Update pending Go and frontend dependencies, including gRPC, OpenTelemetry
and SVGO security fixes. Raise the minimum Go version to 1.26.6 and update
x/image and x/mod to patched versions.
Use moby/go-archive directly for image build contexts so its vulnerable
v0.1.0 replacement can be removed and v0.3.0 used. Regenerate Go module
checksums with go mod tidy and refresh the npm lockfile.
Validation: Linux amd64 builds, existing Go tests and go mod verify pass
for core and agent; frontend production build passes; npm audit reports
zero vulnerabilities. Frontend type-check reports the same nine errors
with the original and updated lockfiles.
Go scanning still flags two advisories in the legacy Docker SDK, which
has no patched release on its current module path. A separate SDK
migration and host Docker daemon updates remain necessary.
* feat(auth): implement OIDC authentication endpoints and error handling
* feat(auth): add OIDC provider discovery endpoint and related functionality
* feat(auth): add SAML2 authentication support and related functionality
* feat(auth): add LDAP authentication support and related functionality
* fix(auth): improve login keydown handler for better event handling
* feat(auth): add LDAP authentication support and related configurations
* feat(ldap): implement LDAP synchronization features and enhance user import logic
* feat(auth): add authSource and authSourceStatus to user information
* feat(i18n): update LDAP synchronization error messages in multiple languages
* feat(i18n): update LDAP synchronization error messages in multiple languages
* feat(i18n): update LDAP synchronization error messages in multiple languages
* feat: Add passkey authentication support with registration and login endpoints
* style: Refactor import statements and improve button formatting in login and settings views
* chore: Update dependencies in go.mod and go.sum, including adding go-webauthn and updating indirect dependencies
* refactor: Consolidate passkey session management and update related structures for improved clarity and functionality
* feat: Add passkey support in multiple languages with corresponding error messages and management options
* feat: Implement passkey reset command and enhance internationalization support for passkey-related messages
* refactor: Simplify login form structure by removing commented sections and unused passkey login function
* fix: Update passkey failure messages across multiple languages to include SSL certificate verification instructions
* chore: update go mod
* refactor: Update passkey handling by consolidating status checks and renaming related fields for clarity
* style: Format i18n file
* refactor: Enhance passkey configuration checks
* feat: Add support for Mux SSL mode and update related settings
- Introduced a new SSL mode "Mux" in the settings, allowing for HTTP to HTTPS redirection.
- Updated the `SSL` field in the `SettingUpdate` struct to include "Mux" as a valid option.
- Modified the server logic to handle Mux connections, including certificate management and HTTP redirection.
- Updated frontend components to reflect the new SSL options and improved user guidance in multiple languages.
* fix: Update HTTPS related messages for improved clarity and security guidance in multiple languages
ssongliu
CityFun
蘭
蘭
KOMATA
ssongliu