Commit Graph

298 Commits

Author SHA1 Message Date
Ralf Haferkamp
042ec41edd Bump reva to v2.19.5
For https://github.com/cs3org/reva/pull/4634
2024-04-17 12:46:36 +02:00
Florian Schade
f04be9f870 enhancement: same site strict cookies (#8716)
To enhance the security of our application and prevent Cross-Site Request Forgery (CSRF) attacks, we have updated the
SameSite attribute of the build in Identity Provider (IDP) cookies to Strict.
2024-04-10 11:42:48 +02:00
Jörn Friedrich Dreyer
355f486ca1 bump reva to 2.19.4
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2024-04-05 12:09:54 +02:00
Christian Richter
0e680f31e4 bump reva
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-04-04 16:46:04 +02:00
Ralf Haferkamp
a0c1be452a Move reva to stable-2.19 branch
stable-5.0 does no longer use edge
2024-03-12 17:54:14 +01:00
Roman Perekhod
267ed92cab [full-ci] [reva bump] fix an error when lock/unlock a file
(cherry picked from commit 6fb545b3c1)
2024-03-12 16:49:33 +01:00
Roman Perekhod
ab43efd3c4 [full-ci] disallow to share the personal drive via graph
(cherry picked from commit d7b66876a8)
2024-03-12 16:46:10 +01:00
dependabot[bot]
f770a381fa build(deps): bump github.com/prometheus/client_golang
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.18.0 to 1.19.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.19.0/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.18.0...v1.19.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit af228c847e)
2024-03-12 16:34:52 +01:00
Florian Schade
be105fd1c6 chore: bump go to 1.22 2024-03-06 14:11:29 +01:00
Roman Perekhod
9dee46c44e Backport/5.0/revaV2.19.1 2024-02-29 12:22:56 +01:00
dependabot[bot]
c13aefed84 build(deps): bump google.golang.org/grpc from 1.61.1 to 1.62.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.61.1 to 1.62.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.61.1...v1.62.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-22 17:13:03 +01:00
Christian Richter
c637069852 bump reva
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-02-21 16:44:28 +01:00
Jörn Friedrich Dreyer
b52e466935 bump reva for unnecessary-grant-exists-check (#8502)
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2024-02-21 16:29:16 +01:00
Ralf Haferkamp
b6fea0faed [full-ci] fix(sharing-ng): align sharedWithMe driveItem IDs with PROPFIND response (#8467)
* Bump reva

Fixes: #8080

* fix(sharing-ng): align sharedWithMe driveItem IDs

The IDs of the driveItems returned by the 'sharedWithMe' endpoint
should match the ids returned by the webdav PROPFIND response on
the share jail.

Fixes: #8420
2024-02-21 13:25:49 +01:00
Jörn Friedrich Dreyer
5ed57cc09a Bump reva deps (#8412)
* bump dependencies

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

* bump reva and add config options

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>

---------

Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
2024-02-21 10:20:36 +01:00
dependabot[bot]
d2d4fcd43b build(deps): bump github.com/libregraph/lico from 0.61.1 to 0.61.2
Bumps [github.com/libregraph/lico](https://github.com/libregraph/lico) from 0.61.1 to 0.61.2.
- [Changelog](https://github.com/libregraph/lico/blob/master/CHANGELOG.md)
- [Commits](https://github.com/libregraph/lico/compare/v0.61.1...v0.61.2)

---
updated-dependencies:
- dependency-name: github.com/libregraph/lico
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-21 09:09:23 +01:00
dependabot[bot]
b480cc517e build(deps): bump github.com/go-chi/chi/v5 from 5.0.11 to 5.0.12
Bumps [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) from 5.0.11 to 5.0.12.
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-chi/chi/compare/v5.0.11...v5.0.12)

---
updated-dependencies:
- dependency-name: github.com/go-chi/chi/v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-21 09:08:16 +01:00
dependabot[bot]
49b0ae702b build(deps): bump github.com/tidwall/gjson from 1.17.0 to 1.17.1
Bumps [github.com/tidwall/gjson](https://github.com/tidwall/gjson) from 1.17.0 to 1.17.1.
- [Commits](https://github.com/tidwall/gjson/compare/v1.17.0...v1.17.1)

---
updated-dependencies:
- dependency-name: github.com/tidwall/gjson
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-20 09:36:14 +01:00
dependabot[bot]
1d3c0dc772 build(deps): bump github.com/jellydator/ttlcache/v3 from 3.1.1 to 3.2.0
Bumps [github.com/jellydator/ttlcache/v3](https://github.com/jellydator/ttlcache) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/jellydator/ttlcache/releases)
- [Commits](https://github.com/jellydator/ttlcache/compare/v3.1.1...v3.2.0)

---
updated-dependencies:
- dependency-name: github.com/jellydator/ttlcache/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-20 06:17:44 +00:00
dependabot[bot]
e97983dbd9 build(deps): bump github.com/nats-io/nats.go from 1.32.0 to 1.33.1
Bumps [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) from 1.32.0 to 1.33.1.
- [Release notes](https://github.com/nats-io/nats.go/releases)
- [Commits](https://github.com/nats-io/nats.go/compare/v1.32.0...v1.33.1)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats.go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-19 06:21:47 +00:00
dependabot[bot]
f746f4d1c1 build(deps): bump github.com/go-playground/validator/v10
Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) from 10.17.0 to 10.18.0.
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](https://github.com/go-playground/validator/compare/v10.17.0...v10.18.0)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-12 15:31:34 +01:00
Roman Perekhod
94e86eb8de fix an error when move using destination id 2024-02-08 12:01:55 +01:00
kobergj
fceff432c8 Merge pull request #8379 from fschade/multi-user-sse-event
[full-ci] enhancement: allow sending multiple userIDs in one SSE event
2024-02-07 11:12:18 +01:00
dependabot[bot]
892660433f build(deps): bump github.com/nats-io/nats-server/v2
Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.10.9 to 2.10.10.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/.goreleaser.yml)
- [Commits](https://github.com/nats-io/nats-server/compare/v2.10.9...v2.10.10)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-07 10:48:49 +01:00
Florian Schade
c851490399 chore: bump reva 2024-02-07 09:43:38 +01:00
Christian Richter
41b33d53f2 vendor reva
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-02-06 15:48:22 +01:00
dependabot[bot]
42ade74c71 build(deps): bump github.com/rs/zerolog from 1.31.0 to 1.32.0
Bumps [github.com/rs/zerolog](https://github.com/rs/zerolog) from 1.31.0 to 1.32.0.
- [Release notes](https://github.com/rs/zerolog/releases)
- [Commits](https://github.com/rs/zerolog/compare/v1.31.0...v1.32.0)

---
updated-dependencies:
- dependency-name: github.com/rs/zerolog
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-06 12:10:21 +01:00
Christian Richter
13b01f0e0c bump reva
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-02-05 11:01:07 +01:00
Christian Richter
82e6e742ff Bump reva
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-02-05 11:01:06 +01:00
dependabot[bot]
ea1543bc49 build(deps): bump github.com/Nerzal/gocloak/v13 from 13.8.0 to 13.9.0
Bumps [github.com/Nerzal/gocloak/v13](https://github.com/Nerzal/gocloak) from 13.8.0 to 13.9.0.
- [Release notes](https://github.com/Nerzal/gocloak/releases)
- [Commits](https://github.com/Nerzal/gocloak/compare/v13.8.0...v13.9.0)

---
updated-dependencies:
- dependency-name: github.com/Nerzal/gocloak/v13
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-02-02 09:22:22 +01:00
Ralf Haferkamp
a44cf4a6ea bump github.com/owncloud/libre-graph-api-go@main 2024-02-01 15:38:55 +01:00
dependabot[bot]
024e02be95 build(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2
Bumps [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) from 2.19.0 to 2.19.1.
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml)
- [Commits](https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.19.0...v2.19.1)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-31 18:13:00 +01:00
dependabot[bot]
b5e441c522 build(deps): bump github.com/CiscoM31/godata from 1.0.9 to 1.0.10
Bumps [github.com/CiscoM31/godata](https://github.com/CiscoM31/godata) from 1.0.9 to 1.0.10.
- [Release notes](https://github.com/CiscoM31/godata/releases)
- [Commits](https://github.com/CiscoM31/godata/compare/v1.0.9...v1.0.10)

---
updated-dependencies:
- dependency-name: github.com/CiscoM31/godata
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-31 18:11:56 +01:00
dependabot[bot]
fcd82619b3 build(deps): bump github.com/onsi/gomega from 1.31.0 to 1.31.1
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.31.0 to 1.31.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.31.0...v1.31.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-30 09:11:16 +01:00
dependabot[bot]
690d44cfb0 build(deps): bump github.com/open-policy-agent/opa from 0.60.0 to 0.61.0
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 0.60.0 to 0.61.0.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.60.0...v0.61.0)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-30 08:32:40 +01:00
Christian Richter
2269d2cf27 change default for MaxConcurrency
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-01-29 14:22:26 +01:00
dependabot[bot]
8ed9b1a727 build(deps): bump github.com/KimMachineGun/automemlimit
Bumps [github.com/KimMachineGun/automemlimit](https://github.com/KimMachineGun/automemlimit) from 0.4.0 to 0.5.0.
- [Commits](https://github.com/KimMachineGun/automemlimit/compare/v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/KimMachineGun/automemlimit
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-29 12:30:34 +01:00
jkoberg
b7635f59ee bump reva
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-01-26 15:22:48 +01:00
Florian Schade
6cf5d8fb13 chore: bump icap client which fixes defer error handling (#8234)
* chore: bump icap client which fixes defer error handling

* chore: bump icap-client
2024-01-25 12:26:21 +01:00
André Duffeck
b5ed06dad6 Bump reva 2024-01-24 10:49:45 +01:00
Roman Perekhod
8dc7420b04 [full-ci][bump reva] fix race in a publicshare manager 2024-01-23 17:20:38 +01:00
Christian Richter
6515de1a90 bump reva
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-01-22 21:17:03 +01:00
dependabot[bot]
6e1f3b9163 build(deps): bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.14.0 to 2.15.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.14.0...v2.15.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-22 11:08:51 +01:00
Andre Duffeck
0ba030949e Merge pull request #8207 from aduffeck/bump-reva-bde86a
[full-ci] Bump reva
2024-01-22 10:27:34 +01:00
dependabot[bot]
fafe08e9b0 build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.0
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.30.0 to 1.31.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.30.0...v1.31.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-18 09:41:39 +01:00
dependabot[bot]
575af0f858 build(deps): bump go.opentelemetry.io/otel/sdk from 1.21.0 to 1.22.0
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.21.0 to 1.22.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.21.0...v1.22.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-18 09:02:16 +01:00
dependabot[bot]
0c2a5c6201 build(deps): bump github.com/go-playground/validator/v10
Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) from 10.16.0 to 10.17.0.
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](https://github.com/go-playground/validator/compare/v10.16.0...v10.17.0)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-17 10:20:07 +01:00
dependabot[bot]
8d7656207e build(deps): bump github.com/onsi/ginkgo/v2 from 2.13.2 to 2.14.0
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.13.2 to 2.14.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.13.2...v2.14.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-17 09:42:40 +01:00
Florian Schade
842baaf10f fix: bump libre-graph-api-go 2024-01-16 15:09:27 +01:00
dependabot[bot]
fce4d19e3f build(deps): bump github.com/nats-io/nats.go from 1.31.0 to 1.32.0
Bumps [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) from 1.31.0 to 1.32.0.
- [Release notes](https://github.com/nats-io/nats.go/releases)
- [Commits](https://github.com/nats-io/nats.go/compare/v1.31.0...v1.32.0)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats.go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-16 14:38:55 +01:00