yaal/sisyphe
yaal/sisyphe
Watch
5
0
Fork
You've already forked sisyphe
 0
Code Issues 12 Pull requests 1 Projects Releases Packages Activity Actions

chore(deps): update dependency canaille to v0.3.6 #52

Open
renovate wants to merge 1 commit from renovate/canaille-0.x into main
pull from: renovate/canaille-0.x
merge into: yaal:main
Conversation 0 Commits 1 Files changed 2 +8 -18
renovate commented 2026-08-10 06:21:30 +02:00
Member
Copy link

This PR contains the following updates:

Package Change Age Confidence
canaille ==0.2.6 → ==0.3.6 age confidence

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

yaal/canaille (canaille)

v0.3.6

Compare Source

Added
^^^^^

  • Client secret expiration dates are displayed and editable in the client administration page. Clients cannot authenticate with an expired secret anymore.
  • Client secrets can be renewed from the client administration page.
  • canaille jwt registration has a --client-id option to choose the identifier of the client to register, so it is known before the client registers itself.
  • canaille jwt registration and canaille jwt management have a --json option that displays the client identifier and the endpoint to use along with the token.

Fixed
^^^^^

  • :rfc:RFC7592 <7592> registration access tokens were not bound to the client they were issued for.
  • canaille jwt management issued tokens for unregistered clients, and canaille jwt registration for already registered ones, although the endpoints reject both.
  • Client registration and management tokens signed with the none algorithm were accepted, so anyone could forge one.
  • Client registration and management tokens signed with an inactive key are now accepted, so a key rotation does not invalidate the tokens issued before it.
  • DYNAMIC_CLIENT_REGISTRATION_OPEN also disabled the authentication of the :rfc:RFC7592 <7592> client management endpoint, which could then be used without any token. It now only covers the registration of new clients.
  • Dynamically registered clients had their client_secret_expires_at set to 1970-01-01 instead of being left empty.

v0.3.5

Compare Source

Fixed
^^^^^

  • Server signing keys are imported once instead of at every use, which made pages and endpoints reading them slow with large RSA keys.

v0.3.4

Compare Source

Added
^^^^^

  • canaille jwk export command to export the public part of the server signing keys, as JSON metadata or as PEM, for external JWT validators that verify tokens locally.

Fixed
^^^^^

  • move tomlkit dependency from the front to the oidc extra

v0.3.3

Compare Source

Fixed
^^^^^

  • Duplicate scope values in a request are now deduplicated instead of making token/authorization code storage fail (e.g. on the LDAP backend).

v0.3.2

Compare Source

Fixed
^^^^^

  • Unexpected errors on the OIDC endpoints are now logged instead of being silently swallowed, so they are reported to error monitoring such as Sentry.

v0.3.1

Compare Source

Fixed
^^^^^

  • CLI commands now report unknown model names with a clean error instead of crashing.
  • dump/restore round-trip now preserves binary attributes such as user photos.

v0.3.0

Compare Source

Added
^^^^^

  • OIDC RP-Initiated Logout support. :issue:157
  • HTMX page loading indicator displayed during in-flight requests.

v0.2.7

Compare Source

Fixed
^^^^^

  • LDAP default timeout. A default timeout of 0 would fail if server don't instantly respond.

Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • "every 2 weeks on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [canaille](https://gitlab.com/yaal/canaille) | `==0.2.6` → `==0.3.6` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/canaille/0.3.6?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/canaille/0.2.6/0.3.6?slim=true) | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/51) for more information. --- ### Release Notes <details> <summary>yaal/canaille (canaille)</summary> ### [`v0.3.6`](https://gitlab.com/yaal/canaille/blob/HEAD/CHANGES.rst#036---2026-08-04) [Compare Source](https://gitlab.com/yaal/canaille/compare/0.3.5...0.3.6) Added ^^^^^ - Client secret expiration dates are displayed and editable in the client administration page. Clients cannot authenticate with an expired secret anymore. - Client secrets can be renewed from the client administration page. - `canaille jwt registration` has a `--client-id` option to choose the identifier of the client to register, so it is known before the client registers itself. - `canaille jwt registration` and `canaille jwt management` have a `--json` option that displays the client identifier and the endpoint to use along with the token. Fixed ^^^^^ - :rfc:`RFC7592 <7592>` registration access tokens were not bound to the client they were issued for. - `canaille jwt management` issued tokens for unregistered clients, and `canaille jwt registration` for already registered ones, although the endpoints reject both. - Client registration and management tokens signed with the `none` algorithm were accepted, so anyone could forge one. - Client registration and management tokens signed with an inactive key are now accepted, so a key rotation does not invalidate the tokens issued before it. - `DYNAMIC_CLIENT_REGISTRATION_OPEN` also disabled the authentication of the :rfc:`RFC7592 <7592>` client management endpoint, which could then be used without any token. It now only covers the registration of new clients. - Dynamically registered clients had their `client_secret_expires_at` set to 1970-01-01 instead of being left empty. ### [`v0.3.5`](https://gitlab.com/yaal/canaille/blob/HEAD/CHANGES.rst#035---2026-07-30) [Compare Source](https://gitlab.com/yaal/canaille/compare/0.3.4...0.3.5) Fixed ^^^^^ - Server signing keys are imported once instead of at every use, which made pages and endpoints reading them slow with large RSA keys. ### [`v0.3.4`](https://gitlab.com/yaal/canaille/blob/HEAD/CHANGES.rst#034---2026-07-22) [Compare Source](https://gitlab.com/yaal/canaille/compare/0.3.3...0.3.4) Added ^^^^^ - `canaille jwk export` command to export the public part of the server signing keys, as JSON metadata or as PEM, for external JWT validators that verify tokens locally. Fixed ^^^^^ - move tomlkit dependency from the front to the oidc extra ### [`v0.3.3`](https://gitlab.com/yaal/canaille/blob/HEAD/CHANGES.rst#033---2026-07-01) [Compare Source](https://gitlab.com/yaal/canaille/compare/0.3.2...0.3.3) Fixed ^^^^^ - Duplicate scope values in a request are now deduplicated instead of making token/authorization code storage fail (e.g. on the LDAP backend). ### [`v0.3.2`](https://gitlab.com/yaal/canaille/blob/HEAD/CHANGES.rst#032---2026-07-01) [Compare Source](https://gitlab.com/yaal/canaille/compare/0.3.1...0.3.2) Fixed ^^^^^ - Unexpected errors on the OIDC endpoints are now logged instead of being silently swallowed, so they are reported to error monitoring such as Sentry. ### [`v0.3.1`](https://gitlab.com/yaal/canaille/blob/HEAD/CHANGES.rst#031---2026-06-22) [Compare Source](https://gitlab.com/yaal/canaille/compare/0.3.0...0.3.1) Fixed ^^^^^ - CLI commands now report unknown model names with a clean error instead of crashing. - `dump`/`restore` round-trip now preserves binary attributes such as user photos. ### [`v0.3.0`](https://gitlab.com/yaal/canaille/blob/HEAD/CHANGES.rst#030---2026-06-19) [Compare Source](https://gitlab.com/yaal/canaille/compare/0.2.7...0.3.0) Added ^^^^^ - OIDC RP-Initiated Logout support. :issue:`157` - HTMX page loading indicator displayed during in-flight requests. ### [`v0.2.7`](https://gitlab.com/yaal/canaille/blob/HEAD/CHANGES.rst#027---2026-04-14) [Compare Source](https://gitlab.com/yaal/canaille/compare/0.2.6...0.2.7) Fixed ^^^^^ - LDAP default timeout. A default timeout of 0 would fail if server don't instantly respond. </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Paris) - Branch creation - "every 2 weeks on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMS4wIiwidXBkYXRlZEluVmVyIjoiNDQuMzkuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
chore(deps): update dependency canaille to v0.3.6
All checks were successful
CI / lint (pull_request) Successful in 6m57s
Details
CI / lint (push) Successful in 8m6s
Details
CI / python-tests (pull_request) Successful in 9m13s
Details
CI / python-tests (push) Successful in 10m20s
Details
103268315e
All checks were successful
CI / lint (pull_request) Successful in 6m57s
Details
CI / lint (push) Successful in 8m6s
Details
CI / python-tests (pull_request) Successful in 9m13s
Details
CI / python-tests (push) Successful in 10m20s
Details
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/canaille-0.x:renovate/canaille-0.x
git switch renovate/canaille-0.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/canaille-0.x
git switch renovate/canaille-0.x
git rebase main
git switch main
git merge --ff-only renovate/canaille-0.x
git switch renovate/canaille-0.x
git rebase main
git switch main
git merge --no-ff renovate/canaille-0.x
git switch main
git merge --squash renovate/canaille-0.x
git switch main
git merge --ff-only renovate/canaille-0.x
git switch main
git merge renovate/canaille-0.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
yaal/sisyphe!52
No description provided.