dependabot[bot]
8e711ddb4d
build(deps): bump reqwest from 0.12.5 to 0.12.7
...
Bumps [reqwest](https://github.com/seanmonstar/reqwest ) from 0.12.5 to 0.12.7.
- [Release notes](https://github.com/seanmonstar/reqwest/releases )
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md )
- [Commits](https://github.com/seanmonstar/reqwest/compare/v0.12.5...v0.12.7 )
---
updated-dependencies:
- dependency-name: reqwest
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 16:47:16 +02:00
dependabot[bot]
a5648da57c
build(deps): bump libc from 0.2.155 to 0.2.158
...
Bumps [libc](https://github.com/rust-lang/libc ) from 0.2.155 to 0.2.158.
- [Release notes](https://github.com/rust-lang/libc/releases )
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.158/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/libc/compare/0.2.155...0.2.158 )
---
updated-dependencies:
- dependency-name: libc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 16:47:05 +02:00
dependabot[bot]
ef3967c8df
build(deps): bump @urql/core in /frontend in the urql group
...
Bumps the urql group in /frontend with 1 update: [@urql/core](https://github.com/urql-graphql/urql/tree/HEAD/packages/core ).
Updates `@urql/core` from 5.0.5 to 5.0.6
- [Release notes](https://github.com/urql-graphql/urql/releases )
- [Changelog](https://github.com/urql-graphql/urql/blob/main/packages/core/CHANGELOG.md )
- [Commits](https://github.com/urql-graphql/urql/commits/@urql/core@5.0.6/packages/core )
---
updated-dependencies:
- dependency-name: "@urql/core"
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: urql
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 16:45:03 +02:00
dependabot[bot]
730925ffcb
build(deps): bump @fontsource/inconsolata
...
Bumps the fontsource group in /frontend with 1 update: [@fontsource/inconsolata](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/inconsolata ).
Updates `@fontsource/inconsolata` from 5.0.18 to 5.0.19
- [Changelog](https://github.com/fontsource/font-files/blob/main/fonts/google/inconsolata/CHANGELOG.md )
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/inconsolata )
---
updated-dependencies:
- dependency-name: "@fontsource/inconsolata"
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: fontsource
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 16:41:53 +02:00
dependabot[bot]
d92c43a507
build(deps): bump clap from 4.5.13 to 4.5.16
...
Bumps [clap](https://github.com/clap-rs/clap ) from 4.5.13 to 4.5.16.
- [Release notes](https://github.com/clap-rs/clap/releases )
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md )
- [Commits](https://github.com/clap-rs/clap/compare/clap_complete-v4.5.13...clap_complete-v4.5.16 )
---
updated-dependencies:
- dependency-name: clap
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 16:30:28 +02:00
Quentin Gliech
59d0f786d6
Bump sqlx to 0.8.1
2024-08-30 16:29:41 +02:00
sandhose
8b9a892c48
Translations updates
2024-08-30 16:29:26 +02:00
Michael Telatynski
54d5e94bc4
Iterate cross signing reset flows ( #3102 )
...
* Handle UIA fallback authDone API for cross signing reset unlock
* Extract VisualList into a more reusable component
* Redesign cross signing reset unlock flow
* Fix block gap
* Hide reset x-signing flow on account view under a collapsible heading
* i18n
* Iterate
* Downgrade Radix react-collapsible
* Fix class names
* Update snapshots
2024-08-30 15:45:10 +02:00
dependabot[bot]
19cef28151
build(deps): bump the i18next group across 1 directory with 3 updates
...
Bumps the i18next group with 3 updates in the /frontend directory: [i18next](https://github.com/i18next/i18next ), [react-i18next](https://github.com/i18next/react-i18next ) and [i18next-parser](https://github.com/i18next/i18next-parser ).
Updates `i18next` from 23.12.2 to 23.14.0
- [Release notes](https://github.com/i18next/i18next/releases )
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md )
- [Commits](https://github.com/i18next/i18next/compare/v23.12.2...v23.14.0 )
Updates `react-i18next` from 15.0.0 to 15.0.1
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md )
- [Commits](https://github.com/i18next/react-i18next/compare/v15.0.0...v15.0.1 )
Updates `i18next-parser` from 9.0.1 to 9.0.2
- [Release notes](https://github.com/i18next/i18next-parser/releases )
- [Changelog](https://github.com/i18next/i18next-parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/i18next/i18next-parser/compare/9.0.1...9.0.2 )
---
updated-dependencies:
- dependency-name: i18next
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: i18next
- dependency-name: react-i18next
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: i18next
- dependency-name: i18next-parser
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: i18next
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 15:41:10 +02:00
dependabot[bot]
0d3569532f
build(deps-dev): bump vite
...
Bumps the vite group with 1 update in the /frontend directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Updates `vite` from 5.3.5 to 5.4.2
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v5.4.2/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: vite
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 14:04:12 +02:00
Marcel
6d30bc530f
Document the email policy in the reference
2024-08-30 13:57:31 +02:00
dependabot[bot]
9c2f852584
build(deps): bump serde_json from 1.0.122 to 1.0.127
...
Bumps [serde_json](https://github.com/serde-rs/json ) from 1.0.122 to 1.0.127.
- [Release notes](https://github.com/serde-rs/json/releases )
- [Commits](https://github.com/serde-rs/json/compare/v1.0.122...1.0.127 )
---
updated-dependencies:
- dependency-name: serde_json
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 13:56:52 +02:00
dependabot[bot]
10540827f3
build(deps): bump serde from 1.0.204 to 1.0.209
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.204 to 1.0.209.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.204...v1.0.209 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 13:56:19 +02:00
dependabot[bot]
9580a54d0e
build(deps): bump minijinja from 2.1.1 to 2.2.0
...
Bumps [minijinja](https://github.com/mitsuhiko/minijinja ) from 2.1.1 to 2.2.0.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases )
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md )
- [Commits](https://github.com/mitsuhiko/minijinja/compare/2.1.1...2.2.0 )
---
updated-dependencies:
- dependency-name: minijinja
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 10:40:48 +02:00
dependabot[bot]
f2051cc441
build(deps): bump axios from 1.7.2 to 1.7.4 in /frontend
...
Bumps [axios](https://github.com/axios/axios ) from 1.7.2 to 1.7.4.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.7.2...v1.7.4 )
---
updated-dependencies:
- dependency-name: axios
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 10:38:54 +02:00
dependabot[bot]
b43408bc8d
build(deps): bump indexmap from 2.3.0 to 2.4.0
...
Bumps [indexmap](https://github.com/indexmap-rs/indexmap ) from 2.3.0 to 2.4.0.
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/master/RELEASES.md )
- [Commits](https://github.com/indexmap-rs/indexmap/compare/2.3.0...2.4.0 )
---
updated-dependencies:
- dependency-name: indexmap
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 10:37:28 +02:00
dependabot[bot]
4b375c875a
build(deps-dev): bump the storybook group across 1 directory with 4 updates
...
Bumps the storybook group with 3 updates in the /frontend directory: [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials ), [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react ) and [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite ).
Updates `@storybook/addon-essentials` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases )
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md )
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/addons/essentials )
Updates `@storybook/react` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases )
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md )
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/renderers/react )
Updates `@storybook/react-vite` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases )
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md )
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/frameworks/react-vite )
Updates `storybook` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases )
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md )
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/lib/cli )
---
updated-dependencies:
- dependency-name: "@storybook/addon-essentials"
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: storybook
- dependency-name: "@storybook/react"
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: storybook
- dependency-name: "@storybook/react-vite"
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: storybook
- dependency-name: storybook
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: storybook
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 10:37:08 +02:00
dependabot[bot]
a65c9b29cb
build(deps): bump docker/bake-action from 5.5.0 to 5.7.0
...
Bumps [docker/bake-action](https://github.com/docker/bake-action ) from 5.5.0 to 5.7.0.
- [Release notes](https://github.com/docker/bake-action/releases )
- [Commits](https://github.com/docker/bake-action/compare/v5.5.0...v5.7.0 )
---
updated-dependencies:
- dependency-name: docker/bake-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 10:36:50 +02:00
dependabot[bot]
6bead191e8
build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.5.0...v3.6.0 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-30 10:36:40 +02:00
github-actions[bot]
d3eb5be63e
0.10.0
v0.10.0
2024-08-19 13:02:25 +00:00
Quentin Gliech
62e01883b6
Small documentation fixes
...
- Removes mentions of the `mas-cli templates save` command
- Removes the old `experimental` flags
- Removes the old `policy.data.passwords` configs
- Document the `policy.data.client_registration` flags
- Remove references to the pre-built macOS binaries
- Explains how to get syn2mas
- State that you need to prepare the database before importing data
- Clean up the reverse proxy documentation
- Clarify that you don't need to provede templates/policy/assets
manually when running the docker image
2024-08-19 13:53:43 +02:00
Quentin Gliech
c8afc48e46
frontend: remove double separator when password auth is disabled
2024-08-13 11:12:11 +02:00
github-actions[bot]
0d81cfd014
0.10.0-rc.0
v0.10.0-rc.0
2024-08-07 18:22:36 +00:00
Quentin Gliech
29d6383c5d
admin: rename the can_request_admin field to admin
2024-08-07 20:13:43 +02:00
Quentin Gliech
6189abe7b4
admin: set can_request_admin API
2024-08-07 20:13:43 +02:00
reivilibre and Quentin Gliech
5d4a4a6fb8
Add rate-limiting for account recovery and registration ( #3093 )
...
* Add rate-limiting for account recovery and registration
* Rename login ratelimiter `per_address` to `per_ip` for consistency
Co-authored-by: Quentin Gliech <quenting@element.io >
2024-08-07 17:57:36 +00:00
reivilibre
244f8f5e5e
Add configuration for rate-limiting of logins, replacing hardcoded limits ( #3090 )
2024-08-07 18:36:02 +01:00
Quentin Gliech
1bdad262cd
Disallow OAuth 2.0 use of the GraphQL API by default
2024-08-07 18:09:51 +02:00
Quentin Gliech and Hugh Nimmo-Smith
eb4072f3c3
Document the admin API ( #3038 )
...
Co-authored-by: Hugh Nimmo-Smith <hughns@matrix.org >
2024-08-07 17:41:46 +02:00
Quentin Gliech
b4eb93558d
admin: add simple snapshot test for the list oauth2 sessions endpoint
2024-08-07 17:41:18 +02:00
Quentin Gliech
dd58fffdef
admin: add tests for the get OAuth session API
2024-08-07 17:41:18 +02:00
Quentin Gliech
cf9f201337
admin: get OAuth 2.0 session API
2024-08-07 17:41:18 +02:00
Quentin Gliech
4f52840bf3
admin: list OAuth 2.0 sessions API
2024-08-07 17:41:18 +02:00
Quentin Gliech
83e4aa476f
admin: setup base for oauth2 sessions endpoints
2024-08-07 17:41:18 +02:00
Quentin Gliech
19d485a68b
admin: model definition for the OAuth 2.0 sessions
2024-08-07 17:41:18 +02:00
sandhose
86fbe5c589
Translations updates
2024-08-07 15:53:23 +02:00
dependabot[bot]
c97028e177
build(deps-dev): bump postcss from 8.4.40 to 8.4.41 in /frontend
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.4.40 to 8.4.41.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.4.40...8.4.41 )
---
updated-dependencies:
- dependency-name: postcss
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-07 15:22:22 +02:00
dependabot[bot]
e8a7dd82ca
build(deps): bump the tanstack-router group in /frontend with 3 updates
...
Bumps the tanstack-router group in /frontend with 3 updates: [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router ), [@tanstack/router-devtools](https://github.com/TanStack/router/tree/HEAD/packages/router-devtools ) and [@tanstack/router-vite-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-vite-plugin ).
Updates `@tanstack/react-router` from 1.46.4 to 1.46.7
- [Release notes](https://github.com/TanStack/router/releases )
- [Commits](https://github.com/TanStack/router/commits/v1.46.7/packages/react-router )
Updates `@tanstack/router-devtools` from 1.46.5 to 1.46.7
- [Release notes](https://github.com/TanStack/router/releases )
- [Commits](https://github.com/TanStack/router/commits/v1.46.7/packages/router-devtools )
Updates `@tanstack/router-vite-plugin` from 1.45.13 to 1.46.6
- [Release notes](https://github.com/TanStack/router/releases )
- [Commits](https://github.com/TanStack/router/commits/v1.46.6/packages/router-vite-plugin )
---
updated-dependencies:
- dependency-name: "@tanstack/react-router"
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: tanstack-router
- dependency-name: "@tanstack/router-devtools"
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: tanstack-router
- dependency-name: "@tanstack/router-vite-plugin"
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: tanstack-router
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-07 15:22:14 +02:00
dependabot[bot]
c11097d3ec
build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.5 to 4.3.6.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4.3.5...v4.3.6 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-07 15:22:06 +02:00
dependabot[bot]
b63d3498fd
build(deps): bump rustls-pki-types from 1.7.0 to 1.8.0
...
Bumps [rustls-pki-types](https://github.com/rustls/pki-types ) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/rustls/pki-types/releases )
- [Commits](https://github.com/rustls/pki-types/compare/v/1.7.0...v/1.8.0 )
---
updated-dependencies:
- dependency-name: rustls-pki-types
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-07 15:21:47 +02:00
dependabot[bot]
97c5529cd6
build(deps): bump hyper-util from 0.1.6 to 0.1.7
...
Bumps [hyper-util](https://github.com/hyperium/hyper-util ) from 0.1.6 to 0.1.7.
- [Release notes](https://github.com/hyperium/hyper-util/releases )
- [Changelog](https://github.com/hyperium/hyper-util/blob/master/CHANGELOG.md )
- [Commits](https://github.com/hyperium/hyper-util/compare/v0.1.6...v0.1.7 )
---
updated-dependencies:
- dependency-name: hyper-util
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-07 15:21:38 +02:00
Quentin Gliech
c969bdcd72
syn2mas: make the entrypoint absolute
2024-08-07 15:21:06 +02:00
Quentin Gliech
5cdae81037
syn2mas: only set the SSL options if we set any of them
2024-08-07 15:21:06 +02:00
Quentin Gliech
c61a52a3a0
admin: better error when password auth is disabled
2024-08-07 15:10:19 +02:00
Quentin Gliech
475a43df71
admin: check password complexity in password set API
2024-08-07 15:10:19 +02:00
Quentin Gliech
8b5d576018
admin: set password API
2024-08-07 15:10:19 +02:00
Quentin Gliech
9ea77a9562
admin: lock user API
2024-08-06 13:43:13 +02:00
Quentin Gliech
2307c05c69
admin: user unlock API
2024-08-06 13:31:28 +02:00
Quentin Gliech
117e124ddf
admin: user deactivation API
2024-08-06 11:48:19 +02:00
dependabot[bot]
7826935316
build(deps-dev): bump postcss-nesting from 12.1.5 to 13.0.0 in /frontend
...
Bumps [postcss-nesting](https://github.com/csstools/postcss-plugins/tree/HEAD/plugins/postcss-nesting ) from 12.1.5 to 13.0.0.
- [Changelog](https://github.com/csstools/postcss-plugins/blob/main/plugins/postcss-nesting/CHANGELOG.md )
- [Commits](https://github.com/csstools/postcss-plugins/commits/HEAD/plugins/postcss-nesting )
---
updated-dependencies:
- dependency-name: postcss-nesting
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-06 09:42:36 +02:00