Commit Graph
839 Commits
Author SHA1 Message Date
dependabot[bot] 02ab9f1a73 build(deps): bump itertools from 0.14.0 to 0.15.0
Bumps [itertools](https://github.com/rust-itertools/itertools) from 0.14.0 to 0.15.0.
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-itertools/itertools/compare/v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: itertools
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-02 22:25:24 +00:00
dependabot[bot] 9f55ebbed7 build(deps): bump sd-notify from 0.4.5 to 0.5.0
Bumps [sd-notify](https://github.com/lnicola/sd-notify) from 0.4.5 to 0.5.0.
- [Changelog](https://github.com/lnicola/sd-notify/blob/master/CHANGELOG.md)
- [Commits](https://github.com/lnicola/sd-notify/compare/v0.4.5...v0.5.0)

---
updated-dependencies:
- dependency-name: sd-notify
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-02 17:19:38 +00:00
Quentin Gliech 92318fc368 Upgrade aide, schemars and axum (#5752) 2026-07-02 17:43:41 +02:00
Quentin Gliech a62a9ebdeb Fix the HTTP client not setting the ALPN extension (#5758) 2026-07-02 12:11:09 +02:00
Quentin Gliech fb4d91dbe1 deps: upgrade aide 0.15->0.16.0-alpha.4, axum-extra 0.10->0.12, schemars 0.9->1.0, axum 0.8.6->0.8.9
aide 0.16, axum-extra 0.12 and schemars 1.0 are a coupled bundle: aide 0.16
requires axum-extra ^0.12 and schemars ^1.0.4, so they must move together.
2026-07-01 17:09:26 +02:00
Quentin Gliech b8aaa1a980 deps: upgrade icu4x 1.5 -> 2.2
Bumps all the ICU related dependencies to 2.2 or equivalent
2026-07-01 17:07:49 +02:00
github-actions[bot] e575a8ce87 1.20.0-rc.0 2026-06-30 15:12:40 +00:00
Quentin Gliech 938c6aee67 Do not customize the TLS configuration of the HTTP client
This fixes a bug where we were not sending the ALPN extension, which caused the
HTTP client to always use HTTP/1.1 instead of HTTP/2.

Fixes #5757
2026-06-30 12:18:47 +02:00
Quentin Gliech b76f08cf86 deps: upgrade sea-query to 1.0, switch sea-query-binder -> sea-query-sqlx (#5744) 2026-06-25 16:45:37 +02:00
Quentin Gliech b3354c1532 Upgrade ulid 2026-06-22 14:46:55 +02:00
Quentin Gliech b714fdf870 deps: upgrade sea-query to 1.0, switch sea-query-binder -> sea-query-sqlx
Prepares for the sqlx 0.9 upgrade: sea-query-binder is pinned to sqlx 0.8,
and its sqlx-0.9 successor is the renamed sea-query-sqlx crate which requires
sea-query 1.0. This change does the sea-query 0.32 -> 1.0 major migration while
staying on sqlx 0.8 (via sea-query-sqlx 0.8.1), to keep it decoupled from the
sqlx bump itself.
2026-06-19 10:40:12 +02:00
Quentin Gliech e0c03b06e8 deps: upgrade reqwest 0.13, sentry 0.48, opentelemetry 0.32
We need to group the sentry and opentelemetry bumps together because they both
upgraded reqwest to 0.13.

- reqwest 0.12 -> 0.13: rename the rustls feature to rustls-no-provider,
  add the now-opt-in 'form' feature.
- sentry 0.46 -> 0.48: add rustls-no-provider so Sentry's reqwest 0.13
  transport reuses our process-wide aws-lc-rs provider.
- opentelemetry 0.31 -> 0.32 / tracing-opentelemetry 0.33: update the
  get_otel_context call in mas-context for the new signature.

opentelemetry-jaeger-propagator 0.32 is deprecated upstream but still
published; we keep it for now (with an expect(deprecated)) and will
vendor it in-tree once it's actually removed.
2026-06-17 19:00:25 +02:00
github-actions[bot] c7fd1f9862 1.19.0 2026-06-17 10:32:44 +00:00
github-actions[bot] 4791081c53 1.19.0-rc.0 2026-06-10 11:33:51 +00:00
github-actions[bot] 7b6c5aff9e 1.18.0 2026-06-04 11:44:51 +00:00
github-actions[bot] 49c0e6d713 1.18.0-rc.0 2026-05-29 14:34:07 +00:00
Eric Eastwood 427f8dd4fe Enforce clippy::allow_attributes (prefer #[expect] over #[allow]) (#5691)
For example, `#[expect(unused_mut)]` is better because it will complain about the lint being unused if there is not `mut` usage anymore.

> Example
> ```rust
> #[allow(unused_mut)]
> fn foo() -> usize {
>     let mut a = Vec::new();
>     a.len()
> }
> ```
> 
> Use instead:
> ```rust
> #[expect(unused_mut)]
> fn foo() -> usize {
>     let mut a = Vec::new();
>     a.len()
> }
> ```

Spawning from https://github.com/element-hq/matrix-authentication-service/pull/5670#discussion_r3244177988
2026-05-26 10:26:59 -05:00
dependabot[bot] 50177e6ad0 Bump the tracing group across 1 directory with 2 updates
Bumps the tracing group with 2 updates in the / directory: [tracing-subscriber](https://github.com/tokio-rs/tracing) and [tracing-appender](https://github.com/tokio-rs/tracing).


Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.22...tracing-subscriber-0.3.23)

Updates `tracing-appender` from 0.2.4 to 0.2.5
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-appender-0.2.4...tracing-appender-0.2.5)

---
updated-dependencies:
- dependency-name: tracing-appender
  dependency-version: 0.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tracing
- dependency-name: tracing-subscriber
  dependency-version: 0.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tracing
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-25 09:33:53 +00:00
Eric Eastwood 27cc368662 Enforce clippy::allow_attributes (prefer #[expect] over #[allow]) 2026-05-20 14:22:26 -05:00
github-actions[bot] 3ab421191e 1.17.0 2026-05-19 14:19:56 +00:00
Quentin Gliech e2771abd55 Bump lettre to mitigate RUSTSEC-2026-0141
This also bumps rustls-platform-verifier to avoid duplicated dependencies in the tree
2026-05-19 14:57:56 +01:00
github-actions[bot] 1d138bed7b 1.17.0-rc.0 2026-05-07 12:46:21 +00:00
Eric Eastwood e1fa82f4dc Session hard limit automatic eviction in non-interactive contexts (dangerous_hard_limit_eviction) (#5607)
Part of https://github.com/element-hq/matrix-authentication-service/issues/4339 / https://github.com/element-hq/backend-internal/issues/199 tracking work to limit number of devices.
2026-04-28 13:04:19 -05:00
github-actions[bot] d57ce87294 1.16.0 2026-04-28 13:09:58 +00:00
Eric Eastwood 6209a9125b Merge branch 'main' into madlittlemods/hard_limit_eviction 2026-04-21 18:04:59 -05:00
github-actions[bot] ba306d4bcb 1.16.0-rc.0 2026-04-14 12:23:53 +00:00
Eric Eastwood bc1e71baa3 Merge branch 'main' into madlittlemods/hard_limit_eviction 2026-04-13 17:00:02 -05:00
Eric Eastwood 1ff9d288d8 Allow clippy uninlined_format_args
See https://github.com/element-hq/matrix-authentication-service/pull/5607#discussion_r3075627261
2026-04-13 15:31:57 -05:00
Quentin Gliech 808f63571b Upgrade opa-wasm to 0.2.0 to upgrade wasmtime
This fixes a bunch of RUSTSEC advisories, see https://github.com/element-hq/matrix-authentication-service/issues/5621
2026-04-13 18:10:19 +02:00
Eric Eastwood dfe77c4b82 Cheeky filter inactive
See https://github.com/element-hq/matrix-authentication-service/pull/5607#discussion_r3057979830
2026-04-09 19:45:02 -05:00
github-actions[bot] f576332bb2 1.15.0 2026-04-07 16:20:20 +00:00
github-actions[bot] 38d8aed2b9 1.15.0-rc.0 2026-03-31 11:54:23 +00:00
Quentin Gliech 5c2b2de15c Enable the tls-provider-agnostic feature of opentelemetry-otlp 2026-03-31 12:03:55 +02:00
dependabot[bot] d40934b7d2 build(deps): bump the opentelemetry group across 1 directory with 2 updates
Bumps the opentelemetry group with 2 updates in the / directory: [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) and [tracing-opentelemetry](https://github.com/tokio-rs/tracing-opentelemetry).


Updates `opentelemetry-otlp` from 0.31.0 to 0.31.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry-otlp-0.31.1)

Updates `tracing-opentelemetry` from 0.32.0 to 0.32.1
- [Release notes](https://github.com/tokio-rs/tracing-opentelemetry/releases)
- [Changelog](https://github.com/tokio-rs/tracing-opentelemetry/blob/v0.1.x/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/tracing-opentelemetry/compare/v0.32.0...v0.32.1)

---
updated-dependencies:
- dependency-name: opentelemetry-otlp
  dependency-version: 0.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: opentelemetry
- dependency-name: tracing-opentelemetry
  dependency-version: 0.32.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: opentelemetry
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-26 14:04:44 +00:00
github-actions[bot] 8fd574f1a2 1.14.0 2026-03-24 14:09:16 +00:00
github-actions[bot] 8d94c35efd 1.14.0-rc.0 2026-03-17 14:43:01 +00:00
Quentin Gliech 8bb8dda1ea Use system-configured proxies for outgoing HTTP requests (#5538) 2026-03-17 13:48:18 +01:00
github-actions[bot] cb0c3378fd 1.13.0 2026-03-10 11:22:12 +00:00
Wang Shenwei 6612e8322e feat: add system-proxy feature for reqwest to Cargo.toml 2026-03-04 13:15:26 +08:00
github-actions[bot] fef14b541d 1.13.0-rc.0 2026-03-03 16:46:52 +00:00
dependabot[bot] 1a66fc9a4c build(deps): bump anyhow from 1.0.100 to 1.0.101
Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.100 to 1.0.101.
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](https://github.com/dtolnay/anyhow/compare/1.0.100...1.0.101)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.101
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-24 10:33:33 +00:00
github-actions[bot] f343390644 1.12.0 2026-02-24 10:21:03 +00:00
github-actions[bot] e9cf83e051 1.12.0-rc.0 2026-02-17 16:27:58 +00:00
Quentin Gliech 80fb9d5b04 build(deps): bump socket2 from 0.6.1 to 0.6.2 (#5503) 2026-02-17 15:18:27 +01:00
dependabot[bot] d0efd98a18 build(deps): bump socket2 from 0.6.1 to 0.6.2
Bumps [socket2](https://github.com/rust-lang/socket2) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/rust-lang/socket2/releases)
- [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/socket2/compare/v0.6.1...v0.6.2)

---
updated-dependencies:
- dependency-name: socket2
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-17 14:07:54 +00:00
dependabot[bot] 7182574a98 build(deps): bump minijinja from 2.12.0 to 2.15.1
Bumps [minijinja](https://github.com/mitsuhiko/minijinja) from 2.12.0 to 2.15.1.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mitsuhiko/minijinja/compare/2.12.0...minijinja-go/v2.15.1)

---
updated-dependencies:
- dependency-name: minijinja
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-17 13:55:15 +00:00
Quentin Gliech 26620284bd build(deps): bump bcrypt from 0.17.1 to 0.18.0 (#5489) 2026-02-17 11:41:15 +01:00
matrixbot ad23c8e7ab Automatic merge back to main (#5492) 2026-02-10 14:45:44 +01:00
github-actions[bot] 2b081f79b1 1.11.0 2026-02-10 13:34:45 +00:00
dependabot[bot] f4d9808a21 build(deps): bump bcrypt from 0.17.1 to 0.18.0
Bumps [bcrypt](https://github.com/Keats/rust-bcrypt) from 0.17.1 to 0.18.0.
- [Commits](https://github.com/Keats/rust-bcrypt/compare/v0.17.1...v0.18.0)

---
updated-dependencies:
- dependency-name: bcrypt
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-06 13:55:12 +00:00