Eric Eastwood
d38d0cd366
Add interactive tests
2026-05-20 16:36:39 -05:00
Eric Eastwood
e8f664e480
Merge branch 'main' into madlittlemods/max-session-threshold
2026-05-20 16:19:09 -05:00
Eric Eastwood
94e35f03cf
Show session/device limit errors on account page ( #5644 )
...
Part of https://github.com/element-hq/matrix-authentication-service/issues/4339 / https://github.com/element-hq/backend-internal/issues/199 tracking work to limit number of devices.
Follow-up to https://github.com/element-hq/matrix-authentication-service/pull/5639
2026-05-20 16:18:24 -05:00
Eric Eastwood
a17e53297d
Merge branch 'main' into madlittlemods/max-session-threshold
...
Conflicts:
crates/handlers/src/compat/login.rs
2026-05-20 16:16:22 -05:00
Eric Eastwood
e3af5fbbe5
Interactive compat m.login.sso test for session soft_limit ( #5675 )
...
Follow-up to https://github.com/element-hq/matrix-authentication-service/pull/5607
Part of https://github.com/element-hq/matrix-authentication-service/issues/4339 / https://github.com/element-hq/backend-internal/issues/199 tracking work to limit number of devices.
2026-05-20 16:09:25 -05:00
Eric Eastwood
d4e33f5121
Fix lints
2026-05-20 15:48:56 -05:00
Eric Eastwood
c16eebdc6a
Fix potentially typo
2026-05-20 15:47:58 -05:00
Eric Eastwood
1c648edb87
Use safer num_sessions_filtered_header pluralization
...
See https://github.com/element-hq/matrix-authentication-service/pull/5644#discussion_r3227855225
2026-05-20 15:47:09 -05:00
Eric Eastwood
62b2bf9a78
Add note on doing better than data-testid
2026-05-20 15:43:27 -05:00
Eric Eastwood
e65237b8f9
Merge branch 'main' into madlittlemods/soft-limit-account-session-management
2026-05-20 15:06:24 -05:00
Eric Eastwood
8d39676585
Use assert_matches!(...)
...
See https://github.com/element-hq/matrix-authentication-service/pull/5675#discussion_r3275925322
2026-05-20 15:03:09 -05:00
Eric Eastwood
a9114e34d1
Add FIXME for better DOM scrutiny
...
See https://github.com/element-hq/matrix-authentication-service/pull/5675#discussion_r3275929267
2026-05-20 14:56:56 -05:00
Eric Eastwood
97b3446f69
Merge branch 'main' into madlittlemods/soft-limit-sso-login-test
2026-05-20 14:44:14 -05:00
Eric Eastwood
7d37e02fc0
Check whether policy evaluation result is valid() when we process_violations_for_compat_login(...) ( #5681 )
...
This regressed in
https://github.com/element-hq/matrix-authentication-service/pull/5607 but
because the policy is only being used for session limiting
(https://github.com/element-hq/matrix-authentication-service/pull/5287 ), no
behavior has actually regressed. This is just important if we start enforcing
other logic in these policies.
Part of
https://github.com/element-hq/matrix-authentication-service/issues/4339 /
https://github.com/element-hq/backend-internal/issues/199 tracking work to
limit number of devices.
2026-05-20 14:07:51 -05:00
Eric Eastwood
bd995f18ef
Merge branch 'main' into madlittlemods/check-valid
...
Conflicts:
crates/handlers/src/compat/login.rs
2026-05-20 12:28:18 -05:00
Eric Eastwood
186b54f241
Schedule SyncDevicesJob after dangerous_hard_limit_eviction so the homeserver stays up to date ( #5679 )
...
Follow-up to https://github.com/element-hq/matrix-authentication-service/pull/5607#discussion_r3189451555
2026-05-20 12:26:07 -05:00
Eric Eastwood
b73e06aded
Update comment langauge and add it to other login spots
2026-05-20 11:58:36 -05:00
Eric Eastwood
7764e9e296
Formatting
2026-05-20 11:48:37 -05:00
Eric Eastwood
2aba54c4ba
Update reason for why synchronous device creation
...
See https://github.com/element-hq/matrix-authentication-service/pull/5679#discussion_r3237767718
2026-05-20 11:47:18 -05:00
Eric Eastwood
502cf66024
Merge branch 'main' into madlittlemods/sync-devices-after-hard-limit-eviction
2026-05-20 11:45:02 -05:00
Quentin Gliech
89080983c4
Split multi-arch Docker build into parallel jobs ( #5474 )
2026-05-20 15:47:00 +02:00
Quentin Gliech
eeea952b55
Add a comment about the artefact collection
2026-05-20 15:24:19 +02:00
Quentin Gliech
7834229784
Re-add DOCKER_METADATA_ANNOTATIONS_LEVELS to narrow annotations to the index
...
`docker buildx imagetools create --annotation manifest:KEY=VALUE` errors
out with "manifest annotations are not supported yet". metadata-action
defaults to emitting `manifest:` prefixed entries, so without an explicit
`DOCKER_METADATA_ANNOTATIONS_LEVELS: index` the finalize step blows up
the first time it sees a non-empty annotations list.
2026-05-20 15:22:56 +02:00
Quentin Gliech
63deb0b1fd
Don't specify DOCKER_METADATA_ANNOTATIONS_LEVELS
...
We're injecting annotations manually anyway
2026-05-20 14:42:17 +02:00
Quentin Gliech
d88db7deff
Simplify the injection of annotations in the final manifest
2026-05-20 14:41:53 +02:00
Quentin Gliech
c2dc7c11a9
Split multi-arch Docker build into parallel jobs
...
- Modify Dockerfile to build single architecture based on TARGETARCH instead of cross-compiling both targets in one run
- Replace single build-image job with matrix job (amd64, arm64)
- Add finalize-image job that creates multi-arch manifests using `docker buildx imagetools create` and signs the final images
- Each architecture gets its own build cache
This enables parallel builds of each architecture, reducing total build time by running both simultaneously rather than sequentially.
2026-05-20 12:57:22 +02:00
Quentin Gliech
750de33486
Push MAS docker images to Element OCI Registry ( #5459 )
2026-05-20 11:58:11 +02:00
Quentin Gliech
6946e57ffd
Fix the release notes reference to the image
2026-05-20 10:58:01 +02:00
Quentin Gliech
b9cddc84b6
Remove unused apalis dependabot config ( #5685 )
2026-05-20 10:57:12 +02:00
Quentin Gliech
2d6176308d
Merge branch 'main' into hughns/apalis-dependabot
2026-05-20 10:45:24 +02:00
Quentin Gliech
efb878e0a3
Increase dependabot interval from daily to monthly ( #5686 )
2026-05-20 10:44:51 +02:00
Quentin Gliech
e833483070
Bump OCI login action to v4.1.0 to match the GHCR login
2026-05-20 10:44:20 +02:00
Quentin Gliech
c52161d420
Merge remote-tracking branch 'origin/main' into devon/element-docker
2026-05-20 10:14:18 +02:00
Quentin Gliech
bb6efd95b8
Fix the transformation of the Docker build metadata in CI ( #5683 )
2026-05-20 10:12:00 +02:00
Quentin Gliech
815e9ef19a
Skip oci.element.io push on PR-labelled builds
...
Tailscale + Vault JWT auth needs a `push`-event OIDC token, so gate the
oci-push registry image and its login steps on `github.event_name == 'push'`.
PR-labelled builds (`Z-Build-Workflow`) push only to ghcr.io.
2026-05-20 09:50:18 +02:00
Quentin Gliech
f0100c4fa8
Disable provenance in the metadata output
2026-05-20 09:34:26 +02:00
matrixbot
4e99e36f87
Automatic merge back to main ( #5690 )
2026-05-19 16:30:37 +02:00
github-actions[bot]
3ab421191e
1.17.0
v1.17.0
2026-05-19 14:19:56 +00:00
Olivier 'reivilibre
de3de3b169
Translations updates for v1.17 ( #5689 )
2026-05-19 15:17:15 +01:00
Olivier 'reivilibre
53557cb6cd
Merge branch 'release/v1.17' into actions/localazy-download/v1.17
2026-05-19 15:08:03 +01:00
Quentin Gliech
e2771abd55
Bump lettre to mitigate RUSTSEC-2026-0141
...
This also bumps rustls-platform-verifier to avoid duplicated dependencies in the tree
2026-05-19 14:57:56 +01:00
github-actions[bot]
eb58397b05
Translations updates
2026-05-19 13:46:32 +00:00
Eric Eastwood
796ab7c6d1
Merge branch 'main' into madlittlemods/check-valid
2026-05-15 18:08:14 -05:00
Eric Eastwood
c5b9768d4b
Merge branch 'main' into madlittlemods/max-session-threshold
2026-05-15 18:08:03 -05:00
Eric Eastwood
efd17f742b
Merge branch 'main' into madlittlemods/soft-limit-account-session-management
2026-05-15 18:07:48 -05:00
Eric Eastwood
68737b361a
Merge branch 'main' into madlittlemods/soft-limit-sso-login-test
2026-05-15 18:01:34 -05:00
Eric Eastwood
d50c05437d
Fix lints
2026-05-15 17:59:30 -05:00
Eric Eastwood
2d9e62a4a0
More plain comment
2026-05-15 17:58:14 -05:00
Eric Eastwood
729df41df0
Better ConsentForbiddenPageType docstring
2026-05-15 17:53:08 -05:00
Eric Eastwood
a130600958
Refine error strategy
2026-05-15 17:52:01 -05:00