From 3c7e3f7ee9ef381bf21e187c8a28d7c1910e947c1a343ea0a803152ed1feb653 Mon Sep 17 00:00:00 2001 From: William Brown Date: Tue, 14 Nov 2023 21:53:27 +0000 Subject: [PATCH] Accepting request 1121430 from home:firstyear:branches:network:idm - Update to version 1.1.0~rc15~git2.74f5c0f: * make versions consistent * 1.1.0 rc.15 dev post-release (#2271) * Release 1.1.0-rc.15-dev * started writing docs and ended up in another rabbit hole (#2267) * CLI integration test beginnings (#2261) * chore(deps): bump the all group with 7 updates (#2266) * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265) * Add book chapter + cli * Cargo fmt and clippy checks * Restrict posix passwords on ldap bind with config * Splitting the SPAs (#2219) * Bug chasing (#2257) * cargo fmt + clippy (#2241) * service-account or person validity show returns for non-existing identity (#2258) * don't need write if we are not writing (#2256) * adding service account patch methods (#2255) * .deb package build and docs fixes (#2252) * Auth flow docs (#2249) * pykanidm test code (#2202) * chore(deps): bump the all group with 5 updates (#2247) * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246) * 20231019 1122 account policy basics (#2245) * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244) * 20231014 account policy (#2218) * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242) * Fix incorrect references to LDAP in sync (#2239) * Remove unused crate users (#2240) * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238) * Windows build fixes and test coverage (#2220) OBS-URL: https://build.opensuse.org/request/show/1121430 OBS-URL: https://build.opensuse.org/package/show/network:idm/kanidm?expand=0&rev=36 --- _service | 6 +- _servicedata | 2 +- cargo_config | 12 +- kanidm-1.1.0~beta13~git7.1fb34a9.tar.zst | 3 - kanidm-1.1.0~rc15~git2.74f5c0f.tar.zst | 3 + kanidm.changes | 248 +++++++++++++++++++++++ kanidm.spec | 2 +- vendor.tar.zst | 4 +- 8 files changed, 269 insertions(+), 11 deletions(-) delete mode 100644 kanidm-1.1.0~beta13~git7.1fb34a9.tar.zst create mode 100644 kanidm-1.1.0~rc15~git2.74f5c0f.tar.zst diff --git a/_service b/_service index f0e4a1d..927747c 100644 --- a/_service +++ b/_service @@ -3,7 +3,7 @@ https://github.com/kanidm/kanidm.git @PARENT_TAG@~git@TAG_OFFSET@.%h git - 1.1.0-beta.13 + 1.1.0-rc.15 v* v(\d+\.\d+\.\d+)-([a-z]+)\.(\d+) \1~\2\3 @@ -19,10 +19,10 @@ kanidm-*.tar.zst zst - false + RUSTSEC-2022-0040 + true - kanidm diff --git a/_servicedata b/_servicedata index fff89be..51e30bb 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/kanidm/kanidm.git - 1fb34a91e36d022b70590dc43a19b548cdf42cb4 \ No newline at end of file + 74f5c0f0f118ad863da786ba610175de606126a7 \ No newline at end of file diff --git a/cargo_config b/cargo_config index 6fb4ff4..0feb7bb 100644 --- a/cargo_config +++ b/cargo_config @@ -1,5 +1,15 @@ [source.crates-io] replace-with = "vendored-sources" +[source."git+https://github.com/dnaeon/rust-sshkeys.git?rev=fa5bd02dd6e90ee724fdb981253c1e7726a7f534"] +git = "https://github.com/dnaeon/rust-sshkeys.git" +rev = "fa5bd02dd6e90ee724fdb981253c1e7726a7f534" +replace-with = "vendored-sources" + +[source."git+https://github.com/kanidm/webauthn-rs.git?rev=2218d2055c0c900ef57b398423eee5e8d5521f4c"] +git = "https://github.com/kanidm/webauthn-rs.git" +rev = "2218d2055c0c900ef57b398423eee5e8d5521f4c" +replace-with = "vendored-sources" + [source.vendored-sources] -directory = "vendor" \ No newline at end of file +directory = "vendor" diff --git a/kanidm-1.1.0~beta13~git7.1fb34a9.tar.zst b/kanidm-1.1.0~beta13~git7.1fb34a9.tar.zst deleted file mode 100644 index 9491c55..0000000 --- a/kanidm-1.1.0~beta13~git7.1fb34a9.tar.zst +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:52474cf75d8bf2f8cca1d8973848274a48ef7e6d663eef1905ca64231d7a52d5 -size 6383692 diff --git a/kanidm-1.1.0~rc15~git2.74f5c0f.tar.zst b/kanidm-1.1.0~rc15~git2.74f5c0f.tar.zst new file mode 100644 index 0000000..955606a --- /dev/null +++ b/kanidm-1.1.0~rc15~git2.74f5c0f.tar.zst @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5a0f1eb178a222cb2eaaeff2dead0a5bc0bcf8f24c213238fb31333b785b370d +size 10001905 diff --git a/kanidm.changes b/kanidm.changes index 2df486f..ab92ebb 100644 --- a/kanidm.changes +++ b/kanidm.changes @@ -1,3 +1,251 @@ +------------------------------------------------------------------- +Tue Oct 31 12:02:37 UTC 2023 - william.brown@suse.com + +- Update to version 1.1.0~rc15~git2.74f5c0f: + * make versions consistent + * 1.1.0 rc.15 dev post-release (#2271) + * Release 1.1.0-rc.15-dev + * started writing docs and ended up in another rabbit hole (#2267) + * CLI integration test beginnings (#2261) + * chore(deps): bump the all group with 7 updates (#2266) + * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265) + * Add book chapter + cli + * Cargo fmt and clippy checks + * Restrict posix passwords on ldap bind with config + * Splitting the SPAs (#2219) + * Bug chasing (#2257) + * cargo fmt + clippy (#2241) + * service-account or person validity show returns for non-existing identity (#2258) + * don't need write if we are not writing (#2256) + * adding service account patch methods (#2255) + * .deb package build and docs fixes (#2252) + * Auth flow docs (#2249) + * pykanidm test code (#2202) + * chore(deps): bump the all group with 5 updates (#2247) + * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246) + * 20231019 1122 account policy basics (#2245) + * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244) + * 20231014 account policy (#2218) + * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242) + * Fix incorrect references to LDAP in sync (#2239) + * Remove unused crate users (#2240) + * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238) + * Windows build fixes and test coverage (#2220) + * more space checks (#2234) + * Fixing dependabot and its mistakes (#2232) + * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231) + * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230) + * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229) + * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228) + * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227) + * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226) + * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225) + * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224) + * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223) + * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222) + * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221) + * OpenAPI/swagger docs autogen (#2175) + * 20231012 346 name deny list (#2214) + * Add file diagnosis (#2210) + * fix RUV on startup, improve filter output (#2211) + * Chasing yaks down dark alleyways (#2207) + * Reduce `pam_kanidm`'s priority in Debian platforms (#2209) + * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194) + * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195) + * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193) + * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197) + * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201) + * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200) + * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199) + * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198) + * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196) + * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192) + * 20231008 remove expect used (#2191) + * Thread naming and display (#2190) + * Replication tweaks - try the most recent successful one and error less (#2189) + * Chasing wooly quadrapeds again (#2163) + * 68 20230929 replication finalisation (#2160) + * In-system image storage (#2112) + * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173) + * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165) + * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170) + * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169) + * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168) + * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167) + * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166) + * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164) + * fix credential update intent defaults (#2162) + * 68 20230919 replication configuration (#2131) + * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154) + * Enforce TLS key size minimums (#2145) + * bindaddress default doesn't match documentation (#2150) + * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137) + * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138) + * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143) + * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142) + * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141) + * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140) + * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139) + * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136) + * minor changes to speed up WASM tests (#2133) + * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134) + * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127) + * Typo (#2125) + * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114) + * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115) + * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116) + * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124) + * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119) + * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123) + * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122) + * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121) + * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120) + * chore(deps): bump docker/build-push-action from 4 to 5 (#2118) + * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117) + * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113) + * Yaleman/issue989 (#2111) + * Cinco de yakko (#2108) + * 68 20230912 session consistency (#2110) + * Fix typo (#2109) + * Implement DeviceAuthorizationGrant for MFA (#2079) + * Schema dooby doo ... yon (#2103) + * sqlite3 doesn't need to be installed on dev machines (#2104) + * 68 20230908 replication attrunique (#2086) + * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092) + * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089) + * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090) + * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088) + * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091) + * chore(deps): bump actions/checkout from 3 to 4 (#2102) + * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101) + * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100) + * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099) + * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097) + * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098) + * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096) + * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095) + * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094) + * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093) + * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087) + * move from git2 to gix (#2085) + * Schema-dooby-doo-part-trois (#2082) + * CLI and test things (#2080) + * 68 20230907 replication (#2081) + * minor tweaks to Orca (#2077) + * Changing build targets for debs (#2076) + * Removing default features from git2 package (#2078) + * 68 20230829 replication referential integrity (#2048) + * Schema dooby doo part two (#2071) + * 68 20230831 design replication coordinator (#2051) + * improve wording of webauthn cli interaction (#2073) + * When an empty body was returned, do request would error incorrectly (#2074) + * update bug template, closes #2054 (#2055) + * Yak hassling (#2059) + * docs: api tokens are managed by idm_admin (#2072) + * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062) + * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063) + * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061) + * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070) + * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069) + * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068) + * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067) + * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066) + * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065) + * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064) + * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060) + * Check in missing users crate for SELinux integration (#2050) + * Add tests for X-Forwarded-For header (kinda) (#1957) + * docs: fix miniflux oauth example (#2046) + * Clear cache before verify on some low-level tests (#2044) + * 68 20230828 replication of schema (#2045) + * Update compact jwt (#2043) + * Allow patching of crates from related projects (#2042) + * pam multistep auth state machine (#2022) + * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039) + * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040) + * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038) + * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036) + * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037) + * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035) + * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034) + * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033) + * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032) + * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031) + * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030) + * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029) + * Authentication shortcut to get a RW session (#1993) + * wopsies, missing imports (#2023) + * idv cli (#2001) + * Trying to fix the (current) container build failures (#2021) + * pykanidm updoots (#2019) + * 68 20230821 replication (#2020) + * Configurable session timeouts (#1965) + * fix: output an array in json mode for `kanidm group list` (#2016) + * feat: add json output modes for `person list` and `system oauth2 list` (#2017) + * docs: Update missed add_members command (#2018) + * Less human strings more enums (#1989) + * Resolve incorrect time units on timeout (#2014) + * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013) + * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012) + * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011) + * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010) + * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009) + * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008) + * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007) + * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006) + * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005) + * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004) + * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003) + * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002) + * reordering layers so the web server works in non-debug-mode (#1999) + * 20230817 idv migration (#1992) + * daemon: kanidmd version requires a config file to run (#1959) (#1990) + * Resolve issues with dyngroup members (#1986) + * Revert "sqlite where IN for id entry (#1988)" (#1991) + * sqlite where IN for id entry (#1988) + * Identity verification feature (#1819) + * 1982 service account access (#1985) + * Fixing test release (#1983) + * error handling and web server logging fixes (#1960) + * Struct-ifying schema things (#1971) + * Orca tweaks (#1963) + * Fighting with zypper, tagging our images (#1964) + * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974) + * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973) + * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979) + * Are we JSON yet? Kinda. But we're closer. (#1967) + * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978) + * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977) + * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976) + * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975) + * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972) + * docs: Fix outdated oauth2 subcommands (#1969) + * Allow one-character usernames (#1941) + * resolver: Himmelblau needs old token for refresh (#1962) + * updating python packages to close dependabot securiity alerts (#1956) + * providing server configuration in the testkit::test macro (#1953) + * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952) + * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951) + * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950) + * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949) + * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948) + * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947) + * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946) + * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945) + * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944) + * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943) + * removing debug string (#1937) + * Final v3 master x book deployment fix (#1936) + * trying a different ref (#1935) + * replaced `skip_serializing_if` with `skip_serializing_none` (#1932) + * another book round (#1933) + * trying again (#1931) + * fixed serialization of oauth2 token scope (#1930) + * added compression layer for the pkg route (#1928) + * Resolve build failiures when selinux is enabled (#1927) + * Resolve issue with publishing (#1925) + * Set dev version (#1924) + ------------------------------------------------------------------- Mon Aug 21 04:41:21 UTC 2023 - william.brown@suse.com diff --git a/kanidm.spec b/kanidm.spec index b8c45f5..569ae8f 100644 --- a/kanidm.spec +++ b/kanidm.spec @@ -17,7 +17,7 @@ Name: kanidm -Version: 1.1.0~beta13~git7.1fb34a9 +Version: 1.1.0~rc15~git2.74f5c0f Release: 0 Summary: A identity management service and clients. License: ( Apache-2.0 OR BSL-1.0 ) AND ( Apache-2.0 OR ISC OR MIT ) AND ( Apache-2.0 OR MIT ) AND ( Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT ) AND ( CC0-1.0 OR Apache-2.0 ) AND ( MIT OR Apache-2.0 OR Zlib ) AND ( Unlicense OR MIT ) AND ( Zlib OR Apache-2.0 OR MIT ) AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND MIT AND MPL-2.0 AND MPL-2.0+ diff --git a/vendor.tar.zst b/vendor.tar.zst index f328570..d2322b7 100644 --- a/vendor.tar.zst +++ b/vendor.tar.zst @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:fae68a674e1126548a683610f1be4e9a416398c433090421e923c95919eae630 -size 87302292 +oid sha256:30b74ddd7ac0e8f962ef131e54c6066e3370a9d1cba6e601c1e62eab30fd2cbd +size 62357099