.com/Rel1cx/eslint-react/issues/2064)) - Bumped `vite` to `8.3.5` and `lucide-react` to `1.61.0`. **Full Changelog**: <https://github.com/Rel1cx/eslint-react/compare/v5.28.4...v5.28.5> ### [`v5.28.4`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5284-2026-10-21) [Compare Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.28.3...v5.28.4) ##### 🐞 Fixes - Reverted the component-scope-bounded identifier resolution introduced in v5.28.3, including the per-component single-report attribution; class declarations in a component body remain recognized as per-render constructions. ([#​2062](https://redirect.github.com/Rel1cx/eslint-react/issues/2062)) Affected rules: - `react-x/no-unstable-context-value` - `react-x/no-unstable-default-props` ##### 📝 Documentation - Updated the AST Explorer links across the website docs and recipes. ##### 🏗️ Internal - `@eslint-react/var`: removed the `boundary` option from `resolve` and `resolveObjectType`, and the `ClassDeclaration` resolution in `resolveObjectType`, following the revert. ([#​2062](https://redirect.github.com/Rel1cx/eslint-react/issues/2062)) - Renamed the `Jsx`-prefixed `@eslint-react/core` exports to all-caps `JSX` (ex: `JsxConfig` → `JSXConfig`, `isJsxLike` → `isJSXLike`). ([#​2061](https://redirect.github.com/Rel1cx/eslint-react/issues/2061)) - Bumped `fumadocs-mdx` to `15.4.9`. **Full Changelog**: <https://github.com/Rel1cx/eslint-react/compare/v5.28.3...v5.28.4> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
674bfff3ed |
build(deps): update haproxy:3.4.7-alpine docker digest to 3c8c1df (#13559)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [haproxy](https://hub.docker.com/_/haproxy) ([source](https://redirect.github.com/docker-library/haproxy)) | final | digest | `09ba5c0` → `3c8c1df` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzYuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE3Ni4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
05d25b9f38 |
build(deps): update alpine:3.24.3 docker digest to be26560 (#13558)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [alpine](https://hub.docker.com/_/alpine) ([source](https://redirect.github.com/alpinelinux/docker-alpine)) | final | digest | `b341357` → `be26560` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzYuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE3Ni4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
c2d71bbc31 |
build(deps): update golang:1.27.3-alpine docker digest to b8c9b82 (#13557)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [golang](https://hub.docker.com/_/golang) ([source](https://redirect.github.com/docker-library/golang)) | stage | digest | `d530cf6` → `b8c9b82` | | [golang](https://hub.docker.com/_/golang) ([source](https://redirect.github.com/docker-library/golang)) | final | digest | `d530cf6` → `b8c9b82` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzYuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE3Ni4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
9866b19a11 |
build(deps): update caddy:2.11.7-builder docker digest to c2fc374 (#13556)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [caddy](https://hub.docker.com/_/caddy) ([source](https://redirect.github.com/caddyserver/caddy-docker)) | stage | digest | `671d2a6` → `c2fc374` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzYuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE3Ni4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
0c796090f7 |
build(deps): update authelia/base:latest docker digest to 57f8254 (#13553)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | authelia/base | final | digest | `fffb998` → `57f8254` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzYuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE3Ni4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
10463bc35a |
build(deps): update caddy:2.11.7 docker digest to 504a44d (#13554)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [caddy](https://hub.docker.com/_/caddy) ([source](https://redirect.github.com/caddyserver/caddy-docker)) | final | digest | `3095ad2` → `504a44d` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzYuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjE3Ni4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
73321c7b71 |
build(deps): update haproxy:3.4.7-alpine docker digest to 09ba5c0 (#13552)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [haproxy](https://hub.docker.com/_/haproxy) ([source](https://redirect.github.com/docker-library/haproxy)) | final | digest | `251da69` → `09ba5c0` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
81bb61eb36 |
build(deps): update golang:1.27.3-alpine docker digest to d530cf6 (#13551)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [golang](https://hub.docker.com/_/golang) ([source](https://redirect.github.com/docker-library/golang)) | stage | digest | `f2c872b` → `d530cf6` | | [golang](https://hub.docker.com/_/golang) ([source](https://redirect.github.com/docker-library/golang)) | final | digest | `f2c872b` → `d530cf6` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
88984929fb |
build(deps): update alpine:3.24.3 docker digest to b341357 (#13549)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [alpine](https://hub.docker.com/_/alpine) ([source](https://redirect.github.com/alpinelinux/docker-alpine)) | final | digest | `1b7232c` → `b341357` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
38fae9f3d7 |
build(deps): update caddy:2.11.7-builder docker digest to 671d2a6 (#13550)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [caddy](https://hub.docker.com/_/caddy) ([source](https://redirect.github.com/caddyserver/caddy-docker)) | stage | digest | `8910fe6` → `671d2a6` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
69e13d1e6b |
build(deps): update dependency @eslint-react/eslint-plugin to v5.28.3 (#13545)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@eslint-react/eslint-plugin](https://redirect.github.com/Rel1cx/eslint-react) ([source](https://redirect.github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin)) | [`5.28.2` → `5.28.3`](https://renovatebot.com/diffs/npm/@eslint-react%2feslint-plugin/5.28.2/5.28.3) |  |  | --- ### Release Notes <details> <summary>Rel1cx/eslint-react (@​eslint-react/eslint-plugin)</summary> ### [`v5.28.3`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5283-2026-10-20) [Compare Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.28.2...v5.28.3) ##### ✨ New - Identifier resolution is now bounded by the enclosing component scope, so render-scoped values referenced from nested callbacks (ex: `items.map((item) => <Context.Provider value={foo}>)`) are now detected, values declared outside the component (ex: module-level constants) are treated as stable, and nested components report each value only once, attributed to the innermost component. ([#​2060](https://redirect.github.com/Rel1cx/eslint-react/issues/2060)) Affected rules: - `react-x/no-unstable-context-value` - `react-x/no-unstable-default-props` - Class declarations (ex: `class Foo {}` in a component body) are now recognized as per-render constructions, so using one as a context value or default prop is now reported. ([#​2060](https://redirect.github.com/Rel1cx/eslint-react/issues/2060)) Affected rules: - `react-x/no-unstable-context-value` - `react-x/no-unstable-default-props` ##### 🏗️ Internal - `@eslint-react/var`: `resolve` and `resolveObjectType` now accept a `boundary` option that bounds scope-chain traversal to an enclosing component or hook; `resolveObjectType` also resolves `ClassDeclaration` nodes. ([#​2060](https://redirect.github.com/Rel1cx/eslint-react/issues/2060)) - Bumped `typescript-eslint` to `8.72.0`, `fumadocs-core` and `fumadocs-ui` to `16.17.7`, `fumadocs-mdx` to `15.4.8`, `lucide-react` to `1.60.0`, and `typedoc-plugin-markdown` to `4.14.1`. **Full Changelog**: <https://github.com/Rel1cx/eslint-react/compare/v5.28.2...v5.28.3> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
13d02d15ad |
build(deps): update alpine docker tag to v3.24.3 (#13544)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [alpine](https://hub.docker.com/_/alpine) ([source](https://redirect.github.com/alpinelinux/docker-alpine)) | final | patch | `3.24.2` → `3.24.3` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
024af805f2 |
build(deps): update authelia/base:latest docker digest to fffb998 (#13542)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | authelia/base | final | digest | `8b758c7` → `fffb998` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
31d74d4ca9 |
build(deps): update golang docker tag to v1.27.3 (#13541)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [golang](https://hub.docker.com/_/golang) ([source](https://redirect.github.com/docker-library/golang)) | stage | patch | `1.27.2-alpine` → `1.27.3-alpine` | | [golang](https://hub.docker.com/_/golang) ([source](https://redirect.github.com/docker-library/golang)) | final | patch | `1.27.2-alpine` → `1.27.3-alpine` | | [golang](https://hub.docker.com/_/golang) ([source](https://redirect.github.com/docker-library/golang)) | stage | patch | `1.27.2-bookworm` → `1.27.3-bookworm` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
cf9e2ec13c |
build(deps): update go toolchain directive to v1.27.3 (#13540)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [go](https://go.dev/) ([source](https://redirect.github.com/golang/go)) | toolchain | patch | `1.27.2` → `1.27.3` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]
|
c0476cab18 |
build(deps): update dependency happy-dom to v21.0.4 (#13548)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [happy-dom](https://redirect.github.com/capricorn86/happy-dom) | [`21.0.3` → `21.0.4`](https://renovatebot.com/diffs/npm/happy-dom/21.0.3/21.0.4) |  |  | --- ### Release Notes <details> <summary>capricorn86/happy-dom (happy-dom)</summary> ### [`v21.0.4`](https://redirect.github.com/capricorn86/happy-dom/releases/tag/v21.0.4) [Compare Source](https://redirect.github.com/capricorn86/happy-dom/compare/v21.0.3...v21.0.4) ##### 👷♂️ Patch fixes - Fixed a code injection vulnerability in the ESM compiler - By **[@​capricorn86](https://redirect.github.com/capricorn86)** - Fixed cross-origin isolation so opaque-origin `data:` iframes cannot access their parent or top window - By **[@​capricorn86](https://redirect.github.com/capricorn86)** </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
53d45502c2 |
build(deps): update caddy:2.11.7 docker digest to 3095ad2 (#13547)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [caddy](https://hub.docker.com/_/caddy) ([source](https://redirect.github.com/caddyserver/caddy-docker)) | final | digest | `685ae3d` → `3095ad2` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
547b405d99 |
build(deps): update node.js to ae8e1c1 (#13543)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [node](https://hub.docker.com/_/node) ([source](https://redirect.github.com/nodejs/node)) | final | digest | `6f08a52` → `ae8e1c1` | | [node](https://hub.docker.com/_/node) ([source](https://redirect.github.com/nodejs/node)) | stage | digest | `6f08a52` → `ae8e1c1` | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
Amir Zarrinkafsh
|
bbb581b024 |
test: check errors received from channels (#13546)
golangci-lint v2.15.0 bumps errcheck from v1.20.0 to v1.30.0, which now reports unchecked errors from channel receive statements (kisielk/errcheck#288). The CI agents picked up the new release, so four existing receives from `chan error` in the LDAP pool and garbage collector tests started failing the lint step on every build. The `select` guards that assert `Close` has not returned yet now bind the received error and include it in the failure message, matching the `case err = <-closed:` form used elsewhere in the same tests. The garbage collector test now asserts `Run` returned no error rather than discarding it. Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]
|
e6cd61d33e |
build(deps): update dependency i18next to v26.5.3 (#13538)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [i18next](https://www.i18next.com) ([source](https://redirect.github.com/i18next/i18next)) | [`26.5.2` → `26.5.3`](https://renovatebot.com/diffs/npm/i18next/26.5.2/26.5.3) |  |  | --- ### Release Notes <details> <summary>i18next/i18next (i18next)</summary> ### [`v26.5.3`](https://redirect.github.com/i18next/i18next/blob/HEAD/CHANGELOG.md#2653) [Compare Source](https://redirect.github.com/i18next/i18next/compare/v26.5.2...v26.5.3) - fix(types): with the selector API, a plural key now requires `count` also when the call passes an explicit `ns`. `t(($) => $.item)` already failed without `count`, but `t(($) => $.item, { ns: 'items' })` compiled, although at runtime it looks up `item` instead of `item_one` / `item_other` and returns the key. It now fails the same way, also with `ordinal: true`, `defaultValue`, an `ns` array, a key prefix and `i18n.t`. Calls with `count`, `context`, `returnObjects: true` and arrays of selectors, as well as return types, are unchanged. Thanks [@​nyarthan](https://redirect.github.com/nyarthan) ([#​2452](https://redirect.github.com/i18next/i18next/pull/2452)). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
bf68f72c5b |
build(deps): update dependency postcss to v8.5.31 (#13539)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [postcss](https://postcss.org/) ([source](https://redirect.github.com/postcss/postcss)) | [`8.5.30` → `8.5.31`](https://renovatebot.com/diffs/npm/postcss/8.5.30/8.5.31) |  |  | --- ### Release Notes <details> <summary>postcss/postcss (postcss)</summary> ### [`v8.5.31`](https://redirect.github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8531) [Compare Source](https://redirect.github.com/postcss/postcss/compare/8.5.30...8.5.31) - Fix better source map on `</style>` escaping (by [@​firefoxic](https://redirect.github.com/firefoxic)). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
3b2b92132d |
build(deps): update dependency fast-uri to v4.2.3 (#13537)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [fast-uri](https://redirect.github.com/fastify/fast-uri) | [`4.2.2` → `4.2.3`](https://renovatebot.com/diffs/npm/fast-uri/4.2.2/4.2.3) |  |  | --- ### Release Notes <details> <summary>fastify/fast-uri (fast-uri)</summary> ### [`v4.2.3`](https://redirect.github.com/fastify/fast-uri/releases/tag/v4.2.3) [Compare Source](https://redirect.github.com/fastify/fast-uri/compare/v4.2.2...v4.2.3) #### Security This security release fixes four URI parsing and normalization vulnerabilities in fast-uri 4.x. Applications that process untrusted URI input should upgrade to v4.2.3. - **Medium — URI scheme spoofing through percent-encoded schemes** ([GHSA-w74x-v6f9-j3xg](https://redirect.github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg), CVE-2026-110306): percent-encoded scheme input is now rejected instead of being decoded into a live scheme. - **Medium — Host confusion during domain-host canonicalization** ([GHSA-wjr9-j795-jxcr](https://redirect.github.com/fastify/fast-uri/security/advisories/GHSA-wjr9-j795-jxcr), CVE-2026-110180): malformed domain hosts containing ambiguous delimiters or stripped control characters are now rejected instead of being silently rewritten. - **Low — Incorrect relative-reference normalization** ([GHSA-xhq7-xmqj-769h](https://redirect.github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h), CVE-2026-110095): dot-segment removal now preserves the resolution semantics of relative references. - **Low — Scheme injection in suffix references** ([GHSA-333x-w4r6-6crp](https://redirect.github.com/fastify/fast-uri/security/advisories/GHSA-333x-w4r6-6crp), CVE-2026-110725): first-segment colons in path-only suffix references are now escaped so the output is not reparsed as a scheme. Upgrade with: ```sh npm install fast-uri@4.2.3 ``` Thanks to [@​zekth](https://redirect.github.com/zekth) for reporting the scheme, host, and relative-reference issues, and to [@​UlisesGascon](https://redirect.github.com/UlisesGascon) for finding the suffix-reference issue and reviewing the remediations. #### What's Changed - ci: allow prerelease bump types in the release workflow by [@​mcollina](https://redirect.github.com/mcollina) in [#​230](https://redirect.github.com/fastify/fast-uri/pull/230) **Full Changelog**: <https://github.com/fastify/fast-uri/compare/v4.2.2...v4.2.3> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
ed776b2976 |
build(deps): update dependency baseline-browser-mapping to v2.11.30 (#13536)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [baseline-browser-mapping](https://redirect.github.com/web-platform-dx/baseline-browser-mapping) | [`2.11.29` → `2.11.30`](https://renovatebot.com/diffs/npm/baseline-browser-mapping/2.11.29/2.11.30) |  |  | --- ### Release Notes <details> <summary>web-platform-dx/baseline-browser-mapping (baseline-browser-mapping)</summary> ### [`v2.11.30`](https://redirect.github.com/web-platform-dx/baseline-browser-mapping/compare/v2.11.29...v2.11.30) [Compare Source](https://redirect.github.com/web-platform-dx/baseline-browser-mapping/compare/v2.11.29...v2.11.30) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
James Elliott
|
00ca2852c5 |
feat(authorization): support iana registered request methods (#13168)
Access control rules accept every method in the IANA HTTP Method Registry, and the authz endpoints reject methods longer than 32 characters. The authentication logs request method column is widened to match, and several usages have been deduplicated. |
||
|
James Elliott
|
37a0538aec |
feat(web): consistent rate limit information (#13510)
This drastically improves the user feedback surrounding rate limited endpoints displaying information about how long the user should wait. This also drastically improves the related tooling including adding a react hook and go funcs to ensure the desired outcome is always achieved. |
||
|
renovate[bot]
|
54cd7cb4c3 |
build(deps): update dependency @eslint-react/eslint-plugin to v5.28.2 (#13535)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@eslint-react/eslint-plugin](https://redirect.github.com/Rel1cx/eslint-react) ([source](https://redirect.github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin)) | [`5.28.1` → `5.28.2`](https://renovatebot.com/diffs/npm/@eslint-react%2feslint-plugin/5.28.1/5.28.2) |  |  | --- ### Release Notes <details> <summary>Rel1cx/eslint-react (@​eslint-react/eslint-plugin)</summary> ### [`v5.28.2`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5282-2026-10-19) [Compare Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.28.1...v5.28.2) ##### 🐞 Fixes - Website: fixed a build failure caused by an unquoted `: ` sequence in the YAML frontmatter description of the `react-x/use-memo` doc; the rule scaffold script now emits a YAML-safe quoted description so scaffolded rules cannot reintroduce the issue. ##### 📝 Documentation - Aligned the `react-debug/jsx` rule doc messages with the actual JSON report format. - Corrected the documented minimum ESLint version to `10.0.0` in the READMEs and getting-started guides. - Documented per-layer isolated testing in the fact-based rule implementation patterns guide. - Generalized the `isAPI`/`isAPICall` docs and updated the custom rule samples to use `is.APICall`. ([#​2059](https://redirect.github.com/Rel1cx/eslint-react/issues/2059)) ##### 🏗️ Internal - Added unit tests for the `react-x` immutability rule modules (`collect`, `effects`, `helpers`, `origins`). ([#​2056](https://redirect.github.com/Rel1cx/eslint-react/issues/2056)) - Bumped the `postcss` override to `8.5.31`. **Full Changelog**: <https://github.com/Rel1cx/eslint-react/compare/v5.28.1...v5.28.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
15dfe2ee8c |
build(deps): update commitlint monorepo to v21.2.4 (#13534)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@commitlint/cli](https://commitlint.js.org/) ([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli)) | [`21.2.3` → `21.2.4`](https://renovatebot.com/diffs/npm/@commitlint%2fcli/21.2.3/21.2.4) |  |  | | [@commitlint/config-conventional](https://commitlint.js.org/) ([source](https://redirect.github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional)) | [`21.2.3` → `21.2.4`](https://renovatebot.com/diffs/npm/@commitlint%2fconfig-conventional/21.2.3/21.2.4) |  |  | --- ### Release Notes <details> <summary>conventional-changelog/commitlint (@​commitlint/cli)</summary> ### [`v21.2.4`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@commitlint/cli/CHANGELOG.md#2124-2026-10-18) [Compare Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v21.2.3...v21.2.4) **Note:** Version bump only for package [@​commitlint/cli](https://redirect.github.com/commitlint/cli) </details> <details> <summary>conventional-changelog/commitlint (@​commitlint/config-conventional)</summary> ### [`v21.2.4`](https://redirect.github.com/conventional-changelog/commitlint/blob/HEAD/@commitlint/config-conventional/CHANGELOG.md#2124-2026-10-18) [Compare Source](https://redirect.github.com/conventional-changelog/commitlint/compare/v21.2.3...v21.2.4) **Note:** Version bump only for package [@​commitlint/config-conventional](https://redirect.github.com/commitlint/config-conventional) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzEuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjE3MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |