dependabot[bot]
c876790f08
Bump github.com/docker/docker from 24.0.9+incompatible to 25.0.6+incompatible ( #3405 )
...
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from
24.0.9+incompatible to 25.0.6+incompatible.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/docker/releases ">github.com/docker/docker's
releases</a>.</em></p>
<blockquote>
<h2>v25.0.6</h2>
<h2>25.0.6</h2>
<p>For a full list of pull requests and changes in this release, refer
to the relevant GitHub milestones:</p>
<ul>
<li><a
href="https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.6 ">docker/cli,
25.0.6 milestone</a></li>
<li><a
href="https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.6 ">moby/moby,
25.0.6 milestone</a></li>
<li>Deprecated and removed features, see <a
href="https://github.com/docker/cli/blob/v25.0.6/docs/deprecated.md ">Deprecated
Features</a>.</li>
<li>Changes to the Engine API, see <a
href="https://github.com/moby/moby/blob/v25.0.6/docs/api/version-history.md ">API
version history</a>.</li>
</ul>
<h3>Security</h3>
<p>This release contains a fix for <a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110 ">CVE-2024-41110</a>
/ <a
href="https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq ">GHSA-v23v-6jw2-98fq</a>
that impacted setups using <a
href="https://docs.docker.com/engine/extend/plugins_authorization/ ">authorization
plugins (AuthZ)</a> for access control.</p>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>[25.0] remove erroneous <code>platform</code> from image
<code>config</code> OCI descriptor in <code>docker save</code> output.
<a
href="https://redirect.github.com/moby/moby/pull/47695 ">moby/moby#47695</a></li>
<li>[25.0 backport] Fix a nil dereference when getting image history for
images having layers without the <code>Created</code> value set. <a
href="https://redirect.github.com/moby/moby/pull/47759 ">moby/moby#47759</a></li>
<li>[25.0 backport] apparmor: Allow confined runc to kill containers. <a
href="https://redirect.github.com/moby/moby/pull/47830 ">moby/moby#47830</a></li>
<li>[25.0 backport] Fix an issue where rapidly promoting a Swarm node
after another node was demoted could cause the promoted node to fail its
promotion. <a
href="https://redirect.github.com/moby/moby/pull/47869 ">moby/moby#47869</a></li>
<li>[25.0 backport] don't depend on containerd platform.Parse to return
a typed error. <a
href="https://redirect.github.com/moby/moby/pull/47890 ">moby/moby#47890</a></li>
<li>[25.0 backport] builder/mobyexporter: Add missing nil check <a
href="https://redirect.github.com/moby/moby/pull/47987 ">moby/moby#47987</a></li>
</ul>
<h3>Packaging updates</h3>
<ul>
<li>Update AWS SDK Go v2 to v1.24.1 for AWS CloudWatch logging driver.
<a
href="https://redirect.github.com/moby/moby/pull/47724 ">moby/moby#47724</a></li>
<li>Update Go runtime to 1.21.12, which contains security fixes for <a
href="https://github.com/advisories/GHSA-hw49-2p59-3mhj ">CVE-2024-24791</a>
<a
href="https://redirect.github.com/moby/moby/pull/48146 ">moby/moby#48146</a></li>
<li>Update Containerd (static binaries only) to <a
href="https://github.com/containerd/containerd/releases/tag/v1.7.20 ">v1.7.20</a>.
<a
href="https://redirect.github.com/moby/moby/pull/48199 ">moby/moby#48199</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/moby/moby/compare/v25.0.5...v25.0.6 ">https://github.com/moby/moby/compare/v25.0.5...v25.0.6 </a></p>
<h2>v25.0.5</h2>
<h2>25.0.5</h2>
<p>For a full list of pull requests and changes in this release, refer
to the relevant GitHub milestones:</p>
<ul>
<li><a
href="https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.5 ">docker/cli,
25.0.5 milestone</a></li>
<li><a
href="https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.5 ">moby/moby,
25.0.5 milestone</a></li>
<li>Deprecated and removed features, see <a
href="https://github.com/docker/cli/blob/v25.0.5/docs/deprecated.md ">Deprecated
Features</a>.</li>
<li>Changes to the Engine API, see <a
href="https://github.com/moby/moby/blob/v25.0.5/docs/api/version-history.md ">API
version history</a>.</li>
</ul>
<h3>Security</h3>
<p>This release contains a security fix for <a
href="https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx ">CVE-2024-29018</a>,
a potential data exfiltration from 'internal' networks via authoritative
DNS servers.</p>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>
<p><a
href="https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx ">CVE-2024-29018</a>:
Do not forward requests to external DNS servers for a container that is
only connected to an 'internal' network. Previously, requests were
forwarded if the host's DNS server was running on a loopback address,
like systemd's 127.0.0.53. <a
href="https://redirect.github.com/moby/moby/pull/47589 ">moby/moby#47589</a></p>
</li>
<li>
<p>plugin: fix mounting /etc/hosts when running in UserNS. <a
href="https://redirect.github.com/moby/moby/pull/47588 ">moby/moby#47588</a></p>
</li>
<li>
<p>rootless: fix <code>open /etc/docker/plugins: permission
denied</code>. <a
href="https://redirect.github.com/moby/moby/pull/47587 ">moby/moby#47587</a></p>
</li>
<li>
<p>Fix multiple parallel <code>docker build</code> runs leaking disk
space. <a
href="https://redirect.github.com/moby/moby/pull/47527 ">moby/moby#47527</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b08a51fe16https://redirect.github.com/docker/docker/issues/48231 ">#48231</a>
from austinvazquez/backport-vendor-otel-v0.46.1-to-...</li>
<li><a
href="d151b0f87fc6ba9a5124https://redirect.github.com/docker/docker/issues/48225 ">#48225</a>
from austinvazquez/backport-workflow-artifact-reten...</li>
<li><a
href="4673a3ca2chttps://redirect.github.com/docker/docker/issues/48227 ">#48227</a>
from austinvazquez/backport-backport-branch-check-t...</li>
<li><a
href="30f89081027454d6a2e665cc597ceab722836927https://redirect.github.com/docker/docker/issues/48199 ">#48199</a>
from austinvazquez/update-containerd-binary-to-1.7.20</li>
<li><a
href="e8ecb9c76de6cae1f237https://github.com/docker/docker/compare/v24.0.9...v25.0.6 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/matrix-org/dendrite/network/alerts ).
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Till Faelligen <2353100+S7evinK@users.noreply.github.com>
2024-08-02 08:56:24 +02:00
Till
e9deb5244e
Fix /createRoom and /invite containing displayname/avatarURL of inviter ( #3326 )
...
Fixes #3324
2024-02-13 19:28:52 +01:00
Till
be0c27e688
Update all the CI actions ( #3323 )
...
Also adds a job for the scheduled CI run to only run if there has been a
commit in the last 24h
([StackOverflow](https://stackoverflow.com/questions/63014786/how-to-schedule-a-github-actions-nightly-build-but-run-it-only-when-there-where ))
[skip ci]
2024-02-08 09:58:59 +01:00
Till Faelligen
436773ab71
Disable Element Web tests, only run csapi and federation tests
2024-02-07 10:28:10 +01:00
Till
87f028db27
Version 0.13.6 ( #3315 )
2024-01-26 14:41:34 +01:00
Till
317b1018a3
Version 0.13.4 ( #3244 )
...
If I didn't mess up the workflow, this should remove some ugliness from
the version string (e.g. 0.13.2+57ddbe0.57ddbe0, dupe commit hash, as a
result of https://github.com/matrix-org/dendrite/pull/3147 )
2023-10-25 13:53:40 +02:00
kegsay
5888329b13
Update Complement to match new public API shape ( #3232 )
...
Sister PR to matrix-org/complement#666
Context:
https://github.com/matrix-org/complement/issues/654#issuecomment-1746613495
2023-10-11 17:41:12 +01:00
Till
b341a66152
Version 0.13.3 ( #3213 )
2023-09-28 12:06:21 +02:00
Till Faelligen
11fd2f019b
Fix Complement scheduled CI
...
[skip CI]
2023-08-30 07:37:14 +02:00
Till
e3a7039c81
Fix CI, upgrade image used for upgrade tests ( #3151 )
2023-08-28 13:28:22 +02:00
Till
57ddbe015d
Version 0.13.2 ( #3187 )
2023-08-23 16:24:16 +02:00
Till Faelligen
9f7e14e4d0
Back to the original version for now
2023-07-06 10:44:11 +02:00
Till
f956a8c1d9
Docs restructure ( #2953 )
...
Needs to be merged into `gh-pages` later on.
2023-05-30 10:02:53 +02:00
Till
c6457cd4e5
Add CS API /keys tests ( #3069 )
...
This is slightly cheating, as the heavy lifting, with regards to key
generation, is done using `mautrix/go`.
2023-04-27 16:43:28 +02:00
kegsay
e093005bc2
ci: don't use go get, use go install ( #3048 )
...
Otherwise CI can fail with:
```
go: go.mod file not found in current directory or any parent directory.
'go get' is no longer supported outside a module.
To build and install a command, use 'go install' with a version,
like 'go install example.com/cmd@latest'
For more information, see https://golang.org/doc/go-get-install-deprecation
or run 'go help get' or 'go help install'.
```
2023-04-05 14:35:55 +01:00
Till Faelligen
675926967d
Update Helm README
...
[skip ci]
2023-04-03 09:08:36 +02:00
Devon Hudson
69e3bd82a9
Add dendrite-demo-pinecone cypress tests
2023-03-27 07:57:30 -06:00
Till Faelligen
e2d2482ca6
Get the logs for dendrite when installing the chart
2023-03-27 11:07:30 +02:00
Till Faelligen
cb18ba0230
Upload covdatafiles for each server
2023-03-22 17:36:33 +01:00
Till Faelligen
14085d30ac
Update workflow to not use commas when joining names
2023-03-22 16:01:12 +01:00
Till Faelligen
a4400bdd76
Sytest coverage file
2023-03-22 14:58:36 +01:00
Till Faelligen
b741d38e10
Update Workflow
2023-03-22 14:51:18 +01:00
Till Faelligen
6948d16527
Update Go, use go tool covdata for coverage files?
2023-03-22 14:50:21 +01:00
Till
c7303cbf76
Update dependencies ( #3006 )
...
In preparation for a new release, let's also update a few dependencies.
2023-03-10 10:32:50 +01:00
Till Faelligen
f1ccfcf150
Only run CI if there are changes to go files or the workflow [skip ci]
2023-02-28 15:35:53 +01:00
Till Faelligen
086e205eba
Deploy on gh-pages push
2023-02-28 15:15:19 +01:00
Till Faelligen
c8ca23acdb
Fix building Element web in CI
2023-02-20 15:28:45 +01:00
Till
11d9b9db0e
Remove polylith/API mode ( #2967 )
...
This removes most of the code used for polylith/API mode.
This removes the `/api` internal endpoints entirely.
Binary size change roughly 5%:
```
51437560 Feb 13 10:15 dendrite-monolith-server # old
48759008 Feb 13 10:15 dendrite-monolith-server # new
```
2023-02-14 12:47:47 +01:00
Till
cc59879faa
Version 0.11.1 ( #2966 )
2023-02-10 18:36:59 +01:00
Till
baf118b08c
Add Sytest/Complement coverage to scheduled runs ( #2962 )
...
This adds Sytest and Complement coverage reporting to the nightly
scheduled CI runs.
Fixes a few API mode related issues as well, since we seemingly never
really ran them with Complement.
Also fixes a bug related to device list changes: When we pass in an
empty `newlyLeftRooms` slice, we got a list of all currently joined
rooms with the corresponding members. When we then got the
`newlyJoinedRooms`, we wouldn't update the `changed` slice, because we
already got the user from the `newlyLeftRooms` query. This is fixed by
simply ignoring empty `newlyLeftRooms`.
2023-02-03 13:42:35 +01:00
Devon Hudson
25dfbc6ec3
Extend cypress test timeout in ci
2023-01-11 10:47:37 -07:00
Devon Hudson
6ae1dd565c
Revert "Add cypress cloud recording"
...
This reverts commit b297ea7379
2023-01-11 10:46:52 -07:00
Devon Hudson
b297ea7379
Add cypress cloud recording
2023-01-11 10:40:38 -07:00
Devon Hudson
8fef692741
Edit cypress config before running tests
2023-01-11 10:10:24 -07:00
Devon Hudson
11a07d855d
Initial attempt at adding cypress tests to ci
2023-01-11 09:52:58 -07:00
Till
d579ddb8e7
Add simplified helm chart ( #2905 )
...
As discussed yesterday, a simplified version of [my
helm](https://github.com/S7evinK/dendrite-helm ) which deploys a monolith
with internal NATS and an optionally enabled PostgreSQL server. If the
PostgreSQL dependency is not enabled, a user specified connection string
is constructed.
Co-authored-by: kegsay <kegan@matrix.org>
2023-01-06 15:44:10 +01:00
Till
f762ce1050
Add clientapi tests ( #2916 )
...
This PR
- adds several tests for the clientapi, mostly around `/register` and
auth fallback.
- removes the now deprecated `homeserver` field from responses to
`/register` and `/login`
- slightly refactors auth fallback handling
2022-12-23 14:11:11 +01:00
Till Faelligen
aaf4e5c865
Use older sytest-dendrite image
2022-12-09 18:45:42 +01:00
Till
9a46d8d95c
Test and CI related changes ( #2896 )
...
In an attempt to:
- make on-boarding a bit easier (`go test ./...` should now not need
additional postgres setup)
- get code coverage faster, not only scheduled at night
- test the `create-account` binary
2022-12-02 11:44:20 +01:00
Neil Alexander
ed497aa8b2
Version 0.10.8
2022-11-29 16:26:33 +00:00
devonh
ffd8e21ce5
Fix nightly code coverage ( #2881 )
2022-11-17 15:30:23 +00:00
devonh
df76a17234
Add test code coverage reporting ( #2871 )
2022-11-16 22:02:25 +00:00
Till
858a4af224
Try to optimize CI ( #2867 )
...
Try to optimize CI by using caches
2022-11-14 12:06:41 +00:00
Neil Alexander
72ce6acf71
Run upgrade tests for SQLite too ( #2875 )
...
This should hopefully catch problems with database migrations in SQLite
as well as PostgreSQL.
2022-11-11 11:21:16 +00:00
Till Faelligen
b2712cd2b1
Fix GHA release script
2022-11-04 20:58:24 +01:00
Neil Alexander
fb2e7d1b05
Put P2P Demos back into their own Dockerfiles
2022-11-03 13:57:44 +00:00
Till Faelligen
85d740ea1b
Add GHA permission to upload security events
2022-11-03 08:26:46 +01:00
Till Faelligen
f5b11e30a4
Hopefully fix GHA sarif upload
2022-11-03 08:20:51 +01:00
Neil Alexander
ef52731e9f
Tweak FLAGS in GHA Docker builds
2022-11-02 14:41:38 +00:00
Neil Alexander
9c0725feac
Maybe fix GHA
2022-11-02 14:09:19 +00:00
