Commit Graph

2881 Commits

Author SHA1 Message Date
dependabot[bot] 0d3569532f build(deps-dev): bump vite
Bumps the vite group with 1 update in the /frontend directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `vite` from 5.3.5 to 5.4.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 14:04:12 +02:00
Marcel 6d30bc530f Document the email policy in the reference 2024-08-30 13:57:31 +02:00
dependabot[bot] 9c2f852584 build(deps): bump serde_json from 1.0.122 to 1.0.127
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.122 to 1.0.127.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.122...1.0.127)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 13:56:52 +02:00
dependabot[bot] 10540827f3 build(deps): bump serde from 1.0.204 to 1.0.209
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.204 to 1.0.209.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.204...v1.0.209)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 13:56:19 +02:00
dependabot[bot] 9580a54d0e build(deps): bump minijinja from 2.1.1 to 2.2.0
Bumps [minijinja](https://github.com/mitsuhiko/minijinja) from 2.1.1 to 2.2.0.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mitsuhiko/minijinja/compare/2.1.1...2.2.0)

---
updated-dependencies:
- dependency-name: minijinja
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:40:48 +02:00
dependabot[bot] f2051cc441 build(deps): bump axios from 1.7.2 to 1.7.4 in /frontend
Bumps [axios](https://github.com/axios/axios) from 1.7.2 to 1.7.4.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.7.2...v1.7.4)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:38:54 +02:00
dependabot[bot] b43408bc8d build(deps): bump indexmap from 2.3.0 to 2.4.0
Bumps [indexmap](https://github.com/indexmap-rs/indexmap) from 2.3.0 to 2.4.0.
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/master/RELEASES.md)
- [Commits](https://github.com/indexmap-rs/indexmap/compare/2.3.0...2.4.0)

---
updated-dependencies:
- dependency-name: indexmap
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:37:28 +02:00
dependabot[bot] 4b375c875a build(deps-dev): bump the storybook group across 1 directory with 4 updates
Bumps the storybook group with 3 updates in the /frontend directory: [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials), [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react) and [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite).


Updates `@storybook/addon-essentials` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/addons/essentials)

Updates `@storybook/react` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/renderers/react)

Updates `@storybook/react-vite` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/frameworks/react-vite)

Updates `storybook` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/lib/cli)

---
updated-dependencies:
- dependency-name: "@storybook/addon-essentials"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/react"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/react-vite"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: storybook
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: storybook
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:37:08 +02:00
dependabot[bot] a65c9b29cb build(deps): bump docker/bake-action from 5.5.0 to 5.7.0
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 5.5.0 to 5.7.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/v5.5.0...v5.7.0)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:36:50 +02:00
dependabot[bot] 6bead191e8 build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.5.0...v3.6.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:36:40 +02:00
github-actions[bot] d3eb5be63e 0.10.0 v0.10.0 2024-08-19 13:02:25 +00:00
Quentin Gliech 62e01883b6 Small documentation fixes
- Removes mentions of the `mas-cli templates save` command
 - Removes the old `experimental` flags
 - Removes the old `policy.data.passwords` configs
 - Document the `policy.data.client_registration` flags
 - Remove references to the pre-built macOS binaries
 - Explains how to get syn2mas
 - State that you need to prepare the database before importing data
 - Clean up the reverse proxy documentation
 - Clarify that you don't need to provede templates/policy/assets
   manually when running the docker image
2024-08-19 13:53:43 +02:00
Quentin Gliech c8afc48e46 frontend: remove double separator when password auth is disabled 2024-08-13 11:12:11 +02:00
github-actions[bot] 0d81cfd014 0.10.0-rc.0 v0.10.0-rc.0 2024-08-07 18:22:36 +00:00
Quentin Gliech 29d6383c5d admin: rename the can_request_admin field to admin 2024-08-07 20:13:43 +02:00
Quentin Gliech 6189abe7b4 admin: set can_request_admin API 2024-08-07 20:13:43 +02:00
reivilibre 5d4a4a6fb8 Add rate-limiting for account recovery and registration (#3093)
* Add rate-limiting for account recovery and registration

* Rename login ratelimiter `per_address` to `per_ip` for consistency

Co-authored-by: Quentin Gliech <quenting@element.io>
2024-08-07 17:57:36 +00:00
reivilibre 244f8f5e5e Add configuration for rate-limiting of logins, replacing hardcoded limits (#3090) 2024-08-07 18:36:02 +01:00
Quentin Gliech 1bdad262cd Disallow OAuth 2.0 use of the GraphQL API by default 2024-08-07 18:09:51 +02:00
Quentin Gliech eb4072f3c3 Document the admin API (#3038)
Co-authored-by: Hugh Nimmo-Smith <hughns@matrix.org>
2024-08-07 17:41:46 +02:00
Quentin Gliech b4eb93558d admin: add simple snapshot test for the list oauth2 sessions endpoint 2024-08-07 17:41:18 +02:00
Quentin Gliech dd58fffdef admin: add tests for the get OAuth session API 2024-08-07 17:41:18 +02:00
Quentin Gliech cf9f201337 admin: get OAuth 2.0 session API 2024-08-07 17:41:18 +02:00
Quentin Gliech 4f52840bf3 admin: list OAuth 2.0 sessions API 2024-08-07 17:41:18 +02:00
Quentin Gliech 83e4aa476f admin: setup base for oauth2 sessions endpoints 2024-08-07 17:41:18 +02:00
Quentin Gliech 19d485a68b admin: model definition for the OAuth 2.0 sessions 2024-08-07 17:41:18 +02:00
sandhose 86fbe5c589 Translations updates 2024-08-07 15:53:23 +02:00
dependabot[bot] c97028e177 build(deps-dev): bump postcss from 8.4.40 to 8.4.41 in /frontend
Bumps [postcss](https://github.com/postcss/postcss) from 8.4.40 to 8.4.41.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.4.40...8.4.41)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-07 15:22:22 +02:00
dependabot[bot] e8a7dd82ca build(deps): bump the tanstack-router group in /frontend with 3 updates
Bumps the tanstack-router group in /frontend with 3 updates: [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router), [@tanstack/router-devtools](https://github.com/TanStack/router/tree/HEAD/packages/router-devtools) and [@tanstack/router-vite-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-vite-plugin).


Updates `@tanstack/react-router` from 1.46.4 to 1.46.7
- [Release notes](https://github.com/TanStack/router/releases)
- [Commits](https://github.com/TanStack/router/commits/v1.46.7/packages/react-router)

Updates `@tanstack/router-devtools` from 1.46.5 to 1.46.7
- [Release notes](https://github.com/TanStack/router/releases)
- [Commits](https://github.com/TanStack/router/commits/v1.46.7/packages/router-devtools)

Updates `@tanstack/router-vite-plugin` from 1.45.13 to 1.46.6
- [Release notes](https://github.com/TanStack/router/releases)
- [Commits](https://github.com/TanStack/router/commits/v1.46.6/packages/router-vite-plugin)

---
updated-dependencies:
- dependency-name: "@tanstack/react-router"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tanstack-router
- dependency-name: "@tanstack/router-devtools"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: tanstack-router
- dependency-name: "@tanstack/router-vite-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tanstack-router
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-07 15:22:14 +02:00
dependabot[bot] c11097d3ec build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.5 to 4.3.6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4.3.5...v4.3.6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-07 15:22:06 +02:00
dependabot[bot] b63d3498fd build(deps): bump rustls-pki-types from 1.7.0 to 1.8.0
Bumps [rustls-pki-types](https://github.com/rustls/pki-types) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/rustls/pki-types/releases)
- [Commits](https://github.com/rustls/pki-types/compare/v/1.7.0...v/1.8.0)

---
updated-dependencies:
- dependency-name: rustls-pki-types
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-07 15:21:47 +02:00
dependabot[bot] 97c5529cd6 build(deps): bump hyper-util from 0.1.6 to 0.1.7
Bumps [hyper-util](https://github.com/hyperium/hyper-util) from 0.1.6 to 0.1.7.
- [Release notes](https://github.com/hyperium/hyper-util/releases)
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hyperium/hyper-util/compare/v0.1.6...v0.1.7)

---
updated-dependencies:
- dependency-name: hyper-util
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-07 15:21:38 +02:00
Quentin Gliech c969bdcd72 syn2mas: make the entrypoint absolute 2024-08-07 15:21:06 +02:00
Quentin Gliech 5cdae81037 syn2mas: only set the SSL options if we set any of them 2024-08-07 15:21:06 +02:00
Quentin Gliech c61a52a3a0 admin: better error when password auth is disabled 2024-08-07 15:10:19 +02:00
Quentin Gliech 475a43df71 admin: check password complexity in password set API 2024-08-07 15:10:19 +02:00
Quentin Gliech 8b5d576018 admin: set password API 2024-08-07 15:10:19 +02:00
Quentin Gliech 9ea77a9562 admin: lock user API 2024-08-06 13:43:13 +02:00
Quentin Gliech 2307c05c69 admin: user unlock API 2024-08-06 13:31:28 +02:00
Quentin Gliech 117e124ddf admin: user deactivation API 2024-08-06 11:48:19 +02:00
dependabot[bot] 7826935316 build(deps-dev): bump postcss-nesting from 12.1.5 to 13.0.0 in /frontend
Bumps [postcss-nesting](https://github.com/csstools/postcss-plugins/tree/HEAD/plugins/postcss-nesting) from 12.1.5 to 13.0.0.
- [Changelog](https://github.com/csstools/postcss-plugins/blob/main/plugins/postcss-nesting/CHANGELOG.md)
- [Commits](https://github.com/csstools/postcss-plugins/commits/HEAD/plugins/postcss-nesting)

---
updated-dependencies:
- dependency-name: postcss-nesting
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-06 09:42:36 +02:00
dependabot[bot] 24073a6910 build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.0 to 2.0.1
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-06 09:42:17 +02:00
dependabot[bot] 1ee3e5d351 build(deps-dev): bump rimraf from 5.0.7 to 6.0.1 in /frontend
Bumps [rimraf](https://github.com/isaacs/rimraf) from 5.0.7 to 6.0.1.
- [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/rimraf/compare/v5.0.7...v6.0.1)

---
updated-dependencies:
- dependency-name: rimraf
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-06 09:42:07 +02:00
Quentin Gliech 533415fdfc Remove macOS binaries build in CI and remove cargo-zigbuild from Docker image (#2966)
* Upgrade Zig to 0.13.0
* Remove macOS builds & rework archives collection
* dockerfile: stop using zig
2024-08-05 16:45:23 +02:00
Quentin Gliech 078939d64d frontend: add the TooltipProvider everywhere 2024-08-05 14:28:20 +02:00
dependabot[bot] a600393e2b build(deps): bump @vector-im/compound-web in /frontend
Bumps [@vector-im/compound-web](https://github.com/vector-im/compound-web) from 5.5.0 to 6.0.0.
- [Release notes](https://github.com/vector-im/compound-web/releases)
- [Commits](https://github.com/vector-im/compound-web/compare/v5.5.0...v6.0.0)

---
updated-dependencies:
- dependency-name: "@vector-im/compound-web"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-05 14:28:20 +02:00
dependabot[bot] 20748ca4dc build(deps-dev): bump typescript from 5.5.3 to 5.5.4 in /frontend
Bumps [typescript](https://github.com/Microsoft/TypeScript) from 5.5.3 to 5.5.4.
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/Microsoft/TypeScript/compare/v5.5.3...v5.5.4)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-05 06:22:11 +02:00
dependabot[bot] 4dbff7af1f build(deps-dev): bump autoprefixer from 10.4.19 to 10.4.20 in /frontend
Bumps [autoprefixer](https://github.com/postcss/autoprefixer) from 10.4.19 to 10.4.20.
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/autoprefixer/compare/10.4.19...10.4.20)

---
updated-dependencies:
- dependency-name: autoprefixer
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-05 06:21:45 +02:00
Quentin Gliech 4197929dec frontend: Update snapshots 2024-08-04 23:17:20 +02:00
dependabot[bot] 466031966b build(deps): bump @vector-im/compound-design-tokens in /frontend
Bumps [@vector-im/compound-design-tokens](https://github.com/vector-im/compound-design-tokens) from 1.6.1 to 1.8.0.
- [Release notes](https://github.com/vector-im/compound-design-tokens/releases)
- [Changelog](https://github.com/element-hq/compound-design-tokens/blob/main/docs/release.md)
- [Commits](https://github.com/vector-im/compound-design-tokens/compare/v1.6.1...v1.8.0)

---
updated-dependencies:
- dependency-name: "@vector-im/compound-design-tokens"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-04 23:17:20 +02:00