Commit Graph

359 Commits

Author SHA1 Message Date
jkoberg
069bd9d688 feat(reva): bump reva
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-05-10 15:42:00 +02:00
Ralf Haferkamp
62dbf737c7 Bump lico to latest release 2024-05-08 17:57:35 +02:00
Ralf Haferkamp
3be286a2a3 Bump go-jose an update to new location
It's now maintained in github.com/go-jose/go-jose. Bumping to
latest backwards compatible release. (v4 will require some code changes)
2024-05-08 17:52:17 +02:00
dependabot[bot]
41af5f7168 build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.17.2 to 2.17.3.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.17.2...v2.17.3)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-05-08 09:55:22 +02:00
André Duffeck
5b2a8f8cad Bump reva 2024-05-06 08:39:27 +02:00
kobergj
b1418fea51 Merge pull request #9041 from kobergj/ImproveCleanCommand
[full-ci] Assimilate clean command into sessions
2024-05-03 10:57:41 +02:00
jkoberg
4b6d1f66b0 feat(reva): bump reva
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-05-02 12:29:54 +02:00
Thomas Müller
4f7480d322 feat: drop github.com/a8m/envsubst in favor of gookit/config (#9028) 2024-04-30 18:05:58 +02:00
dependabot[bot]
e1a259e2aa build(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1 (#9030)
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.33.0 to 1.33.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.33.0...v1.33.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-30 17:36:58 +02:00
dependabot[bot]
1fad9acf1a build(deps): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.17.1 to 2.17.2.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.17.1...v2.17.2)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-30 09:59:04 +02:00
dependabot[bot]
35d736a5a5 build(deps): bump github.com/go-playground/validator/v10
Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) from 10.19.0 to 10.20.0.
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](https://github.com/go-playground/validator/compare/v10.19.0...v10.20.0)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-30 09:54:35 +02:00
Michael Barz
83dd7d6364 Merge pull request #9009 from owncloud/dependabot/go_modules/github.com/riandyrn/otelchi-0.8.0
build(deps): bump github.com/riandyrn/otelchi from 0.7.0 to 0.8.0
2024-04-29 19:18:29 +02:00
Jannik Stehle
57b63a3318 Merge pull request #8954 from fschade/graph-permission-c-time
enhancement: inject the creation time into sharing permissions
2024-04-29 17:43:22 +02:00
Ralf Haferkamp
5a13179a72 bump reva to latest edge
Fixes: #8957
2024-04-29 15:54:13 +02:00
dependabot[bot]
2088e03e25 build(deps): bump github.com/riandyrn/otelchi from 0.7.0 to 0.8.0
Bumps [github.com/riandyrn/otelchi](https://github.com/riandyrn/otelchi) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/riandyrn/otelchi/releases)
- [Changelog](https://github.com/riandyrn/otelchi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/riandyrn/otelchi/compare/v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/riandyrn/otelchi
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-29 13:43:55 +00:00
dependabot[bot]
2c0c16ee04 build(deps): bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2
Bumps [github.com/urfave/cli/v2](https://github.com/urfave/cli) from 2.27.1 to 2.27.2.
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/urfave/cli/compare/v2.27.1...v2.27.2)

---
updated-dependencies:
- dependency-name: github.com/urfave/cli/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-29 10:34:53 +02:00
dependabot[bot]
2623d6cc75 build(deps): bump github.com/open-policy-agent/opa from 0.62.1 to 0.64.1
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 0.62.1 to 0.64.1.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.62.1...v0.64.1)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-29 09:58:00 +02:00
dependabot[bot]
6881b63b12 build(deps): bump github.com/google/go-tika from 0.3.0 to 0.3.1
Bumps [github.com/google/go-tika](https://github.com/google/go-tika) from 0.3.0 to 0.3.1.
- [Release notes](https://github.com/google/go-tika/releases)
- [Commits](https://github.com/google/go-tika/compare/v0.3.0...v0.3.1)

---
updated-dependencies:
- dependency-name: github.com/google/go-tika
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-26 13:54:11 +00:00
Thomas Müller
a53a7cf8b5 fix: replace github.com/disintegration/imaging with github.com/kovidgoyal/imaging 2024-04-26 11:36:49 +02:00
jkoberg
6c8b7a6951 feat(reva): bump reva
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-04-26 09:18:43 +02:00
Thomas Müller
bdbba929d0 feat: add CSP and other security related headers in the oCIS proxy service (#8777)
* feat: add CSP and other security related headers in the oCIS proxy service

* fix: consolidate security related headers - drop middleware.Secure

* fix: use github.com/DeepDiver1975/secure

* fix: acceptance tests

* feat: support env var replacements in csp.yaml
2024-04-26 09:10:35 +02:00
dependabot[bot]
d3415a8c92 build(deps): bump github.com/KimMachineGun/automemlimit (#8971)
Bumps [github.com/KimMachineGun/automemlimit](https://github.com/KimMachineGun/automemlimit) from 0.5.0 to 0.6.0.
- [Release notes](https://github.com/KimMachineGun/automemlimit/releases)
- [Commits](https://github.com/KimMachineGun/automemlimit/compare/v0.5.0...v0.6.0)

---
updated-dependencies:
- dependency-name: github.com/KimMachineGun/automemlimit
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-26 09:00:40 +02:00
Florian Schade
f34bb510b0 enhancement: inject the creation time into sharing permissions 2024-04-25 11:54:54 +02:00
jkoberg
0e5b65f27f feat(nats-js-kv): bump nats-js-kv
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-04-24 16:28:05 +02:00
dependabot[bot]
50ad489d30 build(deps): bump github.com/riandyrn/otelchi from 0.5.1 to 0.7.0
Bumps [github.com/riandyrn/otelchi](https://github.com/riandyrn/otelchi) from 0.5.1 to 0.7.0.
- [Release notes](https://github.com/riandyrn/otelchi/releases)
- [Changelog](https://github.com/riandyrn/otelchi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/riandyrn/otelchi/compare/v0.5.1...v0.7.0)

---
updated-dependencies:
- dependency-name: github.com/riandyrn/otelchi
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-24 09:21:50 +02:00
Jannik Stehle
4948edc2b3 chore: bump reva 2024-04-23 16:15:32 +02:00
dependabot[bot]
628b4bdbea build(deps): bump github.com/nats-io/nats-server/v2
Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.10.12 to 2.10.14.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/.goreleaser.yml)
- [Commits](https://github.com/nats-io/nats-server/compare/v2.10.12...v2.10.14)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-23 09:30:37 +02:00
dependabot[bot]
38699ca1e1 build(deps): bump github.com/libregraph/idm
Bumps [github.com/libregraph/idm](https://github.com/libregraph/idm) from 0.4.1-0.20240410123343-a51b459380d0 to 0.5.0.
- [Changelog](https://github.com/libregraph/idm/blob/master/CHANGELOG.md)
- [Commits](https://github.com/libregraph/idm/commits/v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/libregraph/idm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-23 09:29:42 +02:00
Ralf Haferkamp
1e5db86900 Bump reva to get https://github.com/cs3org/reva/pull/4652
Fixes: #8819
2024-04-22 17:23:43 +02:00
dependabot[bot]
1f0b853a8d build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) from 1.24.0 to 1.25.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.24.0...v1.25.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-22 09:06:15 +02:00
dependabot[bot]
1cf18ffacf build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.32.0 to 1.33.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.32.0...v1.33.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-22 08:59:00 +02:00
jkoberg
b6d177b1a6 feat(reva): bump reva
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-04-19 16:01:31 +02:00
dependabot[bot]
2de9f15828 build(deps): bump github.com/leonelquinteros/gotext
Bumps [github.com/leonelquinteros/gotext](https://github.com/leonelquinteros/gotext) from 1.5.3-0.20230317130943-71a59c05b2c1 to 1.6.0.
- [Release notes](https://github.com/leonelquinteros/gotext/releases)
- [Commits](https://github.com/leonelquinteros/gotext/commits/v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/leonelquinteros/gotext
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-17 15:30:16 +02:00
Ralf Haferkamp
7ff0771e4d bump reva to latest edge
to get https://github.com/cs3org/reva/pull/4632
2024-04-16 16:19:51 +02:00
jkoberg
ea20298046 feat(reva): bump reva
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-04-16 12:01:55 +02:00
Ralf Haferkamp
8c203a144f bump libregraph/idm to lastest master 2024-04-10 15:21:34 +02:00
dependabot[bot]
2b076ca79d build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.6 to 3.4.7
Bumps [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap) from 3.4.6 to 3.4.7.
- [Release notes](https://github.com/go-ldap/ldap/releases)
- [Commits](https://github.com/go-ldap/ldap/compare/v3.4.6...v3.4.7)

---
updated-dependencies:
- dependency-name: github.com/go-ldap/ldap/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-10 15:21:34 +02:00
André Duffeck
dfd11debbc Bump reva 2024-04-08 10:42:25 +02:00
dependabot[bot]
a945a462b4 build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.1 to 1.63.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.62.1...v1.63.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 08:31:31 +02:00
Jörn Friedrich Dreyer
8c56103f04 Merge pull request #8762 from kobergj/RemoveResharing
[full-ci] Remove Resharing
2024-04-05 11:42:17 +02:00
dependabot[bot]
de4dc2723b build(deps): bump github.com/onsi/gomega from 1.31.1 to 1.32.0
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.31.1 to 1.32.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/gomega/compare/v1.31.1...v1.32.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-04 17:28:11 +02:00
jkoberg
b06767a020 bump reva
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-04-04 17:25:40 +02:00
dependabot[bot]
68e4e81870 build(deps): bump github.com/blevesearch/bleve/v2 from 2.3.10 to 2.4.0
Bumps [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) from 2.3.10 to 2.4.0.
- [Release notes](https://github.com/blevesearch/bleve/releases)
- [Commits](https://github.com/blevesearch/bleve/compare/v2.3.10...v2.4.0)

---
updated-dependencies:
- dependency-name: github.com/blevesearch/bleve/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-03 16:05:32 +02:00
Christian Richter
c752e1b58a bump reva
Signed-off-by: Christian Richter <crichter@owncloud.com>
2024-03-28 11:47:33 +01:00
Florian Schade
6840de574a enhancement: same site strict cookies (#8716)
To enhance the security of our application and prevent Cross-Site Request Forgery (CSRF) attacks, we have updated the
SameSite attribute of the build in Identity Provider (IDP) cookies to Strict.
2024-03-25 10:16:10 +01:00
dependabot[bot]
65f77c2aa0 build(deps): bump github.com/go-playground/validator/v10
Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) from 10.18.0 to 10.19.0.
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](https://github.com/go-playground/validator/compare/v10.18.0...v10.19.0)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 09:32:59 +01:00
jkoberg
0670832539 bump reva
Signed-off-by: jkoberg <jkoberg@owncloud.com>
2024-03-22 15:15:55 +01:00
dependabot[bot]
d14a8c0994 build(deps): bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.0
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.15.0 to 2.17.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](https://github.com/onsi/ginkgo/compare/v2.15.0...v2.17.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-22 11:05:11 +01:00
Christian Richter
12da64593a Merge pull request #8454 from dragonchaser/envar-delta-reflections
Envar delta reflections
2024-03-21 10:15:05 +01:00
Roman Perekhod
ee7d8376ef [full-ci] [reva bump] Fix http error when uploading via a public link 2024-03-20 16:42:54 +01:00