From 20296f00bdf5b878dc963ac47054379fbca2de55 Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Fri, 1 May 2026 08:01:33 +0200 Subject: [PATCH] =?UTF-8?q?fix(lldap):=20update=20image=20docker.io/nitnel?= =?UTF-8?q?ave/lldap=20v0.6.2=20=E2=86=92=20v0.6.3=20(#47747)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [docker.io/nitnelave/lldap](https://redirect.github.com/lldap/lldap) | patch | `713f8f1` → `2f208d7` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes
lldap/lldap (docker.io/nitnelave/lldap) ### [`v0.6.3`](https://redirect.github.com/lldap/lldap/releases/tag/v0.6.3) [Compare Source](https://redirect.github.com/lldap/lldap/compare/v0.6.2...v0.6.3) #### \[0.6.3] 2026-05-01 Small release, focused on LDAP compatibility, TLS maintenance, dependency upgrades and documentation/examples. ##### Added - LDAP schema definitions for `memberOf`, `modifyTimestamp` and `pwdChangedTime` - Support for configuring the healthcheck listen addresses - Usernames are now included in password recovery emails ##### Changed - JWT `exp` and `iat` claims are now serialized as NumericDate values to comply with RFC7519 - Migrated to `rustls` 0.23 and centralized TLS handling - The login form no longer enforces a password length limit ##### Fixed - `pwdChangedTime` is now emitted as LDAP GeneralizedTime instead of RFC3339 - LDAP base-scope searches for non-existent entries now return `NoSuchObject` - `cn` equality filters are now case insensitive - The server now shuts down the database connection pool gracefully - The bootstrap script now handles empty globs correctly ##### Security - Updated the LDAP dependency stack, including `ldap3_proto`, in response to security advisory [`GHSA-qcxq-75wr-5cm8`](https://redirect.github.com/kanidm/ldap3/security/advisories/GHSA-qcxq-75wr-5cm8), where a specially crafted LDAP query could make the server crash ##### Cleanups - Split GraphQL queries and mutations into smaller modules - Refactored configuration and user update logic - Upgraded the Rust toolchain and shared dependencies ##### New services - Apache WebDAV - Continuwuity - Gerrit - Gogs - Open WebUI - OpenCloud - Pocket ID - Semaphore - TrueNAS
--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- charts/stable/lldap/Chart.yaml | 4 ++-- charts/stable/lldap/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/stable/lldap/Chart.yaml b/charts/stable/lldap/Chart.yaml index 0cba16e5675..b1c5eb54b7f 100644 --- a/charts/stable/lldap/Chart.yaml +++ b/charts/stable/lldap/Chart.yaml @@ -9,7 +9,7 @@ annotations: trueforge.org/min_helm_version: "3.14" trueforge.org/train: stable apiVersion: v2 -appVersion: 0.6.2 +appVersion: 0.6.3 dependencies: - name: common version: 29.1.6 @@ -38,5 +38,5 @@ sources: - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/lldap - https://hub.docker.com/r/nitnelave/lldap type: application -version: 9.1.1 +version: 9.1.2 diff --git a/charts/stable/lldap/values.yaml b/charts/stable/lldap/values.yaml index 272ab83c90f..e5c25cda0c4 100644 --- a/charts/stable/lldap/values.yaml +++ b/charts/stable/lldap/values.yaml @@ -2,7 +2,7 @@ image: repository: docker.io/nitnelave/lldap pullPolicy: IfNotPresent - tag: v0.6.2-debian@sha256:713f8f1c7bb769bdcc7dc86b48838ec23e45ce45ab31d562544959360e96c109 + tag: v0.6.3-debian@sha256:2f208d7dc45d0b01648ab9c869fa6f65b843a8c9647e99dd929739f5a51a945b securityContext: container: readOnlyRootFilesystem: false