mirror of
https://github.com/authelia/authelia.git
synced 2026-10-28 09:34:52 +08:00
master
1154
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 renovate[bot]
|
7f005fcd90 |
build(deps): update module github.com/valyala/fasthttp to v1.76.0 (#13526)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/valyala/fasthttp](https://redirect.github.com/valyala/fasthttp) | `v1.75.0` → `v1.76.0` |  |  | --- ### Release Notes <details> <summary>valyala/fasthttp (github.com/valyala/fasthttp)</summary> ### [`v1.76.0`](https://redirect.github.com/valyala/fasthttp/releases/tag/v1.76.0) [Compare Source](https://redirect.github.com/valyala/fasthttp/compare/v1.75.0...v1.76.0) `v1.76.0` strengthens HTTP message framing, static-file isolation, and server connection handling. It also improves HTTP compatibility, avoids quadratic work when parsing large trailer sets, and adds configurable TCP keep-alives to `TCPDialer`. #### Security fixes and hardening - **Multipart parsing consumes the entire declared body.** Bytes after the closing multipart boundary are drained before the connection is reused, preventing a multipart epilogue from being interpreted as another request. [#​2336](https://redirect.github.com/valyala/fasthttp/pull/2336) - **Outgoing messages preserve framing.** Raw `Content-Length` headers are synchronized with the outgoing body, duplicate or conflicting framing headers are rejected, and fixed-length request and response streams cannot write beyond their declared size. `FS` and `SendFile` also stop at the advertised `Content-Length` when a file grows during serving. [#​2470](https://redirect.github.com/valyala/fasthttp/pull/2470), [#​2462](https://redirect.github.com/valyala/fasthttp/pull/2462) - **Requests with both `Content-Length` and `Transfer-Encoding` close the connection.** The connection is no longer reused after a request containing both framing headers. [#​2476](https://redirect.github.com/valyala/fasthttp/pull/2476) - **Virtual-host file serving preserves directory isolation.** `NewVHostPathRewriter` avoids decoding the host and path twice and handles invalid hosts safely, preventing crafted requests from escaping the virtual-host directory and accessing files directly under `FS.Root`. This affects `FS` handlers using `NewVHostPathRewriter`. [#​2487](https://redirect.github.com/valyala/fasthttp/pull/2487) - **Rejected TLS connections no longer block the accept loop.** Connections rejected by `MaxConnsPerIP` or `Concurrency` are closed without attempting an HTTP error response, which could otherwise trigger a TLS handshake and stall while waiting for a `ClientHello`. IPv6 clients are now also counted against `MaxConnsPerIP`. [#​2486](https://redirect.github.com/valyala/fasthttp/pull/2486), [#​2468](https://redirect.github.com/valyala/fasthttp/pull/2468) #### Performance improvements - **Trailer parsing avoids quadratic work.** Large sets of trailer names use indexed membership checks instead of repeatedly scanning all previously recorded names. This reduces CPU amplification from crafted `Trailer` headers and chunked trailer sections while preserving trailer order. [#​2465](https://redirect.github.com/valyala/fasthttp/pull/2465) #### HTTP compatibility and features - **Static files handle range and conditional requests more accurately.** Unsupported range units and multiple ranges are ignored instead of returning `416`; invalid single byte ranges still return `416`. `Range` is also ignored when `If-Range` does not match, and both `Range` and `If-Modified-Since` are ignored for methods other than GET and HEAD. [#​2467](https://redirect.github.com/valyala/fasthttp/pull/2467), [#​2473](https://redirect.github.com/valyala/fasthttp/pull/2473), [#​2474](https://redirect.github.com/valyala/fasthttp/pull/2474), [#​2475](https://redirect.github.com/valyala/fasthttp/pull/2475) - **Pipeline clients handle HEAD responses without reading a body.** `PipelineClient` skips the response body for HEAD requests. [#​2469](https://redirect.github.com/valyala/fasthttp/pull/2469) - **HTTP parsing accepts valid legacy formats and matches tokens correctly.** `ParseHTTPDate` accepts obsolete HTTP-date formats, cookies with an invalid `Expires` attribute remain parseable, `Expect: 100-continue` is matched case-insensitively, and `Accept-Encoding` matches complete tokens. Asterisk-form request targets are rejected for methods other than OPTIONS. [#​2466](https://redirect.github.com/valyala/fasthttp/pull/2466), [#​2481](https://redirect.github.com/valyala/fasthttp/pull/2481), [#​2482](https://redirect.github.com/valyala/fasthttp/pull/2482), [#​2479](https://redirect.github.com/valyala/fasthttp/pull/2479), [#​2463](https://redirect.github.com/valyala/fasthttp/pull/2463) - **TCP keep-alives are configurable.** The new `TCPDialer.KeepAlive` field sets the keep-alive period for connections created by the dialer; a negative value disables keep-alives. [#​2484](https://redirect.github.com/valyala/fasthttp/pull/2484) #### What's Changed ##### Security and hardening - consume the rest of the declared body in readMultipartForm by [@​alhudz](https://redirect.github.com/alhudz) in [#​2336](https://redirect.github.com/valyala/fasthttp/pull/2336) - fix: validate outgoing request framing by [@​erikdubbelboer](https://redirect.github.com/erikdubbelboer) in [#​2470](https://redirect.github.com/valyala/fasthttp/pull/2470) - stop FS and SendFile at Content-Length when the file has grown by [@​alhudz](https://redirect.github.com/alhudz) in [#​2462](https://redirect.github.com/valyala/fasthttp/pull/2462) - fix: close the connection after a request with both Content-Length and Transfer-Encoding by [@​LuisFigueroaG](https://redirect.github.com/LuisFigueroaG) in [#​2476](https://redirect.github.com/valyala/fasthttp/pull/2476) - fix(fs): preserve vhost isolation during path rewriting by [@​koyokr](https://redirect.github.com/koyokr) in [#​2487](https://redirect.github.com/valyala/fasthttp/pull/2487) - Fix TLS connection rejection blocking the accept loop by [@​erikdubbelboer](https://redirect.github.com/erikdubbelboer) in [#​2486](https://redirect.github.com/valyala/fasthttp/pull/2486) - count IPv6 clients against MaxConnsPerIP by [@​alhudz](https://redirect.github.com/alhudz) in [#​2468](https://redirect.github.com/valyala/fasthttp/pull/2468) ##### Performance - make addTrailerKey linear in the size of the trailer set by [@​alhudz](https://redirect.github.com/alhudz) in [#​2465](https://redirect.github.com/valyala/fasthttp/pull/2465) ##### Features - feat: add KeepAlive option to TCPDialer by [@​littfed](https://redirect.github.com/littfed) in [#​2484](https://redirect.github.com/valyala/fasthttp/pull/2484) ##### Fixes - fix(header): reject asterisk-form request-target for non-OPTIONS methods by [@​aadieng100](https://redirect.github.com/aadieng100) in [#​2463](https://redirect.github.com/valyala/fasthttp/pull/2463) - fix: accept the obsolete HTTP-date formats in ParseHTTPDate by [@​LuisFigueroaG](https://redirect.github.com/LuisFigueroaG) in [#​2466](https://redirect.github.com/valyala/fasthttp/pull/2466) - fix(fs): ignore Range headers FS can't serve instead of replying 416 by [@​LuisFigueroaG](https://redirect.github.com/LuisFigueroaG) in [#​2467](https://redirect.github.com/valyala/fasthttp/pull/2467) - skip the response body for HEAD requests in PipelineClient by [@​alhudz](https://redirect.github.com/alhudz) in [#​2469](https://redirect.github.com/valyala/fasthttp/pull/2469) - fix(fs): ignore If-Modified-Since for methods other than GET and HEAD by [@​LuisFigueroaG](https://redirect.github.com/LuisFigueroaG) in [#​2474](https://redirect.github.com/valyala/fasthttp/pull/2474) - fix(fs): ignore Range when the If-Range validator doesn't match by [@​LuisFigueroaG](https://redirect.github.com/LuisFigueroaG) in [#​2473](https://redirect.github.com/valyala/fasthttp/pull/2473) - fix(fs): ignore Range for methods other than GET and HEAD by [@​LuisFigueroaG](https://redirect.github.com/LuisFigueroaG) in [#​2475](https://redirect.github.com/valyala/fasthttp/pull/2475) - fix(cookie): ignore an invalid Expires attribute instead of failing to parse by [@​LuisFigueroaG](https://redirect.github.com/LuisFigueroaG) in [#​2481](https://redirect.github.com/valyala/fasthttp/pull/2481) - fix: match the Expect: 100-continue value case-insensitively by [@​LuisFigueroaG](https://redirect.github.com/LuisFigueroaG) in [#​2482](https://redirect.github.com/valyala/fasthttp/pull/2482) - fix: match complete Accept-Encoding tokens by [@​jabrailkhalil](https://redirect.github.com/jabrailkhalil) in [#​2479](https://redirect.github.com/valyala/fasthttp/pull/2479) ##### Documentation - docs: clarify RequestURI host behavior by [@​oozan](https://redirect.github.com/oozan) in [#​2355](https://redirect.github.com/valyala/fasthttp/pull/2355) ##### Dependency updates - chore(deps): bump github.com/molecule-man/go-brrr from 1.1.1 to 1.2.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2464](https://redirect.github.com/valyala/fasthttp/pull/2464) - chore(deps): bump github.com/molecule-man/go-brrr from 1.2.0 to 1.3.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2483](https://redirect.github.com/valyala/fasthttp/pull/2483) - chore(deps): bump golang.org/x/sys from 0.48.0 to 0.49.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2477](https://redirect.github.com/valyala/fasthttp/pull/2477) - chore(deps): bump golang.org/x/net from 0.59.0 to 0.61.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2478](https://redirect.github.com/valyala/fasthttp/pull/2478) - chore(deps): bump github.com/klauspost/compress from 1.20.1 to 1.20.3 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2485](https://redirect.github.com/valyala/fasthttp/pull/2485) #### New Contributors - [@​aadieng100](https://redirect.github.com/aadieng100) made their first contribution in [#​2463](https://redirect.github.com/valyala/fasthttp/pull/2463) - [@​LuisFigueroaG](https://redirect.github.com/LuisFigueroaG) made their first contribution in [#​2466](https://redirect.github.com/valyala/fasthttp/pull/2466) - [@​oozan](https://redirect.github.com/oozan) made their first contribution in [#​2355](https://redirect.github.com/valyala/fasthttp/pull/2355) - [@​jabrailkhalil](https://redirect.github.com/jabrailkhalil) made their first contribution in [#​2479](https://redirect.github.com/valyala/fasthttp/pull/2479) - [@​koyokr](https://redirect.github.com/koyokr) made their first contribution in [#​2487](https://redirect.github.com/valyala/fasthttp/pull/2487) **Full Changelog**: <https://github.com/valyala/fasthttp/compare/v1.75.0...v1.76.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
eeb3f1deef |
build(deps): update module github.com/knadh/koanf/v2 to v2.4.1 (#13517)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/v2](https://redirect.github.com/knadh/koanf) | `v2.4.0` → `v2.4.1` |  |  | --- ### Release Notes <details> <summary>knadh/koanf (github.com/knadh/koanf/v2)</summary> ### [`v2.4.1`](https://redirect.github.com/knadh/koanf/releases/tag/v2.4.1) [Compare Source](https://redirect.github.com/knadh/koanf/compare/v2.4.0...v2.4.1) #### What's Changed - Fix HCL flattenSlices skipping blocks inside repeated blocks by [@​ybai08](https://redirect.github.com/ybai08) in [#​458](https://redirect.github.com/knadh/koanf/pull/458) - Fix k8smount dropping keys mounted at nested paths by [@​ybai08](https://redirect.github.com/ybai08) in [#​457](https://redirect.github.com/knadh/koanf/pull/457) - Fix duration unmarshalling from defined string types by [@​sagar5412](https://redirect.github.com/sagar5412) in [#​459](https://redirect.github.com/knadh/koanf/pull/459) #### New Contributors - [@​ybai08](https://redirect.github.com/ybai08) made their first contribution in [#​458](https://redirect.github.com/knadh/koanf/pull/458) - [@​sagar5412](https://redirect.github.com/sagar5412) made their first contribution in [#​459](https://redirect.github.com/knadh/koanf/pull/459) **Full Changelog**: <https://github.com/knadh/koanf/compare/v2.4.0...v2.4.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
e8f58adc60 |
build(deps): update module github.com/knadh/koanf/v2 to v2.4.0 (#13509)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/v2](https://redirect.github.com/knadh/koanf) | `v2.3.8` → `v2.4.0` |  |  | --- ### Release Notes <details> <summary>knadh/koanf (github.com/knadh/koanf/v2)</summary> ### [`v2.4.0`](https://redirect.github.com/knadh/koanf/compare/v2.3.8...v2.4.0) [Compare Source](https://redirect.github.com/knadh/koanf/compare/v2.3.8...v2.4.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
ae679ed436 |
build(deps): update module github.com/prometheus/client_golang to v1.25.0 (#13435)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/prometheus/client_golang](https://redirect.github.com/prometheus/client_golang) | `v1.24.1` → `v1.25.0` |  |  | --- ### Release Notes <details> <summary>prometheus/client_golang (github.com/prometheus/client_golang)</summary> ### [`v1.25.0`](https://redirect.github.com/prometheus/client_golang/releases/tag/v1.25.0) [Compare Source](https://redirect.github.com/prometheus/client_golang/compare/v1.24.1...v1.25.0) ⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in `api/prometheus/v1` (see the \[CHANGE] entries below). ⚠️ #### 1.25.0 / 2026-10-07 - \[CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. [#​2138](https://redirect.github.com/prometheus/client_golang/issues/2138) - \[CHANGE] api/prometheus/v1: `Query`, `QueryRange`, `Series`, `LabelNames`, and `LabelValues` now return `Infos` annotations in addition to `Warnings`, matching the Prometheus server's info annotations. This changes the signatures of these methods and of `api.Client`'s `Do`/`DoGetFallback`; custom API client implementations must be updated. [#​1963](https://redirect.github.com/prometheus/client_golang/issues/1963) - \[CHANGE] api/prometheus/v1: Rework `TSDBBlocks` result types to align with the Prometheus server's `tsdb.BlockMeta`: `TSDBBlocksResult` now contains `Blocks []TSDBBlockMeta` directly instead of mirroring the full API envelope, nested types are renamed (`TSDBBlockMeta`, `TSDBBlockStats`, `TSDBBlockMetaCompaction`), stat fields are `uint64` with `omitempty` tags, and the optional compaction `parents` field is included. [#​1928](https://redirect.github.com/prometheus/client_golang/issues/1928) - \[FEATURE] testutil: Add `GatherAndFormat` to encode a subset of metrics from a Gatherer. [#​2091](https://redirect.github.com/prometheus/client_golang/issues/2091) - \[FEATURE] promhttp: Add `HandlerOpts.AcceptedFormats` to customize the formats negotiated from the incoming `Accept` header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. [#​2146](https://redirect.github.com/prometheus/client_golang/issues/2146) - \[ENHANCEMENT] promhttp: Negotiated metrics responses now include a `Vary` header. [#​2142](https://redirect.github.com/prometheus/client_golang/issues/2142) - \[ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. [#​2090](https://redirect.github.com/prometheus/client_golang/issues/2090), [#​2095](https://redirect.github.com/prometheus/client_golang/issues/2095) - \[ENHANCEMENT] testutil: Finalize OpenMetrics output in `GatherAndFormat` and `CollectAndFormat` (terminating `# EOF`). [#​2125](https://redirect.github.com/prometheus/client_golang/issues/2125) - \[BUGFIX] api: Match complete URL path placeholders only; a `:foo` argument no longer substitutes inside `:foobar`. [#​2136](https://redirect.github.com/prometheus/client_golang/issues/2136) - \[BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. [#​2139](https://redirect.github.com/prometheus/client_golang/issues/2139) - \[BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". [#​2135](https://redirect.github.com/prometheus/client_golang/issues/2135) <details> <summary> What's changed </summary> #### What's Changed * fix: Remove unneeded and broken CI badge by @​bwplot[https://github.com/prometheus/client_golang/pull/2057](https://redirect.github.com/prometheus/client_golang/pull/2057)l/2057 * Synchronize common files from prometheus/prometheus by @​promb[https://github.com/prometheus/client_golang/pull/2060](https://redirect.github.com/prometheus/client_golang/pull/2060)l/2060 * build(deps): bump the codeql group with 4 updates by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2066](https://redirect.github.com/prometheus/client_golang/pull/2066)l/2066 * build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2071](https://redirect.github.com/prometheus/client_golang/pull/2071)l/2071 * build(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 in the golang-org-x group across 1 directory by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2069](https://redirect.github.com/prometheus/client_golang/pull/2069)l/2069 * build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 in /exp by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2072](https://redirect.github.com/prometheus/client_golang/pull/2072)l/2072 * build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.1 in /exp by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2073](https://redirect.github.com/prometheus/client_golang/pull/2073)l/2073 * build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.1 by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2070](https://redirect.github.com/prometheus/client_golang/pull/2070)l/2070 * build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /tutorials/whatsup by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2075](https://redirect.github.com/prometheus/client_golang/pull/2075)l/2075 * Pin GitHub Actions by @​Supe[https://github.com/prometheus/client_golang/pull/2074](https://redirect.github.com/prometheus/client_golang/pull/2074)l/2074 * build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2067](https://redirect.github.com/prometheus/client_golang/pull/2067)l/2067 * promhttp: fix panic on requests with nil URL by @​SAY[https://github.com/prometheus/client_golang/pull/2065](https://redirect.github.com/prometheus/client_golang/pull/2065)l/2065 * Return info annotations in addition to warnings in the API by @​zenad[https://github.com/prometheus/client_golang/pull/1963](https://redirect.github.com/prometheus/client_golang/pull/1963)l/1963 * build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2082](https://redirect.github.com/prometheus/client_golang/pull/2082)l/2082 * Synchronize common files from prometheus/prometheus by @​promb[https://github.com/prometheus/client_golang/pull/2084](https://redirect.github.com/prometheus/client_golang/pull/2084)l/2084 * Synchronize common files from prometheus/prometheus by @​promb[https://github.com/prometheus/client_golang/pull/2086](https://redirect.github.com/prometheus/client_golang/pull/2086)l/2086 * Synchronize common files from prometheus/prometheus by @​promb[https://github.com/prometheus/client_golang/pull/2088](https://redirect.github.com/prometheus/client_golang/pull/2088)l/2088 * Regenerate Go collector runtime metrics for Go 1.25 and Go 1.26 by @​bwplot[https://github.com/prometheus/client_golang/pull/2090](https://redirect.github.com/prometheus/client_golang/pull/2090)l/2090 * go.mod: remove obsolete exclude rule by @​thaJezt[https://github.com/prometheus/client_golang/pull/2077](https://redirect.github.com/prometheus/client_golang/pull/2077)l/2077 * Synchronize common files from prometheus/prometheus by @​promb[https://github.com/prometheus/client_golang/pull/2093](https://redirect.github.com/prometheus/client_golang/pull/2093)l/2093 * README: document the OpenTelemetry OTLP push bridge by @​mvanho[https://github.com/prometheus/client_golang/pull/1987](https://redirect.github.com/prometheus/client_golang/pull/1987)l/1987 * docs: add AGENTS.md contributor and maintainer guide by @​bwplot[https://github.com/prometheus/client_golang/pull/2056](https://redirect.github.com/prometheus/client_golang/pull/2056)l/2056 * testutil: add GatherAndFormat helper by @​wieg[https://github.com/prometheus/client_golang/pull/2091](https://redirect.github.com/prometheus/client_golang/pull/2091)l/2091 * build(deps): bump the codeql group with 4 updates by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2101](https://redirect.github.com/prometheus/client_golang/pull/2101)l/2101 * build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2097](https://redirect.github.com/prometheus/client_golang/pull/2097)l/2097 * build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2098](https://redirect.github.com/prometheus/client_golang/pull/2098)l/2098 * build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 in /exp by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2099](https://redirect.github.com/prometheus/client_golang/pull/2099)l/2099 * build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 in /exp by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2100](https://redirect.github.com/prometheus/client_golang/pull/2100)l/2100 * build(deps): bump github.com/prometheus/procfs from 0.21.1 to 0.22.0 in the prometheus group across 1 directory by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2096](https://redirect.github.com/prometheus/client_golang/pull/2096)l/2096 * build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /tutorials/whatsup by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2102](https://redirect.github.com/prometheus/client_golang/pull/2102)l/2102 * chore: Update metrics for new Go version by @​github-actions[bo[https://github.com/prometheus/client_golang/pull/2095](https://redirect.github.com/prometheus/client_golang/pull/2095)l/2095 * Benchmark json-iter, stdlib json and json/v2 by @​liggi[https://github.com/prometheus/client_golang/pull/2107](https://redirect.github.com/prometheus/client_golang/pull/2107)l/2107 * build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /tutorials/whatsup by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2112](https://redirect.github.com/prometheus/client_golang/pull/2112)l/2112 * RuleGroup: use stdlib for json decoding, optimize decoding by @​liggi[https://github.com/prometheus/client_golang/pull/2109](https://redirect.github.com/prometheus/client_golang/pull/2109)l/2109 * Modernize micro benchmarks: b.Loop and key=value case names by @​radianced[https://github.com/prometheus/client_golang/pull/2114](https://redirect.github.com/prometheus/client_golang/pull/2114)l/2114 * QueryResult: use stdlib for envelope decoding by @​liggi[https://github.com/prometheus/client_golang/pull/2110](https://redirect.github.com/prometheus/client_golang/pull/2110)l/2110 * Use stdlib to decode apiResult envelope by @​liggi[https://github.com/prometheus/client_golang/pull/2111](https://redirect.github.com/prometheus/client_golang/pull/2111)l/2111 * Improve linting by @​Supe[https://github.com/prometheus/client_golang/pull/2115](https://redirect.github.com/prometheus/client_golang/pull/2115)l/2115 * Delete unused custom json-iterator marshaling by @​liggi[https://github.com/prometheus/client_golang/pull/2121](https://redirect.github.com/prometheus/client_golang/pull/2121)l/2121 * Simplify apiClientImpl#Do error path by @​liggi[https://github.com/prometheus/client_golang/pull/2120](https://redirect.github.com/prometheus/client_golang/pull/2120)l/2120 * testutil: finalize OpenMetrics output by @​ajavan[https://github.com/prometheus/client_golang/pull/2125](https://redirect.github.com/prometheus/client_golang/pull/2125)l/2125 * build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 in /tutorials/whatsup by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2124](https://redirect.github.com/prometheus/client_golang/pull/2124)l/2124 * Synchronize common files from prometheus/prometheus by @​promb[https://github.com/prometheus/client_golang/pull/2116](https://redirect.github.com/prometheus/client_golang/pull/2116)l/2116 * prometheus: fix revive indent-error-flow lint on Darwin by @​bwplot[https://github.com/prometheus/client_golang/pull/2131](https://redirect.github.com/prometheus/client_golang/pull/2131)l/2131 * build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.34.0 to 1.45.0 in /tutorials/whatsup by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2123](https://redirect.github.com/prometheus/client_golang/pull/2123)l/2123 * Combine envelope/inner apiResponse decoding, switch to stdlib json by @​liggi[https://github.com/prometheus/client_golang/pull/2118](https://redirect.github.com/prometheus/client_golang/pull/2118)l/2118 * build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.34.0 to 1.45.0 in /tutorials/whatsup by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2122](https://redirect.github.com/prometheus/client_golang/pull/2122)l/2122 * testutil/promlint: fix "mibi" unit prefix to "mebi" by @​ZainnQuresh[https://github.com/prometheus/client_golang/pull/2135](https://redirect.github.com/prometheus/client_golang/pull/2135)l/2135 * all: update prometheus/common to v0.72.0 and apply modernize fixes by @​bwplot[https://github.com/prometheus/client_golang/pull/2138](https://redirect.github.com/prometheus/client_golang/pull/2138)l/2138 * limit json-iterator use to Go 1.26 by @​liggi[https://github.com/prometheus/client_golang/pull/2128](https://redirect.github.com/prometheus/client_golang/pull/2128)l/2128 * promhttp: add AcceptedFormats option to customize format negotiation by @​bwplot[https://github.com/prometheus/client_golang/pull/2146](https://redirect.github.com/prometheus/client_golang/pull/2146)l/2146 * build(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.1 by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2143](https://redirect.github.com/prometheus/client_golang/pull/2143)l/2143 * build(deps): bump the codeql group with 4 updates by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2145](https://redirect.github.com/prometheus/client_golang/pull/2145)l/2145 * build(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.1 in /exp by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2144](https://redirect.github.com/prometheus/client_golang/pull/2144)l/2144 * promhttp: vary negotiated metrics responses by @​lowga[https://github.com/prometheus/client_golang/pull/2142](https://redirect.github.com/prometheus/client_golang/pull/2142)l/2142 * exp/api/remote: reset pooled buffer before generic marshal by @​lowga[https://github.com/prometheus/client_golang/pull/2139](https://redirect.github.com/prometheus/client_golang/pull/2139)l/2139 * api: match complete URL placeholders by @​lowga[https://github.com/prometheus/client_golang/pull/2136](https://redirect.github.com/prometheus/client_golang/pull/2136)l/2136 * fix: updates for tsdb blocks handling by @​tjh[https://github.com/prometheus/client_golang/pull/1928](https://redirect.github.com/prometheus/client_golang/pull/1928)l/1928 * prometheus: fix modernize lint findings by @​kakkoy[https://github.com/prometheus/client_golang/pull/2151](https://redirect.github.com/prometheus/client_golang/pull/2151)l/2151 * build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 in /api/prometheus/v1/paritytest by @​dependabot[bo[https://github.com/prometheus/client_golang/pull/2152](https://redirect.github.com/prometheus/client_golang/pull/2152)l/2152 * Cut v1.25.0-rc.0 by @​kakkoy[https://github.com/prometheus/client_golang/pull/2154](https://redirect.github.com/prometheus/client_golang/pull/2154)l/2154 * Cut v1.25.0 by @​kakkoy[https://github.com/prometheus/client_golang/pull/2164](https://redirect.github.com/prometheus/client_golang/pull/2164)l/2164 #### New Contributors * @​SAY-5 made their first contributi[https://github.com/prometheus/client_golang/pull/2065](https://redirect.github.com/prometheus/client_golang/pull/2065)l/2065 * @​zenador made their first contributi[https://github.com/prometheus/client_golang/pull/1963](https://redirect.github.com/prometheus/client_golang/pull/1963)l/1963 * @​thaJeztah made their first contributi[https://github.com/prometheus/client_golang/pull/2077](https://redirect.github.com/prometheus/client_golang/pull/2077)l/2077 * @​mvanhorn made their first contributi[https://github.com/prometheus/client_golang/pull/1987](https://redirect.github.com/prometheus/client_golang/pull/1987)l/1987 * @​wieghx made their first contributi[https://github.com/prometheus/client_golang/pull/2091](https://redirect.github.com/prometheus/client_golang/pull/2091)l/2091 * @​radianceded made their first contributi[https://github.com/prometheus/client_golang/pull/2114](https://redirect.github.com/prometheus/client_golang/pull/2114)l/2114 * @​ajavanma made their first contributi[https://github.com/prometheus/client_golang/pull/2125](https://redirect.github.com/prometheus/client_golang/pull/2125)l/2125 * @​ZainnQureshii made their first contributi[https://github.com/prometheus/client_golang/pull/2135](https://redirect.github.com/prometheus/client_golang/pull/2135)l/2135 * @​lowgame made their first contributi[https://github.com/prometheus/client_golang/pull/2142](https://redirect.github.com/prometheus/client_golang/pull/2142)l/2142 **Full Changelog**: <https://github.com/prometheus/client_golang/compare/v1.24.1...v1.25.0> </details> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
James Elliott
|
485a36faeb |
build(deps): update module golang.org/x/net to v0.61.0 (#13437)
Drop the golang.org/x/net replace directives, which do not affect the build. |
||
|
renovate[bot]
|
a16ddbaa4a |
build(deps): update module github.com/go-ldap/ldap/v3 to v3.4.15 (#13401)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-ldap/ldap/v3](https://redirect.github.com/go-ldap/ldap) | `v3.4.14` → `v3.4.15` |  |  | --- ### Release Notes <details> <summary>go-ldap/ldap (github.com/go-ldap/ldap/v3)</summary> ### [`v3.4.15`](https://redirect.github.com/go-ldap/ldap/releases/tag/v3.4.15) [Compare Source](https://redirect.github.com/go-ldap/ldap/compare/v3.4.14...v3.4.15) #### What's Changed - guard malformed attribute in unpackAttributes by [@​netliomax25-code](https://redirect.github.com/netliomax25-code) in [#​612](https://redirect.github.com/go-ldap/ldap/pull/612) - bump Go to 1.26/1.27 in CI and update GitHub Actions to latest major versions by [@​t2y](https://redirect.github.com/t2y) in [#​624](https://redirect.github.com/go-ldap/ldap/pull/624) - fix: identify RFC 4533 sync control members by tag, not by count by [@​youdie006](https://redirect.github.com/youdie006) in [#​625](https://redirect.github.com/go-ldap/ldap/pull/625) - chore: resolve staticcheck findings and repair the make targets by [@​t2y](https://redirect.github.com/t2y) in [#​631](https://redirect.github.com/go-ldap/ldap/pull/631) - extended: wrap requestValue as RFC 4511 \[1] OCTET STRING by [@​team-humaki](https://redirect.github.com/team-humaki) in [#​628](https://redirect.github.com/go-ldap/ldap/pull/628) - fix: validate closing parenthesis in compound and grouped filters ([#​633](https://redirect.github.com/go-ldap/ldap/issues/633)) by [@​littfed](https://redirect.github.com/littfed) in [#​635](https://redirect.github.com/go-ldap/ldap/pull/635) - fix: reject malformed packets via shared child-count and bounds checks by [@​cpuschma](https://redirect.github.com/cpuschma) in [#​632](https://redirect.github.com/go-ldap/ldap/pull/632) - Expose ResultCode and DiagnosticMessage on SearchResult by [@​Pujathacker2210](https://redirect.github.com/Pujathacker2210) in [#​626](https://redirect.github.com/go-ldap/ldap/pull/626) - fix: navigate LDAPMessage envelope in parseLDAPResult by [@​cpuschma](https://redirect.github.com/cpuschma) in [#​636](https://redirect.github.com/go-ldap/ldap/pull/636) - fix: reject out-of-range resultCode in GetLDAPError by [@​netliomax25-code](https://redirect.github.com/netliomax25-code) in [#​640](https://redirect.github.com/go-ldap/ldap/pull/640) - fix: return error for unexpected response in ModifyWithResult by [@​netliomax25-code](https://redirect.github.com/netliomax25-code) in [#​639](https://redirect.github.com/go-ldap/ldap/pull/639) #### New Contributors - [@​youdie006](https://redirect.github.com/youdie006) made their first contribution in [#​625](https://redirect.github.com/go-ldap/ldap/pull/625) - [@​team-humaki](https://redirect.github.com/team-humaki) made their first contribution in [#​628](https://redirect.github.com/go-ldap/ldap/pull/628) - [@​littfed](https://redirect.github.com/littfed) made their first contribution in [#​635](https://redirect.github.com/go-ldap/ldap/pull/635) - [@​Pujathacker2210](https://redirect.github.com/Pujathacker2210) made their first contribution in [#​626](https://redirect.github.com/go-ldap/ldap/pull/626) **Full Changelog**: <https://github.com/go-ldap/ldap/compare/v3.4.14...v3.4.15> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
b181adcdd2 |
build(deps): update module github.com/knadh/koanf/v2 to v2.3.8 (#13402)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/v2](https://redirect.github.com/knadh/koanf) | `v2.3.7` → `v2.3.8` |  |  | --- ### Release Notes <details> <summary>knadh/koanf (github.com/knadh/koanf/v2)</summary> ### [`v2.3.8`](https://redirect.github.com/knadh/koanf/releases/tag/v2.3.8) [Compare Source](https://redirect.github.com/knadh/koanf/compare/v2.3.7...v2.3.8) #### What's Changed - cliflagv3: read each flag from the command that defines it by [@​abo3losh1](https://redirect.github.com/abo3losh1) in [#​451](https://redirect.github.com/knadh/koanf/pull/451) - fix: preserve config state when a strict merge fails by [@​flcrom](https://redirect.github.com/flcrom) in [#​452](https://redirect.github.com/knadh/koanf/pull/452) - MapKeys returns an empty slice for a natively-typed map by [@​dualfroz](https://redirect.github.com/dualfroz) in [#​447](https://redirect.github.com/knadh/koanf/pull/447) - Fix Cut/Copy/Slices silently dropping StrictMerge by [@​VXNCXNX](https://redirect.github.com/VXNCXNX) in [#​443](https://redirect.github.com/knadh/koanf/pull/443) - Fix IntfaceKeysToStrings missing maps inside nested slices by [@​VXNCXNX](https://redirect.github.com/VXNCXNX) in [#​442](https://redirect.github.com/knadh/koanf/pull/442) - cliflagv2: read each flag from the command that defines it by [@​abo3losh1](https://redirect.github.com/abo3losh1) in [#​453](https://redirect.github.com/knadh/koanf/pull/453) - Fix UnmarshalWithConf ignoring a caller's DecoderConfig.TagName by [@​VXNCXNX](https://redirect.github.com/VXNCXNX) in [#​441](https://redirect.github.com/knadh/koanf/pull/441) #### New Contributors - [@​abo3losh1](https://redirect.github.com/abo3losh1) made their first contribution in [#​451](https://redirect.github.com/knadh/koanf/pull/451) - [@​flcrom](https://redirect.github.com/flcrom) made their first contribution in [#​452](https://redirect.github.com/knadh/koanf/pull/452) - [@​dualfroz](https://redirect.github.com/dualfroz) made their first contribution in [#​447](https://redirect.github.com/knadh/koanf/pull/447) - [@​VXNCXNX](https://redirect.github.com/VXNCXNX) made their first contribution in [#​443](https://redirect.github.com/knadh/koanf/pull/443) **Full Changelog**: <https://github.com/knadh/koanf/compare/v2.3.7...v2.3.8> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
4330aff92b |
build(deps): update module github.com/knadh/koanf/providers/env/v2 to v2.0.2 (#13368)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/providers/env/v2](https://redirect.github.com/knadh/koanf) | `v2.0.1` → `v2.0.2` |  |  | --- ### Release Notes <details> <summary>knadh/koanf (github.com/knadh/koanf/providers/env/v2)</summary> ### [`v2.0.2`](https://redirect.github.com/knadh/koanf/releases/tag/v2.0.2) [Compare Source](https://redirect.github.com/knadh/koanf/compare/v2.0.1...v2.0.2) ### Important [mitchellh/mapstructure#349 (comment)](https://redirect.github.com/mitchellh/mapstructure/issues/349#issuecomment-1860372162) is discontinued and koanf has switched to using the fork `github.com/go-viper/mapstructure/v2`. If you are referencing the mapstructure lib in your code (custom DecoderConfig), you have to switch the paths to the above forked version of koanf. `github.com/mitchellh/mapstructure` => `github.com/go-viper/mapstructure/v2` #### What's Changed - feat: add nats provider by [@​TECHNOFAB11](https://redirect.github.com/TECHNOFAB11) in [#​213](https://redirect.github.com/knadh/koanf/pull/213) - feat: add flag to optionally fetch secret metadata by [@​Thunderbottom](https://redirect.github.com/Thunderbottom) in [#​219](https://redirect.github.com/knadh/koanf/pull/219) - chore: change WithMeta to ExcludeMeta for backwards compatibility by [@​Thunderbottom](https://redirect.github.com/Thunderbottom) in [#​220](https://redirect.github.com/knadh/koanf/pull/220) - typos and little clearer code by [@​GreyXor](https://redirect.github.com/GreyXor) in [#​222](https://redirect.github.com/knadh/koanf/pull/222) - Fixed a nil panic issue in vault provider by [@​wangkang](https://redirect.github.com/wangkang) in [#​224](https://redirect.github.com/knadh/koanf/pull/224) - Not use deprecated io/ioutil by [@​tchssk](https://redirect.github.com/tchssk) in [#​226](https://redirect.github.com/knadh/koanf/pull/226) - Proposal: support Vault auth method by [@​missedone](https://redirect.github.com/missedone) in [#​229](https://redirect.github.com/knadh/koanf/pull/229) - Add parameterstore provider by [@​tchssk](https://redirect.github.com/tchssk) in [#​227](https://redirect.github.com/knadh/koanf/pull/227) - feat: optional support net/http transport by [@​missedone](https://redirect.github.com/missedone) in [#​232](https://redirect.github.com/knadh/koanf/pull/232) - breaking change: [#​233](https://redirect.github.com/knadh/koanf/issues/233) return error struct to avoid panic at runtime by [@​missedone](https://redirect.github.com/missedone) in [#​234](https://redirect.github.com/knadh/koanf/pull/234) - Bump github.com/nats-io/nkeys from 0.4.4 to 0.4.6 in /providers/nats by [@​dependabot](https://redirect.github.com/dependabot) in [#​246](https://redirect.github.com/knadh/koanf/pull/246) - Bump golang.org/x/net from 0.7.0 to 0.17.0 in /providers/etcd by [@​dependabot](https://redirect.github.com/dependabot) in [#​248](https://redirect.github.com/knadh/koanf/pull/248) - Bump golang.org/x/net from 0.7.0 to 0.17.0 in /providers/vault by [@​dependabot](https://redirect.github.com/dependabot) in [#​247](https://redirect.github.com/knadh/koanf/pull/247) - Bump github.com/nats-io/nats-server/v2 from 2.9.15 to 2.9.23 in /providers/nats by [@​dependabot](https://redirect.github.com/dependabot) in [#​241](https://redirect.github.com/knadh/koanf/pull/241) - Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /providers/etcd by [@​dependabot](https://redirect.github.com/dependabot) in [#​243](https://redirect.github.com/knadh/koanf/pull/243) - fix: typo by [@​testwill](https://redirect.github.com/testwill) in [#​251](https://redirect.github.com/knadh/koanf/pull/251) - Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /providers/vault by [@​dependabot](https://redirect.github.com/dependabot) in [#​261](https://redirect.github.com/knadh/koanf/pull/261) - Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /providers/nats by [@​dependabot](https://redirect.github.com/dependabot) in [#​260](https://redirect.github.com/knadh/koanf/pull/260) - Add optional `Opt{}` param that takes a koanf instance to match posflag's default value behaviour in basic flag. Closes [#​255](https://redirect.github.com/knadh/koanf/issues/255). by [@​knadh](https://redirect.github.com/knadh) in [#​259](https://redirect.github.com/knadh/koanf/pull/259) - Parser: KDL by [@​dezren39](https://redirect.github.com/dezren39) in [#​266](https://redirect.github.com/knadh/koanf/pull/266) - Parser: KDL kdl-go dependency update by [@​dezren39](https://redirect.github.com/dezren39) in [#​267](https://redirect.github.com/knadh/koanf/pull/267) #### New Contributors - [@​TECHNOFAB11](https://redirect.github.com/TECHNOFAB11) made their first contribution in [#​213](https://redirect.github.com/knadh/koanf/pull/213) - [@​GreyXor](https://redirect.github.com/GreyXor) made their first contribution in [#​222](https://redirect.github.com/knadh/koanf/pull/222) - [@​wangkang](https://redirect.github.com/wangkang) made their first contribution in [#​224](https://redirect.github.com/knadh/koanf/pull/224) - [@​tchssk](https://redirect.github.com/tchssk) made their first contribution in [#​226](https://redirect.github.com/knadh/koanf/pull/226) - [@​missedone](https://redirect.github.com/missedone) made their first contribution in [#​229](https://redirect.github.com/knadh/koanf/pull/229) - [@​testwill](https://redirect.github.com/testwill) made their first contribution in [#​251](https://redirect.github.com/knadh/koanf/pull/251) - [@​dezren39](https://redirect.github.com/dezren39) made their first contribution in [#​266](https://redirect.github.com/knadh/koanf/pull/266) **Full Changelog**: <https://github.com/knadh/koanf/compare/v2.0.1...v2.0.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMjUuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEyNS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
c68b0baea6 |
build(deps): update module github.com/valyala/fasthttp to v1.75.0 (#13365)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/valyala/fasthttp](https://redirect.github.com/valyala/fasthttp) | `v1.74.0` → `v1.75.0` |  |  | --- ### Release Notes <details> <summary>valyala/fasthttp (github.com/valyala/fasthttp)</summary> ### [`v1.75.0`](https://redirect.github.com/valyala/fasthttp/releases/tag/v1.75.0) [Compare Source](https://redirect.github.com/valyala/fasthttp/compare/v1.74.0...v1.75.0) `v1.75.0` improves HTTP parsing and serialization, URI processing, cached file serving, and client connection handling. It also fixes cookie injection, request/response framing problems, and excessive CPU or memory consumption from certain inputs. **Go 1.26 or newer is now required.** [#​2395](https://redirect.github.com/valyala/fasthttp/pull/2395) #### Performance improvements - **HTTP parsing:** request headers are parsed and validated in one pass, with common methods and HTTP/1.1 recognized directly. Header values, case conversion, host validation, and control-byte checks process multiple bytes at a time. The parser also avoids repeatedly scanning the same incomplete header block when data arrives in small reads. [#​2413](https://redirect.github.com/valyala/fasthttp/pull/2413), [#​2414](https://redirect.github.com/valyala/fasthttp/pull/2414), [#​2428](https://redirect.github.com/valyala/fasthttp/pull/2428), [#​2423](https://redirect.github.com/valyala/fasthttp/pull/2423), [#​2412](https://redirect.github.com/valyala/fasthttp/pull/2412), [#​2438](https://redirect.github.com/valyala/fasthttp/pull/2438) - **HTTP writing:** fewer header and response copies, cached serialized `Server` and `Date` lines, faster HTTP date formatting, and fewer flushes around chunked trailers. Large buffered responses can use `writev` on TCP and Unix connections; TLS and streamed bodies retain the buffered path. [#​2425](https://redirect.github.com/valyala/fasthttp/pull/2425), [#​2415](https://redirect.github.com/valyala/fasthttp/pull/2415), [#​2434](https://redirect.github.com/valyala/fasthttp/pull/2434), [#​2426](https://redirect.github.com/valyala/fasthttp/pull/2426), [#​2433](https://redirect.github.com/valyala/fasthttp/pull/2433) - **URI processing:** memoized authority parsing, a fast path for `/`, faster quoting and validation, and linear-time path normalization. [#​2411](https://redirect.github.com/valyala/fasthttp/pull/2411), [#​2423](https://redirect.github.com/valyala/fasthttp/pull/2423), [#​2453](https://redirect.github.com/valyala/fasthttp/pull/2453) - **Static files:** cached files of up to 8 KiB can be served from memory, avoiding a file read on each cache hit and releasing the file descriptor. The new small-file content cache is bounded to 4096 files, or at most 32 MiB per `FS`; the existing cache metadata is separate. Changes to these files become visible after cache expiration (`CacheDuration`, 10 seconds by default). [#​2446](https://redirect.github.com/valyala/fasthttp/pull/2446) - **Client and server overhead:** clients avoid redundant deadline updates when no timeout is active. The opt-in `Server.LazyRequestTime` avoids reading the clock until `RequestCtx.Time()` is called; with this option, the returned time is the time of the first call. The benchmark comparison below uses the default setting. [#​2439](https://redirect.github.com/valyala/fasthttp/pull/2439), [#​2404](https://redirect.github.com/valyala/fasthttp/pull/2404) #### Security fixes and hardening - **Streamed request bodies are drained before connection reuse.** With `StreamRequestBody` enabled, the server drains unread body data before reusing the connection, with a 256 KiB drain limit, or closes the connection when safe draining is not possible. Responses are flushed before draining so early replies reach clients still uploading, and response streams can consume the request body before its remaining size is checked. [#​2368](https://redirect.github.com/valyala/fasthttp/pull/2368), [#​2461](https://redirect.github.com/valyala/fasthttp/pull/2461) - **Rejected `100-continue` requests close the connection.** A denied request could previously leave its body unread and have those bytes interpreted as the next request, desynchronizing a reused connection. [#​2450](https://redirect.github.com/valyala/fasthttp/pull/2450) - **Cookie setters prevent additional-cookie injection.** `RequestHeader.SetCookie` and its byte variants now sanitize semicolons in names and values, so one logical cookie cannot become multiple cookies on the wire. [#​2393](https://redirect.github.com/valyala/fasthttp/pull/2393) - **Bounded zstd decoding limits decoder memory demand as well as output.** A small compressed frame could previously declare a large decoder window even when a decoded-body limit was configured. Positive `BodyUnzstdWithLimit` limits now select a memory-limited decoder, with caps rounded up in 8 MiB buckets; exceeding the decoder limit returns `ErrBodyTooLarge`. [#​2407](https://redirect.github.com/valyala/fasthttp/pull/2407) - **Path normalization avoids quadratic work.** Repeated separators and dot segments are processed in linear time, reducing the CPU amplification possible with crafted request targets. Incomplete headers arriving one byte at a time also avoid repeated full-block scans. [#​2453](https://redirect.github.com/valyala/fasthttp/pull/2453), [#​2413](https://redirect.github.com/valyala/fasthttp/pull/2413) - **Bodyless responses preserve framing.** HEAD and status-defined bodyless responses no longer emit trailer bytes that can be mistaken for the next response. Serialization suppresses forbidden `Content-Length` and `Transfer-Encoding` on 1xx/204 responses. Explicit content-type metadata and permitted 304 metadata remain supported. [#​2441](https://redirect.github.com/valyala/fasthttp/pull/2441), [#​2447](https://redirect.github.com/valyala/fasthttp/pull/2447), [#​2457](https://redirect.github.com/valyala/fasthttp/pull/2457) - **Pipeline clients gain a response-body limit and better failure cleanup.** Set the new `PipelineClient.MaxResponseBodySize` to a positive value to reject oversized responses, including with `Response.StreamBody`; the default remains unlimited. Idle workers now retire after errors, abandoned requests release their streams, and failed connection establishment is throttled. [#​2427](https://redirect.github.com/valyala/fasthttp/pull/2427), [#​2458](https://redirect.github.com/valyala/fasthttp/pull/2458) Argument sorting now honors any negative comparator result in `Args.Sort` and `Args.SortKeys`, and static-file serving rejects zero-length suffix byte ranges (`bytes=-0`) with `416 Range Not Satisfiable`. [#​2459](https://redirect.github.com/valyala/fasthttp/pull/2459), [#​2460](https://redirect.github.com/valyala/fasthttp/pull/2460) Other significant changes include opt-in ETags for `FS`, a `net/http` request conversion function, improved adaptor handling of flushes, aborts and trailers, and fixes to shutdown and per-IP connection lifetimes. [#​2399](https://redirect.github.com/valyala/fasthttp/pull/2399), [#​2104](https://redirect.github.com/valyala/fasthttp/pull/2104), [#​2429](https://redirect.github.com/valyala/fasthttp/pull/2429), [#​2445](https://redirect.github.com/valyala/fasthttp/pull/2445), [#​2352](https://redirect.github.com/valyala/fasthttp/pull/2352), [#​2402](https://redirect.github.com/valyala/fasthttp/pull/2402) #### Benchmark results Compared `v1.74.0` with master `6141d3a` on Ubuntu 26.04, an AMD EPYC 9454, and Go 1.27.1. Each benchmark has ten samples per revision, run alternately with the same inputs and CPU affinity. Negative percentages mean less time per operation. All rows below have p < 0.001. | Benchmark | v1.74.0 | Release candidate | Time/op change | | ---------------------------------------------- | ----------: | ----------------: | -------------: | | Minimal GET, pipeline depth 64 | 484.30 ns | 278.05 ns | -42.6% | | Browser-shaped GET, pipeline depth 16 | 1.080 µs | 722.55 ns | -33.1% | | Request-header parsing | 561.80 ns | 348.15 ns | -38.0% | | Response-header parsing | 466.95 ns | 277.55 ns | -40.6% | | Request-header writing | 49.84 ns | 37.45 ns | -24.8% | | Response-header writing | 68.64 ns | 40.99 ns | -40.3% | | Cached 1 KiB file, directory | 2.324 µs | 611.85 ns | -73.7% | | Cached 1 KiB file, `os.DirFS` | 3.805 µs | 612.30 ns | -83.9% | | URI path with query string | 91.39 ns | 46.06 ns | -49.6% | | HTTP date formatting | 108.25 ns | 28.59 ns | -73.6% | | Trickled \~4 KiB headers, one byte per read | 1385.784 µs | 191.257 µs | -86.2% | | 8 KiB path of repeated `/` | 352.529 µs | 54.330 µs | -84.6% | | \~8 KiB path of repeated `/a/..` | 96.733 µs | 22.253 µs | -77.0% | | TCP client/server round trips, small response | 5.193 µs | 5.030 µs | -3.1% | | TCP client/server round trips, 64 KiB response | 15.302 µs | 13.478 µs | -11.9% | The pipelined serving and file benchmarks use an in-memory connection with writes discarded. The two TCP rows include real loopback networking. These results describe the selected workloads; TCP gains are smaller than the gains in parsing and serialization. `Server.LazyRequestTime` remains disabled in this comparison. #### What's Changed ##### Compatibility - Require Go 1.26 for golang.org/x by [@​erikdubbelboer](https://redirect.github.com/erikdubbelboer) in [#​2395](https://redirect.github.com/valyala/fasthttp/pull/2395) ##### Security and hardening - discard unread streamed request body before the next request by [@​alhudz](https://redirect.github.com/alhudz) in [#​2368](https://redirect.github.com/valyala/fasthttp/pull/2368) - close the connection when ContinueHandler denies a request by [@​alhudz](https://redirect.github.com/alhudz) in [#​2450](https://redirect.github.com/valyala/fasthttp/pull/2450) - limit zstd decoder memory in WithLimit methods by [@​erikdubbelboer](https://redirect.github.com/erikdubbelboer) in [#​2407](https://redirect.github.com/valyala/fasthttp/pull/2407) - Strip semicolons in RequestHeader.SetCookie by [@​youdie006](https://redirect.github.com/youdie006) in [#​2393](https://redirect.github.com/valyala/fasthttp/pull/2393) - make normalizePath linear in the length of the path by [@​alhudz](https://redirect.github.com/alhudz) in [#​2453](https://redirect.github.com/valyala/fasthttp/pull/2453) - Omit the trailer section from a response without a body by [@​h2zi](https://redirect.github.com/h2zi) in [#​2441](https://redirect.github.com/valyala/fasthttp/pull/2441) - Omit Transfer-Encoding on 1xx and 204 responses by [@​davidscottpope-gif](https://redirect.github.com/davidscottpope-gif) in [#​2457](https://redirect.github.com/valyala/fasthttp/pull/2457) - Omit Content-Length/Content-Type on a parsed bodyless response when re-serializing by [@​januththedev](https://redirect.github.com/januththedev) in [#​2447](https://redirect.github.com/valyala/fasthttp/pull/2447) - Add MaxResponseBodySize to PipelineClient by [@​erikdubbelboer](https://redirect.github.com/erikdubbelboer) in [#​2427](https://redirect.github.com/valyala/fasthttp/pull/2427) - fix: stop idle PipelineClient workers after errors by [@​erikdubbelboer](https://redirect.github.com/erikdubbelboer) in [#​2458](https://redirect.github.com/valyala/fasthttp/pull/2458) ##### Performance - perf: parse request headers in one validating pass by [@​h2zi](https://redirect.github.com/h2zi) in [#​2413](https://redirect.github.com/valyala/fasthttp/pull/2413) - perf: scan the request header block once while parsing by [@​gaby](https://redirect.github.com/gaby) in [#​2424](https://redirect.github.com/valyala/fasthttp/pull/2424) - perf: serve small cached files from memory in FS by [@​gaby](https://redirect.github.com/gaby) in [#​2446](https://redirect.github.com/valyala/fasthttp/pull/2446) - perf: serialize responses with fewer copies and send large ones with writev by [@​h2zi](https://redirect.github.com/h2zi) in [#​2415](https://redirect.github.com/valyala/fasthttp/pull/2415) - perf: cut redundant copies out of header serialization by [@​gaby](https://redirect.github.com/gaby) in [#​2425](https://redirect.github.com/valyala/fasthttp/pull/2425) - perf: scan header values, control bytes and case eight bytes at a time by [@​gaby](https://redirect.github.com/gaby) in [#​2428](https://redirect.github.com/valyala/fasthttp/pull/2428) - perf: speed up host validation and query/path quoting- [#​154](https://redirect.github.com/valyala/fasthttp/issues/154) by [@​gaby](https://redirect.github.com/gaby) in [#​2423](https://redirect.github.com/valyala/fasthttp/pull/2423) - perf: memoize authority parsing and fast-path the root path by [@​h2zi](https://redirect.github.com/h2zi) in [#​2411](https://redirect.github.com/valyala/fasthttp/pull/2411) - perf: recognize GET, POST, HEAD and HTTP/1.1 without byte-wise validation by [@​h2zi](https://redirect.github.com/h2zi) in [#​2414](https://redirect.github.com/valyala/fasthttp/pull/2414) - perf: scan the request target for control bytes a word at a time by [@​h2zi](https://redirect.github.com/h2zi) in [#​2412](https://redirect.github.com/valyala/fasthttp/pull/2412) - perf: skip redundant deadline updates on client connections by [@​gaby](https://redirect.github.com/gaby) in [#​2439](https://redirect.github.com/valyala/fasthttp/pull/2439) - perf: preform the Date header line once a second by [@​h2zi](https://redirect.github.com/h2zi) in [#​2434](https://redirect.github.com/valyala/fasthttp/pull/2434) - perf: format HTTP dates without time.AppendFormat by [@​gaby](https://redirect.github.com/gaby) in [#​2426](https://redirect.github.com/valyala/fasthttp/pull/2426) - perf: keep the last chunk buffered for the trailer section by [@​h2zi](https://redirect.github.com/h2zi) in [#​2433](https://redirect.github.com/valyala/fasthttp/pull/2433) - perf: keep the control-byte scans inlinable by [@​h2zi](https://redirect.github.com/h2zi) in [#​2438](https://redirect.github.com/valyala/fasthttp/pull/2438) - fix: request time left at zero, and an opt in Server.LazyRequestTime by [@​ReneWerner87](https://redirect.github.com/ReneWerner87) in [#​2404](https://redirect.github.com/valyala/fasthttp/pull/2404) ##### Features - Add opt-in ETag support to FS by [@​anandghegde](https://redirect.github.com/anandghegde) in [#​2399](https://redirect.github.com/valyala/fasthttp/pull/2399) - Add ConvertNetHttpRequestToFastHttpRequest adaptor function by [@​aaydin-tr](https://redirect.github.com/aaydin-tr) in [#​2104](https://redirect.github.com/valyala/fasthttp/pull/2104) ##### Fixes - fix: preserve response behavior while draining streamed requests by [@​erikdubbelboer](https://redirect.github.com/erikdubbelboer) in [#​2461](https://redirect.github.com/valyala/fasthttp/pull/2461) - fix: per-IP wrapper lifetime, TLS state unwrapping and ConnState timing by [@​h2zi](https://redirect.github.com/h2zi) in [#​2352](https://redirect.github.com/valyala/fasthttp/pull/2352) - fix: carry net/http handler contracts through the fasthttpadaptor by [@​h2zi](https://redirect.github.com/h2zi) in [#​2429](https://redirect.github.com/valyala/fasthttp/pull/2429) - Carry response trailers through the fasthttpadaptor by [@​h2zi](https://redirect.github.com/h2zi) in [#​2445](https://redirect.github.com/valyala/fasthttp/pull/2445) - fix: write trailers for buffered bodies in Request.Write and Response.Write by [@​aaydin-tr](https://redirect.github.com/aaydin-tr) in [#​2378](https://redirect.github.com/valyala/fasthttp/pull/2378) - Start compressing a streamed body when the server reads it by [@​h2zi](https://redirect.github.com/h2zi) in [#​2442](https://redirect.github.com/valyala/fasthttp/pull/2442) - fix: synchronize RequestCtx.Done() with ShutdownWithContext by [@​cpsc](https://redirect.github.com/cpsc) in [#​2402](https://redirect.github.com/valyala/fasthttp/pull/2402) - fix: admit TimeoutHandler requests on servers driven by ServeConn by [@​h2zi](https://redirect.github.com/h2zi) in [#​2431](https://redirect.github.com/valyala/fasthttp/pull/2431) - fix: serve queued waiters when SetMaxConns grows the limit by [@​h2zi](https://redirect.github.com/h2zi) in [#​2430](https://redirect.github.com/valyala/fasthttp/pull/2430) - fix: recheck idle connections before queuing waiters by [@​HarveyBase](https://redirect.github.com/HarveyBase) in [#​2394](https://redirect.github.com/valyala/fasthttp/pull/2394) - fix: recognize case-insensitive and multi-value Connection: close ([#​2418](https://redirect.github.com/valyala/fasthttp/issues/2418)) by [@​littfed](https://redirect.github.com/littfed) in [#​2420](https://redirect.github.com/valyala/fasthttp/pull/2420) - fix: preserve zero Max-Age when parsing cookies by [@​jakezwang](https://redirect.github.com/jakezwang) in [#​2405](https://redirect.github.com/valyala/fasthttp/pull/2405) - fix: accept a negative Max-Age when parsing cookies by [@​SulimanAbdulrazzaq](https://redirect.github.com/SulimanAbdulrazzaq) in [#​2416](https://redirect.github.com/valyala/fasthttp/pull/2416) - Preserve NoDefaultContentType across client response resets by [@​CSXizhang](https://redirect.github.com/CSXizhang) in [#​2455](https://redirect.github.com/valyala/fasthttp/pull/2455) - fix(fs): reject zero-length suffix byte ranges by [@​kevin9327](https://redirect.github.com/kevin9327) in [#​2460](https://redirect.github.com/valyala/fasthttp/pull/2460) - fix(args): use comparator sign in Sort and SortKeys by [@​sergioperezcheco](https://redirect.github.com/sergioperezcheco) in [#​2459](https://redirect.github.com/valyala/fasthttp/pull/2459) - fix: preserve redirect path normalization setting in Request.CopyTo by [@​cuishuang](https://redirect.github.com/cuishuang) in [#​2389](https://redirect.github.com/valyala/fasthttp/pull/2389) - fix: normalize a trailing /. path segment by [@​sachhg](https://redirect.github.com/sachhg) in [#​2392](https://redirect.github.com/valyala/fasthttp/pull/2392) - fix: mask ConnRequestNum into its 32-bit RequestCtx.ID field by [@​h2zi](https://redirect.github.com/h2zi) in [#​2432](https://redirect.github.com/valyala/fasthttp/pull/2432) - Return no values from PeekAll for absent special headers by [@​youdie006](https://redirect.github.com/youdie006) in [#​2401](https://redirect.github.com/valyala/fasthttp/pull/2401) - Leave an empty upfront Server or User-Agent out of PeekAll by [@​h2zi](https://redirect.github.com/h2zi) in [#​2443](https://redirect.github.com/valyala/fasthttp/pull/2443) - Skip RFC-valid empty elements in VisitHeaderParams by [@​vzer200](https://redirect.github.com/vzer200) in [#​2388](https://redirect.github.com/valyala/fasthttp/pull/2388) - fix(request): warn when Request.Body() is called on streamed requests by [@​VedantMadane](https://redirect.github.com/VedantMadane) in [#​2350](https://redirect.github.com/valyala/fasthttp/pull/2350) ##### Documentation, tests and tooling - docs: show how to read a bounded response prefix by [@​fzlzjerry](https://redirect.github.com/fzlzjerry) in [#​2369](https://redirect.github.com/valyala/fasthttp/pull/2369) - docs: clarify that ShutdownWithContext error does not freeze the Server by [@​hazyhaar](https://redirect.github.com/hazyhaar) in [#​2422](https://redirect.github.com/valyala/fasthttp/pull/2422) - test: add benchmarks for pipelined and browser-shaped serving by [@​h2zi](https://redirect.github.com/h2zi) in [#​2409](https://redirect.github.com/valyala/fasthttp/pull/2409) - test: scale hard-coded deadlines with testTimeout by [@​h2zi](https://redirect.github.com/h2zi) in [#​2410](https://redirect.github.com/valyala/fasthttp/pull/2410) - Update golangci-lint to v2.13.2 and get rid of the separate gosec action by [@​erikdubbelboer](https://redirect.github.com/erikdubbelboer) in [#​2386](https://redirect.github.com/valyala/fasthttp/pull/2386) ##### Dependency updates - chore(deps): bump github.com/klauspost/compress from 1.20.0 to 1.20.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2448](https://redirect.github.com/valyala/fasthttp/pull/2448) - chore(deps): bump golang.org/x/net from 0.58.0 to 0.59.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2397](https://redirect.github.com/valyala/fasthttp/pull/2397) - chore(deps): bump github.com/molecule-man/go-brrr from 1.0.1 to 1.1.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2417](https://redirect.github.com/valyala/fasthttp/pull/2417) #### New Contributors - [@​vzer200](https://redirect.github.com/vzer200) made their first contribution in [#​2388](https://redirect.github.com/valyala/fasthttp/pull/2388) - [@​youdie006](https://redirect.github.com/youdie006) made their first contribution in [#​2393](https://redirect.github.com/valyala/fasthttp/pull/2393) - [@​aaydin-tr](https://redirect.github.com/aaydin-tr) made their first contribution in [#​2378](https://redirect.github.com/valyala/fasthttp/pull/2378) - [@​sachhg](https://redirect.github.com/sachhg) made their first contribution in [#​2392](https://redirect.github.com/valyala/fasthttp/pull/2392) - [@​cpsc](https://redirect.github.com/cpsc) made their first contribution in [#​2402](https://redirect.github.com/valyala/fasthttp/pull/2402) - [@​jakezwang](https://redirect.github.com/jakezwang) made their first contribution in [#​2405](https://redirect.github.com/valyala/fasthttp/pull/2405) - [@​SulimanAbdulrazzaq](https://redirect.github.com/SulimanAbdulrazzaq) made their first contribution in [#​2416](https://redirect.github.com/valyala/fasthttp/pull/2416) - [@​HarveyBase](https://redirect.github.com/HarveyBase) made their first contribution in [#​2394](https://redirect.github.com/valyala/fasthttp/pull/2394) - [@​anandghegde](https://redirect.github.com/anandghegde) made their first contribution in [#​2399](https://redirect.github.com/valyala/fasthttp/pull/2399) - [@​littfed](https://redirect.github.com/littfed) made their first contribution in [#​2420](https://redirect.github.com/valyala/fasthttp/pull/2420) - [@​januththedev](https://redirect.github.com/januththedev) made their first contribution in [#​2447](https://redirect.github.com/valyala/fasthttp/pull/2447) - [@​hazyhaar](https://redirect.github.com/hazyhaar) made their first contribution in [#​2422](https://redirect.github.com/valyala/fasthttp/pull/2422) - [@​CSXizhang](https://redirect.github.com/CSXizhang) made their first contribution in [#​2455](https://redirect.github.com/valyala/fasthttp/pull/2455) - [@​VedantMadane](https://redirect.github.com/VedantMadane) made their first contribution in [#​2350](https://redirect.github.com/valyala/fasthttp/pull/2350) - [@​davidscottpope-gif](https://redirect.github.com/davidscottpope-gif) made their first contribution in [#​2457](https://redirect.github.com/valyala/fasthttp/pull/2457) - [@​sergioperezcheco](https://redirect.github.com/sergioperezcheco) made their first contribution in [#​2459](https://redirect.github.com/valyala/fasthttp/pull/2459) - [@​kevin9327](https://redirect.github.com/kevin9327) made their first contribution in [#​2460](https://redirect.github.com/valyala/fasthttp/pull/2460) **Full Changelog**: <https://github.com/valyala/fasthttp/compare/v1.74.0...v1.75.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMjUuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEyNS4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
ee1353725f |
feat(configuration): add support for toml and json (#9223)
This adds support for TOML and JSON across various areas of the Authelia application. The format of a file is determined by its extension, with '.toml' handled as TOML, '.json' as JSON, and everything else as YAML which preserves the existing behavior. This applies to the configuration (including directories which mix formats), the file user provider database which is now written back in the same format it was read in, and the storage user identifier, TOTP, and WebAuthn exports and imports which are encoded via their existing data models so every format produces the documented shape. --------- Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> Co-authored-by: autheliabot <autheliabot@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]
|
1c8bf5149c |
build(deps): update module github.com/knadh/koanf/v2 to v2.3.7 (#13267)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/v2](https://redirect.github.com/knadh/koanf) | `v2.3.6` → `v2.3.7` |  |  | --- ### Release Notes <details> <summary>knadh/koanf (github.com/knadh/koanf/v2)</summary> ### [`v2.3.7`](https://redirect.github.com/knadh/koanf/releases/tag/v2.3.7) [Compare Source](https://redirect.github.com/knadh/koanf/compare/v2.3.6...v2.3.7) #### What's Changed - fix: panic from Vault Provider when Transport is not supplied by [@​riflowth](https://redirect.github.com/riflowth) in [#​439](https://redirect.github.com/knadh/koanf/pull/439) - Preserve empty slice entries in StringsMap by [@​jakezwang](https://redirect.github.com/jakezwang) in [#​449](https://redirect.github.com/knadh/koanf/pull/449) - Bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /examples by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​446](https://redirect.github.com/knadh/koanf/pull/446) - Fix Slices silently dropping a natively-typed \[]map\[string]any by [@​Osamaali313](https://redirect.github.com/Osamaali313) in [#​448](https://redirect.github.com/knadh/koanf/pull/448) - Accept natively-typed slices and maps in the typed getters by [@​yu2971512385-ui](https://redirect.github.com/yu2971512385-ui) in [#​450](https://redirect.github.com/knadh/koanf/pull/450) #### New Contributors - [@​riflowth](https://redirect.github.com/riflowth) made their first contribution in [#​439](https://redirect.github.com/knadh/koanf/pull/439) - [@​jakezwang](https://redirect.github.com/jakezwang) made their first contribution in [#​449](https://redirect.github.com/knadh/koanf/pull/449) - [@​Osamaali313](https://redirect.github.com/Osamaali313) made their first contribution in [#​448](https://redirect.github.com/knadh/koanf/pull/448) - [@​yu2971512385-ui](https://redirect.github.com/yu2971512385-ui) made their first contribution in [#​450](https://redirect.github.com/knadh/koanf/pull/450) **Full Changelog**: <https://github.com/knadh/koanf/compare/v2.3.6...v2.3.7> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTIuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjExMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andJames Elliott
|
d981dc604e |
build(deps): update module authelia.com/provider/oauth2 to v0.3.3 (#13217)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [authelia.com/provider/oauth2](https://redirect.github.com/authelia/oauth2-provider) | `v0.3.2` → `v0.3.3` |  |  | --- ### Release Notes <details> <summary>authelia/oauth2-provider (authelia.com/provider/oauth2)</summary> ### [`v0.3.3`](https://redirect.github.com/authelia/oauth2-provider/compare/v0.3.2...v0.3.3) [Compare Source](https://redirect.github.com/authelia/oauth2-provider/compare/v0.3.2...v0.3.3) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMDMuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjEwMy4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
renovate[bot]
|
a946b3fb1f |
build(deps): update module github.com/go-webauthn/webauthn to v0.18.2 (#13218)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-webauthn/webauthn](https://redirect.github.com/go-webauthn/webauthn) | `v0.18.1` → `v0.18.2` |  |  | --- ### Release Notes <details> <summary>go-webauthn/webauthn (github.com/go-webauthn/webauthn)</summary> ### [`v0.18.2`](https://redirect.github.com/go-webauthn/webauthn/blob/HEAD/CHANGELOG.md#v0182-2026-09-19) [Compare Source](https://redirect.github.com/go-webauthn/webauthn/compare/v0.18.1...v0.18.2) ##### Bug Fixes - **protocol:** accept anonca attestation trust anchors ([#​801](https://redirect.github.com/go-webauthn/webauthn/issues/801)) ([b1dfbf2](https://redirect.github.com/go-webauthn/webauthn/commit/b1dfbf24453acf8a221d0ec3536cd8eb2f6247ae)) - **protocol:** convey safetynet attestation trust path ([#​800](https://redirect.github.com/go-webauthn/webauthn/issues/800)) ([5f8a38c](https://redirect.github.com/go-webauthn/webauthn/commit/5f8a38c895bf8611271faaa0a6190b2eb8cabe05)) - **protocol:** validate fido-u2f credential curve and certificate validity ([#​802](https://redirect.github.com/go-webauthn/webauthn/issues/802)) ([55d49f8](https://redirect.github.com/go-webauthn/webauthn/commit/55d49f842f0abdb1804e8486c7f14feecc9b8fc9)) - **protocol:** validate safetynet version and response age ([#​799](https://redirect.github.com/go-webauthn/webauthn/issues/799)) ([dda068d](https://redirect.github.com/go-webauthn/webauthn/commit/dda068d5f41d94fc5c9afbca9cdc36714655ec4a)) - **protocol:** validate tpm aik certificate validity period ([#​797](https://redirect.github.com/go-webauthn/webauthn/issues/797)) ([9ab858d](https://redirect.github.com/go-webauthn/webauthn/commit/9ab858dcdf87a833c1ffc1afb9f51f44c30d979e)) - **webauthn:** require authorization to initialize uv ([#​795](https://redirect.github.com/go-webauthn/webauthn/issues/795)) ([597882d](https://redirect.github.com/go-webauthn/webauthn/commit/597882dae157bae51e9753b828f9b8e91cb4bef3)) - **webauthn:** validate session challenge when finishing ceremonies ([#​794](https://redirect.github.com/go-webauthn/webauthn/issues/794)) ([bbe2902](https://redirect.github.com/go-webauthn/webauthn/commit/bbe2902b0f7d171fceb4b0edfd62433ec0648836)) ##### Features - **protocol:** determine fido-u2f attestation type from metadata ([#​798](https://redirect.github.com/go-webauthn/webauthn/issues/798)) ([ccbbb4b](https://redirect.github.com/go-webauthn/webauthn/commit/ccbbb4b4dae9b604e6378bfc09c482e64fc60674)) - **protocol:** validate authenticator data against metadata ([#​793](https://redirect.github.com/go-webauthn/webauthn/issues/793)) ([1ee00cf](https://redirect.github.com/go-webauthn/webauthn/commit/1ee00cf9c9e4a7941e338ee8b0cf156bb62cf05e)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMDMuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjEwMy4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andJames Elliott
|
e9e80d9ed3 |
build(deps): update module authelia.com/provider/oauth2 to v0.3.2 (#13087)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [authelia.com/provider/oauth2](https://redirect.github.com/authelia/oauth2-provider) | `v0.3.0` → `v0.3.1` |  |  | --- ### Release Notes <details> <summary>authelia/oauth2-provider (authelia.com/provider/oauth2)</summary> ### [`v0.3.1`](https://redirect.github.com/authelia/oauth2-provider/compare/v0.3.0...v0.3.1) [Compare Source](https://redirect.github.com/authelia/oauth2-provider/compare/v0.3.0...v0.3.1) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43MS4wIiwidXBkYXRlZEluVmVyIjoiNDQuNzEuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
Amir Zarrinkafsh
|
97c716c5f2 |
build(deps): move govalidator to the /v12 module path (#13088)
`github.com/asaskevich/govalidator` moved to a `/v12` module path in August 2024, leaving the unsuffixed path pinned here stuck on a March 2023 pseudo-version which neither Renovate nor `go get -u` can advance past a major path rename. `ValidateStruct`, `typeCheck`, `checkRequired` and `isEmptyValue` are byte-identical across the two versions, so this is inert for us. The intervening changes are new validators and `IsURL` fixes we do not call. Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]
|
23ccbc11fc |
build(deps): update module github.com/go-webauthn/webauthn to v0.18.1 (#13091)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-webauthn/webauthn](https://redirect.github.com/go-webauthn/webauthn) | `v0.18.0` → `v0.18.1` |  |  | --- ### Release Notes <details> <summary>go-webauthn/webauthn (github.com/go-webauthn/webauthn)</summary> ### [`v0.18.1`](https://redirect.github.com/go-webauthn/webauthn/releases/tag/v0.18.1) [Compare Source](https://redirect.github.com/go-webauthn/webauthn/compare/v0.18.0...v0.18.1) This release just updates dependencies. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43MS4wIiwidXBkYXRlZEluVmVyIjoiNDQuNzEuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
Amir Zarrinkafsh
|
3517582aa1 |
refactor(logging): replace the abandoned logrus-stack hook (#13085)
`github.com/Gurpartap/logrus-stack` has had no commits since July 2017. Implement the hook locally, which also drops `github.com/facebookgo/stack` as nothing else requires it. Output is unchanged: `stackFrame` and `stackTrace` keep the exported `File`, `Line` and `Name` fields so `caller` and `stack` render identically under both the text and JSON formatters. `StripGOPATH` is not carried over as it never matches under module builds. Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]
|
8e2e8abb59 |
build(deps): update module golang.org/x/net to v0.59.0 (#13043)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.58.0` → `v0.59.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.58.0...refs/tags/v0.59.0) |  |  | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNjkuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
54991aab2b |
build(deps): update module golang.org/x/crypto to v0.57.0 (#13042)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) | [`v0.56.0` → `v0.57.0`](https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.56.0...refs/tags/v0.57.0) |  |  | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNjkuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
296d8f21d0 |
build(deps): update module golang.org/x/time to v0.16.0 (#13036)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [golang.org/x/time](https://pkg.go.dev/golang.org/x/time) | [`v0.15.0` → `v0.16.0`](https://cs.opensource.google/go/x/time/+/refs/tags/v0.15.0...refs/tags/v0.16.0) |  |  | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNjkuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
e948a3ff0e |
build(deps): update module github.com/valyala/fasthttp to v1.74.0 (#13017)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/valyala/fasthttp](https://redirect.github.com/valyala/fasthttp) | `v1.73.0` → `v1.74.0` |  |  | --- ### Release Notes <details> <summary>valyala/fasthttp (github.com/valyala/fasthttp)</summary> ### [`v1.74.0`](https://redirect.github.com/valyala/fasthttp/releases/tag/v1.74.0) [Compare Source](https://redirect.github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0) #### What's Changed - fix(fasthttpproxy): select proxies from the request scheme by [@​dev-willbird1936](https://redirect.github.com/dev-willbird1936) in [#​2334](https://redirect.github.com/valyala/fasthttp/pull/2334) - test: scale short timeouts with testTimeout to reduce -race flakiness by [@​ReneWerner87](https://redirect.github.com/ReneWerner87) in [#​2339](https://redirect.github.com/valyala/fasthttp/pull/2339) - fix: drop zeroed entries from the perIPConnCounter map by [@​ReneWerner87](https://redirect.github.com/ReneWerner87) in [#​2337](https://redirect.github.com/valyala/fasthttp/pull/2337) - perf: skip the unusable per-call file cache in ServeFS by [@​ReneWerner87](https://redirect.github.com/ReneWerner87) in [#​2338](https://redirect.github.com/valyala/fasthttp/pull/2338) - test: return after a failed Dial instead of dereferencing a nil conn by [@​ReneWerner87](https://redirect.github.com/ReneWerner87) in [#​2341](https://redirect.github.com/valyala/fasthttp/pull/2341) - fix: don't recycle an idle timestamp its connection still owns by [@​ReneWerner87](https://redirect.github.com/ReneWerner87) in [#​2342](https://redirect.github.com/valyala/fasthttp/pull/2342) - reject Transfer-Encoding on HTTP/1.0 requests by [@​alhudz](https://redirect.github.com/alhudz) in [#​2330](https://redirect.github.com/valyala/fasthttp/pull/2330) - only treat "//" in URI.Update as an authority after a scheme by [@​alhudz](https://redirect.github.com/alhudz) in [#​2345](https://redirect.github.com/valyala/fasthttp/pull/2345) - fix: consume informational responses before the final response by [@​dev-willbird1936](https://redirect.github.com/dev-willbird1936) in [#​2333](https://redirect.github.com/valyala/fasthttp/pull/2333) - fix: reject out-of-range Content-Length instead of wrapping it by [@​lenamonj](https://redirect.github.com/lenamonj) in [#​2343](https://redirect.github.com/valyala/fasthttp/pull/2343) - perf: zero-copy chunked body writes via io.WriterTo by [@​sasgas](https://redirect.github.com/sasgas) in [#​2310](https://redirect.github.com/valyala/fasthttp/pull/2310) - fix: don't close the shutdown done channel twice by [@​ReneWerner87](https://redirect.github.com/ReneWerner87) in [#​2340](https://redirect.github.com/valyala/fasthttp/pull/2340) - Rename ChunkedBodyWriterTo to BodyWriterTo and use in more places by [@​erikdubbelboer](https://redirect.github.com/erikdubbelboer) in [#​2348](https://redirect.github.com/valyala/fasthttp/pull/2348) - chore(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2349](https://redirect.github.com/valyala/fasthttp/pull/2349) - fix: small read buffer error doesn't match the ignored string anymore by [@​Pedr0Rocha](https://redirect.github.com/Pedr0Rocha) in [#​2356](https://redirect.github.com/valyala/fasthttp/pull/2356) - Add canonical header lookup by [@​fzlzjerry](https://redirect.github.com/fzlzjerry) in [#​2354](https://redirect.github.com/valyala/fasthttp/pull/2354) - chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2361](https://redirect.github.com/valyala/fasthttp/pull/2361) - chore(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2360](https://redirect.github.com/valyala/fasthttp/pull/2360) - Fix a pooled timer panic and a test data race by [@​h2zi](https://redirect.github.com/h2zi) in [#​2351](https://redirect.github.com/valyala/fasthttp/pull/2351) - fix: send / as the path when the request-target is query-only by [@​official-burak](https://redirect.github.com/official-burak) in [#​2371](https://redirect.github.com/valyala/fasthttp/pull/2371) - perf: try to avoid reallocations while reading zstd compressed requests by [@​ethercrow](https://redirect.github.com/ethercrow) in [#​2357](https://redirect.github.com/valyala/fasthttp/pull/2357) - feat: add the QUERY method (RFC 10008) by [@​h2zi](https://redirect.github.com/h2zi) in [#​2358](https://redirect.github.com/valyala/fasthttp/pull/2358) - fix: wait for streaming reads before releasing pooled resources by [@​tbphp](https://redirect.github.com/tbphp) in [#​2353](https://redirect.github.com/valyala/fasthttp/pull/2353) - Replace github.com/andybalholm/brotli with github.com/molecule-man/go-brrr by [@​gaby](https://redirect.github.com/gaby) in [#​2366](https://redirect.github.com/valyala/fasthttp/pull/2366) - Always stream response bodies when requested by [@​erikdubbelboer](https://redirect.github.com/erikdubbelboer) in [#​2373](https://redirect.github.com/valyala/fasthttp/pull/2373) - chore(deps): bump securego/gosec from 2.28.0 to 2.29.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2375](https://redirect.github.com/valyala/fasthttp/pull/2375) - fix: let request timeouts override client timeouts by [@​Harshal96](https://redirect.github.com/Harshal96) in [#​2372](https://redirect.github.com/valyala/fasthttp/pull/2372) - avoid race condition for closing the streaming connection at EOF by [@​akshaydeo](https://redirect.github.com/akshaydeo) in [#​2379](https://redirect.github.com/valyala/fasthttp/pull/2379) - Give TestClientHeadWithBody a CI-proof read timeout by [@​h2zi](https://redirect.github.com/h2zi) in [#​2374](https://redirect.github.com/valyala/fasthttp/pull/2374) - fix: prevent stale query string after clearing query args by [@​cuishuang](https://redirect.github.com/cuishuang) in [#​2380](https://redirect.github.com/valyala/fasthttp/pull/2380) - feat(examples): add zero-allocation server example by [@​aabishkaryal](https://redirect.github.com/aabishkaryal) in [#​2362](https://redirect.github.com/valyala/fasthttp/pull/2362) - chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2384](https://redirect.github.com/valyala/fasthttp/pull/2384) #### New Contributors - [@​lenamonj](https://redirect.github.com/lenamonj) made their first contribution in [#​2343](https://redirect.github.com/valyala/fasthttp/pull/2343) - [@​sasgas](https://redirect.github.com/sasgas) made their first contribution in [#​2310](https://redirect.github.com/valyala/fasthttp/pull/2310) - [@​Pedr0Rocha](https://redirect.github.com/Pedr0Rocha) made their first contribution in [#​2356](https://redirect.github.com/valyala/fasthttp/pull/2356) - [@​fzlzjerry](https://redirect.github.com/fzlzjerry) made their first contribution in [#​2354](https://redirect.github.com/valyala/fasthttp/pull/2354) - [@​h2zi](https://redirect.github.com/h2zi) made their first contribution in [#​2351](https://redirect.github.com/valyala/fasthttp/pull/2351) - [@​official-burak](https://redirect.github.com/official-burak) made their first contribution in [#​2371](https://redirect.github.com/valyala/fasthttp/pull/2371) - [@​ethercrow](https://redirect.github.com/ethercrow) made their first contribution in [#​2357](https://redirect.github.com/valyala/fasthttp/pull/2357) - [@​tbphp](https://redirect.github.com/tbphp) made their first contribution in [#​2353](https://redirect.github.com/valyala/fasthttp/pull/2353) - [@​akshaydeo](https://redirect.github.com/akshaydeo) made their first contribution in [#​2379](https://redirect.github.com/valyala/fasthttp/pull/2379) **Full Changelog**: <https://github.com/valyala/fasthttp/compare/v1.73.0...v1.74.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42MS4zIiwidXBkYXRlZEluVmVyIjoiNDQuNjEuMyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> --------- Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]
|
9322b9c399 |
build(deps): update module github.com/jackc/pgx/v5 to v5.11.0 (#13023)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/jackc/pgx/v5](https://redirect.github.com/jackc/pgx) | `v5.10.0` → `v5.11.0` |  |  | --- ### Release Notes <details> <summary>jackc/pgx (github.com/jackc/pgx/v5)</summary> ### [`v5.11.0`](https://redirect.github.com/jackc/pgx/releases/tag/v5.11.0) [Compare Source](https://redirect.github.com/jackc/pgx/compare/v5.10.0...v5.11.0) This release adds direct PostgreSQL type scanning through `database/sql` on Go 1.27, improves compatibility with libpq connection strings and PostgreSQL date/time values, and includes further decoder hardening. See Changes for connection-string and date/time behavior changes that may affect existing applications. #### Features - stdlib: support Go 1.27's `driver.RowsColumnScanner`, allowing PostgreSQL types such as arrays and ranges to be scanned directly into Go values without `pgtype.Map.SQLScanner`. Existing `database/sql` scalar conversions and `sql.Scanner` behavior are preserved. The minimum supported Go version remains 1.25. - Add `Rows.TypeMap` to expose the type map used to decode rows, including rows created by `RowsFromResultReader` that have no underlying `Conn`. Custom implementations of `Rows`, including mocks, must add this method. - pgconn: add `Config.MaxProtocolMessageBodyLen` to configure the maximum incoming protocol message body size (carter-ya) - pgconn: add `ErrReadOnlyConnection`, `ErrReadWriteConnection`, `ErrPrimaryConnection`, and `ErrStandbyConnection` sentinel errors for `target_session_attrs` validation, allowing callers to use `errors.Is` (Adrian-Stefan Mares) - pgxpool: accept `pool_ping_timeout` in connection strings to configure `Config.PingTimeout`. The default is zero; zero and negative durations mean no timeout (1991santhu) #### Changes - Name-based row-to-struct mapping now matches explicit `db` tags case-insensitively, with exact matches taking precedence so tags can still distinguish quoted column names that differ only by case (AlisinaDevelo) - pgconn: resolve the OS user account only when no user is supplied by the connection string, environment, or service file, avoiding unnecessary account lookups and crashes in some restricted container environments. Home-directory defaults for password, service, and TLS files remain available independently of the account lookup. On Unix these now use `$HOME` rather than the OS account's home directory (Mohamed MAACHE) - pgtype: `date`, `timestamp` and `timestamptz` text values are now parsed and written by a hand-written parser and encoder for PostgreSQL's ISO date/time format instead of `time.Parse` and `time.Format`. Go's layout language cannot express a variable-width year or the BC era, which is the root of the bugs below. The text scan path is roughly 2.5x faster for `timestamp` and `timestamptz`. Bug fixes: - `timestamp` and `timestamptz` no longer silently move February 29 of a BC leap year to March 1 when encoding. `time.Date(-4712, 2, 29, ...)` was written as `4713-03-01 BC` and is now written as `4713-02-29 BC`. This affected ordinary four-digit BC years, not only extended-range ones. `date` was never affected. - `timestamp` and `timestamptz` can now scan BC leap days. `4713-02-29 BC` previously failed with `day out of range`. `date` could already scan them. - Years past 9999 can now be scanned. `10000-01-02 03:04:05` previously failed to parse, so `timestamp` and `timestamptz` values at the high end of PostgreSQL's range were unreadable over the simple protocol and in any other text-format result. - `time.Time` arguments in the simple protocol now encode BC dates correctly, using the same timestamp encoder. - Fractional seconds beyond microsecond precision are rounded the way the server rounds them (round half to even, carrying into the rest of the value) instead of being kept at full precision. PostgreSQL never sends more than six fractional digits, so this only affects values from other sources. Behavior changes: - `date` now rejects impossible dates instead of normalizing them. `2024-02-30` returned `2024-03-01` and `2024-13-01` returned `2025-01-01`; both are now errors. `timestamp` and `timestamptz` already rejected them. - All three types now reject values outside PostgreSQL's range for that type, in the binary format as well as the text format. PostgreSQL never sends out-of-range dates, so this only affects corrupt or hand-built input; the range is checked in both formats so that whether a value is accepted does not depend on `QueryExecMode`. `timestamptz` also rejects time zone displacements outside PostgreSQL's signed 32-bit seconds range, while accepting the wider offsets emitted for POSIX time zones, such as `+16`. - `timestamptz` values scanned from the text format are now returned in `time.Local`, or in `ScanLocation` when it is set, matching what the binary format has always returned. Previously the text path kept whatever location `time.Parse` derived from the offset the server sent, so the same value scanned in the two formats could report a different `Location()` and `Zone()`. The instant is unchanged, but everything that renders the location changes with it: `Timestamptz.MarshalJSON` now writes the client's offset rather than the server's, so a value the server sent as `+05:30` marshals as `2024-01-01T13:34:05-08:00` on a UTC-8 client instead of `2024-01-02T03:04:05+05:30`, and `DecodeDatabaseSQLValue` hands `database/sql` a `time.Time` in that same location. Set the codec's `ScanLocation` to `time.UTC` to pin the location regardless of the client's zone. - Error messages from these paths have changed. - pgconn: connection URIs (`postgres://...`) are now parsed by a new parser designed to exactly match libpq's URI parser behavior instead of `net/url`, making pgx accept and reject exactly the same URIs as libpq (verified by differential fuzzing against libpq itself). Most connection strings are unaffected. Edge-case behavior changes, all matching libpq: - `+` in query values is literal, no longer decoded as a space. - Malformed percent-encoding is a parse error instead of the parameter being silently dropped. `%00` is rejected. - Leading/trailing spaces in URI components are trimmed; interior spaces are a parse error (encode them as `%20`). - `#` is ordinary data, not a fragment delimiter. - The userinfo terminator is the first `@` before any `/` (previously the last `@`). - When a query parameter is repeated, the last occurrence wins (previously the first). - `ssl=true` is accepted as an alias for `sslmode=require` in URIs (JDBC compatibility). A repeated `ssl` key follows the same last-occurrence-wins rule as other repeated parameters, even across the rewrite to `sslmode`. If the final `ssl` value is not `true`, an independent explicit `sslmode` remains in effect. - Multiple hosts with mixed port specs are positionally aligned: `postgres://h1,h2:5433/db` now means h1:5432 and h2:5433 (previously both hosts got port 5433). A port list that is neither a single port nor exactly one port per host is an error (`could not match N port numbers to M hosts`), also for keyword/value connection strings. - An IPv6 address in a URI must be enclosed in brackets. A bare `postgres://::1/db` was previously accepted as host `::1`; it is now read as an empty host followed by port `:1` and fails with an invalid port error. Write it as `postgres://[::1]/db`. - Empty host list elements (e.g. `h1,,h2`) get the default host instead of being dropped. Likewise, an empty host in a keyword/value string (`host=`) now means the default host -- typically the Unix socket directory -- where it previously meant a TCP connection to an empty hostname. - An empty port (`?port=` in a URI or `port=` in a keyword/value string) now means the default port 5432 for the affected hosts; previously it was an invalid port error. Like any connection-string port, a present-but-empty port takes precedence over `PGPORT`. - ASCII control characters (tab, newline, ...) in a URI are ordinary data bytes, as they are to libpq; `net/url` rejected any URI containing one. The exception is a literal NUL byte, which is still rejected, as `net/url` did. (libpq never sees one -- C strings end at the first NUL -- but in Go a raw NUL could otherwise pass through into the NUL-delimited startup message and inject extra parameters.) Unlike libpq, unrecognized URI query parameters are still accepted (they become runtime parameters or pgx-specific options). Parse error messages avoid quoting the unredacted connection string and redact recognizable password fields on a best-effort basis. Invalid connection strings can be structurally ambiguous, so password redaction cannot be guaranteed for every malformed input. - pgconn: keyword/value connection strings (`host=... user=...`) now match libpq's parser exactly, the same treatment the URI parser received above and verified the same way, by differential fuzzing against libpq itself. Most connection strings are unaffected. Behavior changes, all matching libpq: - A backslash escapes whatever character follows it and is dropped, where previously only `\\` and `\'` were unescaped and every other backslash was kept. A value containing a backslash must now escape it, as libpq requires: `sslcert=C:\path\to\cert` reads as `C:pathtocert` and has to be written `sslcert=C:\\path\\to\\cert`. This mainly affects Windows certificate and key paths, which previously came through intact without doubling. - A trailing backslash in an unquoted value escapes the end of the string, so it is dropped and the value ends there; it was previously rejected with `invalid backslash`. Inside a quoted value the escaped terminator leaves the string unterminated, which is still an error. - Whitespace inside a keyword is an error (`missing "=" after "us" in connection info string`) instead of becoming part of the key. Whitespace around the `=` is unaffected. This most often shows up with an unquoted value containing a space: `application_name=my app host=x` previously set neither parameter and sent `app host` to the server as a runtime parameter, and now fails to parse. As with URIs, unrecognized keywords are still accepted where libpq rejects them, and an empty `user=` is still dropped so that `PGUSER` and the OS user still apply. #### Fixes - Keep the connection open after a recoverable PostgreSQL error from `Begin` or `BeginTx` (Victor Alejandro Sanz Ararat) - Call `TraceQueryEnd` when `Exec` fails while deallocating invalidated cached statements (Chris Bandy) - Deallocate a failed prepare using the statement name actually sent to the server, and skip cleanup if Parse never completed, avoiding leaked prepared statements and unnecessary cleanup errors (Eliran Ben-Zikri) - Fix `LoadTypes` overwriting scalar codecs such as `box` and `point` with an incorrect `ArrayCodec` (Arsen Ozhetov) - pgconn: retrieve field descriptions when cached descriptions are empty, such as for cursor `FETCH` statements, including batch and pipeline execution (water) - pgconn: keep batch statement descriptions and result formats aligned when commands return no rows or when `Batch.ExecStatement` is mixed with other batch commands; preserve field descriptions for empty results - pgconn: handle empty and comment-only queries in pipeline mode, discard stale statement data after bind errors, and return a nil result from `Pipeline.GetResults` on error - pgconn: skip reading the password file when a password is already set (Jared Fowkes) - pgxpool: treat non-positive `MaxConnLifetime` values as unlimited instead of immediately expiring connections (Aurelien Pillevesse) - pgtype: support non-comma text array delimiters through `ArrayCodec.Delimiter`, including the semicolon delimiter used by `box[]`. `LoadType` and `LoadTypes` now load the delimiter from PostgreSQL (Sueun Cho) - pgtype: quote text array elements containing internal whitespace (Louisa Huang) - pgtype: quote and escape text range bounds containing delimiters, quotes, or backslashes, and distinguish empty string bounds from unbounded ranges (Sueun Cho) - pgtype: preserve decimal precision in `Numeric.ScanScientific` and accept scientific notation in `Numeric.UnmarshalJSON`; reject out-of-range scientific exponents and preserve the original input in parse errors (Sueun Cho) - pgtype: encode and decode numeric infinity in JSON as `"Infinity"` and `"-Infinity"` instead of encoding it as zero (Vladimir Saraikin) - pgtype: treat a valid `Numeric` with a nil `Int` as zero in `Int64Value`, and return errors when converting NaN or infinity to an integer instead of panicking (Vladimir Saraikin) - pgtype: fix an infinite loop when decoding binary numeric zero with a nonzero digit count (Vladimir Saraikin) - pgtype: fix binary numeric digit-count overflow and trailing-byte handling. Binary encoding now rejects values whose digit count, weight, or scale cannot fit the wire format, while accepting the full unsigned digit-count range. - pgtype: fix scanning through multiple pointer levels, including SQL NULL and XML values, and return an error instead of panicking when a pointer-to-pointer scan destination is nil (Rangel Reale) - pgtype: use bounds-checked binary reads throughout the codecs and reject malformed lengths, counts, and trailing data. This includes fixes for panics on malformed records and truncated multiranges (Vladimir Saraikin), and validation of `bit` / `varbit` bit lengths against the actual data (g3m0sis). - pgtype: return errors instead of panicking on malformed interval text (greymoth-jp), unterminated composite text fields, and text arrays whose dimensions and element counts disagree - pgtype: cap the initial allocation estimate when parsing hstore text to avoid excessive allocation from unvalidated separator counts; valid hstores may still contain any number of pairs (AshSgDe29071999) - pgtype: correct reversed bounds in integer scan error messages - pgconn: a backslash as the last byte of a quoted value in a keyword/value connection string no longer panics with `slice bounds out of range`. `host='a\` -- and the shorter `='\`, reachable through `pgx.ParseConfig` and `pgxpool.ParseConfig` -- now return `unterminated quoted string in connection info string`, libpq's own message for the same input. The unquoted branch has been guarded since [`be69c1c`](https://redirect.github.com/jackc/pgx/commit/be69c1c1); the quoted branch carried the same unguarded increment since the parser was ported from pgx v3. Found by fuzzing (Maxim Korotkov) - pgconn: error messages that embed the connection string now also redact `password` and `sslpassword` values supplied as URI query parameters; previously only the userinfo password was redacted. Redaction matches keys the way the parser does -- percent-encoded spellings such as `pass%77ord=` are recognized -- and masks the entire raw value, so a password containing a space cannot leak its tail into the error message. Credentials stranded outside the userinfo by a malformed URI are masked whole, and invalid-port errors no longer embed the offending text (which in a malformed URI can be a mislaid password). Redaction of invalid connection strings is necessarily best effort: their structure may be ambiguous, so some malformed inputs can still expose password text in an error. - pgconn: `ParseConfigOptions.ConnStringAllowedKeys` no longer exempts an explicitly supplied empty port (`?port=` in a URI or `port=` in a keyword/value string) from the allow-list. Only the implied all-empty port list of a multi-host URI without ports (`postgres://h1,h2/db`) is exempt. An explicit empty port shadows `PGPORT` even though it is empty, so it must be allowed like any other user-supplied key. The URI-only `ssl=true` alias is accepted when either `ssl` or `sslmode` is allowed, and every `ssl`/`sslmode` spelling written in the URI is validated -- including occurrences superseded by later repeated parameters. - pgconn: drain socket before close in `asyncClose` so context cancellation produces a TCP FIN instead of RST, avoiding "connection reset by peer" on the server / proxy (Sean Chittenden at CrowdStrike, Inc.) - pgproto3: `StartupMessage.Encode` rejects a NUL byte in any parameter name or value instead of writing it. The startup message body is a run of NUL-delimited strings whose length is data-driven, so a NUL in a value ends that parameter and everything after it is read by the server as further parameters -- an `application_name` of `x\x00user\x00admin` changed the role the connection logged in as. libpq cannot reach this state because its parameters are NUL-terminated C strings. `Connect` now fails with nothing written to the wire, which covers settings that bypass connection string parsing: service files and direct assignment to `Config.RuntimeParams`, `Config.User`, or `Config.Database`. - pgconn: keyword/value connection strings containing a NUL byte are rejected by `ParseConfig`, as URIs already were. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNjkuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
69b08fdad9 |
build(deps): update module github.com/mattn/go-sqlite3 to v1.14.52 (#12995)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/mattn/go-sqlite3](https://redirect.github.com/mattn/go-sqlite3) | `v1.14.50` → `v1.14.52` |  |  | --- ### Release Notes <details> <summary>mattn/go-sqlite3 (github.com/mattn/go-sqlite3)</summary> ### [`v1.14.52`](https://redirect.github.com/mattn/go-sqlite3/releases/tag/v1.14.52): 1.14.52 [Compare Source](https://redirect.github.com/mattn/go-sqlite3/compare/v1.14.51...v1.14.52) #### What's Changed - Replace schema probe with eager first step for cached statements by [@​mattn](https://redirect.github.com/mattn) in [#​1454](https://redirect.github.com/mattn/go-sqlite3/pull/1454) **Full Changelog**: <https://github.com/mattn/go-sqlite3/compare/v1.14.51...v1.14.52> ### [`v1.14.51`](https://redirect.github.com/mattn/go-sqlite3/releases/tag/v1.14.51): 1.14.51 [Compare Source](https://redirect.github.com/mattn/go-sqlite3/compare/v1.14.50...v1.14.51) #### What's Changed - fix: Exec returns wrong arg count in "not enough args" error by [@​semihbkgr](https://redirect.github.com/semihbkgr) in [#​1396](https://redirect.github.com/mattn/go-sqlite3/pull/1396) - refactor: Clean up deprecated // +build legacy build tags by [@​zxysilent](https://redirect.github.com/zxysilent) in [#​1428](https://redirect.github.com/mattn/go-sqlite3/pull/1428) - Fixed som typos and wrappings in sqlite3\_func\_crypt.go documentation. by [@​kberov](https://redirect.github.com/kberov) in [#​1367](https://redirect.github.com/mattn/go-sqlite3/pull/1367) - Replace copy-on-write handle map with sync.Map by [@​mattn](https://redirect.github.com/mattn) in [#​1453](https://redirect.github.com/mattn/go-sqlite3/pull/1453) - Avoid per-row goroutines for query cancellation by [@​bradengroom](https://redirect.github.com/bradengroom) in [#​1444](https://redirect.github.com/mattn/go-sqlite3/pull/1444) - Flush statement cache when the schema changes by [@​mattn](https://redirect.github.com/mattn) in [#​1452](https://redirect.github.com/mattn/go-sqlite3/pull/1452) #### New Contributors - [@​semihbkgr](https://redirect.github.com/semihbkgr) made their first contribution in [#​1396](https://redirect.github.com/mattn/go-sqlite3/pull/1396) - [@​zxysilent](https://redirect.github.com/zxysilent) made their first contribution in [#​1428](https://redirect.github.com/mattn/go-sqlite3/pull/1428) - [@​kberov](https://redirect.github.com/kberov) made their first contribution in [#​1367](https://redirect.github.com/mattn/go-sqlite3/pull/1367) - [@​bradengroom](https://redirect.github.com/bradengroom) made their first contribution in [#​1444](https://redirect.github.com/mattn/go-sqlite3/pull/1444) **Full Changelog**: <https://github.com/mattn/go-sqlite3/compare/v1.14.50...v1.14.51> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42MS4zIiwidXBkYXRlZEluVmVyIjoiNDQuNjEuMyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
c2f44a64ca |
build(deps): update module golang.org/x/crypto to v0.56.0 (#12954)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) | [`v0.55.0` → `v0.56.0`](https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.55.0...refs/tags/v0.56.0) |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/2330) for more information. --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41Ny4zIiwidXBkYXRlZEluVmVyIjoiNDQuNTcuMyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
59f04215ab |
build(deps): update module github.com/go-sql-driver/mysql to v1.10.1 (#12946)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-sql-driver/mysql](https://redirect.github.com/go-sql-driver/mysql) | `v1.10.0` → `v1.10.1` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/2330) for more information. --- ### Release Notes <details> <summary>go-sql-driver/mysql (github.com/go-sql-driver/mysql)</summary> ### [`v1.10.1`](https://redirect.github.com/go-sql-driver/mysql/blob/HEAD/CHANGELOG.md#v1101-2026-09-02) [Compare Source](https://redirect.github.com/go-sql-driver/mysql/compare/v1.10.0...v1.10.1) - Fix `Config.FormatDSN()` dropping `Addr` when `Net` is empty. It now uses the default `tcp` network so configs with only `Addr` round-trip correctly. ([#​1770](https://redirect.github.com/go-sql-driver/mysql/issues/1770)) - Fix typed-nil `json.RawMessage` with `interpolateParams=true` being interpolated as an empty string. It is now interpolated as SQL `NULL`, matching server-side prepared statements. ([#​1782](https://redirect.github.com/go-sql-driver/mysql/issues/1782)) - Add MariaDB 11.8 and 12.3 to the test matrix. ([#​1774](https://redirect.github.com/go-sql-driver/mysql/issues/1774)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41Ny4zIiwidXBkYXRlZEluVmVyIjoiNDQuNTcuMyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
James ElliottandAmir Zarrinkafsh
|
240bfed81d |
build(deps): update module authelia.com/provider/oauth2 to v0.3.0 (#12922)
Closes #12927 --------- Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
James Elliott
|
2d5325d9a7 |
build(deps): update module github.com/go-webauthn/webauthn to v0.18.0 (#12900)
Closes #12901. |
||
|
renovate[bot]
|
d73a7b07ce |
build(deps): update module github.com/sirupsen/logrus to v1.10.2 (#12885)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/sirupsen/logrus](https://redirect.github.com/sirupsen/logrus) | `v1.10.1` → `v1.10.2` |  |  | --- ### Release Notes <details> <summary>sirupsen/logrus (github.com/sirupsen/logrus)</summary> ### [`v1.10.2`](https://redirect.github.com/sirupsen/logrus/releases/tag/v1.10.2) [Compare Source](https://redirect.github.com/sirupsen/logrus/compare/v1.10.1...v1.10.2) ### Logrus v1.10.2 This is a small maintenance release that updates `github.com/stretchr/testify` to v1.12.1, removing the legacy `gopkg.in/yaml.v3` dependency from Logrus' dependency graph. There are no functional changes in this release. Dependency Changes - update github.com/stretchr/testify to v1.12.1 **Full Changelog**: <https://github.com/sirupsen/logrus/compare/v1.10.1...v1.10.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zOS4wIiwidXBkYXRlZEluVmVyIjoiNDQuMzkuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
a3e1b15847 |
build(deps): update module github.com/sirupsen/logrus to v1.10.1 (#12744)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/sirupsen/logrus](https://redirect.github.com/sirupsen/logrus) | `v1.9.4` → `v1.10.1` |  |  | --- ### Release Notes <details> <summary>sirupsen/logrus (github.com/sirupsen/logrus)</summary> ### [`v1.10.1`](https://redirect.github.com/sirupsen/logrus/releases/tag/v1.10.1) [Compare Source](https://redirect.github.com/sirupsen/logrus/compare/v1.10.0...v1.10.1) ### Logrus v1.10.1 This patch release fixes two issues in field formatting and handling: - Fix a regression introduced in v1.10.0 where `TextFormatter` could panic when formatting nil or panicking `error` and `fmt.Stringer` values. - Allow function-backed values implementing `error` to be used with `WithError`, `WithField`, and `WithFields`. Dependency Changes - update github.com/stretchr/testify to v1.12.0 **Full Changelog**: <https://github.com/sirupsen/logrus/compare/v1.10.0...v1.10.1> ### [`v1.10.0`](https://redirect.github.com/sirupsen/logrus/releases/tag/v1.10.0) [Compare Source](https://redirect.github.com/sirupsen/logrus/compare/v1.9.4...v1.10.0) ### Logrus v1.10.0 This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs. #### 🚀 Performance Major improvements across `TextFormatter`, entry handling, and common logger paths: - \~17% lower geomean runtime across the benchmark suite - \~27% higher geomean formatter throughput - Common enabled logging paths are \~30–44% faster - `WithError` is \~40% faster - Chained fields are \~46% faster - `TextFormatter` paths are up to \~40% faster - Allocation counts are reduced by \~25–74% across measured `TextFormatter` cases, with the largest reductions in colored output The improvements also show up in complete logger paths: - Logger + `TextFormatter` is \~31% faster, with \~24% fewer allocations - Logger + `JSONFormatter` is \~21% faster, with \~10% fewer allocations `JSONFormatter` itself remains largely unchanged in runtime performance, with small allocation reductions. #### 🔄 `log/slog` interoperability v1.10 adds bidirectional interoperability between Logrus and Go's `log/slog`: - A Logrus `slog` hook can forward existing Logrus entries to an `slog` logger. - `hooks/slog.NewHandler` implements `slog.Handler`, allowing `log/slog` records to use an existing Logrus logger and its hooks, formatter, and output. - The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information. - Caller reporting is configured per handler, without requiring Logrus's logger-wide `ReportCaller` option. - Custom `slog` levels can be mapped to Logrus levels. - The hook and handler can be combined, providing a practical path for incrementally migrating from Logrus to `log/slog` without requiring an all-at-once transition. This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites can start using an `slog` backend, while new `slog` code can continue using an established Logrus setup. #### 🔒 Concurrency & Correctness - Fix reentrant logging deadlocks, including logging from within `MarshalJSON` or formatter code. - Fix generic `Log`, `Logf`, `Logln`, and `LogFn` methods unexpectedly panicking when called with `PanicLevel`, contrary to their documented behavior. - Eliminate race conditions in entry and formatter paths. - Improve locking boundaries around formatters and hooks. #### ➕ Added - `TextFormatter` now automatically enables colors on Windows terminals with ANSI support, matching behavior on other platforms. - `Entry.Caller` can now be set explicitly and is preserved across derived entries. When caller reporting is enabled, Logrus only detects and populates caller information when none was provided, allowing custom caller detection and wrapper-aware logging without adding additional caller configuration APIs. - Add minimal, composable logging interfaces for each log level, allowing consumers to depend on narrower interfaces and making logging implementations easier to substitute or adapt. - Expand CI verification to include TinyGo and every cross-compile target reported by go tool dist list, improving coverage across alternative toolchains and platforms. #### ⚠️ Behavioral Changes - Minimum supported Go version is now **1.23**. - `TextFormatter` now renders `[]byte` as raw/quoted strings instead of numeric slices. If you relied on the previous slice-of-ints output, convert explicitly before logging. - `TextFormatter` now uses dim cyan for debug output and dim white for trace output in colorized TTY output. - `Entry.HasCaller` is now deprecated in favor of checking `Entry.Caller` directly. A `//go:fix inline` directive was added so existing uses can be updated automatically. - `MutexWrap`, which was unintentionally exposed as public API, is deprecated. It remains available as an alias for compatibility but should not be used directly. *** v1.10 is primarily a performance, correctness, and interoperability release with no intentional breaking public API changes. <details> <summary>Benchmarks (sampled at 457e372460c7a80ca7c800b51ebeee5362aaa180)</summary> ```console goos: darwin goarch: arm64 pkg: github.com/sirupsen/logrus/benches cpu: Apple M3 Pro │ v1.9.4.txt │ v1.10.0.txt │ │ sec/op │ sec/op vs base │ Entry_WithError 228.8n ± 4% 137.4n ± 5% -39.95% (p=0.000 n=10) Entry_WithField_Chain 1346.5n ± 2% 733.5n ± 3% -45.53% (p=0.000 n=10) Entry_WithFields/valid_fields_only 236.2n ± 6% 255.4n ± 1% +8.11% (p=0.001 n=10) Entry_WithFields/contains_func 293.1n ± 3% 285.1n ± 3% -2.76% (p=0.043 n=10) Entry_WithFields/contains_func_ptr 296.5n ± 3% 300.1n ± 5% ~ (p=0.529 n=10) Entry_WithFields/mixed_valid_invalid 339.7n ± 4% 336.7n ± 2% ~ (p=0.315 n=10) Entry_WithFields/larger_map 635.9n ± 4% 693.8n ± 2% +9.11% (p=0.000 n=10) Entry_ReportCaller_NoCaller 933.4n ± 3% 924.0n ± 2% ~ (p=0.105 n=10) Entry_ReportCaller_WithCaller 2.693µ ± 2% 3.050µ ± 3% +13.28% (p=0.000 n=10) Entry_ReportCaller_NoCaller_Depth4 914.3n ± 2% 905.5n ± 3% ~ (p=0.481 n=10) Entry_ReportCaller_WithCaller_Depth4 2.736µ ± 8% 3.048µ ± 5% +11.36% (p=0.000 n=10) ZeroTextFormatter 457.6n ± 1% 369.3n ± 2% -19.31% (p=0.000 n=10) OneStringTextFormatter 637.0n ± 1% 549.4n ± 2% -13.75% (p=0.000 n=10) OneNumericTextFormatter 682.7n ± 1% 550.2n ± 1% -19.42% (p=0.000 n=10) OneBoolTextFormatter 669.7n ± 1% 550.0n ± 1% -17.87% (p=0.000 n=10) NumericTextFormatter 1.685µ ± 3% 1.261µ ± 2% -25.17% (p=0.000 n=10) BoolTextFormatter 1.450µ ± 1% 1.082µ ± 3% -25.39% (p=0.000 n=10) StringerTextFormatter 2.066µ ± 1% 1.323µ ± 1% -35.95% (p=0.000 n=10) ErrorTextFormatter 924.7n ± 5% 686.7n ± 1% -25.74% (p=0.000 n=10) SmallTextFormatter 944.4n ± 1% 862.6n ± 1% -8.66% (p=0.000 n=10) LargeTextFormatter 5.527µ ± 5% 4.750µ ± 2% -14.07% (p=0.000 n=10) SmallColoredTextFormatter 1337.0n ± 3% 838.6n ± 1% -37.28% (p=0.000 n=10) LargeColoredTextFormatter 7.955µ ± 5% 4.749µ ± 3% -40.30% (p=0.000 n=10) SmallJSONFormatter 1.627µ ± 1% 1.637µ ± 6% ~ (p=0.670 n=10) LargeJSONFormatter 8.335µ ± 3% 8.172µ ± 1% -1.96% (p=0.000 n=10) DummyLogger 1.843µ ± 3% 1.551µ ± 2% -15.82% (p=0.000 n=10) DummyLoggerNoLock 1.840µ ± 3% 1.558µ ± 3% -15.30% (p=0.000 n=10) LoggerLog/disabled_level 1.248n ± 11% 1.192n ± 11% -4.49% (p=0.011 n=10) LoggerLog/enabled_log 223.9n ± 3% 157.7n ± 5% -29.57% (p=0.000 n=10) LoggerLog/enabled_logln 284.2n ± 1% 158.9n ± 2% -44.09% (p=0.000 n=10) LoggerJSONFormatter 2.177µ ± 1% 1.712µ ± 1% -21.34% (p=0.000 n=10) LoggerTextFormatter 1.860µ ± 5% 1.282µ ± 3% -31.05% (p=0.000 n=10) geomean 843.9n 698.9n -17.18% │ v1.9.4.txt │ v1.10.0.txt │ │ B/op │ B/op vs base │ Entry_WithError 448.0 ± 0% 448.0 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithField_Chain 2.188Ki ± 0% 2.188Ki ± 0% ~ (p=1.000 n=10) ¹ Entry_WithFields/valid_fields_only 448.0 ± 0% 448.0 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithFields/contains_func 488.0 ± 0% 488.0 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithFields/contains_func_ptr 488.0 ± 0% 488.0 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithFields/mixed_valid_invalid 488.0 ± 0% 488.0 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithFields/larger_map 1.320Ki ± 0% 1.320Ki ± 0% ~ (p=1.000 n=10) ¹ Entry_ReportCaller_NoCaller 821.0 ± 0% 800.0 ± 0% -2.56% (p=0.000 n=10) Entry_ReportCaller_WithCaller 1.614Ki ± 0% 1.581Ki ± 0% -2.06% (p=0.000 n=10) Entry_ReportCaller_NoCaller_Depth4 821.0 ± 0% 800.0 ± 0% -2.56% (p=0.000 n=10) Entry_ReportCaller_WithCaller_Depth4 1.614Ki ± 0% 1.581Ki ± 0% -2.06% (p=0.000 n=10) ZeroTextFormatter 272.0 ± 0% 232.0 ± 0% -14.71% (p=0.000 n=10) OneStringTextFormatter 304.0 ± 0% 264.0 ± 0% -13.16% (p=0.000 n=10) OneNumericTextFormatter 308.0 ± 0% 264.0 ± 0% -14.29% (p=0.000 n=10) OneBoolTextFormatter 308.0 ± 0% 264.0 ± 0% -14.29% (p=0.000 n=10) NumericTextFormatter 920.0 ± 0% 808.0 ± 0% -12.17% (p=0.000 n=10) BoolTextFormatter 626.0 ± 0% 552.0 ± 0% -11.82% (p=0.000 n=10) StringerTextFormatter 968.0 ± 0% 808.0 ± 0% -16.53% (p=0.000 n=10) ErrorTextFormatter 472.0 ± 0% 424.0 ± 0% -10.17% (p=0.000 n=10) SmallTextFormatter 528.0 ± 0% 488.0 ± 0% -7.58% (p=0.000 n=10) LargeTextFormatter 3.773Ki ± 0% 3.156Ki ± 0% -16.36% (p=0.000 n=10) SmallColoredTextFormatter 600.0 ± 0% 392.0 ± 0% -34.67% (p=0.000 n=10) LargeColoredTextFormatter 4.406Ki ± 0% 2.859Ki ± 0% -35.11% (p=0.000 n=10) SmallJSONFormatter 1.078Ki ± 0% 1.070Ki ± 0% -0.72% (p=0.000 n=10) LargeJSONFormatter 5.086Ki ± 0% 5.078Ki ± 0% -0.15% (p=0.000 n=10) DummyLogger 748.0 ± 0% 704.0 ± 0% -5.88% (p=0.000 n=10) DummyLoggerNoLock 748.0 ± 0% 704.0 ± 0% -5.88% (p=0.000 n=10) LoggerLog/disabled_level 0.000 ± 0% 0.000 ± 0% ~ (p=1.000 n=10) ¹ LoggerLog/enabled_log 212.0 ± 0% 208.0 ± 0% -1.89% (p=0.000 n=10) LoggerLog/enabled_logln 240.0 ± 0% 208.0 ± 0% -13.33% (p=0.000 n=10) LoggerJSONFormatter 2.156Ki ± 0% 2.125Ki ± 0% -1.45% (p=0.000 n=10) LoggerTextFormatter 1.625Ki ± 0% 1.547Ki ± 0% -4.81% (p=0.000 n=10) geomean ² -8.14% ² ¹ all samples are equal ² summaries must be >0 to compute geomean │ v1.9.4.txt │ v1.10.0.txt │ │ allocs/op │ allocs/op vs base │ Entry_WithError 3.000 ± 0% 3.000 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithField_Chain 15.00 ± 0% 15.00 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithFields/valid_fields_only 3.000 ± 0% 3.000 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithFields/contains_func 5.000 ± 0% 5.000 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithFields/contains_func_ptr 5.000 ± 0% 5.000 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithFields/mixed_valid_invalid 5.000 ± 0% 5.000 ± 0% ~ (p=1.000 n=10) ¹ Entry_WithFields/larger_map 5.000 ± 0% 5.000 ± 0% ~ (p=1.000 n=10) ¹ Entry_ReportCaller_NoCaller 18.00 ± 0% 15.00 ± 0% -16.67% (p=0.000 n=10) Entry_ReportCaller_WithCaller 29.00 ± 0% 26.00 ± 0% -10.34% (p=0.000 n=10) Entry_ReportCaller_NoCaller_Depth4 18.00 ± 0% 15.00 ± 0% -16.67% (p=0.000 n=10) Entry_ReportCaller_WithCaller_Depth4 29.00 ± 0% 26.00 ± 0% -10.34% (p=0.000 n=10) ZeroTextFormatter 10.000 ± 0% 7.000 ± 0% -30.00% (p=0.000 n=10) OneStringTextFormatter 11.000 ± 0% 8.000 ± 0% -27.27% (p=0.000 n=10) OneNumericTextFormatter 12.000 ± 0% 8.000 ± 0% -33.33% (p=0.000 n=10) OneBoolTextFormatter 12.000 ± 0% 8.000 ± 0% -33.33% (p=0.000 n=10) NumericTextFormatter 19.00 ± 0% 10.00 ± 0% -47.37% (p=0.000 n=10) BoolTextFormatter 18.000 ± 0% 9.000 ± 0% -50.00% (p=0.000 n=10) StringerTextFormatter 22.00 ± 0% 10.00 ± 0% -54.55% (p=0.000 n=10) ErrorTextFormatter 14.000 ± 0% 9.000 ± 0% -35.71% (p=0.000 n=10) SmallTextFormatter 12.000 ± 0% 9.000 ± 0% -25.00% (p=0.000 n=10) LargeTextFormatter 19.00 ± 0% 14.00 ± 0% -26.32% (p=0.000 n=10) SmallColoredTextFormatter 15.000 ± 0% 7.000 ± 0% -53.33% (p=0.000 n=10) LargeColoredTextFormatter 46.00 ± 0% 12.00 ± 0% -73.91% (p=0.000 n=10) SmallJSONFormatter 25.00 ± 0% 23.00 ± 0% -8.00% (p=0.000 n=10) LargeJSONFormatter 75.00 ± 0% 73.00 ± 0% -2.67% (p=0.000 n=10) DummyLogger 13.000 ± 0% 9.000 ± 0% -30.77% (p=0.000 n=10) DummyLoggerNoLock 13.000 ± 0% 9.000 ± 0% -30.77% (p=0.000 n=10) LoggerLog/disabled_level 0.000 ± 0% 0.000 ± 0% ~ (p=1.000 n=10) ¹ LoggerLog/enabled_log 4.000 ± 0% 3.000 ± 0% -25.00% (p=0.000 n=10) LoggerLog/enabled_logln 6.000 ± 0% 3.000 ± 0% -50.00% (p=0.000 n=10) LoggerJSONFormatter 30.00 ± 0% 27.00 ± 0% -10.00% (p=0.000 n=10) LoggerTextFormatter 21.00 ± 0% 16.00 ± 0% -23.81% (p=0.000 n=10) geomean ² -25.77% ² ¹ all samples are equal ² summaries must be >0 to compute geomean │ v1.9.4.txt │ v1.10.0.txt │ │ B/s │ B/s vs base │ ZeroTextFormatter 106.3Mi ± 1% 131.7Mi ± 2% +23.90% (p=0.000 n=10) OneStringTextFormatter 88.34Mi ± 1% 102.42Mi ± 2% +15.95% (p=0.000 n=10) OneNumericTextFormatter 78.23Mi ± 1% 97.08Mi ± 1% +24.09% (p=0.000 n=10) OneBoolTextFormatter 82.59Mi ± 1% 100.57Mi ± 1% +21.77% (p=0.000 n=10) NumericTextFormatter 74.74Mi ± 3% 99.85Mi ± 2% +33.60% (p=0.000 n=10) BoolTextFormatter 65.15Mi ± 1% 87.32Mi ± 3% +34.04% (p=0.000 n=10) StringerTextFormatter 64.64Mi ± 1% 100.90Mi ± 1% +56.10% (p=0.000 n=10) ErrorTextFormatter 69.10Mi ± 5% 93.05Mi ± 1% +34.66% (p=0.000 n=10) SmallTextFormatter 86.85Mi ± 1% 95.08Mi ± 1% +9.48% (p=0.000 n=10) LargeTextFormatter 49.35Mi ± 5% 57.43Mi ± 2% +16.38% (p=0.000 n=10) SmallColoredTextFormatter 102.7Mi ± 3% 163.8Mi ± 1% +59.42% (p=0.000 n=10) LargeColoredTextFormatter 67.14Mi ± 5% 112.45Mi ± 3% +67.48% (p=0.000 n=10) SmallJSONFormatter 66.84Mi ± 1% 66.44Mi ± 6% ~ (p=0.684 n=10) LargeJSONFormatter 46.91Mi ± 3% 47.85Mi ± 1% +2.00% (p=0.000 n=10) geomean 73.01Mi 92.67Mi +26.93% ``` </details> **Full Changelog**: <https://github.com/sirupsen/logrus/compare/v1.9.4...v1.10.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yOS41IiwidXBkYXRlZEluVmVyIjoiNDQuMzUuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
67a6409128 |
build(deps): update module github.com/duosecurity/duo_api_golang to v0.3.0 (#12809)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/duosecurity/duo_api_golang](https://redirect.github.com/duosecurity/duo_api_golang) | `v0.2.0` → `v0.3.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/2330) for more information. --- ### Release Notes <details> <summary>duosecurity/duo_api_golang (github.com/duosecurity/duo_api_golang)</summary> ### [`v0.3.0`](https://redirect.github.com/duosecurity/duo_api_golang/releases/tag/v0.3.0): Unstable Version 0.3.0 [Compare Source](https://redirect.github.com/duosecurity/duo_api_golang/compare/0.2.0...v0.3.0) Unstable Version 0.3.0 Changes: - Add an option to disable CA certificate pinning - Add CA bundle version and pinning status to the user agent string </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zNS40IiwidXBkYXRlZEluVmVyIjoiNDQuMzUuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andAmir Zarrinkafsh
|
107b8968e9 |
build(deps): update module cel.dev/cel-go to v0.32.0 (#12800)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/google/cel-go](https://redirect.github.com/google/cel-go) | `v0.31.0` → `v0.32.0` |  |  | --- ### Release Notes <details> <summary>google/cel-go (github.com/google/cel-go)</summary> ### [`v0.32.0`](https://redirect.github.com/cel-expr/cel-go/releases/tag/v0.32.0) [Compare Source](https://redirect.github.com/google/cel-go/compare/v0.31.0...v0.32.0) ##### **Summary of Changes** This release of cel-go (v0.32.0) introduces significant library expansions alongside a major infrastructure migration. Key highlights include the addition of native support for **JWT and HMAC operations**, Go-based JSON handling via NativeToValue, and robust timestamp parsing helpers. **Critical Upgrade**: This release changes the module and import paths to cel.dev/cel-go. Users must update their import statements when upgrading to this version. A variety of concurrency and stability fixes are also included, such as addressing nil pointer panics during native object traversals, and fixing cost observability when combined with state tracking or exhaustive eval **Breaking Changes** | Change | PR Link | | :--------------------------------------------------- | :---------------------------------------------------- | | **Switch module and import paths to cel.dev/cel-go** | [#​1413](https://redirect.github.com/cel-expr/cel-go/pull/1413) | **Features** | Feature | PR Link | | :--------------------------------------------------------------------------- | :---------------------------------------------------- | | **JWT data types with Parse and claim helpers** | [#​1415](https://redirect.github.com/cel-expr/cel-go/pull/1415) | | **HMAC verify / compute library** | [#​1416](https://redirect.github.com/cel-expr/cel-go/pull/1416) | | **NativeToValue Go-based JSON type support** | [#​1402](https://redirect.github.com/cel-expr/cel-go/pull/1402) | | **Parsing helper for working with different types and formats of timestamp** | [#​1414](https://redirect.github.com/cel-expr/cel-go/pull/1414) | | **Support aggregate size computations over list, maps, and structs** | [#​1404](https://redirect.github.com/cel-expr/cel-go/pull/1404) | | **Aggregate semantics in Policy Compiler** | [#​1408](https://redirect.github.com/cel-expr/cel-go/pull/1408) | | **Report every evaluation step to every observer** | [#​1419](https://redirect.github.com/cel-expr/cel-go/pull/1419) | | **Enable list\_ext conformance tests** | [#​1412](https://redirect.github.com/cel-expr/cel-go/pull/1412) | **Fixes & Performance Improvements** | Change / Optimization | PR Link | | :--------------------------------------------------------------------------------------------- | :---------------------------------------------------- | | **mem-track: Fix data race for aggregate size computation** | [#​1423](https://redirect.github.com/cel-expr/cel-go/pull/1423) | | **Fix panic in native object traversal with nil valued struct pointers** | [#​1417](https://redirect.github.com/cel-expr/cel-go/pull/1417) | | **Fix shorthand type specifier parsing to allow newlines and tab chars** | [#​1411](https://redirect.github.com/cel-expr/cel-go/pull/1411) | | **Fix agent\_tool\_execution\_governance policy example to match cel-policy conformance test** | [#​1424](https://redirect.github.com/cel-expr/cel-go/pull/1424) | | **Scale sizes for strings and bytes** | [#​1421](https://redirect.github.com/cel-expr/cel-go/pull/1421) | | **Consolidate saturating cost arithmetic into common/cost** | [#​1420](https://redirect.github.com/cel-expr/cel-go/pull/1420) | | **Add parser benchmarks** | [#​1422](https://redirect.github.com/cel-expr/cel-go/pull/1422) | *** **Full Changelog**: [v0.31.0...v0.32.0](https://redirect.github.com/cel-expr/cel-go/compare/v0.31.0...v0.32.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zMy4yIiwidXBkYXRlZEluVmVyIjoiNDQuMzMuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Closes #12802 --------- Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com> |
||
|
renovate[bot]
|
2480707a39 |
build(deps): update module github.com/stretchr/testify to v1.12.1 (#12792)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/stretchr/testify](https://redirect.github.com/stretchr/testify) | `v1.12.0` → `v1.12.1` |  |  | --- ### Release Notes <details> <summary>stretchr/testify (github.com/stretchr/testify)</summary> ### [`v1.12.1`](https://redirect.github.com/stretchr/testify/releases/tag/v1.12.1) [Compare Source](https://redirect.github.com/stretchr/testify/compare/v1.12.0...v1.12.1) This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own. #### What's Changed - Change yaml library to `go.yaml.in/yaml/v3` by [@​harryzcy](https://redirect.github.com/harryzcy) in [#​1935](https://redirect.github.com/stretchr/testify/pull/1935) - change yaml library to go.yaml.in/yaml/v3 by [@​boekkooi-impossiblecloud](https://redirect.github.com/boekkooi-impossiblecloud) in [#​1772](https://redirect.github.com/stretchr/testify/pull/1772) #### New Contributors - [@​harryzcy](https://redirect.github.com/harryzcy) made their first contribution in [#​1935](https://redirect.github.com/stretchr/testify/pull/1935) - [@​boekkooi-impossiblecloud](https://redirect.github.com/boekkooi-impossiblecloud) made their first contribution in [#​1772](https://redirect.github.com/stretchr/testify/pull/1772) **Full Changelog**: <https://github.com/stretchr/testify/compare/v1.12.0...v1.12.1> #### What's Changed - Change yaml library to `go.yaml.in/yaml/v3` by [@​harryzcy](https://redirect.github.com/harryzcy) in [#​1935](https://redirect.github.com/stretchr/testify/pull/1935) - change yaml library to go.yaml.in/yaml/v3 by [@​boekkooi-impossiblecloud](https://redirect.github.com/boekkooi-impossiblecloud) in [#​1772](https://redirect.github.com/stretchr/testify/pull/1772) #### New Contributors - [@​harryzcy](https://redirect.github.com/harryzcy) made their first contribution in [#​1935](https://redirect.github.com/stretchr/testify/pull/1935) - [@​boekkooi-impossiblecloud](https://redirect.github.com/boekkooi-impossiblecloud) made their first contribution in [#​1772](https://redirect.github.com/stretchr/testify/pull/1772) **Full Changelog**: <https://github.com/stretchr/testify/compare/v1.12.0...v1.12.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zMy4yIiwidXBkYXRlZEluVmVyIjoiNDQuMzMuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
78e2c5e7f6 |
build(deps): update module github.com/mattn/go-sqlite3 to v1.14.50 (#12770)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/mattn/go-sqlite3](https://redirect.github.com/mattn/go-sqlite3) | `v1.14.49` → `v1.14.50` |  |  | --- ### Release Notes <details> <summary>mattn/go-sqlite3 (github.com/mattn/go-sqlite3)</summary> ### [`v1.14.50`](https://redirect.github.com/mattn/go-sqlite3/releases/tag/v1.14.50): 1.14.50 [Compare Source](https://redirect.github.com/mattn/go-sqlite3/compare/v1.14.49...v1.14.50) #### What's Changed - Handle NULL and BLOB values in json example Scan by [@​mattn](https://redirect.github.com/mattn) in [#​1441](https://redirect.github.com/mattn/go-sqlite3/pull/1441) - Add workflow to create releases on tag push by [@​mattn](https://redirect.github.com/mattn) in [#​1443](https://redirect.github.com/mattn/go-sqlite3/pull/1443) - fix: keep vtab handle registered when xDestroy fails by [@​canesin](https://redirect.github.com/canesin) in [#​1446](https://redirect.github.com/mattn/go-sqlite3/pull/1446) #### New Contributors - [@​canesin](https://redirect.github.com/canesin) made their first contribution in [#​1446](https://redirect.github.com/mattn/go-sqlite3/pull/1446) **Full Changelog**: <https://github.com/mattn/go-sqlite3/compare/v1.14.49...v1.14.50> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yOS41IiwidXBkYXRlZEluVmVyIjoiNDQuMjkuNSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
b6d9522cb0 |
build(deps): update module github.com/stretchr/testify to v1.12.0 (#12771)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/stretchr/testify](https://redirect.github.com/stretchr/testify) | `v1.11.1` → `v1.12.0` |  |  | --- ### Release Notes <details> <summary>stretchr/testify (github.com/stretchr/testify)</summary> ### [`v1.12.0`](https://redirect.github.com/stretchr/testify/releases/tag/v1.12.0) [Compare Source](https://redirect.github.com/stretchr/testify/compare/v1.11.1...v1.12.0) #### What's Changed ##### Functional Changes - assert: make \*AssertionFunc types just aliases by [@​dolmen](https://redirect.github.com/dolmen) in [#​1563](https://redirect.github.com/stretchr/testify/pull/1563) ##### Fixes - mock: avoid panic when expected type is nil in Arguments.Diff by [@​mutaiib](https://redirect.github.com/mutaiib) in [#​1775](https://redirect.github.com/stretchr/testify/pull/1775) - mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1786](https://redirect.github.com/stretchr/testify/pull/1786) - suite: validate method signatures and continue execution for valid tests by [@​vyas-git](https://redirect.github.com/vyas-git) in [#​1665](https://redirect.github.com/stretchr/testify/pull/1665) - assert.PanicsWithError: report error message by [@​olivergondza](https://redirect.github.com/olivergondza) in [#​1400](https://redirect.github.com/stretchr/testify/pull/1400) - assert: IsIncreasing et al can return false w/out failing by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1787](https://redirect.github.com/stretchr/testify/pull/1787) - add type to error message of assert.Same by [@​egawata](https://redirect.github.com/egawata) in [#​1792](https://redirect.github.com/stretchr/testify/pull/1792) - mock.AssertExpectationsForObjects fix panic with wrong testObject type. by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1795](https://redirect.github.com/stretchr/testify/pull/1795) - assert: truncate very long objects in test failure messages by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1646](https://redirect.github.com/stretchr/testify/pull/1646) - assert: fix NotSubset error messages using %#v instead of %q (fixes [#​1800](https://redirect.github.com/stretchr/testify/issues/1800)) by [@​nghiack7](https://redirect.github.com/nghiack7) in [#​1888](https://redirect.github.com/stretchr/testify/pull/1888) - suite: prevent panic when SetupTest skips with HandleStats by [@​blackwell-systems](https://redirect.github.com/blackwell-systems) in [#​1877](https://redirect.github.com/stretchr/testify/pull/1877) ##### Documentation, Build & CI - CI: test also with Go 1.23 by [@​dolmen](https://redirect.github.com/dolmen) in [#​1783](https://redirect.github.com/stretchr/testify/pull/1783) - Vendor unmaintained github.com/pmezard/go-difflib by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1708](https://redirect.github.com/stretchr/testify/pull/1708) - Promote ccoVeille to maintainer by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1784](https://redirect.github.com/stretchr/testify/pull/1784) - build(deps): bump actions/setup-go from 5 to 6 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1790](https://redirect.github.com/stretchr/testify/pull/1790) - assert.YAMLEq: Document mutlidoc behavior by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1791](https://redirect.github.com/stretchr/testify/pull/1791) - \_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by [@​dolmen](https://redirect.github.com/dolmen) in [#​1782](https://redirect.github.com/stretchr/testify/pull/1782) - doc: remove ineffective inline code blocks by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1714](https://redirect.github.com/stretchr/testify/pull/1714) - Tag generated assertions as non-generated in new .gitattributes by [@​ubunatic](https://redirect.github.com/ubunatic) in [#​1815](https://redirect.github.com/stretchr/testify/pull/1815) - chore: vendor go-spew from <https://github.com/davecgh/go-spew> by [@​ccoVeille](https://redirect.github.com/ccoVeille) in [#​1827](https://redirect.github.com/stretchr/testify/pull/1827) - require: fix godoc generation for assertions returning a bool by [@​Baxromumarov](https://redirect.github.com/Baxromumarov) in [#​1850](https://redirect.github.com/stretchr/testify/pull/1850) - docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by [@​a2not](https://redirect.github.com/a2not) in [#​1821](https://redirect.github.com/stretchr/testify/pull/1821) - docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by [@​a2not](https://redirect.github.com/a2not) in [#​1842](https://redirect.github.com/stretchr/testify/pull/1842) - EMERITUS.md: add [@​tylerb](https://redirect.github.com/tylerb) by [@​dolmen](https://redirect.github.com/dolmen) in [#​1812](https://redirect.github.com/stretchr/testify/pull/1812) - CI: test also with Go 1.24 by [@​alexandear](https://redirect.github.com/alexandear) in [#​1856](https://redirect.github.com/stretchr/testify/pull/1856) - deps: bump objx to v0.5.3 and remove dependency cycle issue by [@​ccoVeille](https://redirect.github.com/ccoVeille) in [#​1823](https://redirect.github.com/stretchr/testify/pull/1823) - CI: upgrade GitHub Actions and pin hashes by [@​SuperQ](https://redirect.github.com/SuperQ) in [#​1883](https://redirect.github.com/stretchr/testify/pull/1883) - CI: add \_readme-gofmt tool to reformat Go code in README by [@​dolmen](https://redirect.github.com/dolmen) in [#​1889](https://redirect.github.com/stretchr/testify/pull/1889) - CI: add check of GitHub Action pinned hashes against tag by [@​dolmen](https://redirect.github.com/dolmen) in [#​1885](https://redirect.github.com/stretchr/testify/pull/1885) - \_codegen: modernize by [@​dolmen](https://redirect.github.com/dolmen) in [#​1890](https://redirect.github.com/stretchr/testify/pull/1890) - build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1906](https://redirect.github.com/stretchr/testify/pull/1906) - mock: Mock.Return does not exist anymore by [@​Kentzo](https://redirect.github.com/Kentzo) in [#​1905](https://redirect.github.com/stretchr/testify/pull/1905) #### New Contributors - [@​mutaiib](https://redirect.github.com/mutaiib) made their first contribution in [#​1775](https://redirect.github.com/stretchr/testify/pull/1775) - [@​vyas-git](https://redirect.github.com/vyas-git) made their first contribution in [#​1665](https://redirect.github.com/stretchr/testify/pull/1665) - [@​olivergondza](https://redirect.github.com/olivergondza) made their first contribution in [#​1400](https://redirect.github.com/stretchr/testify/pull/1400) - [@​egawata](https://redirect.github.com/egawata) made their first contribution in [#​1792](https://redirect.github.com/stretchr/testify/pull/1792) - [@​ubunatic](https://redirect.github.com/ubunatic) made their first contribution in [#​1815](https://redirect.github.com/stretchr/testify/pull/1815) - [@​Baxromumarov](https://redirect.github.com/Baxromumarov) made their first contribution in [#​1850](https://redirect.github.com/stretchr/testify/pull/1850) - [@​a2not](https://redirect.github.com/a2not) made their first contribution in [#​1821](https://redirect.github.com/stretchr/testify/pull/1821) - [@​nghiack7](https://redirect.github.com/nghiack7) made their first contribution in [#​1888](https://redirect.github.com/stretchr/testify/pull/1888) - [@​blackwell-systems](https://redirect.github.com/blackwell-systems) made their first contribution in [#​1877](https://redirect.github.com/stretchr/testify/pull/1877) - [@​Kentzo](https://redirect.github.com/Kentzo) made their first contribution in [#​1905](https://redirect.github.com/stretchr/testify/pull/1905) **Full Changelog**: <https://github.com/stretchr/testify/compare/v1.11.0...v1.12.0> #### What's Changed - mock: avoid panic when expected type is nil in Arguments.Diff by [@​mutaiib](https://redirect.github.com/mutaiib) in [#​1775](https://redirect.github.com/stretchr/testify/pull/1775) - CI: test also with Go 1.23 by [@​dolmen](https://redirect.github.com/dolmen) in [#​1783](https://redirect.github.com/stretchr/testify/pull/1783) - mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1786](https://redirect.github.com/stretchr/testify/pull/1786) - suite: validate method signatures and continue execution for valid tests by [@​vyas-git](https://redirect.github.com/vyas-git) in [#​1665](https://redirect.github.com/stretchr/testify/pull/1665) - Vendor unmaintained github.com/pmezard/go-difflib by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1708](https://redirect.github.com/stretchr/testify/pull/1708) - Promote ccoVeille to maintainer by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1784](https://redirect.github.com/stretchr/testify/pull/1784) - build(deps): bump actions/setup-go from 5 to 6 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1790](https://redirect.github.com/stretchr/testify/pull/1790) - assert.PanicsWithError: report error message by [@​olivergondza](https://redirect.github.com/olivergondza) in [#​1400](https://redirect.github.com/stretchr/testify/pull/1400) - assert: IsIncreasing et al can return false w/out failing by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1787](https://redirect.github.com/stretchr/testify/pull/1787) - add type to error message of assert.Same by [@​egawata](https://redirect.github.com/egawata) in [#​1792](https://redirect.github.com/stretchr/testify/pull/1792) - assert.YAMLEq: Document mutlidoc behavior by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1791](https://redirect.github.com/stretchr/testify/pull/1791) - mock.AssertExpectationsForObjects fix panic with wrong testObject type. by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1795](https://redirect.github.com/stretchr/testify/pull/1795) - \_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by [@​dolmen](https://redirect.github.com/dolmen) in [#​1782](https://redirect.github.com/stretchr/testify/pull/1782) - assert: truncate very long objects in test failure messages by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1646](https://redirect.github.com/stretchr/testify/pull/1646) - doc: remove ineffective inline code blocks by [@​brackendawson](https://redirect.github.com/brackendawson) in [#​1714](https://redirect.github.com/stretchr/testify/pull/1714) - Tag generated assertions as non-generated in new .gitattributes by [@​ubunatic](https://redirect.github.com/ubunatic) in [#​1815](https://redirect.github.com/stretchr/testify/pull/1815) - chore: vendor go-spew from <https://github.com/davecgh/go-spew> by [@​ccoVeille](https://redirect.github.com/ccoVeille) in [#​1827](https://redirect.github.com/stretchr/testify/pull/1827) - require: fix godoc generation for assertions returning a bool by [@​Baxromumarov](https://redirect.github.com/Baxromumarov) in [#​1850](https://redirect.github.com/stretchr/testify/pull/1850) - docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by [@​a2not](https://redirect.github.com/a2not) in [#​1821](https://redirect.github.com/stretchr/testify/pull/1821) - docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by [@​a2not](https://redirect.github.com/a2not) in [#​1842](https://redirect.github.com/stretchr/testify/pull/1842) - EMERITUS.md: add [@​tylerb](https://redirect.github.com/tylerb) by [@​dolmen](https://redirect.github.com/dolmen) in [#​1812](https://redirect.github.com/stretchr/testify/pull/1812) - CI: test also with Go 1.24 by [@​alexandear](https://redirect.github.com/alexandear) in [#​1856](https://redirect.github.com/stretchr/testify/pull/1856) - deps: bump objx to v0.5.3 and remove dependency cycle issue by [@​ccoVeille](https://redirect.github.com/ccoVeille) in [#​1823](https://redirect.github.com/stretchr/testify/pull/1823) - CI: upgrade GitHub Actions and pin hashes by [@​SuperQ](https://redirect.github.com/SuperQ) in [#​1883](https://redirect.github.com/stretchr/testify/pull/1883) - assert: fix NotSubset error messages using %#v instead of %q (fixes [#​1800](https://redirect.github.com/stretchr/testify/issues/1800)) by [@​nghiack7](https://redirect.github.com/nghiack7) in [#​1888](https://redirect.github.com/stretchr/testify/pull/1888) - suite: prevent panic when SetupTest skips with HandleStats by [@​blackwell-systems](https://redirect.github.com/blackwell-systems) in [#​1877](https://redirect.github.com/stretchr/testify/pull/1877) - CI: add \_readme-gofmt tool to reformat Go code in README by [@​dolmen](https://redirect.github.com/dolmen) in [#​1889](https://redirect.github.com/stretchr/testify/pull/1889) - CI: add check of GitHub Action pinned hashes against tag by [@​dolmen](https://redirect.github.com/dolmen) in [#​1885](https://redirect.github.com/stretchr/testify/pull/1885) - \_codegen: modernize by [@​dolmen](https://redirect.github.com/dolmen) in [#​1890](https://redirect.github.com/stretchr/testify/pull/1890) - assert: make \*AssertionFunc types just aliases by [@​dolmen](https://redirect.github.com/dolmen) in [#​1563](https://redirect.github.com/stretchr/testify/pull/1563) - build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1906](https://redirect.github.com/stretchr/testify/pull/1906) - mock: Mock.Return does not exist anymore by [@​Kentzo](https://redirect.github.com/Kentzo) in [#​1905](https://redirect.github.com/stretchr/testify/pull/1905) #### New Contributors - [@​mutaiib](https://redirect.github.com/mutaiib) made their first contribution in [#​1775](https://redirect.github.com/stretchr/testify/pull/1775) - [@​vyas-git](https://redirect.github.com/vyas-git) made their first contribution in [#​1665](https://redirect.github.com/stretchr/testify/pull/1665) - [@​olivergondza](https://redirect.github.com/olivergondza) made their first contribution in [#​1400](https://redirect.github.com/stretchr/testify/pull/1400) - [@​egawata](https://redirect.github.com/egawata) made their first contribution in [#​1792](https://redirect.github.com/stretchr/testify/pull/1792) - [@​ubunatic](https://redirect.github.com/ubunatic) made their first contribution in [#​1815](https://redirect.github.com/stretchr/testify/pull/1815) - [@​Baxromumarov](https://redirect.github.com/Baxromumarov) made their first contribution in [#​1850](https://redirect.github.com/stretchr/testify/pull/1850) - [@​a2not](https://redirect.github.com/a2not) made their first contribution in [#​1821](https://redirect.github.com/stretchr/testify/pull/1821) - [@​nghiack7](https://redirect.github.com/nghiack7) made their first contribution in [#​1888](https://redirect.github.com/stretchr/testify/pull/1888) - [@​blackwell-systems](https://redirect.github.com/blackwell-systems) made their first contribution in [#​1877](https://redirect.github.com/stretchr/testify/pull/1877) - [@​Kentzo](https://redirect.github.com/Kentzo) made their first contribution in [#​1905](https://redirect.github.com/stretchr/testify/pull/1905) **Full Changelog**: <https://github.com/stretchr/testify/compare/v1.11.0...v1.12.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yOS41IiwidXBkYXRlZEluVmVyIjoiNDQuMjkuNSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
30f7ad4f9f |
build(deps): update module golang.org/x/net to v0.58.0 (#12736)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.57.0` → `v0.58.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.57.0...refs/tags/v0.58.0) |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/2330) for more information. --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yOS41IiwidXBkYXRlZEluVmVyIjoiNDQuMjkuNSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andJames Elliott
|
ea578a4f24 |
build(deps): update module golang.org/x/crypto to v0.55.0 (#12722)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) | [`v0.54.0` → `v0.55.0`](https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.54.0...refs/tags/v0.55.0) |  |  | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [x] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yNC4wIiwidXBkYXRlZEluVmVyIjoiNDQuMjQuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
renovate[bot]
|
09cd362a76 |
build(deps): update module golang.org/x/text to v0.41.0 (#12723)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [golang.org/x/text](https://pkg.go.dev/golang.org/x/text) | [`v0.40.0` → `v0.41.0`](https://cs.opensource.google/go/x/text/+/refs/tags/v0.40.0...refs/tags/v0.41.0) |  |  | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yNC4wIiwidXBkYXRlZEluVmVyIjoiNDQuMjQuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
895c479039 |
build(deps): update module github.com/google/cel-go to v0.31.0 (#12700)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/google/cel-go](https://redirect.github.com/google/cel-go) | `v0.30.0` → `v0.31.0` |  |  | --- ### Release Notes <details> <summary>google/cel-go (github.com/google/cel-go)</summary> ### [`v0.31.0`](https://redirect.github.com/cel-expr/cel-go/releases/tag/v0.31.0) [Compare Source](https://redirect.github.com/google/cel-go/compare/v0.30.0...v0.31.0) This release introduces critical performance breakthroughs, simplifies integration with native Go structures, and hardens the safety limits of evaluated expressions. **Features** | Pull Request | Description and Impact | | :-------------------------------------------------------------------------------------------------------------- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Env copy on write** ([#​1405](https://redirect.github.com/google/cel-go/issues/1405)) | Introduces Copy-on-Write (COW) mechanics for environment definitions, dramatically slashing CPU and memory allocation overhead when building child or extended environments. | | **Optimize NativeToValue call paths** ([#​1400](https://redirect.github.com/google/cel-go/issues/1400)) | Optimizes reflection-heavy conversion paths, significantly improving evaluation speeds when feeding native Go types directly to the runtime engine. | | **Support self-describing, self-adapting struct types** ([#​1395](https://redirect.github.com/google/cel-go/issues/1395)) | Simplifies struct integration by enabling native Go struct types to self-describe and adapt directly to the CEL type system without verbose boilerplate. | | **Move native type support into the Core CEL library** ([#​1396](https://redirect.github.com/google/cel-go/issues/1396)) | Moves native Go type mapping utilities directly into the Core CEL package to unify dependency structure and improve native API access. | | **Regex program plan size controls** ([#​1383](https://redirect.github.com/google/cel-go/issues/1383)) | Introduces critical compiled size constraints on regex expressions to mitigate CPU/memory exhaustion vectors during evaluation. | | **Simplify support for native object types** ([#​1393](https://redirect.github.com/google/cel-go/issues/1393)) | Streamlines setup workflows for mapping standard Go structures inside the CEL compiler environment. | | **Tag automation for go submodules** ([#​1401](https://redirect.github.com/google/cel-go/issues/1401)) | Automates the submodule tagging process to streamline multi-module releases. | **Fixes** | Pull Request | Impact and Technical Details | | :--------------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------------------------------------- | | **Respect composed adapter for unregistered structs** ([#​1384](https://redirect.github.com/google/cel-go/issues/1384)) | Corrects behavior so that unregistered Go structs properly fall back to composed adapter configurations. | | **reject out-of-range hours in timezone offset parsing** ([#​1391](https://redirect.github.com/google/cel-go/issues/1391)) | Tightens datetime validation by rejecting invalid out-of-range hour offsets during timezone parsing. | | **Fix the expression limit node test** ([#​1390](https://redirect.github.com/google/cel-go/issues/1390)) | Restores stability to environment node test suites verifying size-limit assertions. | | **Correct documented default max value for lists.range** ([#​1392](https://redirect.github.com/google/cel-go/issues/1392)) | Resolves documentation drift regarding the default maximum limit for the lists.range function. | **Breaking Changes** There are no breaking changes, but all `ext.NativeTypes` features are now available via `cel.NativeTypes` **Notes on Performance** This release targets two primary computational bottlenecks in high-throughput CEL environments: environment construction and reflection-based type coercion. ##### **Expected Impact** 1. **Dynamic Environment Extension**: Applications that dynamically extend a base CEL environment per request (e.g., policy validation engines or API gateways adding request-scoped variables) will see near-zero initialization costs. The **Copy-on-Write (COW)** optimization prevents copying underlying maps of variables, functions, and adapters. 2. **Type Coercion Speed**: Bypassing heavy reflection paths during NativeToValue conversions significantly cuts down CPU cycle usage and drastically reduces garbage collection overhead in processing hot paths. 3. **AST Pruning**: Consolidating sequential list concatenations ([#​1406](https://redirect.github.com/google/cel-go/issues/1406)) and optimizing optional macros ([#​1387](https://redirect.github.com/google/cel-go/issues/1387)) ensures that generated program plans are leaner, reducing both compilation and execution memory footprints. ##### **Go-lang Benchmark Citation (benchstat)** The performance improvements can be verified running the repository's native benchmark harness with benchstat: `name old time/op new time/op delta`\ `BenchmarkEnvExtension/10_vars 3.56µs ± 1% 0.15µs ± 0% -95.79% (p=0.000 n=10+10)`\ `BenchmarkNativeToValue/struct 120ns ± 2% 42ns ± 1% -65.00% (p=0.000 n=10+10)`\ `BenchmarkOptionalMapEvaluation 245ns ± 1% 195ns ± 1% -20.41% (p=0.000 n=10+10)` `name old allocs/op new allocs/op delta`\ `BenchmarkEnvExtension/10_vars 32.0 ± 0% 1.0 ± 0% -96.88% (p=0.000 n=10+10)`\ `BenchmarkNativeToValue/struct 3.00 ± 0% 1.00 ± 0% -66.67% (p=0.000 n=10+10)` #### New Contributors - [@​lopster568](https://redirect.github.com/lopster568) made their first contribution in [cel-expr#1384](https://redirect.github.com/cel-expr/cel-go/pull/1384) **Full Changelog**: <https://github.com/cel-expr/cel-go/compare/v0.30.0...v0.31.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
7ccdcdb413 |
build(deps): update module github.com/knadh/koanf/v2 to v2.3.6 (#12678)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/v2](https://redirect.github.com/knadh/koanf) | `v2.3.5` → `v2.3.6` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/2330) for more information. --- ### Release Notes <details> <summary>knadh/koanf (github.com/knadh/koanf/v2)</summary> ### [`v2.3.6`](https://redirect.github.com/knadh/koanf/releases/tag/v2.3.6) [Compare Source](https://redirect.github.com/knadh/koanf/compare/v2.3.5...v2.3.6) #### What's Changed - fix: error on scalar/map type mismatch in MergeStrict regardless of order by [@​upuddu](https://redirect.github.com/upuddu) in [#​424](https://redirect.github.com/knadh/koanf/pull/424) - Bump google.golang.org/grpc from 1.56.3 to 1.82.1 in /examples by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​430](https://redirect.github.com/knadh/koanf/pull/430) - Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /providers/kiln by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​427](https://redirect.github.com/knadh/koanf/pull/427) - deps: upgrade go-toml to v2.4.3 by [@​GreyXor](https://redirect.github.com/GreyXor) in [#​419](https://redirect.github.com/knadh/koanf/pull/419) - skip disabled secret on azure kv read by [@​genlp](https://redirect.github.com/genlp) in [#​437](https://redirect.github.com/knadh/koanf/pull/437) #### New Contributors - [@​upuddu](https://redirect.github.com/upuddu) made their first contribution in [#​424](https://redirect.github.com/knadh/koanf/pull/424) - [@​genlp](https://redirect.github.com/genlp) made their first contribution in [#​437](https://redirect.github.com/knadh/koanf/pull/437) **Full Changelog**: <https://github.com/knadh/koanf/compare/v2.3.5...v2.3.6> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMS40IiwidXBkYXRlZEluVmVyIjoiNDQuMTEuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
dfbd24824e |
build(deps): update module github.com/knadh/koanf/providers/posflag to v1.0.2 (#12676)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/providers/posflag](https://redirect.github.com/knadh/koanf) | `v1.0.1` → `v1.0.2` |  |  | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMS40IiwidXBkYXRlZEluVmVyIjoiNDQuMTEuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
de9b887a43 |
build(deps): update module github.com/knadh/koanf/providers/rawbytes to v1.0.1 (#12677)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/providers/rawbytes](https://redirect.github.com/knadh/koanf) | `v1.0.0` → `v1.0.1` |  |  | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMS40IiwidXBkYXRlZEluVmVyIjoiNDQuMTEuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
0b9506a0a2 |
build(deps): update module github.com/knadh/koanf/parsers/yaml to v1.1.1 (#12671)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/parsers/yaml](https://redirect.github.com/knadh/koanf) | `v1.1.0` → `v1.1.1` |  |  | --- ### Release Notes <details> <summary>knadh/koanf (github.com/knadh/koanf/parsers/yaml)</summary> ### [`v1.1.1`](https://redirect.github.com/knadh/koanf/releases/tag/v1.1.1) [Compare Source](https://redirect.github.com/knadh/koanf/compare/v1.1.0...v1.1.1) - [`57e89cf`](https://redirect.github.com/knadh/koanf/commit/57e89cf) Merge pull request [#​94](https://redirect.github.com/knadh/koanf/issues/94) from knadh/fix-posflag-callbacks - [`d3bad45`](https://redirect.github.com/knadh/koanf/commit/d3bad45) Merge pull request [#​91](https://redirect.github.com/knadh/koanf/issues/91) from knadh/bug-report-template - [`b1985ad`](https://redirect.github.com/knadh/koanf/commit/b1985ad) Merge pull request [#​93](https://redirect.github.com/knadh/koanf/issues/93) from rhnvrm/unit-test-issue-90 - [`a72baa3`](https://redirect.github.com/knadh/koanf/commit/a72baa3) Merge pull request [#​92](https://redirect.github.com/knadh/koanf/issues/92) from knadh/fix-posflag-callbacks - [`adc0b54`](https://redirect.github.com/knadh/koanf/commit/adc0b54) tests: add unit test for [#​90](https://redirect.github.com/knadh/koanf/issues/90) - [`9e87eba`](https://redirect.github.com/knadh/koanf/commit/9e87eba) Fix unchanged default posflag value merging via incorrect callback. - [`2f82a14`](https://redirect.github.com/knadh/koanf/commit/2f82a14) Merge pull request [#​87](https://redirect.github.com/knadh/koanf/issues/87) from mvrahden/feature/filesystem - [`6e9c0a7`](https://redirect.github.com/knadh/koanf/commit/6e9c0a7) Add github issue templates - [`023ecc6`](https://redirect.github.com/knadh/koanf/commit/023ecc6) Update README with fs.FS provider - [`f7e28d0`](https://redirect.github.com/knadh/koanf/commit/f7e28d0) fix call to Close on file descriptor - [`caeef66`](https://redirect.github.com/knadh/koanf/commit/caeef66) Merge pull request [#​1](https://redirect.github.com/knadh/koanf/issues/1) from rhnvrm/feature/filesystem - [`02f42ea`](https://redirect.github.com/knadh/koanf/commit/02f42ea) fix: add build constraints to maintain compat - [`149144c`](https://redirect.github.com/knadh/koanf/commit/149144c) add fs.FS provider - [`139fe40`](https://redirect.github.com/knadh/koanf/commit/139fe40) Merge pull request [#​85](https://redirect.github.com/knadh/koanf/issues/85) from mvrahden/fix/base\_test - [`7cc3416`](https://redirect.github.com/knadh/koanf/commit/7cc3416) move error assertions and make them error-type dependent - [`0a31536`](https://redirect.github.com/knadh/koanf/commit/0a31536) fix race condition and reduce test time by half - [`af2e3f4`](https://redirect.github.com/knadh/koanf/commit/af2e3f4) simplify and unify test arrangements - [`aa62c04`](https://redirect.github.com/knadh/koanf/commit/aa62c04) update testify to v1.7.0 - [`5234867`](https://redirect.github.com/knadh/koanf/commit/5234867) Merge pull request [#​84](https://redirect.github.com/knadh/koanf/issues/84) from mr-karan/gh\_actions - [`c79fbc5`](https://redirect.github.com/knadh/koanf/commit/c79fbc5) feat: Replace Travis with GitHub Actions </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ28iXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
97a8948f4d |
build(deps): update module github.com/knadh/koanf/providers/env/v2 to v2.0.1 (#12675)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/providers/env/v2](https://redirect.github.com/knadh/koanf) | `v2.0.0` → `v2.0.1` |  |  | --- ### Release Notes <details> <summary>knadh/koanf (github.com/knadh/koanf/providers/env/v2)</summary> ### [`v2.0.1`](https://redirect.github.com/knadh/koanf/releases/tag/v2.0.1) [Compare Source](https://redirect.github.com/knadh/koanf/compare/v2.0.0...v2.0.1) #### What's Changed - Bump golang.org/x/text from 0.3.5 to 0.3.8 in /providers/etcd by [@​dependabot](https://redirect.github.com/dependabot) in [#​204](https://redirect.github.com/knadh/koanf/pull/204) - Fix README typo by [@​glenn-m](https://redirect.github.com/glenn-m) in [#​208](https://redirect.github.com/knadh/koanf/pull/208) - Fix issue 200 by [@​jxsl13](https://redirect.github.com/jxsl13) in [#​209](https://redirect.github.com/knadh/koanf/pull/209) #### New Contributors - [@​dependabot](https://redirect.github.com/dependabot) made their first contribution in [#​204](https://redirect.github.com/knadh/koanf/pull/204) **Full Changelog**: <https://github.com/knadh/koanf/compare/v2.0.0...v2.0.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMS40IiwidXBkYXRlZEluVmVyIjoiNDQuMTEuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
49931b2e15 |
build(deps): update module github.com/knadh/koanf/providers/confmap to v1.0.1 (#12673)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/knadh/koanf/providers/confmap](https://redirect.github.com/knadh/koanf) | `v1.0.0` → `v1.0.1` |  |  | --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMS40IiwidXBkYXRlZEluVmVyIjoiNDQuMTEuNCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
484f2170a5 |
build(deps): update module authelia.com/provider/oauth2 to v0.2.40 (#12648)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [authelia.com/provider/oauth2](https://redirect.github.com/authelia/oauth2-provider) | `v0.2.39` → `v0.2.40` |  |  | --- ### Release Notes <details> <summary>authelia/oauth2-provider (authelia.com/provider/oauth2)</summary> ### [`v0.2.40`](https://redirect.github.com/authelia/oauth2-provider/compare/v0.2.39...v0.2.40) [Compare Source](https://redirect.github.com/authelia/oauth2-provider/compare/v0.2.39...v0.2.40) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ28iXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
affa3961f4 |
build(deps): update module authelia.com/provider/oauth2 to v0.2.39 (#12645)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [authelia.com/provider/oauth2](https://redirect.github.com/authelia/oauth2-provider) | `v0.2.38` → `v0.2.39` |  |  | --- ### Release Notes <details> <summary>authelia/oauth2-provider (authelia.com/provider/oauth2)</summary> ### [`v0.2.39`](https://redirect.github.com/authelia/oauth2-provider/compare/v0.2.38...v0.2.39) [Compare Source](https://redirect.github.com/authelia/oauth2-provider/compare/v0.2.38...v0.2.39) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ28iXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
28dec057bc |
build(deps): update module github.com/mattn/go-sqlite3 to v1.14.49 (#12629)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/mattn/go-sqlite3](https://redirect.github.com/mattn/go-sqlite3) | `v1.14.48` → `v1.14.49` |  |  | --- ### Release Notes <details> <summary>mattn/go-sqlite3 (github.com/mattn/go-sqlite3)</summary> ### [`v1.14.49`](https://redirect.github.com/mattn/go-sqlite3/releases/tag/v1.14.49): 1.14.49 [Compare Source](https://redirect.github.com/mattn/go-sqlite3/compare/v1.14.48...v1.14.49) #### What's Changed - Release vtable and cursor handles when SQLite destroys them by [@​mattn](https://redirect.github.com/mattn) in [#​1429](https://redirect.github.com/mattn/go-sqlite3/pull/1429) - Do not clobber SQLite's default cost estimates in BestIndex by [@​mattn](https://redirect.github.com/mattn) in [#​1430](https://redirect.github.com/mattn/go-sqlite3/pull/1430) - Translate SQL NULL filter arguments to nil like goVUpdate by [@​mattn](https://redirect.github.com/mattn) in [#​1431](https://redirect.github.com/mattn/go-sqlite3/pull/1431) - Identify updated row by argv 0 in goVUpdate by [@​mattn](https://redirect.github.com/mattn) in [#​1432](https://redirect.github.com/mattn/go-sqlite3/pull/1432) - Ignore Used for constraints SQLite marked not usable by [@​mattn](https://redirect.github.com/mattn) in [#​1433](https://redirect.github.com/mattn/go-sqlite3/pull/1433) - Reject nil module and nil BestIndex result by [@​mattn](https://redirect.github.com/mattn) in [#​1434](https://redirect.github.com/mattn/go-sqlite3/pull/1434) - Fail upgrade tool on download and write errors by [@​mattn](https://redirect.github.com/mattn) in [#​1435](https://redirect.github.com/mattn/go-sqlite3/pull/1435) - Fix off-by-one truncating SQL in fuzz target by [@​mattn](https://redirect.github.com/mattn) in [#​1436](https://redirect.github.com/mattn/go-sqlite3/pull/1436) - Fix wrong results and cursor state sharing in series example by [@​mattn](https://redirect.github.com/mattn) in [#​1437](https://redirect.github.com/mattn/go-sqlite3/pull/1437) - Use the table name from xCreate args in vtable example by [@​mattn](https://redirect.github.com/mattn) in [#​1438](https://redirect.github.com/mattn/go-sqlite3/pull/1438) - Close leaked rows in hook example by [@​mattn](https://redirect.github.com/mattn) in [#​1439](https://redirect.github.com/mattn/go-sqlite3/pull/1439) - Close prepared statement and fail if limit is not enforced in limit example by [@​mattn](https://redirect.github.com/mattn) in [#​1440](https://redirect.github.com/mattn/go-sqlite3/pull/1440) - Upgrade SQLite to version [`3053004`](https://redirect.github.com/mattn/go-sqlite3/commit/3053004) by [@​mattn](https://redirect.github.com/mattn) in [#​1442](https://redirect.github.com/mattn/go-sqlite3/pull/1442) **Full Changelog**: <https://github.com/mattn/go-sqlite3/compare/v1.14.48...v1.14.49> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ28iXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]andJames Elliott
|
35175fb8c0 |
build(deps): update module github.com/prometheus/client_golang to v1.24.1 (#12593)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/prometheus/client_golang](https://redirect.github.com/prometheus/client_golang) | `v1.24.0` → `v1.24.1` |  |  | --- ### Release Notes <details> <summary>prometheus/client_golang (github.com/prometheus/client_golang)</summary> ### [`v1.24.1`](https://redirect.github.com/prometheus/client_golang/compare/v1.24.0...v1.24.1) [Compare Source](https://redirect.github.com/prometheus/client_golang/compare/v1.24.0...v1.24.1) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com> |
||
|
renovate[bot]
|
432df74fae |
build(deps): update module github.com/valyala/fasthttp to v1.73.0 (#12614)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/valyala/fasthttp](https://redirect.github.com/valyala/fasthttp) | `v1.72.0` → `v1.73.0` |  |  | --- ### Release Notes <details> <summary>valyala/fasthttp (github.com/valyala/fasthttp)</summary> ### [`v1.73.0`](https://redirect.github.com/valyala/fasthttp/releases/tag/v1.73.0): v1.73.0 [Compare Source](https://redirect.github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0) #### What's Changed - test: fix host comparison in FuzzURIParse by [@​ReneWerner87](https://redirect.github.com/ReneWerner87) in [#​2313](https://redirect.github.com/valyala/fasthttp/pull/2313) - perf: avoid redundant scans when parsing request headers by [@​ReneWerner87](https://redirect.github.com/ReneWerner87) in [#​2312](https://redirect.github.com/valyala/fasthttp/pull/2312) - Fix temp file leak in SaveMultipartFile on cross-device rename failure by [@​itxaiohanglover](https://redirect.github.com/itxaiohanglover) in [#​2311](https://redirect.github.com/valyala/fasthttp/pull/2311) - re-enable forcetypeassert by [@​Harshal96](https://redirect.github.com/Harshal96) in [#​2316](https://redirect.github.com/valyala/fasthttp/pull/2316) - test: normalize Go test names by [@​Harshal96](https://redirect.github.com/Harshal96) in [#​2317](https://redirect.github.com/valyala/fasthttp/pull/2317) - feat: prefix sentinel error strings by [@​Harshal96](https://redirect.github.com/Harshal96) in [#​2319](https://redirect.github.com/valyala/fasthttp/pull/2319) - fix(pprofhandler): use exact path matching to prevent debug data exposure by [@​xbrxr03](https://redirect.github.com/xbrxr03) in [#​2302](https://redirect.github.com/valyala/fasthttp/pull/2302) - avoid following a symlink when writing the FS compressed cache by [@​alhudz](https://redirect.github.com/alhudz) in [#​2321](https://redirect.github.com/valyala/fasthttp/pull/2321) - refactor: improve internal interface names by [@​Harshal96](https://redirect.github.com/Harshal96) in [#​2318](https://redirect.github.com/valyala/fasthttp/pull/2318) - fix: lowercase error strings by [@​Harshal96](https://redirect.github.com/Harshal96) in [#​2320](https://redirect.github.com/valyala/fasthttp/pull/2320) - perf: reduce redundant scans and allocations in hot paths by [@​ReneWerner87](https://redirect.github.com/ReneWerner87) in [#​2322](https://redirect.github.com/valyala/fasthttp/pull/2322) - validate domain and path cookie attribute values on parse by [@​alhudz](https://redirect.github.com/alhudz) in [#​2315](https://redirect.github.com/valyala/fasthttp/pull/2315) - chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2328](https://redirect.github.com/valyala/fasthttp/pull/2328) - chore(deps): bump actions/setup-go from 6 to 7 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2329](https://redirect.github.com/valyala/fasthttp/pull/2329) - fix: preserve pre-set status code in NewFastHTTPHandler by [@​xbrxr03](https://redirect.github.com/xbrxr03) in [#​2323](https://redirect.github.com/valyala/fasthttp/pull/2323) - chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2331](https://redirect.github.com/valyala/fasthttp/pull/2331) - reject backslash '..' traversal in fs handler on windows by [@​alhudz](https://redirect.github.com/alhudz) in [#​2327](https://redirect.github.com/valyala/fasthttp/pull/2327) - fix: reject Windows alternate data stream paths in FS by [@​dev-willbird1936](https://redirect.github.com/dev-willbird1936) in [#​2335](https://redirect.github.com/valyala/fasthttp/pull/2335) - chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2307](https://redirect.github.com/valyala/fasthttp/pull/2307) - chore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2308](https://redirect.github.com/valyala/fasthttp/pull/2308) - chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2309](https://redirect.github.com/valyala/fasthttp/pull/2309) - chore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2314](https://redirect.github.com/valyala/fasthttp/pull/2314) - chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2326](https://redirect.github.com/valyala/fasthttp/pull/2326) - chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2324](https://redirect.github.com/valyala/fasthttp/pull/2324) - chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​2325](https://redirect.github.com/valyala/fasthttp/pull/2325) #### New Contributors - [@​itxaiohanglover](https://redirect.github.com/itxaiohanglover) made their first contribution in [#​2311](https://redirect.github.com/valyala/fasthttp/pull/2311) - [@​Harshal96](https://redirect.github.com/Harshal96) made their first contribution in [#​2316](https://redirect.github.com/valyala/fasthttp/pull/2316) - [@​dev-willbird1936](https://redirect.github.com/dev-willbird1936) made their first contribution in [#​2335](https://redirect.github.com/valyala/fasthttp/pull/2335) **Full Changelog**: <https://github.com/valyala/fasthttp/compare/v1.72.0...v1.73.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
renovate[bot]
|
cc5b8f9ff9 |
build(deps): update module github.com/google/cel-go to v0.30.0 (#12611)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/google/cel-go](https://redirect.github.com/google/cel-go) | `v0.29.2` → `v0.30.0` |  |  | --- ### Release Notes <details> <summary>google/cel-go (github.com/google/cel-go)</summary> ### [`v0.30.0`](https://redirect.github.com/cel-expr/cel-go/releases/tag/v0.30.0) [Compare Source](https://redirect.github.com/google/cel-go/compare/v0.29.2...v0.30.0) #### What's Changed - Add cost tracking for encoders by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1354](https://redirect.github.com/cel-expr/cel-go/pull/1354) - Fix syntax error at head by [@​stanleyycheung](https://redirect.github.com/stanleyycheung) in [cel-expr#1362](https://redirect.github.com/cel-expr/cel-go/pull/1362) - Prevent indexing on sentinel json field '-' by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1349](https://redirect.github.com/cel-expr/cel-go/pull/1349) - Async function execution internals by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1355](https://redirect.github.com/cel-expr/cel-go/pull/1355) - reject non-RFC3339 timestamp strings in timestamp() conversion by [@​alhudz](https://redirect.github.com/alhudz) in [cel-expr#1338](https://redirect.github.com/cel-expr/cel-go/pull/1338) - Add depth validation for ASTs loaded through ParsedExprToAst / Checke... by [@​wilyan09007](https://redirect.github.com/wilyan09007) in [cel-expr#1334](https://redirect.github.com/cel-expr/cel-go/pull/1334) - Fix non-determinism in json encoding, add dummy 'infinite' costs by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1365](https://redirect.github.com/cel-expr/cel-go/pull/1365) - Update lists library cost computations for improved accuracy by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1352](https://redirect.github.com/cel-expr/cel-go/pull/1352) - Cost library for ext/network by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1345](https://redirect.github.com/cel-expr/cel-go/pull/1345) - Introduce async DrainStrategy, DrainAction, Observer, and Call types by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1364](https://redirect.github.com/cel-expr/cel-go/pull/1364) - Graceful NaN ordering by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1370](https://redirect.github.com/cel-expr/cel-go/pull/1370) - Fix constant folding and local variable resolution by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1371](https://redirect.github.com/cel-expr/cel-go/pull/1371) - Concurrent Eval with context.Context bound functions by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1369](https://redirect.github.com/cel-expr/cel-go/pull/1369) - Async timeout and retry wrappers by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1367](https://redirect.github.com/cel-expr/cel-go/pull/1367) - Add runnable examples for all expressions in celbyexample.com by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1373](https://redirect.github.com/cel-expr/cel-go/pull/1373) - Ensure logical operator fold expressions are bool by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1380](https://redirect.github.com/cel-expr/cel-go/pull/1380) - Fix unsound constant folding of `x in [x]` for NaN values by [@​pranit0808](https://redirect.github.com/pranit0808) in [cel-expr#1374](https://redirect.github.com/cel-expr/cel-go/pull/1374) - copy operands in Bytes.Add to avoid aliasing the receiver by [@​pranit0808](https://redirect.github.com/pranit0808) in [cel-expr#1381](https://redirect.github.com/cel-expr/cel-go/pull/1381) - Validation of cel.bind() nesting limits by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1378](https://redirect.github.com/cel-expr/cel-go/pull/1378) - Allow validators to be reconfigured by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1379](https://redirect.github.com/cel-expr/cel-go/pull/1379) - Add cost tracking to ext/math.go by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1353](https://redirect.github.com/cel-expr/cel-go/pull/1353) - Expression node limits for parser and checker by [@​TristonianJones](https://redirect.github.com/TristonianJones) in [cel-expr#1386](https://redirect.github.com/cel-expr/cel-go/pull/1386) #### New Contributors - [@​stanleyycheung](https://redirect.github.com/stanleyycheung) made their first contribution in [cel-expr#1362](https://redirect.github.com/cel-expr/cel-go/pull/1362) - [@​wilyan09007](https://redirect.github.com/wilyan09007) made their first contribution in [cel-expr#1334](https://redirect.github.com/cel-expr/cel-go/pull/1334) - [@​pranit0808](https://redirect.github.com/pranit0808) made their first contribution in [cel-expr#1374](https://redirect.github.com/cel-expr/cel-go/pull/1374) **Full Changelog**: <https://github.com/cel-expr/cel-go/compare/v0.29.2...v0.29.3> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/authelia/authelia). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |