9543b3c9f6
ci: Consistent NPM versions via Corepack ( #20400 )
...
* core: add .npmrc baseline to block dependency lifecycle scripts
Set ignore-scripts=true at the repo root, plus engine-strict, save-exact,
audit, and prefer-offline. This neutralizes the dominant npm supply-chain
attack vector — postinstall scripts in transitive dependencies — at the
cost of requiring an explicit rebuild for the handful of packages that
legitimately need install scripts (esbuild, chromedriver, tree-sitter,
tree-sitter-json). The next commit wires that rebuild into the Makefile.
Co-Authored-By: Playpen Agent <279763771+playpen-agent@users.noreply.github.com >
* core: route node installs through make to retire website preinstall hook
Make docs-install depend on a new root-node-install so the root deps
are guaranteed before the website install runs, removing the need for
the website/preinstall lifecycle script. Rebuild the small audited list
of trusted packages (esbuild, chromedriver, tree-sitter, tree-sitter-json)
after the web install so ignore-scripts=true remains the only path that
needs maintenance. web/README documents the new workflow.
Co-Authored-By: Playpen Agent <279763771+playpen-agent@users.noreply.github.com >
* Clean up install scripts.
* Track .npmrc in CODEOWNERS
* Fix formatter config. Reformat.
* Fix mounted references.
* Flesh out node scripts.
* Bump engines.
* Prep containers.
* Update makefile.
* Flesh out github actions.
* Clean up docs container.
* lint.
Bump.
Lint.
Bump NPM version.
* Add limits.
* collapse the composite's three setup-node calls to one cache restore
* Add SHA.
* Bump NPM range.
* Run formatter.
* Bump NPM.
* Remove extra install.
* Fix website deps.
* Use local prettier. Fix drift in CI.
* ci: build frontend in CI with node_env production
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* Install docusaurus config.
* Fix linter warning, order.
* Add linter commands.
* Add timeout.
* Remove pre install check.
---------
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Playpen Agent <279763771+playpen-agent@users.noreply.github.com >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2026-05-13 22:05:07 +00:00
32de314485
core: bump library/golang from 982ae92 to 4a7137e in /lifecycle/container ( #21840 )
...
core: bump library/golang in /lifecycle/container
Bumps library/golang from `982ae92` to `4a7137e`.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.26.2-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-27 12:46:38 +01:00
8ea9a48017
core: bump library/golang from cd8540d to 982ae92 in /lifecycle/container ( #21793 )
...
core: bump library/golang in /lifecycle/container
Bumps library/golang from `cd8540d` to `982ae92`.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.26.2-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-23 10:19:37 +01:00
2e2b471b94
core: bump library/golang from c0074c7 to cd8540d in /lifecycle/container ( #21771 )
...
core: bump library/golang in /lifecycle/container
Bumps library/golang from `c0074c7` to `cd8540d`.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.26.2-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 13:54:51 +02:00
cc62f2b3f8
lifecycle/container: fix OCI image labels ( #21574 )
...
Co-authored-by: Dominic R <dominic@sdko.org >
Co-authored-by: Erwan Hervé <erwan@herve.tech >
Co-authored-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
2026-04-14 14:47:16 +02:00
53a0370eee
core: bump library/golang from da39430 to c0074c7 in /lifecycle/container ( #21567 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-13 13:33:52 +00:00
b810b45a4d
core: bump library/golang from 1.26.1-trixie to 1.26.2-trixie in /lifecycle/container ( #21459 )
...
core: bump library/golang in /lifecycle/container
Bumps library/golang from 1.26.1-trixie to 1.26.2-trixie.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.26.2-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 11:45:58 +02:00
31ab7e3ca4
root: cleanup API generation ( #21172 )
2026-03-26 13:48:01 +00:00
2f70351c90
packages/client-go: init ( #21139 )
...
* packages/client-go: init
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* format
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* remove mod/sum
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix translate
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* no go replace
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* update rust makefile with pwd
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
* fix build
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix docs
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* don't need a version ig?
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* exclude go client from cspell
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* fix main docker build
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2026-03-25 15:26:50 +01:00
9fc4ff24de
core: bump goauthentik/fips-debian from 7baeeaa to 7726387 in /lifecycle/container ( #21028 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `7baeeaa` to `7726387`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-20 12:27:12 +00:00
c49bc9e5a9
core: bump goauthentik/fips-debian from a613b75 to 7baeeaa in /lifecycle/container ( #21001 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `a613b75` to `7baeeaa`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 13:00:38 +01:00
69b7acbb7a
core: bump library/golang from 9c51d8b to 96b2878 in /lifecycle/container ( #20972 )
...
core: bump library/golang in /lifecycle/container
Bumps library/golang from `9c51d8b` to `96b2878`.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.26.1-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 10:04:46 +01:00
13e14f1429
core: bump goauthentik/fips-debian from e06f0fe to a613b75 in /lifecycle/container ( #20968 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `e06f0fe` to `a613b75`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-18 10:01:52 +01:00
0e528cbcf0
core: bump goauthentik/fips-debian from 2517845 to e06f0fe in /lifecycle/container ( #20852 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `2517845` to `e06f0fe`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 12:55:00 +01:00
c7cd24cf94
core: bump library/golang from ab8c494 to 9c51d8b in /lifecycle/container ( #20937 )
...
core: bump library/golang in /lifecycle/container
Bumps library/golang from `ab8c494` to `9c51d8b`.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.26.1-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 12:13:59 +01:00
7acafc38a7
core: bump goauthentik/fips-debian from 0975985 to 2517845 in /lifecycle/container ( #20841 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-11 14:27:45 +01:00
5eb5911149
core: bump goauthentik/fips-debian from 6c9197b to 0975985 in /lifecycle/container ( #20815 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `6c9197b` to `0975985`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-10 08:40:59 +00:00
55964f8b25
core: bump goauthentik/fips-debian from 4966b90 to 6c9197b in /lifecycle/container ( #20798 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `4966b90` to `6c9197b`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-09 11:19:19 +01:00
c1ffd8f379
core: bump goauthentik/fips-debian from 3781391 to 4966b90 in /lifecycle/container ( #20754 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 13:38:43 +01:00
5ad4b4b7b2
core: bump library/golang from 1.26.0-trixie to 1.26.1-trixie in /lifecycle/container ( #20756 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 13:38:34 +01:00
87099194c0
core: bump goauthentik/fips-debian from 487b9f1 to 3781391 in /lifecycle/container ( #20730 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-05 13:41:33 +01:00
612d8e3df8
core: bump goauthentik/fips-debian from 44cd26c to 487b9f1 in /lifecycle/container ( #20702 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `44cd26c` to `487b9f1`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-04 09:48:51 +01:00
b37d94a6eb
core: bump library/golang from 100774d to 4e603da in /lifecycle/container ( #20705 )
...
core: bump library/golang in /lifecycle/container
Bumps library/golang from `100774d` to `4e603da`.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.26.0-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-04 09:46:50 +01:00
f11bbb72da
core: bump goauthentik/fips-debian from 1b2c47d to 44cd26c in /lifecycle/container ( #20678 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `1b2c47d` to `44cd26c`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-03 13:15:28 +01:00
66f16c8bea
core: bump goauthentik/fips-debian from ee57bf8 to 1b2c47d in /lifecycle/container ( #20651 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `ee57bf8` to `1b2c47d`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-02 12:50:25 +01:00
0678c0f4c5
core: bump library/golang from d0a3e4b to 100774d in /lifecycle/container ( #20587 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 18:50:00 +01:00
d8b9cee276
core: bump goauthentik/fips-debian from 7b82e24 to ee57bf8 in /lifecycle/container ( #20590 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-27 18:49:38 +01:00
675cce81b0
core: bump library/golang from 889885d to d0a3e4b in /lifecycle/container ( #20556 )
...
core: bump library/golang in /lifecycle/container
Bumps library/golang from `889885d` to `d0a3e4b`.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.26.0-trixie
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-25 14:43:15 +01:00
b4f66f43e5
core: bump goauthentik/fips-debian from d6def0a to 7b82e24 in /lifecycle/container ( #20497 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-25 14:15:49 +01:00
278c8e7098
core: bump goauthentik/fips-debian from 4419749 to d6def0a in /lifecycle/container ( #20467 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `4419749` to `d6def0a`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-23 12:21:48 +01:00
e0a7d0fe1c
core: bump goauthentik/fips-debian from b0917af to 4419749 in /lifecycle/container ( #20438 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 17:45:35 +01:00
122cee049a
core: bump library/golang from 1.25.5-trixie to 1.26.0-trixie in /lifecycle/container ( #20381 )
...
* core: bump library/golang in /lifecycle/container
Bumps library/golang from 1.25.5-trixie to 1.26.0-trixie.
---
updated-dependencies:
- dependency-name: library/golang
dependency-version: 1.26.0-trixie
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* bump & fix
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
* bump docs too
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Jens Langhammer <jens@goauthentik.io >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jens Langhammer <jens@goauthentik.io >
2026-02-19 12:35:00 +00:00
ebc06a8453
core: bump goauthentik/fips-debian from 10dadf1 to b0917af in /lifecycle/container ( #20382 )
...
core: bump goauthentik/fips-debian in /lifecycle/container
Bumps goauthentik/fips-debian from `10dadf1` to `b0917af`.
---
updated-dependencies:
- dependency-name: goauthentik/fips-debian
dependency-version: trixie-slim-fips
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-19 12:34:56 +00:00
646a0d3692
root: move docker files to lifecycle/containers and change docker-compose to compose ( #16624 )
2025-12-18 18:23:54 -06:00
Teffen Ellis
dependabot[bot]
Erwan Hervé
Marc 'risson' Schmitt
Connor Peshek