dandri/matrix-authentication-service
1
0
Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-09-21 00:56:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,809 Commits 78 Branches 106 Tags
cd2ef4cbd7bd76a4e2f7e98a4ba749a3de49acff
Commit Graph
643 Commits
Author SHA1 Message Date
Quentin Gliech 1826034167 Replace pnpm/action-setup and actions/setup-node with pnpm/setup 
One pinned step now installs pnpm, Node.js and the dependencies. `require-lockfile: true` keeps the `--frozen-lockfile` semantics, `cache: true` keeps the pnpm store cache.
 2026-09-07 16:04:48 +02:00
Quentin Gliech 8bef2570c0 Pin the Rust toolchain for CI build jobs and let dependabot update it (#5938) 2026-09-02 14:44:02 +02:00
Quentin Gliech 66e73f9910 Pin the Rust toolchain with a rust-toolchain.toml 
Until now only the clippy CI job and the Dockerfile named a Rust version (kept in sync by hand), while every other CI job, the release binaries and the docs build ran on whatever `stable` happened to be that day. Rust 1.98.0 landing on 2026-08-20 broke `build-binaries` overnight because of that (#5935).

`rust-toolchain.toml` pins 1.96.0 with the `minimal` profile plus clippy, and every `rustup toolchain install stable ...` in CI becomes a bare `rustup toolchain install`, which reads the file. Starting at 1.96.0 (the version clippy is already clean against) keeps this change free of lint churn; catching up to 1.98.0 is a follow-up.

rustfmt stays on nightly because `.rustfmt.toml` uses nightly-only options, so that job now invokes `cargo +nightly fmt` explicitly instead of setting a rustup directory override, which would silently take precedence over the toolchain file.

The file does not list the linux cross-compilation targets on purpose: that would make every developer and CI job download `rust-std` they never use. The two consumers that cross-compile add the targets themselves.
 2026-08-26 12:01:34 +02:00
Eric Eastwood 0fed77c818 Update taiki-e/install-action so it knows about newer cargo-zigbuild 2026-08-25 16:59:29 -05:00
dependabot[bot] e7cb472bc8 build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.20 to 2.1.1 
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.20 to 2.1.1.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/bb137d7af7e4fb67e5f82a49c4fce4fad40782fe...3c6349835b2b7b196a839186cb8b78e02f7b5f25)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-07 08:03:01 +00:00
Quentin Gliech a5800983b8 build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2 (#5888) 2026-08-05 13:37:38 +02:00
Quentin Gliech b58efe2a73 build(deps): bump docker/login-action from 4.2.0 to 4.4.0 (#5889) 2026-08-05 13:28:31 +02:00
Quentin Gliech 9dcd8ad254 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5890) 2026-08-05 13:25:16 +02:00
dependabot[bot] 54d8cfcc45 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.4.0...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:08:05 +00:00
dependabot[bot] e47779f8ef build(deps): bump docker/login-action from 4.2.0 to 4.4.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...af1e73f918a031802d376d3c8bbc3fe56130a9b0)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:07:36 +00:00
dependabot[bot] cbf91149d5 build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2 
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.0 to 3.0.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...3d0d9888cb7fd7b750713d6e236d1fcb99157228)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:07:17 +00:00
dependabot[bot] 6e77139c37 build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9...dc802804100637a589fabce1cb79ff13a1411302)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:07:07 +00:00
Quentin Gliech de9257766e Run the buildx builder on the host network so it can reach the local registry 2026-07-28 13:30:41 +02:00
Quentin Gliech a00c0ce809 Start the ESS CI job right away and overlap its setup with the image build 
Drop the needs gate on the ESS job so it starts as soon as the workflow
does instead of waiting on compile-test-artifacts
 2026-07-28 13:30:41 +02:00
Quentin Gliech 2c062b0a9c Use the Docker build cache in the ESS test suite 
Import the Docker build cache that the Build workflow pushes to ghcr.io on
main, which caches the toolchain, frontend and policy layers
 2026-07-28 13:30:41 +02:00
Quentin Gliech f853d96049 build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#5790) 2026-07-02 19:45:30 +02:00
dependabot[bot] 5d8182dd3f build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 17:17:39 +00:00
dependabot[bot] 8c3f3cc305 build(deps): bump tailscale/github-action from 4.1.1 to 4.1.2 
Bumps [tailscale/github-action](https://github.com/tailscale/github-action) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/tailscale/github-action/releases)
- [Commits](https://github.com/tailscale/github-action/compare/53acf823325fe9ca47f4cdaa951f90b4b0de5bb9...306e68a486fd2350f2bfc3b19fcd143891a4a2d8)

---
updated-dependencies:
- dependency-name: tailscale/github-action
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 17:16:57 +00:00
Quentin Gliech f46f9a2c1f build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9 (#5778) 2026-07-02 18:31:23 +02:00
Quentin Gliech 0a0a59773a build(deps): bump docker/bake-action from 7.1.0 to 7.2.0 (#5776) 2026-07-02 18:29:33 +02:00
Quentin Gliech 4c92e14e90 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#5779) 2026-07-02 18:27:02 +02:00
Quentin Gliech 99e80494b1 build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0 (#5777) 2026-07-02 18:18:10 +02:00
dependabot[bot] bcc7f75e4c build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:46:42 +00:00
dependabot[bot] b4dab97c88 build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9 
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 6.0.5 to 6.0.9.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v6.0.5...v6.0.9)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:46:31 +00:00
dependabot[bot] 5753b61f3e build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0 
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.2 to 2.82.0.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/213ccc1a076163c093f914550b94feb90fab916d...b8cecb83565409bcc297b2df6e77f030b2a468d5)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:46:27 +00:00
dependabot[bot] 01eada1819 build(deps): bump docker/bake-action from 7.1.0 to 7.2.0 
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/a66e1c87e2eca0503c343edf1d208c716d54b8a8...6614cfa25eff9a0b2b2697efb0b6159e7680d584)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:45:22 +00:00
dependabot[bot] 3498a5715a build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.16 to 2.0.20 
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.16 to 2.0.20.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/175dc7fd4fb85ec8f46948fb98f44db001149081...bb137d7af7e4fb67e5f82a49c4fce4fad40782fe)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:45:08 +00:00
Quentin Gliech 2a12d67854 build(deps): bump docker/login-action from 4.1.0 to 4.2.0 (#5765) 2026-07-01 17:39:00 +02:00
Quentin Gliech a362c371b0 build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#5767) 2026-07-01 17:34:38 +02:00
Quentin Gliech 25d9d559c2 build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 (#5766) 2026-07-01 17:34:19 +02:00
Quentin Gliech 228dc80187 build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 (#5764) 2026-07-01 17:33:46 +02:00
dependabot[bot] 597a4892aa build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/57e3a136b779b570ffcdbf80b3bdc90e7fab3de2...fb8b3582c8e4def4969c97caa2f19720cb33a72f)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-01 15:05:01 +00:00
dependabot[bot] d180adebc8 build(deps): bump docker/login-action from 4.1.0 to 4.2.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...650006c6eb7dba73a995cc03b0b2d7f5ca915bee)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-01 15:04:54 +00:00
dependabot[bot] 0c6100f451 build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/030e881283bb7a6894de51c315a6bfe6a94e05cf...80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-01 15:04:44 +00:00
dependabot[bot] 5f315d4611 build(deps): bump actions/checkout from 6.0.2 to 7.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-01 15:04:27 +00:00
dependabot[bot] e0b15fd772 build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003...6f9f17788090df1f26f669e9d70d6ae9567deba6)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-01 15:04:26 +00:00
Quentin Gliech 822d4f5c40 CI: Move from styrainc/setup-regal to open-policy-agent/setup-regal 2026-07-01 14:41:09 +02:00
Quentin Gliech 23d0385fa3 Fix ESS test CI job by pinning the setup-ess-cluster-action to the latest version (#5743) 2026-06-18 14:00:15 +02:00
Quentin Gliech a0612f4bde ci: pin setup-ess-cluster-action to the latest release/v2 commit 
The ESS job was failing because the action's internal `azure/setup-helm` was
unpinned and had drifted to Helm v4 Fixed upstream by pinning Helm to 3.19.4
inside the action
 2026-06-18 13:33:02 +02:00
dependabot[bot] e56dccdd68 build(deps): bump actions/github-script from 8.0.0 to 9.0.0 
Bumps [actions/github-script](https://github.com/actions/github-script) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-17 17:28:52 +00:00
Quentin Gliech 63ed796441 Use the public registry hostname in release notes (#5725) 2026-06-17 17:42:43 +02:00
Quentin Gliech 2452cd88c0 Bump Rust to 1.96.0 and fix clippy lints (#5733) 2026-06-17 14:04:45 +02:00
Olivier 'reivilibre 119f5195a8 CI: Test against ESS (#5582) 2026-06-17 11:53:33 +01:00
Quentin Gliech e1f69b8aa6 Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 (#5719) 2026-06-17 10:02:03 +02:00
Quentin Gliech e76200e7c3 Bump actions/setup-node from 6.3.0 to 6.4.0 (#5718) 2026-06-17 10:01:54 +02:00
Quentin Gliech ffcc793a26 Bump taiki-e/install-action from 2.77.0 to 2.79.2 (#5716) 2026-06-17 10:01:31 +02:00
Quentin Gliech 22f3ab685d Bump Rust to 1.96.0 
Update `RUSTC_VERSION` in the Dockerfile and the matching clippy toolchain pin
in the CI workflow (kept in sync) from 1.93.0 to the latest stable, 1.96.0.
 2026-06-16 15:38:21 +02:00
Quentin Gliech 7455110877 Use the public registry hostname in release notes 
The release notes list the Docker image tags straight from the
metadata-action output, which references the internal push registry
(oci-push.vpn.infra.element.io, the only writable endpoint) rather than
the public pull registry (oci.element.io) that users actually pull from.

Rewrite the host when building the release-notes metadata blob, leaving
the tags used for the actual push untouched.
 2026-06-04 15:43:55 +02:00
dependabot[bot] 579b0c8dd6 Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 
Bumps [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) from 0.0.9 to 0.0.10.
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases)
- [Commits](https://github.com/mozilla-actions/sccache-action/compare/7d986dd989559c6ecdb630a3fd2557667be217ad...9e7fa8a12102821edf02ca5dbea1acd0f89a2696)

---
updated-dependencies:
- dependency-name: mozilla-actions/sccache-action
  dependency-version: 0.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 17:35:22 +00:00
dependabot[bot] de92e3eaac Bump actions/setup-node from 6.3.0 to 6.4.0 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.3.0...v6.4.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 17:35:16 +00:00