dandri/matrix-authentication-service
1
0 Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-10-23 17:24:01 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,927 Commits 90 Branches 115 Tags
efeaa62070b7dc6d8dceeedc3edc1d06162b72f1
Commit Graph
254 Commits
Author SHA1 Message Date
Olivier 'reivilibre c02a892e4f build(deps): bump mozilla-actions/sccache-action from 0.0.10 to 0.0.11 (#6011) 2026-10-05 11:16:05 +01:00
dependabot[bot] d786bcc253 build(deps): bump mozilla-actions/sccache-action from 0.0.10 to 0.0.11 
Bumps [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) from 0.0.10 to 0.0.11.
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases)
- [Commits](https://github.com/mozilla-actions/sccache-action/compare/9e7fa8a12102821edf02ca5dbea1acd0f89a2696...fc920bf0ec8de6ee65d409111f7ec508035751ba)

---
updated-dependencies:
- dependency-name: mozilla-actions/sccache-action
  dependency-version: 0.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-01 13:55:07 +00:00
dependabot[bot] 442724fecb build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.3.0 to 7.4.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a...c3c9e263c25d99ce0380d002d59b67737d91b0dc)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-01 13:54:52 +00:00
Quentin Gliech 1826034167 Replace pnpm/action-setup and actions/setup-node with pnpm/setup 
One pinned step now installs pnpm, Node.js and the dependencies. `require-lockfile: true` keeps the `--frozen-lockfile` semantics, `cache: true` keeps the pnpm store cache.
 2026-09-07 16:04:48 +02:00
Quentin Gliech 8bef2570c0 Pin the Rust toolchain for CI build jobs and let dependabot update it (#5938) 2026-09-02 14:44:02 +02:00
Quentin Gliech 66e73f9910 Pin the Rust toolchain with a rust-toolchain.toml 
Until now only the clippy CI job and the Dockerfile named a Rust version (kept in sync by hand), while every other CI job, the release binaries and the docs build ran on whatever `stable` happened to be that day. Rust 1.98.0 landing on 2026-08-20 broke `build-binaries` overnight because of that (#5935).

`rust-toolchain.toml` pins 1.96.0 with the `minimal` profile plus clippy, and every `rustup toolchain install stable ...` in CI becomes a bare `rustup toolchain install`, which reads the file. Starting at 1.96.0 (the version clippy is already clean against) keeps this change free of lint churn; catching up to 1.98.0 is a follow-up.

rustfmt stays on nightly because `.rustfmt.toml` uses nightly-only options, so that job now invokes `cargo +nightly fmt` explicitly instead of setting a rustup directory override, which would silently take precedence over the toolchain file.

The file does not list the linux cross-compilation targets on purpose: that would make every developer and CI job download `rust-std` they never use. The two consumers that cross-compile add the targets themselves.
 2026-08-26 12:01:34 +02:00
Eric Eastwood 0fed77c818 Update taiki-e/install-action so it knows about newer cargo-zigbuild 2026-08-25 16:59:29 -05:00
dependabot[bot] e7cb472bc8 build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.20 to 2.1.1 
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.20 to 2.1.1.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/bb137d7af7e4fb67e5f82a49c4fce4fad40782fe...3c6349835b2b7b196a839186cb8b78e02f7b5f25)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-07 08:03:01 +00:00
dependabot[bot] 54d8cfcc45 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.4.0...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 11:08:05 +00:00
Quentin Gliech de9257766e Run the buildx builder on the host network so it can reach the local registry 2026-07-28 13:30:41 +02:00
Quentin Gliech a00c0ce809 Start the ESS CI job right away and overlap its setup with the image build 
Drop the needs gate on the ESS job so it starts as soon as the workflow
does instead of waiting on compile-test-artifacts
 2026-07-28 13:30:41 +02:00
Quentin Gliech 2c062b0a9c Use the Docker build cache in the ESS test suite 
Import the Docker build cache that the Build workflow pushes to ghcr.io on
main, which caches the toolchain, frontend and policy layers
 2026-07-28 13:30:41 +02:00
Quentin Gliech f46f9a2c1f build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9 (#5778) 2026-07-02 18:31:23 +02:00
Quentin Gliech 4c92e14e90 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#5779) 2026-07-02 18:27:02 +02:00
Quentin Gliech 99e80494b1 build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0 (#5777) 2026-07-02 18:18:10 +02:00
dependabot[bot] bcc7f75e4c build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:46:42 +00:00
dependabot[bot] b4dab97c88 build(deps): bump pnpm/action-setup from 6.0.5 to 6.0.9 
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 6.0.5 to 6.0.9.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v6.0.5...v6.0.9)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:46:31 +00:00
dependabot[bot] 5753b61f3e build(deps): bump taiki-e/install-action from 2.79.2 to 2.82.0 
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.79.2 to 2.82.0.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/213ccc1a076163c093f914550b94feb90fab916d...b8cecb83565409bcc297b2df6e77f030b2a468d5)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:46:27 +00:00
dependabot[bot] 3498a5715a build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.16 to 2.0.20 
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.16 to 2.0.20.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/175dc7fd4fb85ec8f46948fb98f44db001149081...bb137d7af7e4fb67e5f82a49c4fce4fad40782fe)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-02 15:45:08 +00:00
dependabot[bot] 5f315d4611 build(deps): bump actions/checkout from 6.0.2 to 7.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-01 15:04:27 +00:00
Quentin Gliech 822d4f5c40 CI: Move from styrainc/setup-regal to open-policy-agent/setup-regal 2026-07-01 14:41:09 +02:00
Quentin Gliech a0612f4bde ci: pin setup-ess-cluster-action to the latest release/v2 commit 
The ESS job was failing because the action's internal `azure/setup-helm` was
unpinned and had drifted to Helm v4 Fixed upstream by pinning Helm to 3.19.4
inside the action
 2026-06-18 13:33:02 +02:00
Quentin Gliech 2452cd88c0 Bump Rust to 1.96.0 and fix clippy lints (#5733) 2026-06-17 14:04:45 +02:00
Olivier 'reivilibre 119f5195a8 CI: Test against ESS (#5582) 2026-06-17 11:53:33 +01:00
Quentin Gliech e1f69b8aa6 Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 (#5719) 2026-06-17 10:02:03 +02:00
Quentin Gliech e76200e7c3 Bump actions/setup-node from 6.3.0 to 6.4.0 (#5718) 2026-06-17 10:01:54 +02:00
Quentin Gliech 22f3ab685d Bump Rust to 1.96.0 
Update `RUSTC_VERSION` in the Dockerfile and the matching clippy toolchain pin
in the CI workflow (kept in sync) from 1.93.0 to the latest stable, 1.96.0.
 2026-06-16 15:38:21 +02:00
dependabot[bot] 579b0c8dd6 Bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 
Bumps [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) from 0.0.9 to 0.0.10.
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases)
- [Commits](https://github.com/mozilla-actions/sccache-action/compare/7d986dd989559c6ecdb630a3fd2557667be217ad...9e7fa8a12102821edf02ca5dbea1acd0f89a2696)

---
updated-dependencies:
- dependency-name: mozilla-actions/sccache-action
  dependency-version: 0.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 17:35:22 +00:00
dependabot[bot] de92e3eaac Bump actions/setup-node from 6.3.0 to 6.4.0 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6.3.0...v6.4.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 17:35:16 +00:00
dependabot[bot] c2ad2b3fbe Bump taiki-e/install-action from 2.77.0 to 2.79.2 
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.77.0 to 2.79.2.
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/install-action/compare/7ea35f098a7369cd23488403f58be9c491a6c55f...213ccc1a076163c093f914550b94feb90fab916d)

---
updated-dependencies:
- dependency-name: taiki-e/install-action
  dependency-version: 2.79.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 17:34:56 +00:00
Quentin Gliech cb043e2cd9 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#5629) 2026-05-25 13:01:00 +02:00
Quentin Gliech f78917ecbf Merge branch 'main' into quenting/pnpm 2026-05-25 11:12:18 +02:00
dependabot[bot] e3c7375ca4 build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-13 14:10:09 +00:00
Andrew Morgan 451761c39c Note that clippy is synced to the Dockerfile Rust version 2026-05-13 12:50:21 +02:00
Andrew Morgan ea9f324e75 Use --override to set default toolchain 
And remove now unnecessary rustup default calls.
 2026-05-13 12:45:49 +02:00
Andrew Morgan 49ad5c79e1 Use Rust 1.93.0 for clippy CI job 
Revert from stable (1.95.0), which introduced new lints. We'll tackle those in a separate PR.
 2026-05-13 10:58:26 +02:00
Quentin Gliech aa34d9ebe5 Specify the node version in a .node-version file 
This should fix the Cloudflare Pages build
 2026-05-12 16:51:15 +02:00
Quentin Gliech 4bd083e81d ci: install pnpm via pnpm/action-setup, move CLI tools to root devDeps 
All workflows that previously ran `npm ci` + a frontend script now install
pnpm via pnpm/action-setup (which honors the `packageManager` field in the
root package.json) and run scripts through `pnpm --filter mas-frontend`.
setup-node gets `cache: "pnpm"` so the pnpm store survives between runs.

The @localazy/cli and semver CLIs used by the release/translation workflows
move from ad-hoc `npm install -g` / `npx --yes` invocations to root
devDependencies, so the version is locked in pnpm-lock.yaml and a single
`pnpm install --frozen-lockfile` makes both available as `pnpm exec`.

misc/build-docs.sh (used by the docs workflow and Cloudflare Pages) is
updated to call `corepack enable` on Cloudflare Pages and to run storybook
through `pnpm --filter mas-frontend exec`.
 2026-05-12 12:51:20 +02:00
Andrew Morgan d1a1ef7341 Install rustfmt component 2026-05-06 16:36:58 +01:00
Andrew Morgan 0ca5040e3d Make nightly the default toolchain for cargo fmt job 2026-05-06 15:58:21 +01:00
Andrew Morgan 647b5a79ac Revert "WIP disable caching in release workflows" 
This reverts commit 72e5ae40b0.

Let's do this in a follow-up PR.
 2026-05-05 20:27:13 +01:00
Andrew Morgan 72e5ae40b0 WIP disable caching in release workflows 2026-05-05 13:16:29 +01:00
Andrew Morgan 34153e03ac Switch rust install GH action to rustup 2026-05-05 12:55:12 +01:00
Andrew Morgan fdf8dde38a Tell actions/checkout not to persist credentials 
Recommended by `zizmor`. See https://docs.zizmor.sh/audits/#artipacked
for an explanation.
 2026-05-05 12:34:58 +01:00
Andrew Morgan b99023662a Pin versions of github actions using zizmor 
To eliminate risk of supply chain attacks.
 2026-05-05 12:32:07 +01:00
dependabot[bot] 671a676dfd build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.15 to 2.0.16 
Bumps [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) from 2.0.15 to 2.0.16.
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](https://github.com/embarkstudios/cargo-deny-action/compare/v2.0.15...v2.0.16)

---
updated-dependencies:
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-10 13:54:03 +00:00
Gaël Goinvic 2955f63553 collect ess logs 2026-03-27 11:11:58 +01:00
Gaël Goinvic 566bb07799 dont pull the chart with pytest-ess 2026-03-27 10:34:27 +01:00
Gaël Goinvic 58bd0dcf0b upload failed logs 2026-03-27 10:34:27 +01:00
Gaël Goinvic c6cb413f2d target the same branch as ess-helm if it is available 2026-03-27 10:34:27 +01:00