dandri/matrix-authentication-service
1
0 Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-10-23 10:53:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,588 Commits 89 Branches 115 Tags
cb46044f0de0b4d0e29d50ebd3e4e79995ff26db
Commit Graph
7588 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Quentin Gliech cb46044f0d Adapt to minijinja 2.21, bump minijinja-contrib in lockstep 
The 2.21 AST grew a dedicated Compare node for chained comparisons,
which the i18n scanner needs to walk. Also raise the workspace
requirements from 2.15.1/2.12.0 to 2.21.0.
 2026-07-03 17:09:37 +02:00
dependabot[bot] fa9f6266bf build(deps): bump minijinja from 2.15.1 to 2.21.0 
Bumps [minijinja](https://github.com/mitsuhiko/minijinja) from 2.15.1 to 2.21.0.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mitsuhiko/minijinja/compare/minijinja-go/v2.15.1...minijinja-go/v2.21.0)

---
updated-dependencies:
- dependency-name: minijinja
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 14:42:39 +00:00
Quentin Gliech c9581648be build(deps): bump ruma-common from 0.16.0 to 0.19.0 (#5832) 2026-07-03 16:36:59 +02:00
Quentin Gliech a129259e33 Merge main to resolve the lockfile conflict 2026-07-03 16:06:25 +02:00
Quentin Gliech 14006abf7a build(deps): bump thiserror from 2.0.17 to 2.0.18 (#5833) 2026-07-03 16:04:07 +02:00
Quentin Gliech 4632fbba7f build(deps): bump zxcvbn from 3.1.0 to 3.1.1 (#5834) 2026-07-03 16:03:55 +02:00
Quentin Gliech a18bf1f604 Allow the duplicates introduced by the toml 1.x stack 
ruma-macros 0.19 moved to toml 1.x, which pulls new versions of
serde_html_form, toml_datetime and winnow while axum-extra, toml_edit
and cron still use the old ones.
 2026-07-03 15:49:54 +02:00
Quentin Gliech 527e29e3f4 build(deps): bump pin-project-lite from 0.2.16 to 0.2.17 (#5835) 2026-07-03 15:15:05 +02:00
Quentin Gliech 75ab4a69e8 build(deps): bump rustc-hash from 2.1.1 to 2.1.2 (#5836) 2026-07-03 15:14:47 +02:00
Quentin Gliech 3819d07c73 Drop the stale itertools 0.13 cargo-deny skip 
zxcvbn 3.1.1 moved to itertools 0.14, joining prost-derive and
wasmtime-internal-cranelift on the remaining duplicate.
 2026-07-03 14:49:43 +02:00
dependabot[bot] df7fec6df1 build(deps): bump rustc-hash from 2.1.1 to 2.1.2 
Bumps [rustc-hash](https://github.com/rust-lang/rustc-hash) from 2.1.1 to 2.1.2.
- [Changelog](https://github.com/rust-lang/rustc-hash/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/rustc-hash/compare/v2.1.1...v2.1.2)

---
updated-dependencies:
- dependency-name: rustc-hash
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:46:13 +00:00
dependabot[bot] 6309a69bd0 build(deps): bump pin-project-lite from 0.2.16 to 0.2.17 
Bumps [pin-project-lite](https://github.com/taiki-e/pin-project-lite) from 0.2.16 to 0.2.17.
- [Release notes](https://github.com/taiki-e/pin-project-lite/releases)
- [Changelog](https://github.com/taiki-e/pin-project-lite/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/pin-project-lite/compare/v0.2.16...v0.2.17)

---
updated-dependencies:
- dependency-name: pin-project-lite
  dependency-version: 0.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:45:50 +00:00
dependabot[bot] 0cc5ca4b4d build(deps): bump zxcvbn from 3.1.0 to 3.1.1 
Bumps [zxcvbn](https://github.com/shssoichiro/zxcvbn-rs) from 3.1.0 to 3.1.1.
- [Changelog](https://github.com/shssoichiro/zxcvbn-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/shssoichiro/zxcvbn-rs/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: zxcvbn
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:45:28 +00:00
dependabot[bot] 4a9d6cfcb9 build(deps): bump thiserror from 2.0.17 to 2.0.18 
Bumps [thiserror](https://github.com/dtolnay/thiserror) from 2.0.17 to 2.0.18.
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](https://github.com/dtolnay/thiserror/compare/2.0.17...2.0.18)

---
updated-dependencies:
- dependency-name: thiserror
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:45:05 +00:00
dependabot[bot] 61deee9e4c build(deps): bump ruma-common from 0.16.0 to 0.19.0 
Bumps [ruma-common](https://github.com/ruma/ruma) from 0.16.0 to 0.19.0.
- [Release notes](https://github.com/ruma/ruma/releases)
- [Commits](https://github.com/ruma/ruma/compare/ruma-common-0.16.0...ruma-common-0.19.0)

---
updated-dependencies:
- dependency-name: ruma-common
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:44:42 +00:00
Quentin Gliech e0b408eb0c build(deps): bump v_htmlescape from 0.15.8 to 0.17.0 (#5830) 2026-07-03 14:41:44 +02:00
Quentin Gliech 773ccdbfc2 Adapt to the v_htmlescape 0.17 API 
The `escape()` entry point was replaced by `escape_string()` /
`escape_fmt()`. minijinja still depends on 0.15, so allow the duplicate
in cargo-deny.
 2026-07-03 14:28:16 +02:00
Quentin Gliech e9b0e1455b build(deps): bump hyper-rustls from 0.27.7 to 0.27.9 (#5831) 2026-07-03 12:56:20 +02:00
Quentin Gliech eaa4eb050c build(deps-dev): bump @tailwindcss/vite from 4.3.0 to 4.3.1 (#5825) 2026-07-03 12:56:05 +02:00
Quentin Gliech 57eb4cba83 build(deps): bump cron from 0.15.0 to 0.17.0 (#5822) 2026-07-03 12:55:50 +02:00
Quentin Gliech ac6557aabd build(deps): bump bitflags from 2.10.0 to 2.13.0 (#5829) 2026-07-03 12:54:30 +02:00
Quentin Gliech 36be6d7272 build(deps): bump pest from 2.8.3 to 2.8.6 (#5828) 2026-07-03 12:53:48 +02:00
Quentin Gliech 1fa26d9a21 Update the cargo-deny skips for cron 0.17 
cron moved to winnow 0.7 so the old skip is no longer needed, but it
still uses phf 0.11 while chrono-tz moved on to 0.12.
 2026-07-03 12:28:02 +02:00
dependabot[bot] 104e754332 build(deps): bump hyper-rustls from 0.27.7 to 0.27.9 
Bumps [hyper-rustls](https://github.com/rustls/hyper-rustls) from 0.27.7 to 0.27.9.
- [Release notes](https://github.com/rustls/hyper-rustls/releases)
- [Commits](https://github.com/rustls/hyper-rustls/compare/v/0.27.7...v/0.27.9)

---
updated-dependencies:
- dependency-name: hyper-rustls
  dependency-version: 0.27.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:27:35 +00:00
dependabot[bot] fb242ff2d2 build(deps): bump v_htmlescape from 0.15.8 to 0.17.0 
Bumps [v_htmlescape](https://github.com/zzau13/v_escape) from 0.15.8 to 0.17.0.
- [Release notes](https://github.com/zzau13/v_escape/releases)
- [Changelog](https://github.com/zzau13/v_escape/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zzau13/v_escape/commits/v_htmlescape-v0.17.0)

---
updated-dependencies:
- dependency-name: v_htmlescape
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:26:56 +00:00
dependabot[bot] 0b4cd1171a build(deps): bump bitflags from 2.10.0 to 2.13.0 
Bumps [bitflags](https://github.com/bitflags/bitflags) from 2.10.0 to 2.13.0.
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bitflags/bitflags/compare/2.10.0...2.13.0)

---
updated-dependencies:
- dependency-name: bitflags
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:26:33 +00:00
dependabot[bot] 5768b65f86 build(deps): bump pest from 2.8.3 to 2.8.6 
Bumps [pest](https://github.com/pest-parser/pest) from 2.8.3 to 2.8.6.
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](https://github.com/pest-parser/pest/compare/v2.8.3...v2.8.6)

---
updated-dependencies:
- dependency-name: pest
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:26:08 +00:00
dependabot[bot] bf93ed1bb8 build(deps-dev): bump @tailwindcss/vite from 4.3.0 to 4.3.1 
Bumps [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) from 4.3.0 to 4.3.1.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-vite)

---
updated-dependencies:
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:25:45 +00:00
Quentin Gliech eec6f723c8 build(deps-dev): bump @localazy/cli from 2.0.10 to 2.0.11 (#5827) 2026-07-03 12:23:13 +02:00
Quentin Gliech eb9fc386c6 build(deps-dev): bump @types/node from 25.9.3 to 26.0.0 in the types group (#5824) 2026-07-03 12:22:26 +02:00
Quentin Gliech 610a04ba4f build(deps): bump serde_json from 1.0.145 to 1.0.150 (#5823) 2026-07-03 12:22:13 +02:00
Quentin Gliech 17d9d43076 build(deps): bump tokio-util from 0.7.16 to 0.7.18 (#5821) 2026-07-03 12:17:42 +02:00
dependabot[bot] 5e0f36cf6b build(deps-dev): bump @localazy/cli from 2.0.10 to 2.0.11 
Bumps [@localazy/cli](https://localazy.com) from 2.0.10 to 2.0.11.

---
updated-dependencies:
- dependency-name: "@localazy/cli"
  dependency-version: 2.0.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:08:21 +00:00
Quentin Gliech 5c4acd1a55 build(deps-dev): bump semver from 7.8.1 to 7.8.4 (#5826) 2026-07-03 12:05:25 +02:00
dependabot[bot] dfa444e0b4 build(deps-dev): bump semver from 7.8.1 to 7.8.4 
Bumps [semver](https://github.com/npm/node-semver) from 7.8.1 to 7.8.4.
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.8.1...v7.8.4)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 7.8.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:04:13 +00:00
dependabot[bot] 2363120b35 build(deps-dev): bump @types/node in the types group 
Bumps the types group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `@types/node` from 25.9.3 to 26.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: types
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:02:55 +00:00
dependabot[bot] f3319696fa build(deps): bump serde_json from 1.0.145 to 1.0.150 
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.145 to 1.0.150.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.145...v1.0.150)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.150
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:01:11 +00:00
Quentin Gliech 16dcd54925 build(deps): bump async-graphql from 7.0.17 to 7.2.1 (#5819) 2026-07-03 12:01:09 +02:00
Quentin Gliech c91a377f09 build(deps): bump futures-util from 0.3.31 to 0.3.32 (#5816) 2026-07-03 12:00:54 +02:00
dependabot[bot] eaa68a2e44 build(deps): bump cron from 0.15.0 to 0.17.0 
Bumps [cron](https://github.com/zslayton/cron) from 0.15.0 to 0.17.0.
- [Release notes](https://github.com/zslayton/cron/releases)
- [Commits](https://github.com/zslayton/cron/commits)

---
updated-dependencies:
- dependency-name: cron
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:00:50 +00:00
Quentin Gliech 951528ec30 build(deps): bump regex from 1.12.2 to 1.12.4 (#5820) 2026-07-03 12:00:26 +02:00
dependabot[bot] fe0c2843ff build(deps): bump tokio-util from 0.7.16 to 0.7.18 
Bumps [tokio-util](https://github.com/tokio-rs/tokio) from 0.7.16 to 0.7.18.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-util-0.7.16...tokio-util-0.7.18)

---
updated-dependencies:
- dependency-name: tokio-util
  dependency-version: 0.7.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:00:06 +00:00
dependabot[bot] de8fa3c6d2 build(deps): bump regex from 1.12.2 to 1.12.4 
Bumps [regex](https://github.com/rust-lang/regex) from 1.12.2 to 1.12.4.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.12.2...1.12.4)

---
updated-dependencies:
- dependency-name: regex
  dependency-version: 1.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 09:46:32 +00:00
dependabot[bot] 4f9e05e8e6 build(deps): bump async-graphql from 7.0.17 to 7.2.1 
Bumps [async-graphql](https://github.com/async-graphql/async-graphql) from 7.0.17 to 7.2.1.
- [Changelog](https://github.com/async-graphql/async-graphql/blob/master/CHANGELOG.md)
- [Commits](https://github.com/async-graphql/async-graphql/commits)

---
updated-dependencies:
- dependency-name: async-graphql
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 09:46:10 +00:00
dependabot[bot] e3fd768146 build(deps): bump futures-util from 0.3.31 to 0.3.32 
Bumps [futures-util](https://github.com/rust-lang/futures-rs) from 0.3.31 to 0.3.32.
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/futures-rs/compare/0.3.31...0.3.32)

---
updated-dependencies:
- dependency-name: futures-util
  dependency-version: 0.3.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 09:44:47 +00:00
Quentin Gliech 3604622c28 build(deps): bump @vector-im/compound-web from 9.3.0 to 9.4.1 (#5807) 2026-07-03 11:40:48 +02:00
Quentin Gliech d272b96b02 Merge main to resolve lockfile conflicts 
Keeps compound-web ^9.7.1 from this branch and picks up
compound-design-tokens 10.2.2 from main.
 2026-07-03 11:20:30 +02:00
Quentin Gliech 7662f9b75f build(deps): bump console from 0.15.11 to 0.16.3 (#5755) 2026-07-03 11:16:54 +02:00
Quentin Gliech db59f136ae build(deps): bump @vector-im/compound-design-tokens from 10.2.0 to 10.2.2 (#5812) 2026-07-03 11:16:31 +02:00
Quentin Gliech 818462aa05 Update insta to 1.48.0 2026-07-03 11:00:16 +02:00