Commit Graph
7380 Commits
Author SHA1 Message Date
Quentin Gliech 4b4fb86fb8 build(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#5622) 2026-06-18 13:37:38 +02:00
Quentin Gliech e4157b4b02 Log the GraphQL operation type and name (#5736) 2026-06-18 13:34:55 +02:00
Quentin Gliech cf30f77f75 deps: upgrade reqwest 0.13, sentry 0.48, opentelemetry 0.32 (#5742) 2026-06-18 12:39:41 +02:00
dependabot[bot] e56dccdd68 build(deps): bump actions/github-script from 8.0.0 to 9.0.0
Bumps [actions/github-script](https://github.com/actions/github-script) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-17 17:28:52 +00:00
Quentin Gliech e0c03b06e8 deps: upgrade reqwest 0.13, sentry 0.48, opentelemetry 0.32
We need to group the sentry and opentelemetry bumps together because they both
upgraded reqwest to 0.13.

- reqwest 0.12 -> 0.13: rename the rustls feature to rustls-no-provider,
  add the now-opt-in 'form' feature.
- sentry 0.46 -> 0.48: add rustls-no-provider so Sentry's reqwest 0.13
  transport reuses our process-wide aws-lc-rs provider.
- opentelemetry 0.31 -> 0.32 / tracing-opentelemetry 0.33: update the
  get_otel_context call in mas-context for the new signature.

opentelemetry-jaeger-propagator 0.32 is deprecated upstream but still
published; we keep it for now (with an expect(deprecated)) and will
vendor it in-tree once it's actually removed.
2026-06-17 19:00:25 +02:00
Quentin Gliech 9133820368 Merge branch 'main' into the GraphQL logging branch 2026-06-17 17:57:16 +02:00
Quentin Gliech a2533cd3f3 Track and log the client IP address (#5734) 2026-06-17 17:45:06 +02:00
Quentin Gliech fe622331a8 Admin API: allow listing and viewing of OAuth 2.0 clients (#5710) 2026-06-17 17:44:34 +02:00
Quentin Gliech 63ed796441 Use the public registry hostname in release notes (#5725) 2026-06-17 17:42:43 +02:00
Quentin Gliech 78036a933d Fix the compat session API definition in the admin API spec (#5714) 2026-06-17 17:42:31 +02:00
Quentin Gliech 2ea88c6377 Document what user data is stored and how long it is kept (#5673) 2026-06-17 17:42:17 +02:00
Quentin Gliech 256c5e3ff5 storage: use an enum for the OAuth2ClientFilter client kind 2026-06-17 17:33:03 +02:00
Quentin Gliech d33577cf4d Admin API: filter users based on client usage (#5707) 2026-06-17 17:12:56 +02:00
Quentin Gliech 61cffe2124 Admin API: allow filtering of sessions by creation and last-activity time (#5709) 2026-06-17 17:12:01 +02:00
Quentin Gliech 9464ca8038 Merge branch 'main' into quenting/admin-api/session-time-filters 2026-06-17 17:01:02 +02:00
Quentin Gliech a8ffce8f13 Admin API: allow filtering OAuth 2.0 sessions by multiple clients (#5708) 2026-06-17 16:40:53 +02:00
Quentin Gliech 9815902e9b Allow passing arbitrary values from clients down to upstream OAuth providers (#5677) 2026-06-17 16:28:57 +02:00
Olivier 'reivilibre e856e19638 Update Authelia Sample for OIDC upstream (#5672) 2026-06-17 14:41:03 +01:00
Quentin Gliech d951d0eed5 Remove special case for the empty client filter 2026-06-17 15:15:09 +02:00
Quentin Gliech eb0ef6380c Merge branch 'main' into quenting/upstream-pass-parameters 2026-06-17 14:54:37 +02:00
Quentin Gliech 772360bb4e Trim values before passing them to the upstream auth provider 2026-06-17 14:53:56 +02:00
Olivier 'reivilibre 0b80e523f5 Trim value when reading client_secret_file (#5456) 2026-06-17 13:37:13 +01:00
Quentin Gliech 378df1cdca Bump vite from 8.0.14 to 8.0.16 (#5738) 2026-06-17 14:34:04 +02:00
Quentin Gliech 98106df25a mas-cli: log the GraphQL operation on the request log line
Read the `GraphQlOperation` set by the GraphQL handler from the response
extensions in the logging middleware, and record the operation type and name
on the `http.server.response` log line when present.
2026-06-17 14:14:24 +02:00
Quentin Gliech 31b0b208c0 Record the client address on the HTTP request span 2026-06-17 14:14:24 +02:00
Quentin Gliech b14ad9af59 mas-handlers: expose the GraphQL operation on the response extensions
Define a `GraphQlOperation` type holding the operation type and name, and
attach it to the GraphQL response via the response extensions, so the HTTP
logging middleware can pick it up. The operation type is resolved from the
parsed query document, which is cached on the request and reused by the
executor.
2026-06-17 14:14:24 +02:00
Quentin Gliech 4cea9320d1 Track the client IP address for the whole request and log it 2026-06-17 14:14:23 +02:00
Quentin Gliech 2452cd88c0 Bump Rust to 1.96.0 and fix clippy lints (#5733) 2026-06-17 14:04:45 +02:00
matrixbot d178c9289d Automatic merge back to main (#5740) 2026-06-17 14:03:58 +02:00
Olivier 'reivilibre c857375528 Update crates/config/src/sections/mod.rs 2026-06-17 12:45:30 +01:00
Olivier 'reivilibre 119f5195a8 CI: Test against ESS (#5582) 2026-06-17 11:53:33 +01:00
Quentin GliechandOlivier 'reivilibre' a209eef119 Apply suggestion from @reivilibre
Co-authored-by: Olivier 'reivilibre' <oliverw@element.io>
2026-06-17 12:51:40 +02:00
github-actions[bot] c7fd1f9862 1.19.0 v1.19.0 2026-06-17 10:32:44 +00:00
matrixbot ed1f1b831e Translations updates for v1.19 (#5739) 2026-06-17 12:27:56 +02:00
github-actions[bot] a8bc6d326b Translations updates 2026-06-17 10:18:38 +00:00
Quentin Gliech e1f69b8aa6 Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 (#5719) 2026-06-17 10:02:03 +02:00
Quentin Gliech e76200e7c3 Bump actions/setup-node from 6.3.0 to 6.4.0 (#5718) 2026-06-17 10:01:54 +02:00
Quentin Gliech ffcc793a26 Bump taiki-e/install-action from 2.77.0 to 2.79.2 (#5716) 2026-06-17 10:01:31 +02:00
Quentin Gliech 8a01d047c9 Bump hashicorp/vault-action from 3.4.0 to 4.0.0 (#5717) 2026-06-17 10:01:22 +02:00
dependabot[bot] 47b59481f5 Bump vite from 8.0.14 to 8.0.16
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.14 to 8.0.16.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.16
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-17 02:26:28 +00:00
Quentin Gliech 21795d70dc Fix clippy lints for Rust 1.96.0
Rust 1.96.0 enables several new clippy lints. Apply the machine-applicable
fixes (`duration_suboptimal_units`, `map_unwrap_or`, `manual_is_variant_and`,
`unnecessary_trailing_comma`, `while_let_loop`) and suppress the
`result_large_err` lint in the config test modules, where the closures passed to
`Jail::expect_with` are required to return the large `figment::Error`.
2026-06-16 15:38:22 +02:00
Quentin Gliech 22f3ab685d Bump Rust to 1.96.0
Update `RUSTC_VERSION` in the Dockerfile and the matching clippy toolchain pin
in the CI workflow (kept in sync) from 1.93.0 to the latest stable, 1.96.0.
2026-06-16 15:38:21 +02:00
matrixbot f9de499891 Automatic merge back to main (#5729) 2026-06-10 13:43:15 +02:00
github-actions[bot] 4791081c53 1.19.0-rc.0 v1.19.0-rc.0 2026-06-10 11:33:51 +00:00
matrixbot 926a2f9b0e Translations updates for main (#5728) 2026-06-10 13:30:10 +02:00
github-actions[bot] 4194946c2d Translations updates 2026-06-10 11:22:07 +00:00
Quentin Gliech 3d67d90ea2 Fix typo in the configuration documentation client_secret_jwk-> client_secret_jwt (#5663) 2026-06-10 12:29:46 +02:00
Quentin Gliech 795987a324 Refactor login form to include password input conditionally (#5603) 2026-06-10 12:24:02 +02:00
Quentin Gliech 812b6d1495 Merge branch 'main' into patch-1 2026-06-10 12:18:55 +02:00
Quentin Gliech 8382c0eee2 Merge branch 'main' into main 2026-06-10 11:18:41 +02:00