This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/authelia/authelia](https://redirect.github.com/authelia/authelia/pkgs/container/authelia) ([source](https://redirect.github.com/authelia/authelia)) | patch | `0c824dc` → `1b363e9` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/18710) for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>authelia/authelia (ghcr.io/authelia/authelia)</summary> ### [`v4.39.20`](https://redirect.github.com/authelia/authelia/releases/tag/v4.39.20) [Compare Source](https://redirect.github.com/authelia/authelia/compare/v4.39.19...v4.39.20) #### Security Fixes This release contains important security fixes. We encourage users to update as soon as practical. The following advisories accompany this release: - [Edge Case Access Control Rule Domain Miss Due to Lack of Canonicalization](https://redirect.github.com/authelia/authelia/security/advisories/GHSA-j748-h363-wqj8) reported by [@​j0hndo](https://redirect.github.com/j0hndo), fixed by [@​james-d-elliott](https://redirect.github.com/james-d-elliott), reviewed by [@​nightah](https://redirect.github.com/nightah) and [@​Crowley723](https://redirect.github.com/Crowley723) - [Missing Username Canonicalization in Basic Auth when using LDAP ](https://redirect.github.com/authelia/authelia/security/advisories/GHSA-hjj4-hfjm-fmrj) reported by [@​Nadav0077](https://redirect.github.com/Nadav0077), fixed by [@​james-d-elliott](https://redirect.github.com/james-d-elliott), reviewed by [@​nightah](https://redirect.github.com/nightah) and [@​Crowley723](https://redirect.github.com/Crowley723) ##### Bug Fixes - **authentication:** incorrect bind mode ([#​12094](https://redirect.github.com/authelia/authelia/issues/12094)) ([dc1d1d6](https://redirect.github.com/authelia/authelia/commit/dc1d1d6f1fa59890565fd06d94e6007414b4a465)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **authorization:** case-insensitive domain matching \[security] ([#​12169](https://redirect.github.com/authelia/authelia/issues/12169)) ([b6d1d60](https://redirect.github.com/authelia/authelia/commit/b6d1d60baa02f216fdb19f5dfeaf2e805829508a)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **authorization:** oauth2 client credentials considered anonymous ([#​12141](https://redirect.github.com/authelia/authelia/issues/12141)) ([54de0c9](https://redirect.github.com/authelia/authelia/commit/54de0c9b783a946882673b4d6b85ac9d85157573)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **configuration:** add default attributes to freeipa ([#​12155](https://redirect.github.com/authelia/authelia/issues/12155)) ([f8203be](https://redirect.github.com/authelia/authelia/commit/f8203beb780c79dbbd15b010fd473c4478699ff0)) by [@​kaysond](https://redirect.github.com/kaysond) - **configuration:** include specific warning about ports ([#​12145](https://redirect.github.com/authelia/authelia/issues/12145)) ([033533e](https://redirect.github.com/authelia/authelia/commit/033533ec9a60152544b77fd3534670b43e6158e1)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **configuration:** preserve dots in map key names during koanf remap ([#​11803](https://redirect.github.com/authelia/authelia/issues/11803)) ([211a4cd](https://redirect.github.com/authelia/authelia/commit/211a4cd1a4ac27a994dc70523e09a75e7064f95b)) by [@​nightah](https://redirect.github.com/nightah) - **expression:** add missing extensions ([#​11226](https://redirect.github.com/authelia/authelia/issues/11226)) ([4c7ffd3](https://redirect.github.com/authelia/authelia/commit/4c7ffd348c484f282e0828144e0ac46bf150a5c3)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **handlers:** basic auth username canonicalization \[security] ([#​12170](https://redirect.github.com/authelia/authelia/issues/12170)) ([b8985b5](https://redirect.github.com/authelia/authelia/commit/b8985b57b70acdff8f204ed426ff619e763461ad)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **handlers:** hoist issuer checks ([#​12160](https://redirect.github.com/authelia/authelia/issues/12160)) ([ab5dca7](https://redirect.github.com/authelia/authelia/commit/ab5dca7329f9cb0567bfa10895c703cc1e2458e8)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **metrics:** ensure unknown bans are measured ([#​11999](https://redirect.github.com/authelia/authelia/issues/11999)) ([3adae90](https://redirect.github.com/authelia/authelia/commit/3adae9081c41032986c7dfabb74b3202a6359927)), closes [#​11972](https://redirect.github.com/authelia/authelia/issues/11972) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **metrics:** go collectors not registered ([#​11894](https://redirect.github.com/authelia/authelia/issues/11894)) ([9cd8812](https://redirect.github.com/authelia/authelia/commit/9cd88129ee98c2a757ccc1aa18e8b73dcc46d64c)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **middlewares:** add rate limit exclusions ([#​12159](https://redirect.github.com/authelia/authelia/issues/12159)) ([17397cd](https://redirect.github.com/authelia/authelia/commit/17397cdceceef0482b98c9bcad12dc8aef874405)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **session:** add startup check for backend connectivity ([#​12157](https://redirect.github.com/authelia/authelia/issues/12157)) ([8149b6f](https://redirect.github.com/authelia/authelia/commit/8149b6fd06ee9cfa0ba0277974eb7834263dfc2a)) by [@​nightah](https://redirect.github.com/nightah) - **storage:** harden one-time code consumption ([#​12095](https://redirect.github.com/authelia/authelia/issues/12095)) ([9dc3eb6](https://redirect.github.com/authelia/authelia/commit/9dc3eb6d97a4a84457817a0b49f64aed85f5200f)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **storage:** incorrect query used for auth code by req id ([#​12139](https://redirect.github.com/authelia/authelia/issues/12139)) ([dc6365d](https://redirect.github.com/authelia/authelia/commit/dc6365dea566e192513a7679521ef792a9cc14d5)) by [@​james-d-elliott](https://redirect.github.com/james-d-elliott) - **web:** quote peer dependency versions in pnpm-workspace ([#​12049](https://redirect.github.com/authelia/authelia/issues/12049)) ([1fb10aa](https://redirect.github.com/authelia/authelia/commit/1fb10aa82dd83c1454d6f6172ec32fbd1f7d2149)), closes [#​12032](https://redirect.github.com/authelia/authelia/issues/12032) by [@​nightah](https://redirect.github.com/nightah) ##### New Contributors - [@​nicomem](https://redirect.github.com/nicomem) made their first contribution in [#​11885](https://redirect.github.com/authelia/authelia/pull/11885) - [@​TanguyBaudrin](https://redirect.github.com/TanguyBaudrin) made their first contribution in [#​11750](https://redirect.github.com/authelia/authelia/pull/11750) - [@​turtleinarock](https://redirect.github.com/turtleinarock) made their first contribution in [#​11912](https://redirect.github.com/authelia/authelia/pull/11912) - [@​rpadovani](https://redirect.github.com/rpadovani) made their first contribution in [#​11720](https://redirect.github.com/authelia/authelia/pull/11720) - [@​arylatt](https://redirect.github.com/arylatt) made their first contribution in [#​11899](https://redirect.github.com/authelia/authelia/pull/11899) - [@​dubwoc](https://redirect.github.com/dubwoc) made their first contribution in [#​11933](https://redirect.github.com/authelia/authelia/pull/11933) ##### Docker Container - `docker pull authelia/authelia:4.39.20` - `docker pull ghcr.io/authelia/authelia:4.39.20` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9hdXRoZWxpYSIsImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
title
| title |
|---|
| TrueCharts |
Community Helm Chart Catalog
TrueCharts is a catalog of highly optimised Helm Charts. Made for the community, by the community!
All our charts are supposed to work together and be easy to setup using any helm-compatible deployment tool, above all, give the average user more than enough options to tune things to their liking.
Getting started using TrueCharts
Support
Please check our FAQ, manual and Issue tracker There is a significant chance your issue has been reported before!
Still something not working as expected? Contact us! and we'll figure it out together!
Development
Our development process is fully distributed and agile, so every chart-maintainer is free to set their own roadmap and development speed and does not have to comply to a centralised roadmap. This ensures freedom and flexibility for everyone involved and makes sure you, the end user, always has the latest and greatest of every Chart installed.
Getting into creating Charts
For more information check the website: https://truecharts.org
Contact and Support
To contact the TrueCharts project:
-
Create an issue on Github issues
-
Open a Support Ticket
-
Send us an email
Contributors ✨
Thanks goes to these wonderful people (emoji key):
This project follows the all-contributors specification. Contributions of any kind welcome!
Licence
Truecharts, is primarily based on the AGPL-v3 license, this ensures almost everyone can use and modify our charts. Licences can vary on a per-Chart basis. This can easily be seen by the presence of a "LICENSE" file in that folder.
An exception to this, has been made for every document inside folders labeled as docs or doc and their subfolders: those folders are not licensed under AGPL-v3 and are considered "all rights reserved". Said content can be modified and changes submitted per PR, in accordance to the github End User License Agreement.
SPDX-License-Identifier: AGPL-3.0