dandri/matrix-authentication-service
1
0 Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-10-23 06:32:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,624 Commits 89 Branches 115 Tags
fc94b550dbdd7e0d367ee8225c7c5d8885aefaee
Commit Graph
7624 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Quentin GliechandErik Johnston fc94b550db Use Utf8Path::with_added_extension for constructing the temporary socket path 
Co-Authored-By: Erik Johnston <erikj@element.io>
 2026-07-28 13:21:34 +02:00
Quentin Gliech cd78f82f9c Replace Unix socket on startup & allow setting permissions 
Fixes #5572
Fixes #2424

This makes it so that MAS binds on a temporary path on startup, sets
permissions and then moves it to the configured path. This means that we don't
error out anymore if there is a stale socket file, and that it is safe to
rollout a new process without killing the old one first, without breaking
connections.
 2026-07-13 13:46:47 +02:00
matrixbot 55f9c87605 Automatic merge back to main (#5857) 2026-07-09 12:54:50 +02:00
github-actions[bot] 20a1f660c9 1.20.0 v1.20.0 2026-07-09 10:27:52 +00:00
matrixbot 6c7bf21b23 Translations updates for v1.20 (#5855) 2026-07-09 12:24:14 +02:00
github-actions[bot] 4d621624ac Translations updates 2026-07-09 09:53:24 +00:00
Quentin Gliech b68a317b04 Backport #5849: Update crossbeam-epoch to 0.9.20 to fix RUSTSEC-2026-0204 (#5856) 2026-07-09 11:51:39 +02:00
Quentin Gliech e3568cd024 Update crossbeam-epoch to 0.9.20 to fix RUSTSEC-2026-0204 2026-07-09 11:44:17 +02:00
Quentin Gliech 9360721451 Don't show client URI on consent screen for Device Authorization Grant (#5602) 2026-07-08 15:21:16 +02:00
Quentin Gliech 02eaf65b79 Merge origin/main into device-consent-uri (sync 2026-07-08) 2026-07-08 14:55:53 +02:00
Quentin Gliech e855b1c373 build(deps): bump convert_case from 0.9.0 to 0.11.0 (#5854) 2026-07-08 14:07:59 +02:00
Quentin Gliech 9242e74cea build(deps): bump psl from 2.1.162 to 2.1.214 (#5853) 2026-07-08 14:07:13 +02:00
Quentin Gliech 6bed570ec4 build(deps): bump uuid from 1.18.1 to 1.23.3 (#5852) 2026-07-08 14:06:49 +02:00
dependabot[bot] ee13fee092 build(deps): bump convert_case from 0.9.0 to 0.11.0 
Bumps [convert_case](https://github.com/rutrum/convert-case) from 0.9.0 to 0.11.0.
- [Commits](https://github.com/rutrum/convert-case/commits)

---
updated-dependencies:
- dependency-name: convert_case
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 11:40:32 +00:00
dependabot[bot] 9c0e3e5405 build(deps): bump psl from 2.1.162 to 2.1.214 
Bumps [psl](https://github.com/addr-rs/psl) from 2.1.162 to 2.1.214.
- [Release notes](https://github.com/addr-rs/psl/releases)
- [Commits](https://github.com/addr-rs/psl/compare/v2.1.162...v2.1.214)

---
updated-dependencies:
- dependency-name: psl
  dependency-version: 2.1.214
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 11:39:26 +00:00
dependabot[bot] bfe97160a8 build(deps): bump uuid from 1.18.1 to 1.23.3 
Bumps [uuid](https://github.com/uuid-rs/uuid) from 1.18.1 to 1.23.3.
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.18.1...v1.23.3)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 1.23.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 11:39:02 +00:00
Quentin Gliech fc317bd662 build(deps): bump hyper from 1.8.1 to 1.10.1 (#5846) 2026-07-08 13:26:32 +02:00
Quentin Gliech 18c35fcaa0 build(deps): bump tokio from 1.48.0 to 1.50.0 (#5844) 2026-07-08 13:25:49 +02:00
Quentin Gliech 623558913e build(deps): bump pest_derive from 2.8.3 to 2.8.6 (#5847) 2026-07-08 13:25:02 +02:00
Quentin Gliech 0fbf1f5185 build(deps): bump tower from 0.5.2 to 0.5.3 (#5848) 2026-07-08 13:23:47 +02:00
dependabot[bot] f4e3b645db build(deps): bump tokio from 1.48.0 to 1.50.0 
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.48.0 to 1.50.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.48.0...tokio-1.50.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 10:58:15 +00:00
dependabot[bot] 2538f25610 build(deps): bump hyper from 1.8.1 to 1.10.1 
Bumps [hyper](https://github.com/hyperium/hyper) from 1.8.1 to 1.10.1.
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hyperium/hyper/compare/v1.8.1...v1.10.1)

---
updated-dependencies:
- dependency-name: hyper
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 10:57:57 +00:00
dependabot[bot] 62b8454163 build(deps): bump pest_derive from 2.8.3 to 2.8.6 
Bumps [pest_derive](https://github.com/pest-parser/pest) from 2.8.3 to 2.8.6.
- [Release notes](https://github.com/pest-parser/pest/releases)
- [Commits](https://github.com/pest-parser/pest/compare/v2.8.3...v2.8.6)

---
updated-dependencies:
- dependency-name: pest_derive
  dependency-version: 2.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 10:57:46 +00:00
dependabot[bot] d0b359b7e3 build(deps): bump tower from 0.5.2 to 0.5.3 
Bumps [tower](https://github.com/tower-rs/tower) from 0.5.2 to 0.5.3.
- [Release notes](https://github.com/tower-rs/tower/releases)
- [Commits](https://github.com/tower-rs/tower/compare/tower-0.5.2...tower-0.5.3)

---
updated-dependencies:
- dependency-name: tower
  dependency-version: 0.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 10:57:41 +00:00
Quentin Gliech fb804e74f1 Update crossbeam-epoch to 0.9.20 to fix RUSTSEC-2026-0204 (#5849) 2026-07-08 12:18:32 +02:00
Quentin Gliech decbdb6043 Update crossbeam-epoch to 0.9.20 to fix RUSTSEC-2026-0204 2026-07-08 11:50:38 +02:00
Quentin Gliech 9a0bc0d7f2 Bump all frontend dependencies (#5842) 2026-07-06 11:17:49 +02:00
Quentin Gliech 368a0d9eca Force a single copy of @radix-ui/react-dialog via pnpm override 
Since the frontend dependency bump, the lockfile shipped two copies of
@radix-ui/react-dialog: 1.1.18 for the app and 1.1.15 resolved for vaul.
On mobile, Dialog.tsx renders vaul's Drawer.Root together with the
app's Dialog.Trigger, and the two copies have distinct React contexts,
throwing "DialogTrigger must be used within Dialog" on the account page.

Add a pnpm override pinning the package to a single version so vaul
reuses the app's copy.
 2026-07-06 10:49:27 +02:00
Quentin Gliech da042e9404 Bump all frontend dependencies 2026-07-06 10:49:27 +02:00
Quentin Gliech bb9a43c983 build(deps): bump minijinja from 2.15.1 to 2.21.0 (#5839) 2026-07-03 17:36:07 +02:00
Quentin Gliech cb46044f0d Adapt to minijinja 2.21, bump minijinja-contrib in lockstep 
The 2.21 AST grew a dedicated Compare node for chained comparisons,
which the i18n scanner needs to walk. Also raise the workspace
requirements from 2.15.1/2.12.0 to 2.21.0.
 2026-07-03 17:09:37 +02:00
Quentin Gliech 24ff9adaab build(deps): bump url from 2.5.7 to 2.5.8 (#5837) 2026-07-03 17:08:24 +02:00
Quentin Gliech 94f1b96e30 build(deps): bump zeroize from 1.8.2 to 1.9.0 (#5838) 2026-07-03 17:03:53 +02:00
dependabot[bot] fa9f6266bf build(deps): bump minijinja from 2.15.1 to 2.21.0 
Bumps [minijinja](https://github.com/mitsuhiko/minijinja) from 2.15.1 to 2.21.0.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mitsuhiko/minijinja/compare/minijinja-go/v2.15.1...minijinja-go/v2.21.0)

---
updated-dependencies:
- dependency-name: minijinja
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 14:42:39 +00:00
dependabot[bot] e4508cf8a5 build(deps): bump zeroize from 1.8.2 to 1.9.0 
Bumps [zeroize](https://github.com/RustCrypto/utils) from 1.8.2 to 1.9.0.
- [Commits](https://github.com/RustCrypto/utils/compare/zeroize-v1.8.2...zeroize-v1.9.0)

---
updated-dependencies:
- dependency-name: zeroize
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 14:42:15 +00:00
dependabot[bot] 39cd81a041 build(deps): bump url from 2.5.7 to 2.5.8 
Bumps [url](https://github.com/servo/rust-url) from 2.5.7 to 2.5.8.
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](https://github.com/servo/rust-url/compare/v2.5.7...v2.5.8)

---
updated-dependencies:
- dependency-name: url
  dependency-version: 2.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 14:41:52 +00:00
Quentin Gliech c9581648be build(deps): bump ruma-common from 0.16.0 to 0.19.0 (#5832) 2026-07-03 16:36:59 +02:00
Quentin Gliech a129259e33 Merge main to resolve the lockfile conflict 2026-07-03 16:06:25 +02:00
Quentin Gliech 14006abf7a build(deps): bump thiserror from 2.0.17 to 2.0.18 (#5833) 2026-07-03 16:04:07 +02:00
Quentin Gliech 4632fbba7f build(deps): bump zxcvbn from 3.1.0 to 3.1.1 (#5834) 2026-07-03 16:03:55 +02:00
Quentin Gliech a18bf1f604 Allow the duplicates introduced by the toml 1.x stack 
ruma-macros 0.19 moved to toml 1.x, which pulls new versions of
serde_html_form, toml_datetime and winnow while axum-extra, toml_edit
and cron still use the old ones.
 2026-07-03 15:49:54 +02:00
Quentin Gliech 527e29e3f4 build(deps): bump pin-project-lite from 0.2.16 to 0.2.17 (#5835) 2026-07-03 15:15:05 +02:00
Quentin Gliech 75ab4a69e8 build(deps): bump rustc-hash from 2.1.1 to 2.1.2 (#5836) 2026-07-03 15:14:47 +02:00
Quentin Gliech 3819d07c73 Drop the stale itertools 0.13 cargo-deny skip 
zxcvbn 3.1.1 moved to itertools 0.14, joining prost-derive and
wasmtime-internal-cranelift on the remaining duplicate.
 2026-07-03 14:49:43 +02:00
dependabot[bot] df7fec6df1 build(deps): bump rustc-hash from 2.1.1 to 2.1.2 
Bumps [rustc-hash](https://github.com/rust-lang/rustc-hash) from 2.1.1 to 2.1.2.
- [Changelog](https://github.com/rust-lang/rustc-hash/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/rustc-hash/compare/v2.1.1...v2.1.2)

---
updated-dependencies:
- dependency-name: rustc-hash
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:46:13 +00:00
dependabot[bot] 6309a69bd0 build(deps): bump pin-project-lite from 0.2.16 to 0.2.17 
Bumps [pin-project-lite](https://github.com/taiki-e/pin-project-lite) from 0.2.16 to 0.2.17.
- [Release notes](https://github.com/taiki-e/pin-project-lite/releases)
- [Changelog](https://github.com/taiki-e/pin-project-lite/blob/main/CHANGELOG.md)
- [Commits](https://github.com/taiki-e/pin-project-lite/compare/v0.2.16...v0.2.17)

---
updated-dependencies:
- dependency-name: pin-project-lite
  dependency-version: 0.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:45:50 +00:00
dependabot[bot] 0cc5ca4b4d build(deps): bump zxcvbn from 3.1.0 to 3.1.1 
Bumps [zxcvbn](https://github.com/shssoichiro/zxcvbn-rs) from 3.1.0 to 3.1.1.
- [Changelog](https://github.com/shssoichiro/zxcvbn-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/shssoichiro/zxcvbn-rs/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: zxcvbn
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:45:28 +00:00
dependabot[bot] 4a9d6cfcb9 build(deps): bump thiserror from 2.0.17 to 2.0.18 
Bumps [thiserror](https://github.com/dtolnay/thiserror) from 2.0.17 to 2.0.18.
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](https://github.com/dtolnay/thiserror/compare/2.0.17...2.0.18)

---
updated-dependencies:
- dependency-name: thiserror
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:45:05 +00:00
dependabot[bot] 61deee9e4c build(deps): bump ruma-common from 0.16.0 to 0.19.0 
Bumps [ruma-common](https://github.com/ruma/ruma) from 0.16.0 to 0.19.0.
- [Release notes](https://github.com/ruma/ruma/releases)
- [Commits](https://github.com/ruma/ruma/compare/ruma-common-0.16.0...ruma-common-0.19.0)

---
updated-dependencies:
- dependency-name: ruma-common
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-03 12:44:42 +00:00
Quentin Gliech e0b408eb0c build(deps): bump v_htmlescape from 0.15.8 to 0.17.0 (#5830) 2026-07-03 14:41:44 +02:00