Commit Graph
10734 Commits
Author SHA1 Message Date
Amir Zarrinkafsh dc6fb7f5f2 ci(buildkite): stop the coverage build racing suites over its image tag (#13439)
Every agent shares one Docker daemon, and the coverage build used the
same `authelia:dist` tag that every suite's `pre-command` loads, retags
and removes. When another build's suites loaded their image between this
build's `docker build` and the `docker save` in `pre-artifact`, the tag
was gone (`reference does not exist`) or pointed at the other build's
image. Since `pre-artifact` had no `pipefail`, the failed save uploaded
an empty archive, the job passed and every suite in the build failed on
load.

The coverage image is now built under a per-job tag through a new
`--tag` flag on `authelia-scripts docker build`. `pre-artifact` takes
`authelia:dist` only to save the archive, inside the same lock the
suites hold around their load, and `pre-exit` removes the per-job tag.
With every write to `authelia:dist` under that lock, suites can no
longer pick up another build's image between their load and retag
either.

`pre-artifact` now fails the job when the save fails, and skips the save
when the build itself failed or was cancelled.

Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-14 01:54:53 +00:00
James Elliott 485a36faeb build(deps): update module golang.org/x/net to v0.61.0 (#13437)
Drop the golang.org/x/net replace directives, which do not affect the
build.
2026-10-14 01:30:02 +00:00
renovate[bot] a4aec2d5db build(deps): update dependency baseline-browser-mapping to v2.11.28 (#13425)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[baseline-browser-mapping](https://redirect.github.com/web-platform-dx/baseline-browser-mapping)
| [`2.11.27` →
`2.11.28`](https://renovatebot.com/diffs/npm/baseline-browser-mapping/2.11.27/2.11.28)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/baseline-browser-mapping/2.11.28?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/baseline-browser-mapping/2.11.27/2.11.28?slim=true)
|

---

### Release Notes

<details>
<summary>web-platform-dx/baseline-browser-mapping
(baseline-browser-mapping)</summary>

###
[`v2.11.28`](https://redirect.github.com/web-platform-dx/baseline-browser-mapping/compare/v2.11.27...v2.11.28)

[Compare
Source](https://redirect.github.com/web-platform-dx/baseline-browser-mapping/compare/v2.11.27...v2.11.28)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 04:23:10 +00:00
renovate[bot] 962a4b354f build(deps): update dependency @eslint-react/eslint-plugin to v5.24.10 (#13426)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@eslint-react/eslint-plugin](https://redirect.github.com/Rel1cx/eslint-react)
([source](https://redirect.github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin))
| [`5.24.9` →
`5.24.10`](https://renovatebot.com/diffs/npm/@eslint-react%2feslint-plugin/5.24.9/5.24.10)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@eslint-react%2feslint-plugin/5.24.10?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@eslint-react%2feslint-plugin/5.24.9/5.24.10?slim=true)
|

---

### Release Notes

<details>
<summary>Rel1cx/eslint-react
(@&#8203;eslint-react/eslint-plugin)</summary>

###
[`v5.24.10`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v52410-2026-10-09)

[Compare
Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.24.9...v5.24.10)

##### 📝 Documentation

- Added a link to the Astryx `no-react-introspection` rule in the
`react-x/no-children-count` and `react-x/no-children-map` rule
documentation.

##### 🏗️ Internal

- Disabled test isolation in the vitest config.
- Reordered `react-web-api/no-leaked-event-listener` test specs from
typical cases to edge cases.
([#&#8203;2015](https://redirect.github.com/Rel1cx/eslint-react/issues/2015))
- Unified `KNOWN_`-prefixed constant names in
`react-x/no-array-index-key` and `react-x/no-missing-key`.
([#&#8203;2014](https://redirect.github.com/Rel1cx/eslint-react/issues/2014))
- Bumped `effect` to `4.0.2`, `@effect/platform-node` to `4.0.2`, `nx`
to `23.3.0`, `vite` to `8.3.4`, `lucide-react` to `1.53.0`, and `pnpm`
to `12.10.1`.

**Full Changelog**:
<https://github.com/Rel1cx/eslint-react/compare/v5.24.9...v5.24.10>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 04:06:06 +00:00
renovate[bot] 28f7e17755 build(deps): update dependency bootstrap-icons to v1.13.2 (#13427)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [bootstrap-icons](https://icons.getbootstrap.com/)
([source](https://redirect.github.com/twbs/icons)) | [`1.13.1` →
`1.13.2`](https://renovatebot.com/diffs/npm/bootstrap-icons/1.13.1/1.13.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/bootstrap-icons/1.13.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/bootstrap-icons/1.13.1/1.13.2?slim=true)
|

---

### Release Notes

<details>
<summary>twbs/icons (bootstrap-icons)</summary>

###
[`v1.13.2`](https://redirect.github.com/twbs/icons/releases/tag/v1.13.2)

[Compare
Source](https://redirect.github.com/twbs/icons/compare/v1.13.1...v1.13.2)

#### What's Changed

- Add literal ID for TypeScript by
[@&#8203;lihsai0](https://redirect.github.com/lihsai0) in
[#&#8203;2134](https://redirect.github.com/twbs/icons/pull/2134)
- Migrate the Icons documentation to Astro, BUI, and Bootstrap 6 Alpha 1
by [@&#8203;mdo](https://redirect.github.com/mdo) in
[#&#8203;2315](https://redirect.github.com/twbs/icons/pull/2315)

#### Dependencies

- Bump the development-dependencies group with 6 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2164](https://redirect.github.com/twbs/icons/pull/2164)
- Bump the development-dependencies group across 1 directory with 6
updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2176](https://redirect.github.com/twbs/icons/pull/2176)
- Bump actions/checkout from 4 to 5 in the github-actions group by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2196](https://redirect.github.com/twbs/icons/pull/2196)
- Bump the development-dependencies group across 1 directory with 4
updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2197](https://redirect.github.com/twbs/icons/pull/2197)
- Bump js-yaml from 3.14.1 to 3.14.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2216](https://redirect.github.com/twbs/icons/pull/2216)
- Bump the github-actions group across 1 directory with 4 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2220](https://redirect.github.com/twbs/icons/pull/2220)
- Bump minimatch by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2241](https://redirect.github.com/twbs/icons/pull/2241)
- Bump lodash from 4.17.21 to 4.17.23 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2236](https://redirect.github.com/twbs/icons/pull/2236)
- Bump svgo from 3.3.2 to 3.3.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2243](https://redirect.github.com/twbs/icons/pull/2243)
- Bump the github-actions group across 1 directory with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2237](https://redirect.github.com/twbs/icons/pull/2237)
- Bump lodash from 4.17.23 to 4.18.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2253](https://redirect.github.com/twbs/icons/pull/2253)
- Bump handlebars from 4.7.8 to 4.7.9 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2250](https://redirect.github.com/twbs/icons/pull/2250)
- Bump flatted from 3.3.4 to 3.4.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2249](https://redirect.github.com/twbs/icons/pull/2249)
- Bump the github-actions group with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2251](https://redirect.github.com/twbs/icons/pull/2251)
- Bump yauzl from 3.2.0 to 3.3.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2255](https://redirect.github.com/twbs/icons/pull/2255)
- Bump picomatch by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2256](https://redirect.github.com/twbs/icons/pull/2256)
- Bump the development-dependencies group across 1 directory with 5
updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2258](https://redirect.github.com/twbs/icons/pull/2258)
- Bump the development-dependencies group with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2261](https://redirect.github.com/twbs/icons/pull/2261)
- Bump fast-uri from 3.1.0 to 3.1.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2265](https://redirect.github.com/twbs/icons/pull/2265)
- Bump ip-address from 10.1.0 to 10.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2264](https://redirect.github.com/twbs/icons/pull/2264)
- Update dependencies by
[@&#8203;XhmikosR](https://redirect.github.com/XhmikosR) in
[#&#8203;2268](https://redirect.github.com/twbs/icons/pull/2268)
- Bump the development-dependencies group across 1 directory with 7
updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2278](https://redirect.github.com/twbs/icons/pull/2278)
- Bump the github-actions group across 1 directory with 8 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2277](https://redirect.github.com/twbs/icons/pull/2277)
- Bump fast-uri from 3.1.2 to 3.1.4 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2282](https://redirect.github.com/twbs/icons/pull/2282)
- Bump fast-uri from 3.1.4 to 3.1.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2289](https://redirect.github.com/twbs/icons/pull/2289)
- Bump ip-address from 10.2.0 to 10.4.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2287](https://redirect.github.com/twbs/icons/pull/2287)
- Bump the github-actions group across 1 directory with 5 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;2284](https://redirect.github.com/twbs/icons/pull/2284)

#### New Contributors

- [@&#8203;lihsai0](https://redirect.github.com/lihsai0) made their
first contribution in
[#&#8203;2134](https://redirect.github.com/twbs/icons/pull/2134)

**Full Changelog**:
<https://github.com/twbs/icons/compare/v1.13.1...v1.13.2>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 04:01:50 +00:00
renovate[bot] 686a5da899 build(deps): update authelia/base:latest docker digest to 80f157f (#13424)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| authelia/base | final | digest | `709a945` → `80f157f` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 03:54:51 +00:00
renovate[bot] 2ed18389ec build(deps): update dependency lefthook to v2.2.1 (#13420)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [lefthook](https://redirect.github.com/evilmartians/lefthook) |
[`2.1.17` →
`2.2.1`](https://renovatebot.com/diffs/npm/lefthook/2.1.17/2.2.1) |
![age](https://developer.mend.io/api/mc/badges/age/npm/lefthook/2.2.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/lefthook/2.1.17/2.2.1?slim=true)
|

---

### Release Notes

<details>
<summary>evilmartians/lefthook (lefthook)</summary>

###
[`v2.2.1`](https://redirect.github.com/evilmartians/lefthook/blob/HEAD/CHANGELOG.md#221)

[Compare
Source](https://redirect.github.com/evilmartians/lefthook/compare/v2.2.0...v2.2.1)

- feat: support php composer
([#&#8203;1583](https://redirect.github.com/evilmartians/lefthook/pull/1583))
by [@&#8203;mrexox](https://redirect.github.com/mrexox)
- fix: generate different patch names when in a worktree
([#&#8203;1582](https://redirect.github.com/evilmartians/lefthook/pull/1582))
by [@&#8203;mrexox](https://redirect.github.com/mrexox)
- refactor: cache paths in wrapper
([#&#8203;1570](https://redirect.github.com/evilmartians/lefthook/pull/1570))
by [@&#8203;mrexox](https://redirect.github.com/mrexox)

###
[`v2.2.0`](https://redirect.github.com/evilmartians/lefthook/blob/HEAD/CHANGELOG.md#220)

[Compare
Source](https://redirect.github.com/evilmartians/lefthook/compare/v2.1.17...v2.2.0)

- fix: don't write an install-time lefthook path into AI hook configs
([#&#8203;1544](https://redirect.github.com/evilmartians/lefthook/pull/1544))
by [@&#8203;anandghegde](https://redirect.github.com/anandghegde)
- docs: publish JSON schema at lefthook.dev/schema.json
([#&#8203;1579](https://redirect.github.com/evilmartians/lefthook/pull/1579))
by
[@&#8203;BUTTERFINGERS7498](https://redirect.github.com/BUTTERFINGERS7498)
- fix: pass --output path to git diff as a single argument
([#&#8203;1581](https://redirect.github.com/evilmartians/lefthook/pull/1581))
by [@&#8203;cpruijsen](https://redirect.github.com/cpruijsen)
- fix: ignore trailing NUL in --files-from-stdin
([#&#8203;1574](https://redirect.github.com/evilmartians/lefthook/pull/1574))
by [@&#8203;jasonwbarnett](https://redirect.github.com/jasonwbarnett)
- deps: October 2026
([#&#8203;1571](https://redirect.github.com/evilmartians/lefthook/pull/1571))
by [@&#8203;mrexox](https://redirect.github.com/mrexox)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 00:20:19 +00:00
renovate[bot] 6f1b7ef37d build(deps): update golang docker tag to v1.27.2 (#13415)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [golang](https://hub.docker.com/_/golang)
([source](https://redirect.github.com/docker-library/golang)) | stage |
patch | `1.27.1-alpine` → `1.27.2-alpine` |
| [golang](https://hub.docker.com/_/golang)
([source](https://redirect.github.com/docker-library/golang)) | final |
patch | `1.27.1-alpine` → `1.27.2-alpine` |
| [golang](https://hub.docker.com/_/golang)
([source](https://redirect.github.com/docker-library/golang)) | stage |
patch | `1.27.1-bookworm` → `1.27.2-bookworm` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 00:19:33 +00:00
renovate[bot] fee9d2d334 build(deps): update caddy:2.11.7-builder docker digest to b25f474 (#13416)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [caddy](https://hub.docker.com/_/caddy)
([source](https://redirect.github.com/caddyserver/caddy-docker)) | stage
| digest | `1ab914b` → `b25f474` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 00:19:12 +00:00
renovate[bot] 01e4345837 build(deps): update dependency @tabler/icons to v3.49.0 (#13417)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@tabler/icons](https://tabler.io/icons)
([source](https://redirect.github.com/tabler/tabler-icons)) | [`3.48.0`
→
`3.49.0`](https://renovatebot.com/diffs/npm/@tabler%2ficons/3.48.0/3.49.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@tabler%2ficons/3.49.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@tabler%2ficons/3.48.0/3.49.0?slim=true)
|

---

### Release Notes

<details>
<summary>tabler/tabler-icons (@&#8203;tabler/icons)</summary>

###
[`v3.49.0`](https://redirect.github.com/tabler/tabler-icons/releases/tag/v3.49.0):
Release 3.49.0

[Compare
Source](https://redirect.github.com/tabler/tabler-icons/compare/v3.48.0...v3.49.0)

<img width="584"
src="https://raw.githubusercontent.com/tabler/tabler-icons/v3.49.0/.github/tabler-icons-3.49.0@2x.png"
/>

##### 18 new icons:

- `outline/alphabet-chinese`
- `outline/alphabet-devanagari`
- `outline/alphabet-ethiopic`
- `outline/alphabet-georgian`
- `outline/alphabet-japanese`
- `outline/blob-dashed`
- `outline/circle-heart`
- `outline/circle-pause`
- `outline/circle-play`
- `outline/circle-stop`
- `outline/file-lock`
- `outline/folder-lock`
- `outline/lens-concave`
- `outline/lens-convex`
- `outline/memory`
- `outline/square-dashed-top-solid`
- `outline/square-dashed-x`
- `outline/triangle-dashed`

##### Fixes and improvements

- Add `alphabet`, `arabic`, `typography` and `character` tags to
`alphabet-arabic`
([#&#8203;1643](https://redirect.github.com/tabler/tabler-icons/issues/1643))
- Match `brand-instagram` size to other square brand icons
([#&#8203;1615](https://redirect.github.com/tabler/tabler-icons/issues/1615))
- Fix `square-dashed` icon drawn as a solid square
([#&#8203;1614](https://redirect.github.com/tabler/tabler-icons/issues/1614))
- Redraw `square-dashed` and `table-dashed` icons
([#&#8203;1640](https://redirect.github.com/tabler/tabler-icons/issues/1640))
- Add `squircle` tag to all `square-rounded` icons
([#&#8203;1641](https://redirect.github.com/tabler/tabler-icons/issues/1641))
- **Webfont:** Fix filled `home` webfont glyph having zero width in
Chrome
([#&#8203;1616](https://redirect.github.com/tabler/tabler-icons/issues/1616))
- **Webfont:** Fix `sass` and `style` fields in `package.json` to point
to `dist/`, and stop publishing the intermediate SVG fonts, which the
CSS never referenced
([#&#8203;1633](https://redirect.github.com/tabler/tabler-icons/issues/1633))
- **Webfont:** Make webfont builds reproducible, so font files no longer
change between builds of the same icons
([#&#8203;1624](https://redirect.github.com/tabler/tabler-icons/issues/1624))
- **Webfont:** Drop the unused `svgtofont` dependency
([#&#8203;1620](https://redirect.github.com/tabler/tabler-icons/issues/1620))
- **Astro, Preact, React, React Native, SolidJS, Vue:** Stop publishing
source maps, which made up about 70% of the package size
([#&#8203;1634](https://redirect.github.com/tabler/tabler-icons/issues/1634))
- **Svelte, Svelte Runes:** Add `default` export conditions and document
per-icon imports
([#&#8203;1630](https://redirect.github.com/tabler/tabler-icons/issues/1630))
- **React Native:** Stop passing extra props (`testID`, `style`,
`onPress`, …) to every node of the icon, only the root `Svg` gets them.
`title` is now exposed to screen readers via accessibility props
([#&#8203;1628](https://redirect.github.com/tabler/tabler-icons/issues/1628))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 00:18:43 +00:00
renovate[bot] 95033c726f build(deps): update node.js to 143494b (#13418)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [node](https://hub.docker.com/_/node)
([source](https://redirect.github.com/nodejs/node)) | final | digest |
`0b36e8c` → `143494b` |
| [node](https://hub.docker.com/_/node)
([source](https://redirect.github.com/nodejs/node)) | stage | digest |
`0b36e8c` → `143494b` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 00:18:39 +00:00
renovate[bot] 4df32f15eb build(deps): update go toolchain directive to v1.27.2 (#13414)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [go](https://go.dev/)
([source](https://redirect.github.com/golang/go)) | toolchain | patch |
`1.27.1` → `1.27.2` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 00:18:34 +00:00
renovate[bot] 03854db2db build(deps): update dependency hugo-extended to v0.167.0 (#13419)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [hugo-extended](https://redirect.github.com/jakejarvis/hugo-extended)
| `0.166.0` → `0.167.0` |
![age](https://developer.mend.io/api/mc/badges/age/npm/hugo-extended/0.167.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/hugo-extended/0.166.0/0.167.0?slim=true)
|
| [hugo-extended](https://redirect.github.com/jakejarvis/hugo-extended)
| [`0.166.0` →
`0.167.0`](https://renovatebot.com/diffs/npm/hugo-extended/0.166.0/0.167.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/hugo-extended/0.167.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/hugo-extended/0.166.0/0.167.0?slim=true)
|

---

### Release Notes

<details>
<summary>jakejarvis/hugo-extended (hugo-extended)</summary>

###
[`v0.167.0`](https://redirect.github.com/jakejarvis/hugo-extended/compare/v0.166.0...v0.167.0)

[Compare
Source](https://redirect.github.com/jakejarvis/hugo-extended/compare/v0.166.0...v0.167.0)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 00:18:20 +00:00
renovate[bot] dd679cccf9 build(deps): update dependency lucide-react to v1.53.0 (#13421)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [lucide-react](https://lucide.dev)
([source](https://redirect.github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react))
| [`1.52.0` →
`1.53.0`](https://renovatebot.com/diffs/npm/lucide-react/1.52.0/1.53.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/lucide-react/1.53.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/lucide-react/1.52.0/1.53.0?slim=true)
|

---

### Release Notes

<details>
<summary>lucide-icons/lucide (lucide-react)</summary>

###
[`v1.53.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/1.53.0):
Version 1.53.0

[Compare
Source](https://redirect.github.com/lucide-icons/lucide/compare/1.52.0...1.53.0)

#### What's Changed

- chore(deps-dev): bump preact from 10.29.8 to 11.0.0 in the preact-deps
group by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4961](https://redirect.github.com/lucide-icons/lucide/pull/4961)
- chore(deps): bump vue from 3.5.42 to 3.5.43 in the vue-deps group by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4958](https://redirect.github.com/lucide-icons/lucide/pull/4958)
- fix(site): Fix reset button and rename absolute stroke width to
non-scaling stroke by
[@&#8203;ericfennis](https://redirect.github.com/ericfennis) in
[#&#8203;4956](https://redirect.github.com/lucide-icons/lucide/pull/4956)
- chore(deps-dev): bump simple-git from 3.36.0 to 4.0.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4968](https://redirect.github.com/lucide-icons/lucide/pull/4968)
- chore(deps-dev): bump the angular-deps group across 1 directory with
11 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4960](https://redirect.github.com/lucide-icons/lucide/pull/4960)
- chore(categories): Add description field to categories by
[@&#8203;ericfennis](https://redirect.github.com/ericfennis) in
[#&#8203;4909](https://redirect.github.com/lucide-icons/lucide/pull/4909)
- feat(icons): added `groceries` icon by
[@&#8203;rrod497](https://redirect.github.com/rrod497) in
[#&#8203;4907](https://redirect.github.com/lucide-icons/lucide/pull/4907)
- fix(icons): changed `pen-tool` icon by
[@&#8203;karsa-mistmere](https://redirect.github.com/karsa-mistmere) in
[#&#8203;4972](https://redirect.github.com/lucide-icons/lucide/pull/4972)
- feat(icons): added new `hiking-stick` icon by
[@&#8203;kamilasw](https://redirect.github.com/kamilasw) in
[#&#8203;4711](https://redirect.github.com/lucide-icons/lucide/pull/4711)
- feat(icons): added scratch-blocks icon by
[@&#8203;mc20000-01](https://redirect.github.com/mc20000-01) in
[#&#8203;4969](https://redirect.github.com/lucide-icons/lucide/pull/4969)
- fix(icons): changed `soup` and `salad` icons by
[@&#8203;karsa-mistmere](https://redirect.github.com/karsa-mistmere) in
[#&#8203;4971](https://redirect.github.com/lucide-icons/lucide/pull/4971)

#### New Contributors

- [@&#8203;mc20000-01](https://redirect.github.com/mc20000-01) made
their first contribution in
[#&#8203;4969](https://redirect.github.com/lucide-icons/lucide/pull/4969)

**Full Changelog**:
<https://github.com/lucide-icons/lucide/compare/1.52.0...1.53.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 00:17:59 +00:00
renovate[bot] e70162f3e0 build(deps): update dependency @eslint-react/eslint-plugin to v5.24.9 (#13422)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@eslint-react/eslint-plugin](https://redirect.github.com/Rel1cx/eslint-react)
([source](https://redirect.github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin))
| [`5.24.8` →
`5.24.9`](https://renovatebot.com/diffs/npm/@eslint-react%2feslint-plugin/5.24.8/5.24.9)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@eslint-react%2feslint-plugin/5.24.9?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@eslint-react%2feslint-plugin/5.24.8/5.24.9?slim=true)
|

---

### Release Notes

<details>
<summary>Rel1cx/eslint-react
(@&#8203;eslint-react/eslint-plugin)</summary>

###
[`v5.24.9`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5249-2026-10-08)

[Compare
Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.24.8...v5.24.9)

##### 🐞 Fixes

- `react-x/set-state-in-effect`: optional chaining in a `setState`
argument (ex: `setData(ref.current?.value)`, `setWidth(el?.offsetWidth
?? 0)` where `el` is ref-derived) no longer defeats the ref-value
exemption; the `ChainExpression` wrapper is now unwrapped during
ref-source detection.
([#&#8203;2011](https://redirect.github.com/Rel1cx/eslint-react/issues/2011))

##### 📝 Documentation

- Aligned rule documentation with the current react.dev reference docs.
([#&#8203;2013](https://redirect.github.com/Rel1cx/eslint-react/issues/2013))

**Full Changelog**:
<https://github.com/Rel1cx/eslint-react/compare/v5.24.8...v5.24.9>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-10 00:16:39 +00:00
renovate[bot] 2118a655ad build(deps): update dependency @babel/traverse to v8.0.7 (#13410)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@babel/traverse](https://babel.dev/docs/en/next/babel-traverse)
([source](https://redirect.github.com/babel/babel/tree/HEAD/packages/babel-traverse))
| [`8.0.6` →
`8.0.7`](https://renovatebot.com/diffs/npm/@babel%2ftraverse/8.0.6/8.0.7)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@babel%2ftraverse/8.0.7?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@babel%2ftraverse/8.0.6/8.0.7?slim=true)
|

---

### Release Notes

<details>
<summary>babel/babel (@&#8203;babel/traverse)</summary>

###
[`v8.0.7`](https://redirect.github.com/babel/babel/blob/HEAD/CHANGELOG.md#v807-2026-10-07)

[Compare
Source](https://redirect.github.com/babel/babel/compare/v8.0.6...v8.0.7)

##### 🐛 Bug Fix

- `babel-helper-create-regexp-features-plugin`,
`babel-plugin-transform-dotall-regex`,
`babel-plugin-transform-unicode-sets-regex`, `babel-preset-env`
- [#&#8203;18295](https://redirect.github.com/babel/babel/pull/18295)
Bump regexpu-core to 6.5.3
([@&#8203;JLHwung](https://redirect.github.com/JLHwung))
- `babel-plugin-transform-for-of`
- [#&#8203;18292](https://redirect.github.com/babel/babel/pull/18292)
Skip `for await` in `transform-for-of`
([@&#8203;brunoborta](https://redirect.github.com/brunoborta))
- `babel-helpers`, `babel-plugin-transform-async-generator-functions`,
`babel-runtime-corejs3`
- [#&#8203;18283](https://redirect.github.com/babel/babel/pull/18283)
Fix `asyncIterator` helper forwarding `.throw()` to `.return()`
([@&#8203;brunoborta](https://redirect.github.com/brunoborta))
- `babel-parser`
- [#&#8203;18288](https://redirect.github.com/babel/babel/pull/18288)
fix(parser): allow await as a function expression name inside async
arrow ([@&#8203;JLHwung](https://redirect.github.com/JLHwung))
- `babel-helpers`, `babel-plugin-transform-class-properties`,
`babel-plugin-transform-modules-systemjs`, `babel-runtime-corejs3`
- [#&#8203;18284](https://redirect.github.com/babel/babel/pull/18284)
Guard `@@toPrimitive` usage in toPrimitive helper
([@&#8203;nicolo-ribaudo](https://redirect.github.com/nicolo-ribaudo))
- `babel-plugin-transform-block-scoping`
- [#&#8203;18195](https://redirect.github.com/babel/babel/pull/18195)
fix: closures in for-loop init capture wrong binding
([@&#8203;joelle-a-dev](https://redirect.github.com/joelle-a-dev))
- `babel-helper-create-class-features-plugin`,
`babel-plugin-transform-private-property-in-object`
- [#&#8203;18265](https://redirect.github.com/babel/babel/pull/18265)
Return false for `#x in` on static private fields before initialization
([@&#8203;hoobnn](https://redirect.github.com/hoobnn))
- `babel-traverse`
- [#&#8203;18151](https://redirect.github.com/babel/babel/pull/18151)
Evaluate TypeScript expression wrappers in `NodePath#evaluate`
([@&#8203;CINC0S](https://redirect.github.com/CINC0S))
- [#&#8203;18250](https://redirect.github.com/babel/babel/pull/18250)
fix(traverse): do not evaluate destructured bindings in `path.evaluate`
([@&#8203;wulu007](https://redirect.github.com/wulu007))
- Other
- [#&#8203;18257](https://redirect.github.com/babel/babel/pull/18257)
Fix eslint-parser AST definition of AccessorProperty
([@&#8203;jpradelle](https://redirect.github.com/jpradelle))
- `babel-core`
- [#&#8203;18254](https://redirect.github.com/babel/babel/pull/18254)
fix(core): createConfigItem allows cb as 2nd arg
([@&#8203;JLHwung](https://redirect.github.com/JLHwung))

##### 🏠 Internal

- `babel-helpers`, `babel-plugin-transform-modules-commonjs`,
`babel-runtime-corejs3`
- [#&#8203;18255](https://redirect.github.com/babel/babel/pull/18255)
Simplify `interopRequireWildcard` helper
([@&#8203;nicolo-ribaudo](https://redirect.github.com/nicolo-ribaudo))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 20:17:03 +00:00
renovate[bot] 88276fcc33 build(deps): update typescript-eslint monorepo to v8.71.1 (#13411)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@typescript-eslint/eslint-plugin](https://typescript-eslint.io/packages/eslint-plugin)
([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin))
| [`8.71.0` →
`8.71.1`](https://renovatebot.com/diffs/npm/@typescript-eslint%2feslint-plugin/8.71.0/8.71.1)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@typescript-eslint%2feslint-plugin/8.71.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@typescript-eslint%2feslint-plugin/8.71.0/8.71.1?slim=true)
|
|
[@typescript-eslint/parser](https://typescript-eslint.io/packages/parser)
([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser))
| [`8.71.0` →
`8.71.1`](https://renovatebot.com/diffs/npm/@typescript-eslint%2fparser/8.71.0/8.71.1)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@typescript-eslint%2fparser/8.71.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@typescript-eslint%2fparser/8.71.0/8.71.1?slim=true)
|

---

### Release Notes

<details>
<summary>typescript-eslint/typescript-eslint
(@&#8203;typescript-eslint/eslint-plugin)</summary>

###
[`v8.71.1`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/eslint-plugin/CHANGELOG.md#8711-2026-10-05)

[Compare
Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.71.0...v8.71.1)

##### 🩹 Fixes

- **eslint-plugin:** \[no-unnecessary-type-parameters] count
instantiated mapped type constraints
([#&#8203;12941](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12941))
- **eslint-plugin:** \[prefer-optional-chain] check the constrained type
([#&#8203;12953](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12953))
- **eslint-plugin:** \[no-confusing-void-expression] don't autofix when
declared return type is unknown
([#&#8203;12930](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12930))
- **eslint-plugin:** \[no-unsafe-enum-assignment] skip identical types
and bound deep type walks
([#&#8203;12957](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12957))
- **eslint-plugin:** \[require-array-sort-compare] use array argument
type constraint
([#&#8203;12919](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12919))
- **eslint-plugin:** \[no-unused-vars] report usedOnlyAsType for
partially exported merged declarations
([#&#8203;12892](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12892))
- **eslint-plugin:** \[no-misused-promises] skip argument checks for
calls without arguments
([#&#8203;12923](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12923))

##### ❤️ Thank You

- Diptajoy Mistry
[@&#8203;diptomistry](https://redirect.github.com/diptomistry)
- Evyatar Daud
[@&#8203;StyleShit](https://redirect.github.com/StyleShit)
- Josh Goldberg
- Josh Goldberg ✨
- Medhansh Poojari

See [GitHub
Releases](https://redirect.github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.1)
for more information.

You can read about our [versioning
strategy](https://typescript-eslint.io/users/versioning) and
[releases](https://typescript-eslint.io/users/releases) on our website.

</details>

<details>
<summary>typescript-eslint/typescript-eslint
(@&#8203;typescript-eslint/parser)</summary>

###
[`v8.71.1`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/parser/CHANGELOG.md#8711-2026-10-05)

[Compare
Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.71.0...v8.71.1)

This was a version bump only for parser to align it with other projects,
there were no code changes.

See [GitHub
Releases](https://redirect.github.com/typescript-eslint/typescript-eslint/releases/tag/v8.71.1)
for more information.

You can read about our [versioning
strategy](https://typescript-eslint.io/users/versioning) and
[releases](https://typescript-eslint.io/users/releases) on our website.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 20:01:59 +00:00
renovate[bot] 4a496fd0e7 build(deps): update authelia/base:latest docker digest to 709a945 (#13412)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| authelia/base | final | digest | `753efd0` → `709a945` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 20:01:41 +00:00
renovate[bot] d1b35a17b8 build(deps): update github/codeql-action action to v4.38.3 (#13413)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v4.38.2` → `v4.38.3` |

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.38.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.38.3)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.38.2...v4.38.3)

- *Upcoming breaking change*: CodeQL version 2.21.2 and earlier were
discontinued on 24 September 2026 alongside GitHub Enterprise Server
3.17, and will be unsupported by the next minor release of the CodeQL
Action. Added a deprecation warning for customers using these versions
of CodeQL.
[#&#8203;4188](https://redirect.github.com/github/codeql-action/pull/4188)
- Update default CodeQL bundle version to
[2.27.2](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.2).
[#&#8203;4203](https://redirect.github.com/github/codeql-action/pull/4203)
- Fixed a bug where the decision of whether to use a per-language bundle
did not account for custom configurations that reference queries outside
of compiled CodeQL packs. This issue was caught during internal testing
and did not affect any customer repositories. We will resume the roll
out of per-language bundles in the coming weeks.
[#&#8203;4184](https://redirect.github.com/github/codeql-action/pull/4184)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdpdGh1Yl9hY3Rpb25zIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 20:01:36 +00:00
Amir Zarrinkafsh be0edabcdb ci(buildkite): remove the blocked build webhook notification (#13403)
A pipeline-level `notify` webhook can only send to a URL, so it cannot
carry the `X-Buildkite-Token` header the Windmill HTTP route for
`buildkite_notification_webhook` now checks. The blocked build
notification moves to an organisation-level Notification Service webhook
scoped to this pipeline, and the hardcoded steps in the Buildkite
interface no longer include the `notify` block, so this copy drops it to
match.

Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-08 10:38:14 +00:00
renovate[bot] 0742b5719e build(deps): update traefik docker tag to v3.7.14 (#13409)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://hub.docker.com/_/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`v3.7.13` → `v3.7.14` |

---

### Release Notes

<details>
<summary>traefik/traefik (traefik)</summary>

###
[`v3.7.14`](https://redirect.github.com/traefik/traefik/blob/HEAD/CHANGELOG.md#v3714-2026-10-05)

[Compare
Source](https://redirect.github.com/traefik/traefik/compare/v3.7.13...v3.7.14)

[All
Commits](https://redirect.github.com/traefik/traefik/compare/v3.7.13...v3.7.14)

**Bug fixes:**

- **\[acme]** Bump github.com/go-acme/lego/v5 to v5.5.1
([#&#8203;13929](https://redirect.github.com/traefik/traefik/pull/13929)
[@&#8203;ldez](https://redirect.github.com/ldez))
- **\[acme]** Bump github.com/go-acme/lego/v5 to v5.5.2
([#&#8203;13952](https://redirect.github.com/traefik/traefik/pull/13952)
[@&#8203;ldez](https://redirect.github.com/ldez))
- **\[acme]** Close the newly created ACME storage file on Windows
([#&#8203;13860](https://redirect.github.com/traefik/traefik/pull/13860)
[@&#8203;datrixlab](https://redirect.github.com/datrixlab))
- **\[docker]** Bump github.com/docker/cli to v29.8.1
([#&#8203;13934](https://redirect.github.com/traefik/traefik/pull/13934)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[fastproxy]** Isolate NTLM and Negotiate backend connections in
FastProxy
([#&#8203;13914](https://redirect.github.com/traefik/traefik/pull/13914)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[k8s/gatewayapi]** Allow configuring gateways
([#&#8203;13819](https://redirect.github.com/traefik/traefik/pull/13819)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[k8s/gatewayapi]** Bump sigs.k8s.io/gateway-api to v1.6.2
([#&#8203;13984](https://redirect.github.com/traefik/traefik/pull/13984)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[k8s/gatewayapi]** Do not create the Gateway API routers a previous
one shadows
([#&#8203;13946](https://redirect.github.com/traefik/traefik/pull/13946)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[k8s/gatewayapi]** Do not let TLSRoute routers shadow TCPRoute
routers
([#&#8203;13953](https://redirect.github.com/traefik/traefik/pull/13953)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[k8s/gatewayapi]** Fix HTTP/GRPC routes conflict
([#&#8203;13421](https://redirect.github.com/traefik/traefik/pull/13421)
[@&#8203;AnatoleLucet](https://redirect.github.com/AnatoleLucet))
- **\[k8s/gatewayapi]** Fix TLSRoute router name collision across
listeners sharing an entry point
([#&#8203;13959](https://redirect.github.com/traefik/traefik/pull/13959)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[k8s/gatewayapi]** Report the BackendTLSPolicy ancestor in the
namespace of its Gateway
([#&#8203;13964](https://redirect.github.com/traefik/traefik/pull/13964)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[k8s/gatewayapi]** Stable sort Gateways to keep the TLS certificate
order stable
([#&#8203;13911](https://redirect.github.com/traefik/traefik/pull/13911)
[@&#8203;rl-io](https://redirect.github.com/rl-io))
- **\[k8s/ingress-nginx]** Build the ssl-passthrough HTTP route like any
other ingress
([#&#8203;13915](https://redirect.github.com/traefik/traefik/pull/13915)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[k8s/ingress-nginx]** Do not normalize resource names in the
ingress-nginx provider
([#&#8203;13922](https://redirect.github.com/traefik/traefik/pull/13922)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[k8s/ingress-nginx]** Fix the ingress-nginx cross-links between the
routing and provider docs
([#&#8203;13925](https://redirect.github.com/traefik/traefik/pull/13925)
[@&#8203;simpleqt](https://redirect.github.com/simpleqt))
- **\[k8s/ingress-nginx]** Make trailing capture group optional in
ImplementationSpecific paths
([#&#8203;13455](https://redirect.github.com/traefik/traefik/pull/13455)
[@&#8203;mmatur](https://redirect.github.com/mmatur))
- **\[k8s/ingress-nginx]** Remove Authorization header for basic and
digest auth
([#&#8203;13631](https://redirect.github.com/traefik/traefik/pull/13631)
[@&#8203;josmo](https://redirect.github.com/josmo))
- **\[k8s/ingress-nginx]** Set the Ssl-Client-\* request headers on the
Ingress-NGINX HTTP router
([#&#8203;13912](https://redirect.github.com/traefik/traefik/pull/13912)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[k8s/ingress-nginx]** Support wildcard origins in cors-allow-origin
for the ingress-nginx provider
([#&#8203;13726](https://redirect.github.com/traefik/traefik/pull/13726)
[@&#8203;kimsehyoung](https://redirect.github.com/kimsehyoung))
- **\[logs, middleware, k8s/crd]** Expose IngressRoute metadata in
access logs
([#&#8203;12985](https://redirect.github.com/traefik/traefik/pull/12985)
[@&#8203;mmatur](https://redirect.github.com/mmatur))
- **\[middleware]** Avoid deprecated table.maxn in the rate limiter Lua
script
([#&#8203;13825](https://redirect.github.com/traefik/traefik/pull/13825)
[@&#8203;lazerg](https://redirect.github.com/lazerg))
- **\[otel]** Bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric to
v1.46.0
([#&#8203;13933](https://redirect.github.com/traefik/traefik/pull/13933)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[otel]** Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace to
v1.46.0
([#&#8203;13932](https://redirect.github.com/traefik/traefik/pull/13932)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[otel]** Bump otlploggrpc and otlploghttp to v0.22.0
([#&#8203;13931](https://redirect.github.com/traefik/traefik/pull/13931)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[rules]** Ignore negated matchers when parsing rule domains
([#&#8203;13863](https://redirect.github.com/traefik/traefik/pull/13863)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[server]** Bump golang.org/x/crypto to v0.57.0
([#&#8203;13930](https://redirect.github.com/traefik/traefik/pull/13930)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[server]** Silence encoded characters warning when some are
disallowed
([#&#8203;13470](https://redirect.github.com/traefik/traefik/pull/13470)
[@&#8203;Adel-Ayoub](https://redirect.github.com/Adel-Ayoub))
- **\[service]** Dedicate a sticky transport per ServersTransport
([#&#8203;13838](https://redirect.github.com/traefik/traefik/pull/13838)
[@&#8203;sdelicata](https://redirect.github.com/sdelicata))
- **\[service]** Fix the second server selection bias in the P2C load
balancer
([#&#8203;13644](https://redirect.github.com/traefik/traefik/pull/13644)
[@&#8203;lazerg](https://redirect.github.com/lazerg))
- **\[service]** Isolate preauthenticated NTLM and Kerberos backend
connections
([#&#8203;13902](https://redirect.github.com/traefik/traefik/pull/13902)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[udp]** Copy UDP datagrams into right-sized buffers before queuing
([#&#8203;13941](https://redirect.github.com/traefik/traefik/pull/13941)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[webui]** Bump react-router to v7 and vite to v8
([#&#8203;13794](https://redirect.github.com/traefik/traefik/pull/13794)
[@&#8203;gndz07](https://redirect.github.com/gndz07))
- Fix build with GOPROXY=direct
([#&#8203;12724](https://redirect.github.com/traefik/traefik/pull/12724)
[@&#8203;mehrdadbn9](https://redirect.github.com/mehrdadbn9))

**Documentation:**

- **\[accesslogs]** Clarify access log buffering behavior
([#&#8203;13510](https://redirect.github.com/traefik/traefik/pull/13510)
[@&#8203;amazon7737](https://redirect.github.com/amazon7737))
- **\[accesslogs]** Clarify that USR1 only reopens the access log file
([#&#8203;13955](https://redirect.github.com/traefik/traefik/pull/13955)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[k8s]** Clarify nativeLB load balancing behavior in Kubernetes
reference docs
([#&#8203;13358](https://redirect.github.com/traefik/traefik/pull/13358)
[@&#8203;zarko-a](https://redirect.github.com/zarko-a))
- **\[security]** Document the coordinated disclosure embargo for
security reports
([#&#8203;13982](https://redirect.github.com/traefik/traefik/pull/13982)
[@&#8203;emilevauge](https://redirect.github.com/emilevauge))
- **\[server]** Fix misleading trailer comments in header strategy
handlers
([#&#8203;13938](https://redirect.github.com/traefik/traefik/pull/13938)
[@&#8203;AleksaMCode](https://redirect.github.com/AleksaMCode))
- **\[tcp]** Fix 'allows to configure' grammar in TCP ServersTransport
([#&#8203;13894](https://redirect.github.com/traefik/traefik/pull/13894)
[@&#8203;fng713](https://redirect.github.com/fng713))
- Fix 'allow to match' grammar in TCP HostSNI rules
([#&#8203;13895](https://redirect.github.com/traefik/traefik/pull/13895)
[@&#8203;fng713](https://redirect.github.com/fng713))
- Fix case-sensitive option anchors
([#&#8203;13924](https://redirect.github.com/traefik/traefik/pull/13924)
[@&#8203;simpleqt](https://redirect.github.com/simpleqt))
- Fix the end anchor in the single-test example
([#&#8203;13898](https://redirect.github.com/traefik/traefik/pull/13898)
[@&#8203;amazon7737](https://redirect.github.com/amazon7737))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 10:26:32 +00:00
renovate[bot] 71c7b62e6d build(deps): update traefik docker tag to v2.11.58 (#13408)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik](https://hub.docker.com/_/traefik)
([source](https://redirect.github.com/traefik/traefik)) | patch |
`v2.11.57` → `v2.11.58` |

---

### Release Notes

<details>
<summary>traefik/traefik (traefik)</summary>

###
[`v2.11.58`](https://redirect.github.com/traefik/traefik/blob/HEAD/CHANGELOG.md#v21158-2026-10-05)

[Compare
Source](https://redirect.github.com/traefik/traefik/compare/v2.11.57...v2.11.58)

[All
Commits](https://redirect.github.com/traefik/traefik/compare/v2.11.57...v2.11.58)

**Bug fixes:**

- **\[docker]** Bump github.com/docker/cli to v29.8.1
([#&#8203;13934](https://redirect.github.com/traefik/traefik/pull/13934)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[rules]** Ignore negated matchers when parsing rule domains
([#&#8203;13863](https://redirect.github.com/traefik/traefik/pull/13863)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[server]** Bump golang.org/x/crypto to v0.57.0
([#&#8203;13930](https://redirect.github.com/traefik/traefik/pull/13930)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[server]** Ensure that the request TLS state is always set
([#&#8203;13985](https://redirect.github.com/traefik/traefik/pull/13985)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))
- **\[service]** Dedicate a sticky transport per ServersTransport
([#&#8203;13838](https://redirect.github.com/traefik/traefik/pull/13838)
[@&#8203;sdelicata](https://redirect.github.com/sdelicata))
- **\[service]** Isolate preauthenticated NTLM and Kerberos backend
connections
([#&#8203;13902](https://redirect.github.com/traefik/traefik/pull/13902)
[@&#8203;kevinpollet](https://redirect.github.com/kevinpollet))
- **\[udp]** Copy UDP datagrams into right-sized buffers before queuing
([#&#8203;13941](https://redirect.github.com/traefik/traefik/pull/13941)
[@&#8203;rtribotte](https://redirect.github.com/rtribotte))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 10:25:37 +00:00
Amir Zarrinkafsh bf497b883d test(storage): retry sqlite begin on lock contention in concurrency test (#13407)
The SQLite DSN uses `_txlock=immediate`, so every transaction takes the
write lock at `BEGIN` and waiters give up after the driver's default 5s
busy timeout. With 16 to 32 workers committing on a loaded CI disk, a
starved waiter can exceed that and fail with `database is locked`, which
`TestSQLProviderConcurrentTransactions` treated as fatal even though
`IsSerializationFailure` classifies it as retryable and the OIDC store
already maps it to `ErrSerializationFailure`.

Retry only `BeginTX` on a serialization failure, bounded to five
attempts. Lock failures inside the transaction still fail the test, so a
regression to deferred locking, which fails on the lock upgrade at the
revoke, is still caught.

Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-08 10:22:19 +00:00
Amir Zarrinkafsh e9a1ee70fe ci(buildkite): hide parent failures in test engine reports (#13404)
Go fails every ancestor of a failing subtest and `gotestsum` reports
each of them, so a single unreliable test reaches Test Engine as a
separate failure and flaky test for every level of its name. Pass
`--junitfile-hide-parent-failures` so only the failure that accounts for
them is reported.

Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-08 10:17:21 +00:00
renovate[bot] 51cc77ab34 build(deps): update authelia/base:latest docker digest to 753efd0 (#13405)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| authelia/base | final | digest | `3c8f8c7` → `753efd0` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 10:14:22 +00:00
renovate[bot] 36a8f20d39 build(deps): update react-email monorepo to v6.11.1 (#13406)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@react-email/ui](https://redirect.github.com/resend/react-email)
([source](https://redirect.github.com/resend/react-email/tree/HEAD/packages/ui))
| [`6.11.0` →
`6.11.1`](https://renovatebot.com/diffs/npm/@react-email%2fui/6.11.0/6.11.1)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@react-email%2fui/6.11.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@react-email%2fui/6.11.0/6.11.1?slim=true)
|
| [react-email](https://redirect.github.com/resend/react-email)
([source](https://redirect.github.com/resend/react-email/tree/HEAD/packages/react-email))
| [`6.11.0` →
`6.11.1`](https://renovatebot.com/diffs/npm/react-email/6.11.0/6.11.1) |
![age](https://developer.mend.io/api/mc/badges/age/npm/react-email/6.11.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/react-email/6.11.0/6.11.1?slim=true)
|

---

### Release Notes

<details>
<summary>resend/react-email (@&#8203;react-email/ui)</summary>

###
[`v6.11.1`](https://redirect.github.com/resend/react-email/blob/HEAD/packages/ui/CHANGELOG.md#6111)

[Compare
Source](https://redirect.github.com/resend/react-email/compare/@react-email/ui@6.11.0...@react-email/ui@6.11.1)

</details>

<details>
<summary>resend/react-email (react-email)</summary>

###
[`v6.11.1`](https://redirect.github.com/resend/react-email/blob/HEAD/packages/react-email/CHANGELOG.md#6111)

[Compare
Source](https://redirect.github.com/resend/react-email/compare/react-email@6.11.0...react-email@6.11.1)

##### Patch Changes

-
[`54769fc`](https://redirect.github.com/resend/react-email/commit/54769fc):
Prevent `email export` from deleting the project, the home directory,
the email templates or the static assets when `--outDir` points at them.
-
[`6926bac`](https://redirect.github.com/resend/react-email/commit/6926bac):
`<Markdown>` now applies `markdownCustomStyles.th` to table header
cells. Header cells were previously styled with `td`, so any `th` styles
were ignored.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 10:14:16 +00:00
renovate[bot] a16ddbaa4a build(deps): update module github.com/go-ldap/ldap/v3 to v3.4.15 (#13401)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/go-ldap/ldap/v3](https://redirect.github.com/go-ldap/ldap)
| `v3.4.14` → `v3.4.15` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-ldap%2fldap%2fv3/v3.4.15?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-ldap%2fldap%2fv3/v3.4.14/v3.4.15?slim=true)
|

---

### Release Notes

<details>
<summary>go-ldap/ldap (github.com/go-ldap/ldap/v3)</summary>

###
[`v3.4.15`](https://redirect.github.com/go-ldap/ldap/releases/tag/v3.4.15)

[Compare
Source](https://redirect.github.com/go-ldap/ldap/compare/v3.4.14...v3.4.15)

#### What's Changed

- guard malformed attribute in unpackAttributes by
[@&#8203;netliomax25-code](https://redirect.github.com/netliomax25-code)
in [#&#8203;612](https://redirect.github.com/go-ldap/ldap/pull/612)
- bump Go to 1.26/1.27 in CI and update GitHub Actions to latest major
versions by [@&#8203;t2y](https://redirect.github.com/t2y) in
[#&#8203;624](https://redirect.github.com/go-ldap/ldap/pull/624)
- fix: identify RFC 4533 sync control members by tag, not by count by
[@&#8203;youdie006](https://redirect.github.com/youdie006) in
[#&#8203;625](https://redirect.github.com/go-ldap/ldap/pull/625)
- chore: resolve staticcheck findings and repair the make targets by
[@&#8203;t2y](https://redirect.github.com/t2y) in
[#&#8203;631](https://redirect.github.com/go-ldap/ldap/pull/631)
- extended: wrap requestValue as RFC 4511 \[1] OCTET STRING by
[@&#8203;team-humaki](https://redirect.github.com/team-humaki) in
[#&#8203;628](https://redirect.github.com/go-ldap/ldap/pull/628)
- fix: validate closing parenthesis in compound and grouped filters
([#&#8203;633](https://redirect.github.com/go-ldap/ldap/issues/633)) by
[@&#8203;littfed](https://redirect.github.com/littfed) in
[#&#8203;635](https://redirect.github.com/go-ldap/ldap/pull/635)
- fix: reject malformed packets via shared child-count and bounds checks
by [@&#8203;cpuschma](https://redirect.github.com/cpuschma) in
[#&#8203;632](https://redirect.github.com/go-ldap/ldap/pull/632)
- Expose ResultCode and DiagnosticMessage on SearchResult by
[@&#8203;Pujathacker2210](https://redirect.github.com/Pujathacker2210)
in [#&#8203;626](https://redirect.github.com/go-ldap/ldap/pull/626)
- fix: navigate LDAPMessage envelope in parseLDAPResult by
[@&#8203;cpuschma](https://redirect.github.com/cpuschma) in
[#&#8203;636](https://redirect.github.com/go-ldap/ldap/pull/636)
- fix: reject out-of-range resultCode in GetLDAPError by
[@&#8203;netliomax25-code](https://redirect.github.com/netliomax25-code)
in [#&#8203;640](https://redirect.github.com/go-ldap/ldap/pull/640)
- fix: return error for unexpected response in ModifyWithResult by
[@&#8203;netliomax25-code](https://redirect.github.com/netliomax25-code)
in [#&#8203;639](https://redirect.github.com/go-ldap/ldap/pull/639)

#### New Contributors

- [@&#8203;youdie006](https://redirect.github.com/youdie006) made their
first contribution in
[#&#8203;625](https://redirect.github.com/go-ldap/ldap/pull/625)
- [@&#8203;team-humaki](https://redirect.github.com/team-humaki) made
their first contribution in
[#&#8203;628](https://redirect.github.com/go-ldap/ldap/pull/628)
- [@&#8203;littfed](https://redirect.github.com/littfed) made their
first contribution in
[#&#8203;635](https://redirect.github.com/go-ldap/ldap/pull/635)
- [@&#8203;Pujathacker2210](https://redirect.github.com/Pujathacker2210)
made their first contribution in
[#&#8203;626](https://redirect.github.com/go-ldap/ldap/pull/626)

**Full Changelog**:
<https://github.com/go-ldap/ldap/compare/v3.4.14...v3.4.15>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 05:43:10 +00:00
renovate[bot] b181adcdd2 build(deps): update module github.com/knadh/koanf/v2 to v2.3.8 (#13402)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/knadh/koanf/v2](https://redirect.github.com/knadh/koanf) |
`v2.3.7` → `v2.3.8` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fknadh%2fkoanf%2fv2/v2.3.8?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fknadh%2fkoanf%2fv2/v2.3.7/v2.3.8?slim=true)
|

---

### Release Notes

<details>
<summary>knadh/koanf (github.com/knadh/koanf/v2)</summary>

###
[`v2.3.8`](https://redirect.github.com/knadh/koanf/releases/tag/v2.3.8)

[Compare
Source](https://redirect.github.com/knadh/koanf/compare/v2.3.7...v2.3.8)

#### What's Changed

- cliflagv3: read each flag from the command that defines it by
[@&#8203;abo3losh1](https://redirect.github.com/abo3losh1) in
[#&#8203;451](https://redirect.github.com/knadh/koanf/pull/451)
- fix: preserve config state when a strict merge fails by
[@&#8203;flcrom](https://redirect.github.com/flcrom) in
[#&#8203;452](https://redirect.github.com/knadh/koanf/pull/452)
- MapKeys returns an empty slice for a natively-typed map by
[@&#8203;dualfroz](https://redirect.github.com/dualfroz) in
[#&#8203;447](https://redirect.github.com/knadh/koanf/pull/447)
- Fix Cut/Copy/Slices silently dropping StrictMerge by
[@&#8203;VXNCXNX](https://redirect.github.com/VXNCXNX) in
[#&#8203;443](https://redirect.github.com/knadh/koanf/pull/443)
- Fix IntfaceKeysToStrings missing maps inside nested slices by
[@&#8203;VXNCXNX](https://redirect.github.com/VXNCXNX) in
[#&#8203;442](https://redirect.github.com/knadh/koanf/pull/442)
- cliflagv2: read each flag from the command that defines it by
[@&#8203;abo3losh1](https://redirect.github.com/abo3losh1) in
[#&#8203;453](https://redirect.github.com/knadh/koanf/pull/453)
- Fix UnmarshalWithConf ignoring a caller's DecoderConfig.TagName by
[@&#8203;VXNCXNX](https://redirect.github.com/VXNCXNX) in
[#&#8203;441](https://redirect.github.com/knadh/koanf/pull/441)

#### New Contributors

- [@&#8203;abo3losh1](https://redirect.github.com/abo3losh1) made their
first contribution in
[#&#8203;451](https://redirect.github.com/knadh/koanf/pull/451)
- [@&#8203;flcrom](https://redirect.github.com/flcrom) made their first
contribution in
[#&#8203;452](https://redirect.github.com/knadh/koanf/pull/452)
- [@&#8203;dualfroz](https://redirect.github.com/dualfroz) made their
first contribution in
[#&#8203;447](https://redirect.github.com/knadh/koanf/pull/447)
- [@&#8203;VXNCXNX](https://redirect.github.com/VXNCXNX) made their
first contribution in
[#&#8203;443](https://redirect.github.com/knadh/koanf/pull/443)

**Full Changelog**:
<https://github.com/knadh/koanf/compare/v2.3.7...v2.3.8>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdvIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 05:43:07 +00:00
renovate[bot] 37e0e0422d build(deps): update dependency @eslint-react/eslint-plugin to v5.24.8 (#13396)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@eslint-react/eslint-plugin](https://redirect.github.com/Rel1cx/eslint-react)
([source](https://redirect.github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin))
| [`5.24.7` →
`5.24.8`](https://renovatebot.com/diffs/npm/@eslint-react%2feslint-plugin/5.24.7/5.24.8)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@eslint-react%2feslint-plugin/5.24.8?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@eslint-react%2feslint-plugin/5.24.7/5.24.8?slim=true)
|

---

### Release Notes

<details>
<summary>Rel1cx/eslint-react
(@&#8203;eslint-react/eslint-plugin)</summary>

###
[`v5.24.8`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5248-2026-10-07)

[Compare
Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.24.7...v5.24.8)

##### 🐞 Fixes

- `react-x/rules-of-hooks`: removed the incorrect `FIX` feature
declaration; the rule does not provide an auto-fix and is no longer
advertised as fixable.
([#&#8203;2009](https://redirect.github.com/Rel1cx/eslint-react/issues/2009))

##### 🏗️ Internal

- Added edge-case test specs from the v5.24.7 change review covering
`react-x/immutability`, `react-x/set-state-in-render`,
`react-web-api/no-leaked-event-listener`, and the leaked-observer rules.
- Bumped `next` to `16.4.0`, `vite` to `8.3.3`, and related
dependencies.

**Full Changelog**:
<https://github.com/Rel1cx/eslint-react/compare/v5.24.7...v5.24.8>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 05:05:21 +00:00
renovate[bot] af852ef411 build(deps): update envoyproxy/envoy docker tag to v1.39.3 (#13400)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| envoyproxy/envoy | patch | `v1.39.2` → `v1.39.3` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 05:04:06 +00:00
renovate[bot] 4df4969aad build(deps): update dependency vite to v8.3.3 (#13399)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [vite](https://vite.dev)
([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite))
| [`8.3.2` →
`8.3.3`](https://renovatebot.com/diffs/npm/vite/8.3.2/8.3.3) |
![age](https://developer.mend.io/api/mc/badges/age/npm/vite/8.3.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vite/8.3.2/8.3.3?slim=true)
|

---

### Release Notes

<details>
<summary>vitejs/vite (vite)</summary>

###
[`v8.3.3`](https://redirect.github.com/vitejs/vite/blob/HEAD/packages/vite/CHANGELOG.md#small-833-2026-10-06-small)

[Compare
Source](https://redirect.github.com/vitejs/vite/compare/v8.3.2...v8.3.3)

##### Bug Fixes

- **deps:** update launch-editor to v2.14.2
([#&#8203;23654](https://redirect.github.com/vitejs/vite/issues/23654))
([22fd1d5](https://redirect.github.com/vitejs/vite/commit/22fd1d5238cce2ee9db0eb4122f9e8feb6b06097))
- **html:** filename passed to transformIndexHtml should not include
queries
([#&#8203;23653](https://redirect.github.com/vitejs/vite/issues/23653))
([7dafd8e](https://redirect.github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17))
- **server:** check `fs.serve` for `?vite-wasm-instance`
([#&#8203;23655](https://redirect.github.com/vitejs/vite/issues/23655))
([ba8b7ab](https://redirect.github.com/vitejs/vite/commit/ba8b7ab43b4afa5d0292ab4b6e3a7b5033cc9c73))
- **server:** store ids to `safeModulePaths` rather than URLs
([#&#8203;23656](https://redirect.github.com/vitejs/vite/issues/23656))
([c3e06f9](https://redirect.github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 05:03:44 +00:00
renovate[bot] f741ee63c2 build(deps): update dependency react-i18next to v17.0.16 (#13397)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [react-i18next](https://redirect.github.com/i18next/react-i18next) |
[`17.0.15` →
`17.0.16`](https://renovatebot.com/diffs/npm/react-i18next/17.0.15/17.0.16)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/react-i18next/17.0.16?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/react-i18next/17.0.15/17.0.16?slim=true)
|

---

### Release Notes

<details>
<summary>i18next/react-i18next (react-i18next)</summary>

###
[`v17.0.16`](https://redirect.github.com/i18next/react-i18next/blob/HEAD/CHANGELOG.md#17016)

[Compare
Source](https://redirect.github.com/i18next/react-i18next/compare/v17.0.15...v17.0.16)

- fix(Trans): a selector `i18nKey` that points into a secondary
namespace of `useTranslation` now resolves the same way `t()` does. With
`const { t } = useTranslation(['ns1', 'ns2'])`, `t($ => $.ns2.message)`
works since 17.0.7, but `<Trans t={t} i18nKey={$ => $.ns2.message} />`
rendered the raw key (or its children). `Trans` always passed an `ns`
option to `t`, filled from `t.ns` (the primary namespace only), and an
explicit `ns` makes i18next's fixed `t` skip the hook's full namespace
list (`scopeNs`). When `Trans` or `TransWithoutContext` gets a `t` that
carries its own namespace and no `ns` prop, it now leaves `ns` out and
lets that `t` apply its own. String keys, `keyPrefix`, `nsMode:
'fallback'`, an explicit `ns` prop and `Trans` without a `t` prop behave
as before. Compatibility note: if the primary namespace has a nested
object named like a secondary namespace (`ns1` → `ns2.message`), `Trans`
now resolves `$ => $.ns2.message` to `ns2:message`, as `t()` already
does. Fixes
[#&#8203;1933](https://redirect.github.com/i18next/react-i18next/issues/1933).

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 05:03:29 +00:00
Amir Zarrinkafsh 11d0b39786 test(web): wait for the totp secret before closing the dialog (#13398)
The `OneTimePasswordRegisterDialog` tests that close the dialog after a
secret was issued only waited for `getTOTPSecret` to be called, not for
its result to render. `handleClose` only calls `stopTOTPRegister` when
`secretURL` is set, so on a loaded CI agent the dialog could close
before the secret landed and the assertion timed out. Delaying the
mocked secret by 100ms reproduced this in all four affected tests. These
tests now wait for the QR code, which only renders once `secretURL` is
set.

Signed-off-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-08 04:49:08 +00:00
renovate[bot] 665ca9c077 build(deps): update dependency @eslint/json to v2.1.1 (#13395)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@eslint/json](https://redirect.github.com/eslint/json) | [`2.1.0` →
`2.1.1`](https://renovatebot.com/diffs/npm/@eslint%2fjson/2.1.0/2.1.1) |
![age](https://developer.mend.io/api/mc/badges/age/npm/@eslint%2fjson/2.1.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@eslint%2fjson/2.1.0/2.1.1?slim=true)
|

---

### Release Notes

<details>
<summary>eslint/json (@&#8203;eslint/json)</summary>

###
[`v2.1.1`](https://redirect.github.com/eslint/json/blob/HEAD/CHANGELOG.md#211-2026-10-06)

[Compare
Source](https://redirect.github.com/eslint/json/compare/1879a5bc6decd34f47dc1e5a695afae1df2d6371...412ad094b434a1795a1eef991915811b5ee8c6a6)

##### Bug Fixes

- escape normalized keys in `no-unnormalized-keys` autofix
([#&#8203;283](https://redirect.github.com/eslint/json/issues/283))
([35790d4](https://redirect.github.com/eslint/json/commit/35790d4e66a93406e585b8ca660dc7da62473787))
- handle empty and whitespace-only JSON inputs
([#&#8203;259](https://redirect.github.com/eslint/json/issues/259))
([85ca99b](https://redirect.github.com/eslint/json/commit/85ca99b6456f0c8c959d2fc09e7578768c58199a))
- preserve parsing error locations in Bun
([#&#8203;281](https://redirect.github.com/eslint/json/issues/281))
([bbaa18f](https://redirect.github.com/eslint/json/commit/bbaa18f076be8cef088e575944f3773dd220e102))
- update dependency
[@&#8203;eslint/plugin-kit](https://redirect.github.com/eslint/plugin-kit)
to ^0.7.3
([#&#8203;276](https://redirect.github.com/eslint/json/issues/276))
([780bfcd](https://redirect.github.com/eslint/json/commit/780bfcdb0e51ab406735c34007595706efff759f))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 03:24:15 +00:00
renovate[bot] b46286e48b build(deps): update dependency @eslint-react/eslint-plugin to v5.24.7 (#13394)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@eslint-react/eslint-plugin](https://redirect.github.com/Rel1cx/eslint-react)
([source](https://redirect.github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin))
| [`5.24.6` →
`5.24.7`](https://renovatebot.com/diffs/npm/@eslint-react%2feslint-plugin/5.24.6/5.24.7)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@eslint-react%2feslint-plugin/5.24.7?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@eslint-react%2feslint-plugin/5.24.6/5.24.7?slim=true)
|

---

### Release Notes

<details>
<summary>Rel1cx/eslint-react
(@&#8203;eslint-react/eslint-plugin)</summary>

###
[`v5.24.7`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5247-2026-10-07)

[Compare
Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.24.6...v5.24.7)

##### 🐞 Fixes

- `react-x/immutability`: no longer reports rebinding a plain local
alias of props/state as a mutation; destructured props rebinding and
member writes through aliases are still reported.
([#&#8203;1995](https://redirect.github.com/Rel1cx/eslint-react/issues/1995))
- `react-x/set-state-in-render`: `setState` calls after nested component
or hook declarations are now attributed to the outer component again.
([#&#8203;2004](https://redirect.github.com/Rel1cx/eslint-react/issues/2004))
- `react-x/set-state-in-render`: anonymous callbacks passed directly to
`memo()`/`forwardRef()` are now treated as component render functions.
([#&#8203;1998](https://redirect.github.com/Rel1cx/eslint-react/issues/1998))
- `react-web-api/no-leaked-fetch`: signal alias chains are now resolved
recursively, so fetches with aliased signals correctly pair with their
cleanup `abort` call.
([#&#8203;1997](https://redirect.github.com/Rel1cx/eslint-react/issues/1997))
- `react-web-api/no-leaked-event-listener`: bare global
`addEventListener(...)` calls now pair with matching
`removeEventListener(...)` cleanup calls.
([#&#8203;1996](https://redirect.github.com/Rel1cx/eslint-react/issues/1996))
- `react-web-api/no-leaked-event-listener`: a `signal` destructured from
`new AbortController()` is now recognized.
([#&#8203;2001](https://redirect.github.com/Rel1cx/eslint-react/issues/2001))
- `react-web-api/no-leaked-resize-observer` /
`react-web-api/no-leaked-intersection-observer`: `disconnect()` /
`unobserve(...)` now only count as cleanup in the cleanup phase;
`useRef`-held observer instances are tracked; `unobserve(...)` inside
the observer callback no longer pairs with `observe(...)`.
([#&#8203;2002](https://redirect.github.com/Rel1cx/eslint-react/issues/2002),
[#&#8203;2003](https://redirect.github.com/Rel1cx/eslint-react/issues/2003))

##### 🏗️ Internal

- Bumped `typescript-eslint` to `8.71.1` and `postcss` to `8.5.29`.

**Full Changelog**:
<https://github.com/Rel1cx/eslint-react/compare/v5.24.6...v5.24.7>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-08 03:24:10 +00:00
renovate[bot] ef34904c83 build(deps): update dependency @eslint-react/eslint-plugin to v5.24.6 (#13393)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@eslint-react/eslint-plugin](https://redirect.github.com/Rel1cx/eslint-react)
([source](https://redirect.github.com/Rel1cx/eslint-react/tree/HEAD/plugins/eslint-plugin))
| [`5.24.4` →
`5.24.6`](https://renovatebot.com/diffs/npm/@eslint-react%2feslint-plugin/5.24.4/5.24.6)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@eslint-react%2feslint-plugin/5.24.6?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@eslint-react%2feslint-plugin/5.24.4/5.24.6?slim=true)
|

---

### Release Notes

<details>
<summary>Rel1cx/eslint-react
(@&#8203;eslint-react/eslint-plugin)</summary>

###
[`v5.24.6`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5246-2026-10-06)

[Compare
Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.24.5...v5.24.6)

##### 🐞 Fixes

- `react-x/no-unused-props`: computed member access and destructuring
with an identifier key (ex: `props[key]`, `const { [key]: value } =
props`) no longer count as usage of a prop named after the key; the rule
now bails out on such dynamic keys instead of reporting actually-used
props as unused.
([#&#8203;1994](https://redirect.github.com/Rel1cx/eslint-react/issues/1994))
- `react-x/set-state-in-effect`: object-pattern destructuring of the
`useState` tuple is now resolved by numeric key: a name bound at key 0
(ex: `const { 0: value } = useState()`) is no longer mistaken for the
setter, while key 1 (ex: `const { 1: setData } = useState()`) is still
recognized.
([#&#8203;1994](https://redirect.github.com/Rel1cx/eslint-react/issues/1994))
- `react-x/set-state-in-render`: same `useState` object-pattern
destructuring fix as `set-state-in-effect`.
([#&#8203;1994](https://redirect.github.com/Rel1cx/eslint-react/issues/1994))

**Full Changelog**:
<https://github.com/Rel1cx/eslint-react/compare/v5.24.5...v5.24.6>

###
[`v5.24.5`](https://redirect.github.com/Rel1cx/eslint-react/blob/HEAD/CHANGELOG.md#v5245-2026-10-06)

[Compare
Source](https://redirect.github.com/Rel1cx/eslint-react/compare/v5.24.4...v5.24.5)

##### 🏗️ Internal

- Self-linted rule implementations with `eslint-plugin-eslint-plugin`,
removing redundant empty `defaultOptions` declarations and enforcing
`meta.defaultOptions` for rules with options.
([#&#8203;1993](https://redirect.github.com/Rel1cx/eslint-react/issues/1993))
Thanks to [@&#8203;rakleed](https://redirect.github.com/rakleed) and
[@&#8203;Rel1cx](https://redirect.github.com/Rel1cx)!
- Minor code cleanups in
`react-web-api/no-leaked-intersection-observer`,
`react-x/no-create-ref`,
`react-x/no-nested-lazy-component-declarations`, and
`react-x/use-state`. Thanks to
[@&#8203;Rel1cx](https://redirect.github.com/Rel1cx)!
- Bumped `effect` to `4.0.1`, `pnpm` to `12.9.1`, `fumadocs-core` and
`fumadocs-ui` to `16.16.1`, `lucide-react` to `1.52.0`, `tsl-dx` to
`0.14.0`, and `tinybench` to `6.2.0`. Thanks to
[@&#8203;Rel1cx](https://redirect.github.com/Rel1cx)!

**Full Changelog**:
<https://github.com/Rel1cx/eslint-react/compare/v5.24.4...v5.24.5>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-07 21:40:42 +00:00
renovate[bot] 8209fd47f7 build(deps): update actions/upload-artifact action to v7.0.2 (#13392)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | patch | `v7.0.1` → `v7.0.2` |

---

### Release Notes

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

###
[`v7.0.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v7.0.2)

[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2)

##### What's Changed

- Improves artifact download retries when the service returns HTTP 429
(rate limiting), including honoring valid Retry-After headers.
- Updates
[@&#8203;actions/artifact](https://redirect.github.com/actions/artifact)
to v6.3.1.

##### New Contributors

- [@&#8203;tunc-d](https://redirect.github.com/tunc-d) made their first
contribution in
[#&#8203;821](https://redirect.github.com/actions/upload-artifact/pull/821)

**Full Changelog**:
<https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImdpdGh1Yl9hY3Rpb25zIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-07 21:32:14 +00:00
renovate[bot]andAmir Zarrinkafsh ce6e8680d1 build(deps): update dependency js-yaml to v5.4.3 (#13386)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [js-yaml](https://redirect.github.com/nodeca/js-yaml) | [`5.4.2` →
`5.4.3`](https://renovatebot.com/diffs/npm/js-yaml/5.4.2/5.4.3) |
![age](https://developer.mend.io/api/mc/badges/age/npm/js-yaml/5.4.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/js-yaml/5.4.2/5.4.3?slim=true)
|

---

### Release Notes

<details>
<summary>nodeca/js-yaml (js-yaml)</summary>

###
[`v5.4.3`](https://redirect.github.com/nodeca/js-yaml/blob/HEAD/CHANGELOG.md#543---2026-10-06)

[Compare
Source](https://redirect.github.com/nodeca/js-yaml/compare/5.4.2...5.4.3)

##### Fixed

- Fixed loading a whitespace-only block scalar followed by a less
indented
line,
[#&#8203;802](https://redirect.github.com/nodeca/js-yaml/issues/802).

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-07 21:23:29 +00:00
renovate[bot]andAmir Zarrinkafsh d12ebd84b5 build(deps): update dependency lefthook to v2.1.17 (#13383)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [lefthook](https://redirect.github.com/evilmartians/lefthook) |
[`2.1.16` →
`2.1.17`](https://renovatebot.com/diffs/npm/lefthook/2.1.16/2.1.17) |
![age](https://developer.mend.io/api/mc/badges/age/npm/lefthook/2.1.17?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/lefthook/2.1.16/2.1.17?slim=true)
|

---

### Release Notes

<details>
<summary>evilmartians/lefthook (lefthook)</summary>

###
[`v2.1.17`](https://redirect.github.com/evilmartians/lefthook/releases/tag/v2.1.17)

[Compare
Source](https://redirect.github.com/evilmartians/lefthook/compare/v2.1.16...v2.1.17)

#### Changelog

-
[`8d8073d`](https://redirect.github.com/evilmartians/lefthook/commit/8d8073d427fac49cc982919f5280b295645d196d)
fix: diff push files against the merge base with the default branch
([#&#8203;1565](https://redirect.github.com/evilmartians/lefthook/issues/1565))
-
[`c12bccd`](https://redirect.github.com/evilmartians/lefthook/commit/c12bccd193f43a8419038787bd83b12fe3a4470c)
fix: don't hash submodules when checking fail_on_changes
([#&#8203;1566](https://redirect.github.com/evilmartians/lefthook/issues/1566))
-
[`03225ef`](https://redirect.github.com/evilmartians/lefthook/commit/03225efde40226b14459e901707fbd988d62fcc0)
refactor: naming of helpers
([#&#8203;1568](https://redirect.github.com/evilmartians/lefthook/issues/1568))
-
[`66746ac`](https://redirect.github.com/evilmartians/lefthook/commit/66746ace996c72ac31b3cb4a70af85607568baf4)
refactor: working with git
([#&#8203;1564](https://redirect.github.com/evilmartians/lefthook/issues/1564))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-07 21:21:09 +00:00
renovate[bot]andAmir Zarrinkafsh 2d678af0c8 build(deps): update golang:1.27.1-bookworm docker digest to 8d48e12 (#13381)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [golang](https://hub.docker.com/_/golang)
([source](https://redirect.github.com/docker-library/golang)) | stage |
digest | `69a7b97` → `8d48e12` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-07 21:19:15 +00:00
renovate[bot]andAmir Zarrinkafsh f2f2da6d67 build(deps): update caddy:2.11.7-builder docker digest to 1ab914b (#13379)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [caddy](https://hub.docker.com/_/caddy)
([source](https://redirect.github.com/caddyserver/caddy-docker)) | stage
| digest | `91443bd` → `1ab914b` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-07 21:18:19 +00:00
renovate[bot]andAmir Zarrinkafsh 33c1bdcd09 build(deps): update caddy:2.11.7 docker digest to f2a1290 (#13378)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [caddy](https://hub.docker.com/_/caddy)
([source](https://redirect.github.com/caddyserver/caddy-docker)) | final
| digest | `d41fbe1` → `f2a1290` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-07 21:15:58 +00:00
renovate[bot]andAmir Zarrinkafsh 22f746b6ec build(deps): update dependency @docsearch/css to v5.1.2 (#13384)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@docsearch/css](https://docsearch.algolia.com)
([source](https://redirect.github.com/algolia/docsearch/tree/HEAD/packages/docsearch-css))
| [`5.1.1` →
`5.1.2`](https://renovatebot.com/diffs/npm/@docsearch%2fcss/5.1.1/5.1.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@docsearch%2fcss/5.1.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@docsearch%2fcss/5.1.1/5.1.2?slim=true)
|

---

### Release Notes

<details>
<summary>algolia/docsearch (@&#8203;docsearch/css)</summary>

###
[`v5.1.2`](https://redirect.github.com/algolia/docsearch/blob/HEAD/packages/docsearch-css/CHANGELOG.md#512)

[Compare
Source](https://redirect.github.com/algolia/docsearch/compare/@docsearch/css@5.1.1...@docsearch/css@5.1.2)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-07 21:15:34 +00:00
renovate[bot]andAmir Zarrinkafsh d89c5cbfda build(deps): update maven:3.10.0-eclipse-temurin-21 docker digest to 9b48777 (#13377)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [maven](https://hub.docker.com/_/maven)
([source](https://redirect.github.com/carlossg/docker-maven)) | stage |
digest | `fe1dc38` → `9b48777` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-07 21:15:06 +00:00
renovate[bot] 1df68d77d5 build(deps): update dependency postcss to v8.5.29 (#13387)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [postcss](https://postcss.org/)
([source](https://redirect.github.com/postcss/postcss)) | [`8.5.28` →
`8.5.29`](https://renovatebot.com/diffs/npm/postcss/8.5.28/8.5.29) |
![age](https://developer.mend.io/api/mc/badges/age/npm/postcss/8.5.29?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/postcss/8.5.28/8.5.29?slim=true)
|

---

### Release Notes

<details>
<summary>postcss/postcss (postcss)</summary>

###
[`v8.5.29`](https://redirect.github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8529)

[Compare
Source](https://redirect.github.com/postcss/postcss/compare/8.5.28...8.5.29)

- Improved `</style>` escaping (by
[@&#8203;choudhryfrompak](https://redirect.github.com/choudhryfrompak)).
- Fixed comments support in `list.comma()` and `list.space()` (by
[@&#8203;00200200](https://redirect.github.com/00200200)).
- Fixed semicolon and custom property (by
[@&#8203;wahidrizka](https://redirect.github.com/wahidrizka)).

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-07 21:13:11 +00:00
renovate[bot] 9ca360c67e build(deps): update authelia/base:latest docker digest to 3c8f8c7 (#13380)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| authelia/base | final | digest | `9e5ea21` → `3c8f8c7` |

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImRvY2tlciJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-07 21:09:40 +00:00
renovate[bot] 7b821782b1 build(deps): update dependency @vitejs/plugin-react to v6.1.2 (#13382)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@vitejs/plugin-react](https://redirect.github.com/vitejs/vite-plugin-react/tree/main/packages/plugin-react#readme)
([source](https://redirect.github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react))
| [`6.1.1` →
`6.1.2`](https://renovatebot.com/diffs/npm/@vitejs%2fplugin-react/6.1.1/6.1.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@vitejs%2fplugin-react/6.1.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@vitejs%2fplugin-react/6.1.1/6.1.2?slim=true)
|

---

### Release Notes

<details>
<summary>vitejs/vite-plugin-react
(@&#8203;vitejs/plugin-react)</summary>

###
[`v6.1.2`](https://redirect.github.com/vitejs/vite-plugin-react/blob/HEAD/packages/plugin-react/CHANGELOG.md#612-2026-10-05)

[Compare
Source](https://redirect.github.com/vitejs/vite-plugin-react/compare/04cac5020e349f452d76c5a4f6d788ad4b38930a...ac47648e17674299accb51816e9e33b8a7b07b05)

##### Fix HMR for compound components
([#&#8203;1484](https://redirect.github.com/vitejs/vite-plugin-react/pull/1484))

Adding or removing a component from a compound component was not
handled, creating stale updates. Doing this now triggers hmr invalidate
on the file and propagates the invalidation to importers.

##### Fix `compiler.logDiagnostics` option not working
([#&#8203;1483](https://redirect.github.com/vitejs/vite-plugin-react/pull/1483))

With `oxc-transform-react` >= 0.148, the `logDiagnostics` was not
working. This version fixes it and requires `oxc-transform-react` >=
0.152 as a peer dependency if you are using the `compiler` option.
`compiler.logDiagnostics` option is now deprecated and should be swapped
for the builtin `compiler.reportDiagnostics`.

##### Disable refresh for non-jsx with compiler enabled (fix
[#&#8203;1478](https://redirect.github.com/vitejs/vite-plugin-react/issues/1478))
([#&#8203;1485](https://redirect.github.com/vitejs/vite-plugin-react/pull/1485))

When the compiler was enabled, TS files could trigger fast refresh which
would cause runtime errors. The logic now follows what the builtin oxc
plugin in Vite does.

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-07 21:07:37 +00:00
f72cfc9b7c build(deps): update dependency proxy-addr to v2.0.8 [security] (#13375)
## 🛡️ Security Vulnerability Overrides

Adds overrides to `pnpm-workspace.yaml` to pin transitive deps to their
latest published version, then regenerates each affected lockfile.

### Vulnerabilities Addressed

| Severity | Package | Override | Advisory | Manifest |
|----------|---------|----------|----------|----------|
| 🔴 critical | `proxy-addr` | `2.0.8` |
[GHSA-jqcg-44mw-7w3h](https://github.com/authelia/authelia/security/dependabot/275)
| `internal/suites/example/compose/duo-api/pnpm-lock.yaml` |

### Changed Files

- `internal/suites/example/compose/duo-api/pnpm-lock.yaml`
- `internal/suites/example/compose/duo-api/pnpm-workspace.yaml`

### Commands

> Comment `/rebase` on this PR to regenerate overrides and rebase.


### Review Checklist

1. Verify overrides in each `pnpm-workspace.yaml`.
2. Confirm each `pnpm-lock.yaml` resolves patched versions.
3. Run CI for regressions.

Co-authored-by: autheliabot <autheliabot@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <3339418+nightah@users.noreply.github.com>
2026-10-07 10:35:15 +00:00
Authelia[bot]andautheliabot 99739d452e build(deps): update dependency source-map-js to v1.2.2 [security] (#13376)
<!-- authelia-security-overrides -->
## 🛡️ Security Vulnerability Override

Pins `source-map-js` to `1.2.2` via pnpm `overrides` in **2**
workspace(s), then regenerates each affected lockfile.

### Vulnerabilities Addressed

| Severity | Package | Pinned | Advisory | Workspace | Manifest |
|----------|---------|--------|----------|-----------|----------|
| 🟠 high | `source-map-js` | `1.2.2` |
[GHSA-68fv-2mgg-jv7q](https://github.com/authelia/authelia/security/dependabot/276)
| `internal/templates/src` | `internal/templates/src/pnpm-lock.yaml` |
| 🟠 high | `source-map-js` | `1.2.2` |
[GHSA-68fv-2mgg-jv7q](https://github.com/authelia/authelia/security/dependabot/277)
| `web` | `web/pnpm-lock.yaml` |

### Workspaces

- `internal/templates/src/pnpm-workspace.yaml`
- `web/pnpm-workspace.yaml`

### Changed Files

- `internal/templates/src/pnpm-lock.yaml`
- `internal/templates/src/pnpm-workspace.yaml`
- `web/pnpm-lock.yaml`
- `web/pnpm-workspace.yaml`

### Notes

This branch is rebuilt from `master` on every reconciliation, so it is
always exactly `master` plus this one override commit. Comment `/rebase`
to force a rebuild.

If a new workspace later becomes affected by the same advisory, this PR
is updated in place rather than a second one being opened.

### Review Checklist

1. Verify the override in each `pnpm-workspace.yaml`.
2. Confirm each `pnpm-lock.yaml` resolves the patched version.
3. Run CI for regressions.

Co-authored-by: autheliabot <autheliabot@users.noreply.github.com>
2026-10-07 10:14:42 +00:00
renovate[bot] 9b696bf8f4 build(deps): update dependency @docsearch/js to v5.1.2 (#13385)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@docsearch/js](https://docsearch.algolia.com)
([source](https://redirect.github.com/algolia/docsearch/tree/HEAD/packages/docsearch-js))
| [`5.1.1` →
`5.1.2`](https://renovatebot.com/diffs/npm/@docsearch%2fjs/5.1.1/5.1.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@docsearch%2fjs/5.1.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@docsearch%2fjs/5.1.1/5.1.2?slim=true)
|

---

### Release Notes

<details>
<summary>algolia/docsearch (@&#8203;docsearch/js)</summary>

###
[`v5.1.2`](https://redirect.github.com/algolia/docsearch/blob/HEAD/packages/docsearch-js/CHANGELOG.md#512)

[Compare
Source](https://redirect.github.com/algolia/docsearch/compare/@docsearch/js@5.1.1...@docsearch/js@5.1.2)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-10-07 02:06:46 +00:00