dandri/matrix-authentication-service
1
0 Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-10-23 15:13:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,599 Commits 89 Branches 115 Tags
d0b359b7e38f8ea63c4100c3602bc437dc02ea5e
Commit Graph
7599 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot] d0b359b7e3 build(deps): bump tower from 0.5.2 to 0.5.3 
Bumps [tower](https://github.com/tower-rs/tower) from 0.5.2 to 0.5.3.
- [Release notes](https://github.com/tower-rs/tower/releases)
- [Commits](https://github.com/tower-rs/tower/compare/tower-0.5.2...tower-0.5.3)

---
updated-dependencies:
- dependency-name: tower
  dependency-version: 0.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 10:57:41 +00:00
Quentin Gliech fb804e74f1 Update crossbeam-epoch to 0.9.20 to fix RUSTSEC-2026-0204 (#5849) 2026-07-08 12:18:32 +02:00
Quentin Gliech decbdb6043 Update crossbeam-epoch to 0.9.20 to fix RUSTSEC-2026-0204 2026-07-08 11:50:38 +02:00
Quentin Gliech 9a0bc0d7f2 Bump all frontend dependencies (#5842) 2026-07-06 11:17:49 +02:00
Quentin Gliech 368a0d9eca Force a single copy of @radix-ui/react-dialog via pnpm override 
Since the frontend dependency bump, the lockfile shipped two copies of
@radix-ui/react-dialog: 1.1.18 for the app and 1.1.15 resolved for vaul.
On mobile, Dialog.tsx renders vaul's Drawer.Root together with the
app's Dialog.Trigger, and the two copies have distinct React contexts,
throwing "DialogTrigger must be used within Dialog" on the account page.

Add a pnpm override pinning the package to a single version so vaul
reuses the app's copy.
 2026-07-06 10:49:27 +02:00
Quentin Gliech da042e9404 Bump all frontend dependencies 2026-07-06 10:49:27 +02:00
Quentin Gliech bb9a43c983 build(deps): bump minijinja from 2.15.1 to 2.21.0 (#5839) 2026-07-03 17:36:07 +02:00
Quentin Gliech cb46044f0d Adapt to minijinja 2.21, bump minijinja-contrib in lockstep 
The 2.21 AST grew a dedicated Compare node for chained comparisons,
which the i18n scanner needs to walk. Also raise the workspace
requirements from 2.15.1/2.12.0 to 2.21.0.
 2026-07-03 17:09:37 +02:00
Quentin Gliech 24ff9adaab build(deps): bump url from 2.5.7 to 2.5.8 (#5837) 2026-07-03 17:08:24 +02:00
Quentin Gliech 94f1b96e30 build(deps): bump zeroize from 1.8.2 to 1.9.0 (#5838) 2026-07-03 17:03:53 +02:00
dependabot[bot] fa9f6266bf build(deps): bump minijinja from 2.15.1 to 2.21.0 
Bumps [minijinja](https://github.com/mitsuhiko/minijinja) from 2.15.1 to 2.21.0.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mitsuhiko/minijinja/compare/minijinja-go/v2.15.1...minijinja-go/v2.21.0)

---
updated-dependencies:
- dependency-name: minijinja
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 14:42:39 +00:00
dependabot[bot] e4508cf8a5 build(deps): bump zeroize from 1.8.2 to 1.9.0 
Bumps [zeroize](https://github.com/RustCrypto/utils) from 1.8.2 to 1.9.0.
- [Commits](https://github.com/RustCrypto/utils/compare/zeroize-v1.8.2...zeroize-v1.9.0)

---
updated-dependencies:
- dependency-name: zeroize
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 14:42:15 +00:00
dependabot[bot] 39cd81a041 build(deps): bump url from 2.5.7 to 2.5.8 
Bumps [url](https://github.com/servo/rust-url) from 2.5.7 to 2.5.8.
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](https://github.com/servo/rust-url/compare/v2.5.7...v2.5.8)

---
updated-dependencies:
- dependency-name: url
  dependency-version: 2.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 14:41:52 +00:00
Quentin Gliech c9581648be build(deps): bump ruma-common from 0.16.0 to 0.19.0 (#5832) 2026-07-03 16:36:59 +02:00
Quentin Gliech a129259e33 Merge main to resolve the lockfile conflict 2026-07-03 16:06:25 +02:00
Quentin Gliech 14006abf7a build(deps): bump thiserror from 2.0.17 to 2.0.18 (#5833) 2026-07-03 16:04:07 +02:00
Quentin Gliech 4632fbba7f build(deps): bump zxcvbn from 3.1.0 to 3.1.1 (#5834) 2026-07-03 16:03:55 +02:00
Quentin Gliech a18bf1f604 Allow the duplicates introduced by the toml 1.x stack 
ruma-macros 0.19 moved to toml 1.x, which pulls new versions of
serde_html_form, toml_datetime and winnow while axum-extra, toml_edit
and cron still use the old ones.
 2026-07-03 15:49:54 +02:00
Quentin Gliech 527e29e3f4 build(deps): bump pin-project-lite from 0.2.16 to 0.2.17 (#5835) 2026-07-03 15:15:05 +02:00
Quentin Gliech 75ab4a69e8 build(deps): bump rustc-hash from 2.1.1 to 2.1.2 (#5836) 2026-07-03 15:14:47 +02:00
Quentin Gliech 3819d07c73 Drop the stale itertools 0.13 cargo-deny skip 
zxcvbn 3.1.1 moved to itertools 0.14, joining prost-derive and
wasmtime-internal-cranelift on the remaining duplicate.
 2026-07-03 14:49:43 +02:00
dependabot[bot] df7fec6df1 build(deps): bump rustc-hash from 2.1.1 to 2.1.2 
Bumps [rustc-hash](https://github.com/rust-lang/rustc-hash) from 2.1.1 to 2.1.2.
- [Changelog](https://github.com/rust-lang/rustc-hash/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/rustc-hash/compare/v2.1.1...v2.1.2)

---
updated-dependencies:
- dependency-name: rustc-hash
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:46:13 +00:00
dependabot[bot] 6309a69bd0 build(deps): bump pin-project-lite from 0.2.16 to 0.2.17 
Bumps [pin-project-lite](https://github.com/taiki-e/pin-project-lite) from 0.2.16 to 0.2.17.
- [Release notes](https://github.com/taiki-e/pin-project-lite/releases)
- [Changelog](https://github.com/taiki-e/pin-project-lite/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/pin-project-lite/compare/v0.2.16...v0.2.17)

---
updated-dependencies:
- dependency-name: pin-project-lite
  dependency-version: 0.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:45:50 +00:00
dependabot[bot] 0cc5ca4b4d build(deps): bump zxcvbn from 3.1.0 to 3.1.1 
Bumps [zxcvbn](https://github.com/shssoichiro/zxcvbn-rs) from 3.1.0 to 3.1.1.
- [Changelog](https://github.com/shssoichiro/zxcvbn-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/shssoichiro/zxcvbn-rs/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: zxcvbn
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:45:28 +00:00
dependabot[bot] 4a9d6cfcb9 build(deps): bump thiserror from 2.0.17 to 2.0.18 
Bumps [thiserror](https://github.com/dtolnay/thiserror) from 2.0.17 to 2.0.18.
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](https://github.com/dtolnay/thiserror/compare/2.0.17...2.0.18)

---
updated-dependencies:
- dependency-name: thiserror
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:45:05 +00:00
dependabot[bot] 61deee9e4c build(deps): bump ruma-common from 0.16.0 to 0.19.0 
Bumps [ruma-common](https://github.com/ruma/ruma) from 0.16.0 to 0.19.0.
- [Release notes](https://github.com/ruma/ruma/releases)
- [Commits](https://github.com/ruma/ruma/compare/ruma-common-0.16.0...ruma-common-0.19.0)

---
updated-dependencies:
- dependency-name: ruma-common
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:44:42 +00:00
Quentin Gliech e0b408eb0c build(deps): bump v_htmlescape from 0.15.8 to 0.17.0 (#5830) 2026-07-03 14:41:44 +02:00
Quentin Gliech 773ccdbfc2 Adapt to the v_htmlescape 0.17 API 
The `escape()` entry point was replaced by `escape_string()` /
`escape_fmt()`. minijinja still depends on 0.15, so allow the duplicate
in cargo-deny.
 2026-07-03 14:28:16 +02:00
Quentin Gliech e9b0e1455b build(deps): bump hyper-rustls from 0.27.7 to 0.27.9 (#5831) 2026-07-03 12:56:20 +02:00
Quentin Gliech eaa4eb050c build(deps-dev): bump @tailwindcss/vite from 4.3.0 to 4.3.1 (#5825) 2026-07-03 12:56:05 +02:00
Quentin Gliech 57eb4cba83 build(deps): bump cron from 0.15.0 to 0.17.0 (#5822) 2026-07-03 12:55:50 +02:00
Quentin Gliech ac6557aabd build(deps): bump bitflags from 2.10.0 to 2.13.0 (#5829) 2026-07-03 12:54:30 +02:00
Quentin Gliech 36be6d7272 build(deps): bump pest from 2.8.3 to 2.8.6 (#5828) 2026-07-03 12:53:48 +02:00
Quentin Gliech 1fa26d9a21 Update the cargo-deny skips for cron 0.17 
cron moved to winnow 0.7 so the old skip is no longer needed, but it
still uses phf 0.11 while chrono-tz moved on to 0.12.
 2026-07-03 12:28:02 +02:00
dependabot[bot] 104e754332 build(deps): bump hyper-rustls from 0.27.7 to 0.27.9 
Bumps [hyper-rustls](https://github.com/rustls/hyper-rustls) from 0.27.7 to 0.27.9.
- [Release notes](https://github.com/rustls/hyper-rustls/releases)
- [Commits](https://github.com/rustls/hyper-rustls/compare/v/0.27.7...v/0.27.9)

---
updated-dependencies:
- dependency-name: hyper-rustls
  dependency-version: 0.27.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:27:35 +00:00
dependabot[bot] fb242ff2d2 build(deps): bump v_htmlescape from 0.15.8 to 0.17.0 
Bumps [v_htmlescape](https://github.com/zzau13/v_escape) from 0.15.8 to 0.17.0.
- [Release notes](https://github.com/zzau13/v_escape/releases)
- [Changelog](https://github.com/zzau13/v_escape/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zzau13/v_escape/commits/v_htmlescape-v0.17.0)

---
updated-dependencies:
- dependency-name: v_htmlescape
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:26:56 +00:00
dependabot[bot] 0b4cd1171a build(deps): bump bitflags from 2.10.0 to 2.13.0 
Bumps [bitflags](https://github.com/bitflags/bitflags) from 2.10.0 to 2.13.0.
- [Release notes](https://github.com/bitflags/bitflags/releases)
- [Changelog](https://github.com/bitflags/bitflags/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bitflags/bitflags/compare/2.10.0...2.13.0)

---
updated-dependencies:
- dependency-name: bitflags
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:26:33 +00:00
dependabot[bot] 5768b65f86 build(deps): bump pest from 2.8.3 to 2.8.6 
Bumps [pest](https://github.com/pest-parser/pest) from 2.8.3 to 2.8.6.
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](https://github.com/pest-parser/pest/compare/v2.8.3...v2.8.6)

---
updated-dependencies:
- dependency-name: pest
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:26:08 +00:00
dependabot[bot] bf93ed1bb8 build(deps-dev): bump @tailwindcss/vite from 4.3.0 to 4.3.1 
Bumps [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) from 4.3.0 to 4.3.1.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-vite)

---
updated-dependencies:
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:25:45 +00:00
Quentin Gliech eec6f723c8 build(deps-dev): bump @localazy/cli from 2.0.10 to 2.0.11 (#5827) 2026-07-03 12:23:13 +02:00
Quentin Gliech eb9fc386c6 build(deps-dev): bump @types/node from 25.9.3 to 26.0.0 in the types group (#5824) 2026-07-03 12:22:26 +02:00
Quentin Gliech 610a04ba4f build(deps): bump serde_json from 1.0.145 to 1.0.150 (#5823) 2026-07-03 12:22:13 +02:00
Quentin Gliech 17d9d43076 build(deps): bump tokio-util from 0.7.16 to 0.7.18 (#5821) 2026-07-03 12:17:42 +02:00
dependabot[bot] 5e0f36cf6b build(deps-dev): bump @localazy/cli from 2.0.10 to 2.0.11 
Bumps [@localazy/cli](https://localazy.com) from 2.0.10 to 2.0.11.

---
updated-dependencies:
- dependency-name: "@localazy/cli"
  dependency-version: 2.0.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:08:21 +00:00
Quentin Gliech 5c4acd1a55 build(deps-dev): bump semver from 7.8.1 to 7.8.4 (#5826) 2026-07-03 12:05:25 +02:00
dependabot[bot] dfa444e0b4 build(deps-dev): bump semver from 7.8.1 to 7.8.4 
Bumps [semver](https://github.com/npm/node-semver) from 7.8.1 to 7.8.4.
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.8.1...v7.8.4)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 7.8.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:04:13 +00:00
dependabot[bot] 2363120b35 build(deps-dev): bump @types/node in the types group 
Bumps the types group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `@types/node` from 25.9.3 to 26.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: types
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:02:55 +00:00
dependabot[bot] f3319696fa build(deps): bump serde_json from 1.0.145 to 1.0.150 
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.145 to 1.0.150.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.145...v1.0.150)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-version: 1.0.150
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 10:01:11 +00:00
Quentin Gliech 16dcd54925 build(deps): bump async-graphql from 7.0.17 to 7.2.1 (#5819) 2026-07-03 12:01:09 +02:00
Quentin Gliech c91a377f09 build(deps): bump futures-util from 0.3.31 to 0.3.32 (#5816) 2026-07-03 12:00:54 +02:00