Michael Mayer
1ca21007b3
Build: Update Go toolchain to 1.26.4 and refresh x/net and x/sys
...
Bumps the go.mod toolchain directive and the dummy OIDC fixture to
go1.26.4, clearing the GO-2026-5037/5038/5039 stdlib advisories. Updates
golang.org/x/net to v0.56.0 (NOTICE regenerated) and the fixture's
golang.org/x/sys to v0.46.0. osv-scanner --recursive returns zero
advisories and the full Go suite passes.
2026-06-10 18:06:19 +00:00
Michael Mayer
0d960aa36a
Go: Bump toolchain to 1.26.3 to clear stdlib CVE advisories
...
Upstream Go's May 2026 release patches 8 stdlib advisories that fired
against the previously declared toolchain (1.26.2):
- GO-2026-4918 / CVE-2026-33814 (HTTP/2 SETTINGS_MAX_FRAME_SIZE loop)
- GO-2026-4971 / CVE-2026-39836 (net.Dial NUL byte panic, Windows)
- GO-2026-4976 / CVE-2026-39825 (ReverseProxy URL param forwarding)
- GO-2026-4977 / CVE-2026-42499 (net/mail consumePhrase quadratic)
- GO-2026-4980 / CVE-2026-39826 (html/template escaper bypass XSS)
- GO-2026-4981 / CVE-2026-33811 (net long CNAME crash)
- GO-2026-4982 / CVE-2026-39823 (html/template meta URL escape XSS)
- GO-2026-4986 / CVE-2026-39820 (net/mail consumeComment quadratic)
osv-scanner --recursive now reports 0 advisories. The go directive
floor stays at 1.25.0 so developers without GOTOOLCHAIN=auto can still
build with any Go >= 1.25.0.
2026-05-10 12:49:59 +00:00
Michael Mayer
64f91789c9
OIDC: Treat unknown dummy clients as confidential web clients #5545
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2026-04-27 11:40:27 +02:00
Michael Mayer
64838087bd
OIDC: Refresh dummy fixture against zitadel/oidc/v3 #5545
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2026-04-27 11:33:18 +02:00
Michael Mayer
036d67b58f
Backend: Upgrade Go deps in go.mod and go.sum
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2026-04-27 11:23:23 +02:00
Michael Mayer
5bda752118
Build: Add shared .telemetry file to opt out of CLI telemetry
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2026-04-24 16:42:21 +02:00
Michael Mayer
184deb20d2
WebDAV: Enable the "dummy-webdav" service to shut down gracefully
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2025-12-10 08:56:53 +01:00
Michael Mayer
471ec0318b
OIDC: Update dependencies of the "dummy-oidc" service & add tests #5381
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2025-12-10 08:55:27 +01:00
Michael Mayer
4bf08ad6de
OIDC: Fix redirect URI in internal/oidc/client.go #782
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-06-27 23:32:27 +02:00
Michael Mayer
f10809329f
OIDC: Update test endpoint URLs #782
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-06-27 22:55:59 +02:00
Michael Mayer
db9590a924
Develop: Update dummy-oidc and dummy-webdav images in docker-compose.yml
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-31 21:30:09 +01:00
Michael Mayer
7e7ba69982
Auth: Add client_uid and client_name to auth_sessions table #808 #3943
...
This also adds the ability to change the client role if needed and
improves the usage information and output of the CLI commands.
Signed-off-by: Michael Mayer <michael@photoprism.app>
2024-01-18 16:53:05 +01:00
Michael Mayer
db7fcbbd62
Build: Update author and copyright notices
...
Signed-off-by: Michael Mayer <michael@photoprism.app>
2023-05-01 12:28:55 +02:00
Michael Mayer
a9193c47a9
Docker: Remove GOPROXY and GODEBUG args from all images
2022-02-20 16:55:25 +01:00
Michael Mayer
e9fabfa8e4
Docs: Update URL
2021-12-12 20:14:07 +01:00
Michael Mayer
d4015065b3
CI: Add "ARG GODEBUG" to Dockerfiles
2021-12-10 10:17:13 +01:00
Michael Mayer
6e2426288c
Docker: Add config for dummy-webdav & oidc services
2021-11-09 17:40:53 +01:00
