Quentin Gliech
4b4fb86fb8
build(deps): bump actions/github-script from 8.0.0 to 9.0.0 ( #5622 )
2026-06-18 13:37:38 +02:00
Quentin Gliech
e4157b4b02
Log the GraphQL operation type and name ( #5736 )
2026-06-18 13:34:55 +02:00
Quentin Gliech
cf30f77f75
deps: upgrade reqwest 0.13, sentry 0.48, opentelemetry 0.32 ( #5742 )
2026-06-18 12:39:41 +02:00
dependabot[bot]
e56dccdd68
build(deps): bump actions/github-script from 8.0.0 to 9.0.0
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-17 17:28:52 +00:00
Quentin Gliech
e0c03b06e8
deps: upgrade reqwest 0.13, sentry 0.48, opentelemetry 0.32
...
We need to group the sentry and opentelemetry bumps together because they both
upgraded reqwest to 0.13.
- reqwest 0.12 -> 0.13: rename the rustls feature to rustls-no-provider,
add the now-opt-in 'form' feature.
- sentry 0.46 -> 0.48: add rustls-no-provider so Sentry's reqwest 0.13
transport reuses our process-wide aws-lc-rs provider.
- opentelemetry 0.31 -> 0.32 / tracing-opentelemetry 0.33: update the
get_otel_context call in mas-context for the new signature.
opentelemetry-jaeger-propagator 0.32 is deprecated upstream but still
published; we keep it for now (with an expect(deprecated)) and will
vendor it in-tree once it's actually removed.
2026-06-17 19:00:25 +02:00
Quentin Gliech
9133820368
Merge branch 'main' into the GraphQL logging branch
2026-06-17 17:57:16 +02:00
Quentin Gliech
a2533cd3f3
Track and log the client IP address ( #5734 )
2026-06-17 17:45:06 +02:00
Quentin Gliech
fe622331a8
Admin API: allow listing and viewing of OAuth 2.0 clients ( #5710 )
2026-06-17 17:44:34 +02:00
Quentin Gliech
63ed796441
Use the public registry hostname in release notes ( #5725 )
2026-06-17 17:42:43 +02:00
Quentin Gliech
78036a933d
Fix the compat session API definition in the admin API spec ( #5714 )
2026-06-17 17:42:31 +02:00
Quentin Gliech
2ea88c6377
Document what user data is stored and how long it is kept ( #5673 )
2026-06-17 17:42:17 +02:00
Quentin Gliech
256c5e3ff5
storage: use an enum for the OAuth2ClientFilter client kind
2026-06-17 17:33:03 +02:00
Quentin Gliech
d33577cf4d
Admin API: filter users based on client usage ( #5707 )
2026-06-17 17:12:56 +02:00
Quentin Gliech
61cffe2124
Admin API: allow filtering of sessions by creation and last-activity time ( #5709 )
2026-06-17 17:12:01 +02:00
Quentin Gliech
9464ca8038
Merge branch 'main' into quenting/admin-api/session-time-filters
2026-06-17 17:01:02 +02:00
Quentin Gliech
a8ffce8f13
Admin API: allow filtering OAuth 2.0 sessions by multiple clients ( #5708 )
2026-06-17 16:40:53 +02:00
Quentin Gliech
9815902e9b
Allow passing arbitrary values from clients down to upstream OAuth providers ( #5677 )
2026-06-17 16:28:57 +02:00
Olivier 'reivilibre
e856e19638
Update Authelia Sample for OIDC upstream ( #5672 )
2026-06-17 14:41:03 +01:00
Quentin Gliech
d951d0eed5
Remove special case for the empty client filter
2026-06-17 15:15:09 +02:00
Quentin Gliech
eb0ef6380c
Merge branch 'main' into quenting/upstream-pass-parameters
2026-06-17 14:54:37 +02:00
Quentin Gliech
772360bb4e
Trim values before passing them to the upstream auth provider
2026-06-17 14:53:56 +02:00
Olivier 'reivilibre
0b80e523f5
Trim value when reading client_secret_file ( #5456 )
2026-06-17 13:37:13 +01:00
Quentin Gliech
378df1cdca
Bump vite from 8.0.14 to 8.0.16 ( #5738 )
2026-06-17 14:34:04 +02:00
Quentin Gliech
98106df25a
mas-cli: log the GraphQL operation on the request log line
...
Read the `GraphQlOperation` set by the GraphQL handler from the response
extensions in the logging middleware, and record the operation type and name
on the `http.server.response` log line when present.
2026-06-17 14:14:24 +02:00
Quentin Gliech
31b0b208c0
Record the client address on the HTTP request span
2026-06-17 14:14:24 +02:00
Quentin Gliech
b14ad9af59
mas-handlers: expose the GraphQL operation on the response extensions
...
Define a `GraphQlOperation` type holding the operation type and name, and
attach it to the GraphQL response via the response extensions, so the HTTP
logging middleware can pick it up. The operation type is resolved from the
parsed query document, which is cached on the request and reused by the
executor.
2026-06-17 14:14:24 +02:00
Quentin Gliech
4cea9320d1
Track the client IP address for the whole request and log it
2026-06-17 14:14:23 +02:00
Quentin Gliech
2452cd88c0
Bump Rust to 1.96.0 and fix clippy lints ( #5733 )
2026-06-17 14:04:45 +02:00
matrixbot
d178c9289d
Automatic merge back to main ( #5740 )
2026-06-17 14:03:58 +02:00
Olivier 'reivilibre
c857375528
Update crates/config/src/sections/mod.rs
2026-06-17 12:45:30 +01:00
Olivier 'reivilibre
119f5195a8
CI: Test against ESS ( #5582 )
2026-06-17 11:53:33 +01:00
Quentin Gliech and Olivier 'reivilibre'
a209eef119
Apply suggestion from @reivilibre
...
Co-authored-by: Olivier 'reivilibre' <oliverw@element.io >
2026-06-17 12:51:40 +02:00
github-actions[bot]
c7fd1f9862
1.19.0
v1.19.0
2026-06-17 10:32:44 +00:00
matrixbot
ed1f1b831e
Translations updates for v1.19 ( #5739 )
2026-06-17 12:27:56 +02:00
github-actions[bot]
a8bc6d326b
Translations updates
2026-06-17 10:18:38 +00:00
Quentin Gliech
e1f69b8aa6
Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 ( #5719 )
2026-06-17 10:02:03 +02:00
Quentin Gliech
e76200e7c3
Bump actions/setup-node from 6.3.0 to 6.4.0 ( #5718 )
2026-06-17 10:01:54 +02:00
Quentin Gliech
ffcc793a26
Bump taiki-e/install-action from 2.77.0 to 2.79.2 ( #5716 )
2026-06-17 10:01:31 +02:00
Quentin Gliech
8a01d047c9
Bump hashicorp/vault-action from 3.4.0 to 4.0.0 ( #5717 )
2026-06-17 10:01:22 +02:00
dependabot[bot]
47b59481f5
Bump vite from 8.0.14 to 8.0.16
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 8.0.14 to 8.0.16.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 8.0.16
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-17 02:26:28 +00:00
Quentin Gliech
21795d70dc
Fix clippy lints for Rust 1.96.0
...
Rust 1.96.0 enables several new clippy lints. Apply the machine-applicable
fixes (`duration_suboptimal_units`, `map_unwrap_or`, `manual_is_variant_and`,
`unnecessary_trailing_comma`, `while_let_loop`) and suppress the
`result_large_err` lint in the config test modules, where the closures passed to
`Jail::expect_with` are required to return the large `figment::Error`.
2026-06-16 15:38:22 +02:00
Quentin Gliech
22f3ab685d
Bump Rust to 1.96.0
...
Update `RUSTC_VERSION` in the Dockerfile and the matching clippy toolchain pin
in the CI workflow (kept in sync) from 1.93.0 to the latest stable, 1.96.0.
2026-06-16 15:38:21 +02:00
matrixbot
f9de499891
Automatic merge back to main ( #5729 )
2026-06-10 13:43:15 +02:00
github-actions[bot]
4791081c53
1.19.0-rc.0
v1.19.0-rc.0
2026-06-10 11:33:51 +00:00
matrixbot
926a2f9b0e
Translations updates for main ( #5728 )
2026-06-10 13:30:10 +02:00
github-actions[bot]
4194946c2d
Translations updates
2026-06-10 11:22:07 +00:00
Quentin Gliech
3d67d90ea2
Fix typo in the configuration documentation client_secret_jwk-> client_secret_jwt ( #5663 )
2026-06-10 12:29:46 +02:00
Quentin Gliech
795987a324
Refactor login form to include password input conditionally ( #5603 )
2026-06-10 12:24:02 +02:00
Quentin Gliech
812b6d1495
Merge branch 'main' into patch-1
2026-06-10 12:18:55 +02:00
Quentin Gliech
8382c0eee2
Merge branch 'main' into main
2026-06-10 11:18:41 +02:00