Firas Frikha
6d8bd29cef
fix: [OCISDEV-1200] do not share vault resources with users who cannot access them ( #12905 )
...
* fix: [OCISDEV-1200] do not leak vault file names via share notifications
* test: [OCISDEV-1200] fix apiVault scenarios for users without vault mode
2026-09-14 15:49:35 +02:00
Michal Klos
ef24492d15
feat: ci, trivy scan ( #12484 )
...
* feat: ci, trivy scan
* chore: bump github.com/go-acme/lego
2026-06-30 09:35:40 +02:00
Michal Klos
4b99dd8c8f
chore: consolidated bumps and security updates ( #12325 )
...
* chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1
* chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
* chore(deps): bump github.com/russellhaering/goxmldsig from 1.5.0 to 1.6.0
* build(deps): bump fpicalausa/remove-stale-branches from 2.4.0 to 2.6.1
* build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1
* build(deps): bump actions/download-artifact from 4.3.0 to 8.0.1
* build(deps): bump pnpm/action-setup from 5.0.0 to 6.0.8
* chore(deps): bump github.com/shamaton/msgpack/v2 to v2.4.1 and reva to v2.0.0-20260519092700-9da01c6fb954
* chore: regenerate lock fil s and vendor
* chore: changelog
* fix: bump golang.org/x/image to v0.39.0 (GO-2026-4815, GO-2026-4961, GO-2026-4962)
2026-05-19 12:52:58 +00:00
Michal Klos
eaaf8533f4
chore: bump packages, consolidated dependabot ( #12240 )
...
* chore(deps): bump @testing-library/jest-dom in /services/idp
Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom ) from 6.6.4 to 6.9.1.
- [Release notes](https://github.com/testing-library/jest-dom/releases )
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md )
- [Commits](https://github.com/testing-library/jest-dom/compare/v6.6.4...v6.9.1 )
---
updated-dependencies:
- dependency-name: "@testing-library/jest-dom"
dependency-version: 6.9.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1
Bumps [filippo.io/edwards25519](https://github.com/FiloSottile/edwards25519 ) from 1.1.0 to 1.1.1.
- [Commits](https://github.com/FiloSottile/edwards25519/compare/v1.1.0...v1.1.1 )
---
updated-dependencies:
- dependency-name: filippo.io/edwards25519
dependency-version: 1.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Merge branch 'master' into dependabot/go_modules/github.com/russellhaering/goxmldsig-1.6.0
* build(deps): bump alpine from 3.23.3 to 3.23.4
Bumps alpine from 3.23.3 to 3.23.4.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.23.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* build(deps): bump arm64v8/alpine from 3.23.3 to 3.23.4 in /ocis/docker
Bumps arm64v8/alpine from 3.23.3 to 3.23.4.
---
updated-dependencies:
- dependency-name: arm64v8/alpine
dependency-version: 3.23.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* build(deps): bump actions/cache from 5.0.4 to 5.0.5
Bumps [actions/cache](https://github.com/actions/cache ) from 5.0.4 to 5.0.5.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](668228422a...27d5ce7f10 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 5.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* build(deps): bump github.com/go-acme/lego/v4 from 4.25.2 to 4.34.0
Bumps [github.com/go-acme/lego/v4](https://github.com/go-acme/lego ) from 4.25.2 to 4.34.0.
- [Release notes](https://github.com/go-acme/lego/releases )
- [Changelog](https://github.com/go-acme/lego/blob/master/CHANGELOG.md )
- [Commits](https://github.com/go-acme/lego/compare/v4.25.2...v4.34.0 )
---
updated-dependencies:
- dependency-name: github.com/go-acme/lego/v4
dependency-version: 4.34.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* build(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) from 5.17.1 to 5.18.0.
- [Release notes](https://github.com/go-git/go-git/releases )
- [Commits](https://github.com/go-git/go-git/compare/v5.17.1...v5.18.0 )
---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.18.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: regenerate pnpm-lock.yaml
* fix(ci): replace nc-based fakeoffice with Python HTTP server
BusyBox nc -k restarts between connections leaving a gap where the
collaboration service gets ECONNRESET at startup, so healthz never
binds and the 300s wait times out. Python HTTPServer is gap-free.
---------
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-21 15:59:21 +00:00
Roman Perekhod
a917a93524
feat: [full-ci] reva bump
2025-09-04 09:42:53 +02:00
dependabot[bot]
ce692dc851
chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-25 06:52:13 +00:00
dependabot[bot]
9a437ad792
build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.8.4 to 1.9.0.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-03-14 14:47:06 +01:00
dependabot[bot]
c27815bdfb
Bump go.opentelemetry.io/otel/trace from 1.15.1 to 1.16.0
...
Bumps [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go ) from 1.15.1 to 1.16.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.15.1...v1.16.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/trace
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-05-29 07:01:37 +00:00
Michael Barz
afc6ed1e41
switch to go vendoring
2023-04-19 20:24:34 +02:00