fix(authelia): update image ghcr.io/authelia/authelia 4.39.19 → 4.39.20 (#48529)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[ghcr.io/authelia/authelia](https://redirect.github.com/authelia/authelia/pkgs/container/authelia)
([source](https://redirect.github.com/authelia/authelia)) | patch |
`0c824dc` → `1b363e9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>authelia/authelia (ghcr.io/authelia/authelia)</summary>

###
[`v4.39.20`](https://redirect.github.com/authelia/authelia/releases/tag/v4.39.20)

[Compare
Source](https://redirect.github.com/authelia/authelia/compare/v4.39.19...v4.39.20)

#### Security Fixes

This release contains important security fixes. We encourage users to
update as soon as practical.

The following advisories accompany this release:

- [Edge Case Access Control Rule Domain Miss Due to Lack of
Canonicalization](https://redirect.github.com/authelia/authelia/security/advisories/GHSA-j748-h363-wqj8)
reported by [@&#8203;j0hndo](https://redirect.github.com/j0hndo), fixed
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott),
reviewed by [@&#8203;nightah](https://redirect.github.com/nightah) and
[@&#8203;Crowley723](https://redirect.github.com/Crowley723)
- [Missing Username Canonicalization in Basic Auth when using LDAP
](https://redirect.github.com/authelia/authelia/security/advisories/GHSA-hjj4-hfjm-fmrj)
reported by [@&#8203;Nadav0077](https://redirect.github.com/Nadav0077),
fixed by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott),
reviewed by [@&#8203;nightah](https://redirect.github.com/nightah) and
[@&#8203;Crowley723](https://redirect.github.com/Crowley723)

##### Bug Fixes

- **authentication:** incorrect bind mode
([#&#8203;12094](https://redirect.github.com/authelia/authelia/issues/12094))
([dc1d1d6](https://redirect.github.com/authelia/authelia/commit/dc1d1d6f1fa59890565fd06d94e6007414b4a465))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **authorization:** case-insensitive domain matching \[security]
([#&#8203;12169](https://redirect.github.com/authelia/authelia/issues/12169))
([b6d1d60](https://redirect.github.com/authelia/authelia/commit/b6d1d60baa02f216fdb19f5dfeaf2e805829508a))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **authorization:** oauth2 client credentials considered anonymous
([#&#8203;12141](https://redirect.github.com/authelia/authelia/issues/12141))
([54de0c9](https://redirect.github.com/authelia/authelia/commit/54de0c9b783a946882673b4d6b85ac9d85157573))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **configuration:** add default attributes to freeipa
([#&#8203;12155](https://redirect.github.com/authelia/authelia/issues/12155))
([f8203be](https://redirect.github.com/authelia/authelia/commit/f8203beb780c79dbbd15b010fd473c4478699ff0))
by [@&#8203;kaysond](https://redirect.github.com/kaysond)
- **configuration:** include specific warning about ports
([#&#8203;12145](https://redirect.github.com/authelia/authelia/issues/12145))
([033533e](https://redirect.github.com/authelia/authelia/commit/033533ec9a60152544b77fd3534670b43e6158e1))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **configuration:** preserve dots in map key names during koanf remap
([#&#8203;11803](https://redirect.github.com/authelia/authelia/issues/11803))
([211a4cd](https://redirect.github.com/authelia/authelia/commit/211a4cd1a4ac27a994dc70523e09a75e7064f95b))
by [@&#8203;nightah](https://redirect.github.com/nightah)
- **expression:** add missing extensions
([#&#8203;11226](https://redirect.github.com/authelia/authelia/issues/11226))
([4c7ffd3](https://redirect.github.com/authelia/authelia/commit/4c7ffd348c484f282e0828144e0ac46bf150a5c3))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **handlers:** basic auth username canonicalization \[security]
([#&#8203;12170](https://redirect.github.com/authelia/authelia/issues/12170))
([b8985b5](https://redirect.github.com/authelia/authelia/commit/b8985b57b70acdff8f204ed426ff619e763461ad))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **handlers:** hoist issuer checks
([#&#8203;12160](https://redirect.github.com/authelia/authelia/issues/12160))
([ab5dca7](https://redirect.github.com/authelia/authelia/commit/ab5dca7329f9cb0567bfa10895c703cc1e2458e8))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **metrics:** ensure unknown bans are measured
([#&#8203;11999](https://redirect.github.com/authelia/authelia/issues/11999))
([3adae90](https://redirect.github.com/authelia/authelia/commit/3adae9081c41032986c7dfabb74b3202a6359927)),
closes
[#&#8203;11972](https://redirect.github.com/authelia/authelia/issues/11972)
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **metrics:** go collectors not registered
([#&#8203;11894](https://redirect.github.com/authelia/authelia/issues/11894))
([9cd8812](https://redirect.github.com/authelia/authelia/commit/9cd88129ee98c2a757ccc1aa18e8b73dcc46d64c))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **middlewares:** add rate limit exclusions
([#&#8203;12159](https://redirect.github.com/authelia/authelia/issues/12159))
([17397cd](https://redirect.github.com/authelia/authelia/commit/17397cdceceef0482b98c9bcad12dc8aef874405))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **session:** add startup check for backend connectivity
([#&#8203;12157](https://redirect.github.com/authelia/authelia/issues/12157))
([8149b6f](https://redirect.github.com/authelia/authelia/commit/8149b6fd06ee9cfa0ba0277974eb7834263dfc2a))
by [@&#8203;nightah](https://redirect.github.com/nightah)
- **storage:** harden one-time code consumption
([#&#8203;12095](https://redirect.github.com/authelia/authelia/issues/12095))
([9dc3eb6](https://redirect.github.com/authelia/authelia/commit/9dc3eb6d97a4a84457817a0b49f64aed85f5200f))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **storage:** incorrect query used for auth code by req id
([#&#8203;12139](https://redirect.github.com/authelia/authelia/issues/12139))
([dc6365d](https://redirect.github.com/authelia/authelia/commit/dc6365dea566e192513a7679521ef792a9cc14d5))
by
[@&#8203;james-d-elliott](https://redirect.github.com/james-d-elliott)
- **web:** quote peer dependency versions in pnpm-workspace
([#&#8203;12049](https://redirect.github.com/authelia/authelia/issues/12049))
([1fb10aa](https://redirect.github.com/authelia/authelia/commit/1fb10aa82dd83c1454d6f6172ec32fbd1f7d2149)),
closes
[#&#8203;12032](https://redirect.github.com/authelia/authelia/issues/12032)
by [@&#8203;nightah](https://redirect.github.com/nightah)

##### New Contributors

- [@&#8203;nicomem](https://redirect.github.com/nicomem) made their
first contribution in
[#&#8203;11885](https://redirect.github.com/authelia/authelia/pull/11885)
- [@&#8203;TanguyBaudrin](https://redirect.github.com/TanguyBaudrin)
made their first contribution in
[#&#8203;11750](https://redirect.github.com/authelia/authelia/pull/11750)
- [@&#8203;turtleinarock](https://redirect.github.com/turtleinarock)
made their first contribution in
[#&#8203;11912](https://redirect.github.com/authelia/authelia/pull/11912)
- [@&#8203;rpadovani](https://redirect.github.com/rpadovani) made their
first contribution in
[#&#8203;11720](https://redirect.github.com/authelia/authelia/pull/11720)
- [@&#8203;arylatt](https://redirect.github.com/arylatt) made their
first contribution in
[#&#8203;11899](https://redirect.github.com/authelia/authelia/pull/11899)
- [@&#8203;dubwoc](https://redirect.github.com/dubwoc) made their first
contribution in
[#&#8203;11933](https://redirect.github.com/authelia/authelia/pull/11933)

##### Docker Container

- `docker pull authelia/authelia:4.39.20`
- `docker pull ghcr.io/authelia/authelia:4.39.20`

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9hdXRoZWxpYSIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->

charts/stable/authelia/Chart.yaml

@@ -9,7 +9,7 @@ annotations:
   trueforge.org/min_helm_version: "3.14"
   trueforge.org/train: stable
 apiVersion: v2
-appVersion: 4.39.19
+appVersion: 4.39.20
 dependencies:
   - name: common
     version: 29.3.4
@@ -53,5 +53,5 @@ sources:
   - https://github.com/authelia/chartrepo
   - https://github.com/trueforge-org/truecharts/tree/master/charts/stable/authelia
 type: application
-version: 32.6.1
+version: 32.6.2
 

charts/stable/authelia/values.yaml

@@ -2,7 +2,7 @@
 image:
   repository: ghcr.io/authelia/authelia
   pullPolicy: IfNotPresent
-  tag: 4.39.19@sha256:0c824dcab1ae97c56bf673c5e77fe8cc6bcd400564555140cc8002a12c6b6463
+  tag: 4.39.20@sha256:1b363e9279e742397966333f364e0876ae02bf5c876de73e83af6d48c57ff51b
 
 # Raw Authelia configuration
 # Replace it with your configuration