Commit Graph

1831 Commits

Author SHA1 Message Date
Eric Eastwood 8d39676585 Use assert_matches!(...)
See https://github.com/element-hq/matrix-authentication-service/pull/5675#discussion_r3275925322
2026-05-20 15:03:09 -05:00
Eric Eastwood 97b3446f69 Merge branch 'main' into madlittlemods/soft-limit-sso-login-test 2026-05-20 14:44:14 -05:00
github-actions[bot] 3ab421191e 1.17.0 2026-05-19 14:19:56 +00:00
Quentin Gliech e2771abd55 Bump lettre to mitigate RUSTSEC-2026-0141
This also bumps rustls-platform-verifier to avoid duplicated dependencies in the tree
2026-05-19 14:57:56 +01:00
Eric Eastwood 68737b361a Merge branch 'main' into madlittlemods/soft-limit-sso-login-test 2026-05-15 18:01:34 -05:00
Quentin Gliech be444b5f1a Bump lettre to mitigate RUSTSEC-2026-0141
This also bumps rustls-platform-verifier to avoid duplicated dependencies in the tree
2026-05-15 13:36:08 +02:00
Eric Eastwood 50b49cd38a Back to more normal 2026-05-14 19:27:01 -05:00
github-actions[bot] 1d138bed7b 1.17.0-rc.0 2026-05-07 12:46:21 +00:00
Andrew Morgan 8bccb6f758 Bump wasmtime from 43.0.1 to 43.0.2
Mitigates
[RUSTSEC-2026-0114](https://rustsec.org/advisories/RUSTSEC-2026-0114).
2026-05-05 20:08:56 +01:00
Eric Eastwood e1fa82f4dc Session hard limit automatic eviction in non-interactive contexts (dangerous_hard_limit_eviction) (#5607)
Part of https://github.com/element-hq/matrix-authentication-service/issues/4339 / https://github.com/element-hq/backend-internal/issues/199 tracking work to limit number of devices.
2026-04-28 13:04:19 -05:00
github-actions[bot] d57ce87294 1.16.0 2026-04-28 13:09:58 +00:00
Olivier 'reivilibre 447d1ea3cc rustls-webpki: 0.103.10 -> 0.103.13
Addresses: https://rustsec.org/advisories/RUSTSEC-2026-0098
Addresses: https://rustsec.org/advisories/RUSTSEC-2026-0099
Addresses: https://rustsec.org/advisories/RUSTSEC-2026-0104
2026-04-28 13:51:25 +01:00
Eric Eastwood a06429a840 Merge branch 'main' into madlittlemods/hard_limit_eviction 2026-04-27 17:09:41 -05:00
dependabot[bot] 8787fbb459 build(deps): bump rustls-webpki from 0.103.10 to 0.103.13
Bumps [rustls-webpki](https://github.com/rustls/webpki) from 0.103.10 to 0.103.13.
- [Release notes](https://github.com/rustls/webpki/releases)
- [Commits](https://github.com/rustls/webpki/compare/v/0.103.10...v/0.103.13)

---
updated-dependencies:
- dependency-name: rustls-webpki
  dependency-version: 0.103.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-23 01:20:28 +00:00
Eric Eastwood 6209a9125b Merge branch 'main' into madlittlemods/hard_limit_eviction 2026-04-21 18:04:59 -05:00
github-actions[bot] ba306d4bcb 1.16.0-rc.0 2026-04-14 12:23:53 +00:00
Eric Eastwood bc1e71baa3 Merge branch 'main' into madlittlemods/hard_limit_eviction 2026-04-13 17:00:02 -05:00
Quentin Gliech cfe3b70404 Upgrade rand to 0.9.4
See https://rustsec.org/advisories/RUSTSEC-2026-0097
2026-04-13 18:12:04 +02:00
Quentin Gliech 808f63571b Upgrade opa-wasm to 0.2.0 to upgrade wasmtime
This fixes a bunch of RUSTSEC advisories, see https://github.com/element-hq/matrix-authentication-service/issues/5621
2026-04-13 18:10:19 +02:00
Eric Eastwood c794993b01 Merge branch 'main' into madlittlemods/hard_limit_eviction 2026-04-07 15:43:44 -05:00
github-actions[bot] f576332bb2 1.15.0 2026-04-07 16:20:20 +00:00
Eric Eastwood 5532c0cda9 Better rustdoc links 2026-04-03 17:42:09 -05:00
github-actions[bot] 38d8aed2b9 1.15.0-rc.0 2026-03-31 11:54:23 +00:00
Quentin Gliech b0c878026e Use get_otel_context instead of accessing OtelData directly
`OtelData` is going to become private in a future version of
`tracing-opentelemetry`. Use the new `get_otel_context` function
introduced in 0.32.1 to extract the trace ID from the span context.
2026-03-31 12:24:08 +02:00
dependabot[bot] d40934b7d2 build(deps): bump the opentelemetry group across 1 directory with 2 updates
Bumps the opentelemetry group with 2 updates in the / directory: [opentelemetry-otlp](https://github.com/open-telemetry/opentelemetry-rust) and [tracing-opentelemetry](https://github.com/tokio-rs/tracing-opentelemetry).


Updates `opentelemetry-otlp` from 0.31.0 to 0.31.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-rust/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-rust/blob/main/docs/release_0.30.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-rust/compare/v0.31.0...opentelemetry-otlp-0.31.1)

Updates `tracing-opentelemetry` from 0.32.0 to 0.32.1
- [Release notes](https://github.com/tokio-rs/tracing-opentelemetry/releases)
- [Changelog](https://github.com/tokio-rs/tracing-opentelemetry/blob/v0.1.x/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/tracing-opentelemetry/compare/v0.32.0...v0.32.1)

---
updated-dependencies:
- dependency-name: opentelemetry-otlp
  dependency-version: 0.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: opentelemetry
- dependency-name: tracing-opentelemetry
  dependency-version: 0.32.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: opentelemetry
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-26 14:04:44 +00:00
github-actions[bot] 8fd574f1a2 1.14.0 2026-03-24 14:09:16 +00:00
Quentin Gliech cb6b36e8cb Update aws-lc-rs and rustls-webpki to resolve security advisories.
Update aws-lc-rs 1.14.0 -> 1.16.2 (aws-lc-sys 0.31.0 -> 0.39.0) and
rustls-webpki 0.103.6 -> 0.103.10 to resolve security advisories.

Remove ring license clarification and OpenSSL license allowance from the
`cargo-deny` config since ring is no longer in the dependency tree.
2026-03-24 13:17:29 +01:00
github-actions[bot] 8d94c35efd 1.14.0-rc.0 2026-03-17 14:43:01 +00:00
Quentin Gliech 8bb8dda1ea Use system-configured proxies for outgoing HTTP requests (#5538) 2026-03-17 13:48:18 +01:00
Quentin Gliech 2c43080136 Update Cargo.lock and cargo-deny skip list 2026-03-17 10:56:53 +01:00
github-actions[bot] cb0c3378fd 1.13.0 2026-03-10 11:22:12 +00:00
github-actions[bot] fef14b541d 1.13.0-rc.0 2026-03-03 16:46:52 +00:00
Quentin Gliech 9b1291108e Support MSC4198 login_hint in account management uri (#5516) 2026-03-03 16:25:35 +01:00
dependabot[bot] 6324e5ed2c build(deps): bump wasmtime from 40.0.3 to 40.0.4
Bumps [wasmtime](https://github.com/bytecodealliance/wasmtime) from 40.0.3 to 40.0.4.
- [Release notes](https://github.com/bytecodealliance/wasmtime/releases)
- [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v40.0.4/RELEASES.md)
- [Commits](https://github.com/bytecodealliance/wasmtime/compare/v40.0.3...v40.0.4)

---
updated-dependencies:
- dependency-name: wasmtime
  dependency-version: 40.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-24 23:00:28 +00:00
dependabot[bot] 1a66fc9a4c build(deps): bump anyhow from 1.0.100 to 1.0.101
Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.100 to 1.0.101.
- [Release notes](https://github.com/dtolnay/anyhow/releases)
- [Commits](https://github.com/dtolnay/anyhow/compare/1.0.100...1.0.101)

---
updated-dependencies:
- dependency-name: anyhow
  dependency-version: 1.0.101
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-24 10:33:33 +00:00
github-actions[bot] f343390644 1.12.0 2026-02-24 10:21:03 +00:00
Tonkku 673392fcc8 Support MSC4198 login_hint in account management uri 2026-02-23 13:06:59 +02:00
github-actions[bot] e9cf83e051 1.12.0-rc.0 2026-02-17 16:27:58 +00:00
Quentin Gliech 80fb9d5b04 build(deps): bump socket2 from 0.6.1 to 0.6.2 (#5503) 2026-02-17 15:18:27 +01:00
dependabot[bot] d0efd98a18 build(deps): bump socket2 from 0.6.1 to 0.6.2
Bumps [socket2](https://github.com/rust-lang/socket2) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/rust-lang/socket2/releases)
- [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/socket2/compare/v0.6.1...v0.6.2)

---
updated-dependencies:
- dependency-name: socket2
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-17 14:07:54 +00:00
dependabot[bot] 7182574a98 build(deps): bump minijinja from 2.12.0 to 2.15.1
Bumps [minijinja](https://github.com/mitsuhiko/minijinja) from 2.12.0 to 2.15.1.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mitsuhiko/minijinja/compare/2.12.0...minijinja-go/v2.15.1)

---
updated-dependencies:
- dependency-name: minijinja
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-17 13:55:15 +00:00
Quentin Gliech 26620284bd build(deps): bump bcrypt from 0.17.1 to 0.18.0 (#5489) 2026-02-17 11:41:15 +01:00
matrixbot ad23c8e7ab Automatic merge back to main (#5492) 2026-02-10 14:45:44 +01:00
github-actions[bot] 2b081f79b1 1.11.0 2026-02-10 13:34:45 +00:00
dependabot[bot] f4d9808a21 build(deps): bump bcrypt from 0.17.1 to 0.18.0
Bumps [bcrypt](https://github.com/Keats/rust-bcrypt) from 0.17.1 to 0.18.0.
- [Commits](https://github.com/Keats/rust-bcrypt/compare/v0.17.1...v0.18.0)

---
updated-dependencies:
- dependency-name: bcrypt
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-06 13:55:12 +00:00
matrixbot f6d6a20964 Automatic merge back to main (#5483) 2026-02-06 12:10:46 +01:00
github-actions[bot] e2c0cee6f1 1.11.0-rc.1 2026-02-06 11:02:32 +00:00
dependabot[bot] 72eef700ce build(deps): bump time from 0.3.43 to 0.3.47
Bumps [time](https://github.com/time-rs/time) from 0.3.43 to 0.3.47.
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](https://github.com/time-rs/time/compare/v0.3.43...v0.3.47)

---
updated-dependencies:
- dependency-name: time
  dependency-version: 0.3.47
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-06 09:58:33 +01:00
dependabot[bot] d0f1aab686 build(deps): bump time from 0.3.43 to 0.3.47
Bumps [time](https://github.com/time-rs/time) from 0.3.43 to 0.3.47.
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](https://github.com/time-rs/time/compare/v0.3.43...v0.3.47)

---
updated-dependencies:
- dependency-name: time
  dependency-version: 0.3.47
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-05 18:51:18 +00:00
dependabot[bot] 0d8d4898eb build(deps): bump insta from 1.43.2 to 1.46.3
Bumps [insta](https://github.com/mitsuhiko/insta) from 1.43.2 to 1.46.3.
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mitsuhiko/insta/compare/1.43.2...1.46.3)

---
updated-dependencies:
- dependency-name: insta
  dependency-version: 1.46.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-05 13:55:12 +00:00