dependabot[bot]
02ab9f1a73
build(deps): bump itertools from 0.14.0 to 0.15.0
...
Bumps [itertools](https://github.com/rust-itertools/itertools ) from 0.14.0 to 0.15.0.
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-itertools/itertools/compare/v0.14.0...v0.15.0 )
---
updated-dependencies:
- dependency-name: itertools
dependency-version: 0.15.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 22:25:24 +00:00
dependabot[bot]
9f55ebbed7
build(deps): bump sd-notify from 0.4.5 to 0.5.0
...
Bumps [sd-notify](https://github.com/lnicola/sd-notify ) from 0.4.5 to 0.5.0.
- [Changelog](https://github.com/lnicola/sd-notify/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lnicola/sd-notify/compare/v0.4.5...v0.5.0 )
---
updated-dependencies:
- dependency-name: sd-notify
dependency-version: 0.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-02 17:19:38 +00:00
Quentin Gliech
92318fc368
Upgrade aide, schemars and axum ( #5752 )
2026-07-02 17:43:41 +02:00
Quentin Gliech
a62a9ebdeb
Fix the HTTP client not setting the ALPN extension ( #5758 )
2026-07-02 12:11:09 +02:00
Quentin Gliech
fb4d91dbe1
deps: upgrade aide 0.15->0.16.0-alpha.4, axum-extra 0.10->0.12, schemars 0.9->1.0, axum 0.8.6->0.8.9
...
aide 0.16, axum-extra 0.12 and schemars 1.0 are a coupled bundle: aide 0.16
requires axum-extra ^0.12 and schemars ^1.0.4, so they must move together.
2026-07-01 17:09:26 +02:00
Quentin Gliech
b8aaa1a980
deps: upgrade icu4x 1.5 -> 2.2
...
Bumps all the ICU related dependencies to 2.2 or equivalent
2026-07-01 17:07:49 +02:00
github-actions[bot]
e575a8ce87
1.20.0-rc.0
2026-06-30 15:12:40 +00:00
Quentin Gliech
938c6aee67
Do not customize the TLS configuration of the HTTP client
...
This fixes a bug where we were not sending the ALPN extension, which caused the
HTTP client to always use HTTP/1.1 instead of HTTP/2.
Fixes #5757
2026-06-30 12:18:47 +02:00
Quentin Gliech
b76f08cf86
deps: upgrade sea-query to 1.0, switch sea-query-binder -> sea-query-sqlx ( #5744 )
2026-06-25 16:45:37 +02:00
Quentin Gliech
b3354c1532
Upgrade ulid
2026-06-22 14:46:55 +02:00
Quentin Gliech
b714fdf870
deps: upgrade sea-query to 1.0, switch sea-query-binder -> sea-query-sqlx
...
Prepares for the sqlx 0.9 upgrade: sea-query-binder is pinned to sqlx 0.8,
and its sqlx-0.9 successor is the renamed sea-query-sqlx crate which requires
sea-query 1.0. This change does the sea-query 0.32 -> 1.0 major migration while
staying on sqlx 0.8 (via sea-query-sqlx 0.8.1), to keep it decoupled from the
sqlx bump itself.
2026-06-19 10:40:12 +02:00
Quentin Gliech
e0c03b06e8
deps: upgrade reqwest 0.13, sentry 0.48, opentelemetry 0.32
...
We need to group the sentry and opentelemetry bumps together because they both
upgraded reqwest to 0.13.
- reqwest 0.12 -> 0.13: rename the rustls feature to rustls-no-provider,
add the now-opt-in 'form' feature.
- sentry 0.46 -> 0.48: add rustls-no-provider so Sentry's reqwest 0.13
transport reuses our process-wide aws-lc-rs provider.
- opentelemetry 0.31 -> 0.32 / tracing-opentelemetry 0.33: update the
get_otel_context call in mas-context for the new signature.
opentelemetry-jaeger-propagator 0.32 is deprecated upstream but still
published; we keep it for now (with an expect(deprecated)) and will
vendor it in-tree once it's actually removed.
2026-06-17 19:00:25 +02:00
github-actions[bot]
c7fd1f9862
1.19.0
2026-06-17 10:32:44 +00:00
github-actions[bot]
4791081c53
1.19.0-rc.0
2026-06-10 11:33:51 +00:00
github-actions[bot]
7b6c5aff9e
1.18.0
2026-06-04 11:44:51 +00:00
github-actions[bot]
49c0e6d713
1.18.0-rc.0
2026-05-29 14:34:07 +00:00
Eric Eastwood
427f8dd4fe
Enforce clippy::allow_attributes (prefer #[expect] over #[allow]) ( #5691 )
...
For example, `#[expect(unused_mut)]` is better because it will complain about the lint being unused if there is not `mut` usage anymore.
> Example
> ```rust
> #[allow(unused_mut)]
> fn foo() -> usize {
> let mut a = Vec::new();
> a.len()
> }
> ```
>
> Use instead:
> ```rust
> #[expect(unused_mut)]
> fn foo() -> usize {
> let mut a = Vec::new();
> a.len()
> }
> ```
Spawning from https://github.com/element-hq/matrix-authentication-service/pull/5670#discussion_r3244177988
2026-05-26 10:26:59 -05:00
dependabot[bot]
50177e6ad0
Bump the tracing group across 1 directory with 2 updates
...
Bumps the tracing group with 2 updates in the / directory: [tracing-subscriber](https://github.com/tokio-rs/tracing ) and [tracing-appender](https://github.com/tokio-rs/tracing ).
Updates `tracing-subscriber` from 0.3.22 to 0.3.23
- [Release notes](https://github.com/tokio-rs/tracing/releases )
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.22...tracing-subscriber-0.3.23 )
Updates `tracing-appender` from 0.2.4 to 0.2.5
- [Release notes](https://github.com/tokio-rs/tracing/releases )
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-appender-0.2.4...tracing-appender-0.2.5 )
---
updated-dependencies:
- dependency-name: tracing-appender
dependency-version: 0.2.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: tracing
- dependency-name: tracing-subscriber
dependency-version: 0.3.23
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: tracing
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-25 09:33:53 +00:00
Eric Eastwood
27cc368662
Enforce clippy::allow_attributes (prefer #[expect] over #[allow])
2026-05-20 14:22:26 -05:00
github-actions[bot]
3ab421191e
1.17.0
2026-05-19 14:19:56 +00:00
Quentin Gliech
e2771abd55
Bump lettre to mitigate RUSTSEC-2026-0141
...
This also bumps rustls-platform-verifier to avoid duplicated dependencies in the tree
2026-05-19 14:57:56 +01:00
github-actions[bot]
1d138bed7b
1.17.0-rc.0
2026-05-07 12:46:21 +00:00
Eric Eastwood
e1fa82f4dc
Session hard limit automatic eviction in non-interactive contexts (dangerous_hard_limit_eviction) ( #5607 )
...
Part of https://github.com/element-hq/matrix-authentication-service/issues/4339 / https://github.com/element-hq/backend-internal/issues/199 tracking work to limit number of devices.
2026-04-28 13:04:19 -05:00
github-actions[bot]
d57ce87294
1.16.0
2026-04-28 13:09:58 +00:00
Eric Eastwood
6209a9125b
Merge branch 'main' into madlittlemods/hard_limit_eviction
2026-04-21 18:04:59 -05:00
github-actions[bot]
ba306d4bcb
1.16.0-rc.0
2026-04-14 12:23:53 +00:00
Eric Eastwood
bc1e71baa3
Merge branch 'main' into madlittlemods/hard_limit_eviction
2026-04-13 17:00:02 -05:00
Eric Eastwood
1ff9d288d8
Allow clippy uninlined_format_args
...
See https://github.com/element-hq/matrix-authentication-service/pull/5607#discussion_r3075627261
2026-04-13 15:31:57 -05:00
Quentin Gliech
808f63571b
Upgrade opa-wasm to 0.2.0 to upgrade wasmtime
...
This fixes a bunch of RUSTSEC advisories, see https://github.com/element-hq/matrix-authentication-service/issues/5621
2026-04-13 18:10:19 +02:00
Eric Eastwood
dfe77c4b82
Cheeky filter inactive
...
See https://github.com/element-hq/matrix-authentication-service/pull/5607#discussion_r3057979830
2026-04-09 19:45:02 -05:00
github-actions[bot]
f576332bb2
1.15.0
2026-04-07 16:20:20 +00:00
github-actions[bot]
38d8aed2b9
1.15.0-rc.0
2026-03-31 11:54:23 +00:00
Quentin Gliech
5c2b2de15c
Enable the tls-provider-agnostic feature of opentelemetry-otlp
2026-03-31 12:03:55 +02:00
dependabot[bot]
d40934b7d2
build(deps): bump the opentelemetry group across 1 directory with 2 updates
...
Bumps the opentelemetry group with 2 updates in the / directory: [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust ) and [tracing-opentelemetry](https://github.com/tokio-rs/tracing-opentelemetry ).
Updates `opentelemetry-otlp` from 0.31.0 to 0.31.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry-otlp-0.31.1 )
Updates `tracing-opentelemetry` from 0.32.0 to 0.32.1
- [Release notes](https://github.com/tokio-rs/tracing-opentelemetry/releases )
- [Changelog](https://github.com/tokio-rs/tracing-opentelemetry/blob/v0.1.x/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/tracing-opentelemetry/compare/v0.32.0...v0.32.1 )
---
updated-dependencies:
- dependency-name: opentelemetry-otlp
dependency-version: 0.31.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: opentelemetry
- dependency-name: tracing-opentelemetry
dependency-version: 0.32.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: opentelemetry
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-26 14:04:44 +00:00
github-actions[bot]
8fd574f1a2
1.14.0
2026-03-24 14:09:16 +00:00
github-actions[bot]
8d94c35efd
1.14.0-rc.0
2026-03-17 14:43:01 +00:00
Quentin Gliech
8bb8dda1ea
Use system-configured proxies for outgoing HTTP requests ( #5538 )
2026-03-17 13:48:18 +01:00
github-actions[bot]
cb0c3378fd
1.13.0
2026-03-10 11:22:12 +00:00
Wang Shenwei
6612e8322e
feat: add system-proxy feature for reqwest to Cargo.toml
2026-03-04 13:15:26 +08:00
github-actions[bot]
fef14b541d
1.13.0-rc.0
2026-03-03 16:46:52 +00:00
dependabot[bot]
1a66fc9a4c
build(deps): bump anyhow from 1.0.100 to 1.0.101
...
Bumps [anyhow](https://github.com/dtolnay/anyhow ) from 1.0.100 to 1.0.101.
- [Release notes](https://github.com/dtolnay/anyhow/releases )
- [Commits](https://github.com/dtolnay/anyhow/compare/1.0.100...1.0.101 )
---
updated-dependencies:
- dependency-name: anyhow
dependency-version: 1.0.101
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-24 10:33:33 +00:00
github-actions[bot]
f343390644
1.12.0
2026-02-24 10:21:03 +00:00
github-actions[bot]
e9cf83e051
1.12.0-rc.0
2026-02-17 16:27:58 +00:00
Quentin Gliech
80fb9d5b04
build(deps): bump socket2 from 0.6.1 to 0.6.2 ( #5503 )
2026-02-17 15:18:27 +01:00
dependabot[bot]
d0efd98a18
build(deps): bump socket2 from 0.6.1 to 0.6.2
...
Bumps [socket2](https://github.com/rust-lang/socket2 ) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/rust-lang/socket2/releases )
- [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/socket2/compare/v0.6.1...v0.6.2 )
---
updated-dependencies:
- dependency-name: socket2
dependency-version: 0.6.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-17 14:07:54 +00:00
dependabot[bot]
7182574a98
build(deps): bump minijinja from 2.12.0 to 2.15.1
...
Bumps [minijinja](https://github.com/mitsuhiko/minijinja ) from 2.12.0 to 2.15.1.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases )
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md )
- [Commits](https://github.com/mitsuhiko/minijinja/compare/2.12.0...minijinja-go/v2.15.1 )
---
updated-dependencies:
- dependency-name: minijinja
dependency-version: 2.15.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-17 13:55:15 +00:00
Quentin Gliech
26620284bd
build(deps): bump bcrypt from 0.17.1 to 0.18.0 ( #5489 )
2026-02-17 11:41:15 +01:00
matrixbot
ad23c8e7ab
Automatic merge back to main ( #5492 )
2026-02-10 14:45:44 +01:00
github-actions[bot]
2b081f79b1
1.11.0
2026-02-10 13:34:45 +00:00
dependabot[bot]
f4d9808a21
build(deps): bump bcrypt from 0.17.1 to 0.18.0
...
Bumps [bcrypt](https://github.com/Keats/rust-bcrypt ) from 0.17.1 to 0.18.0.
- [Commits](https://github.com/Keats/rust-bcrypt/compare/v0.17.1...v0.18.0 )
---
updated-dependencies:
- dependency-name: bcrypt
dependency-version: 0.18.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-06 13:55:12 +00:00