This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/drakkan/sftpgo](https://redirect.github.com/drakkan/sftpgo) |
patch | `4d47ba4` → `d915394` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/18710) for more information.
Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.
---
### Release Notes
<details>
<summary>drakkan/sftpgo (ghcr.io/drakkan/sftpgo)</summary>
###
[`v2.7.4`](https://redirect.github.com/drakkan/sftpgo/releases/tag/v2.7.4)
[Compare
Source](https://redirect.github.com/drakkan/sftpgo/compare/v2.7.3...v2.7.4)
##### New features
- Symbolic links: the new `symlink_mode` setting selects, per backend,
whether clients holding the `create_symlinks` permission may create
symbolic links on the local filesystem, the SFTP backend, or both. It is
disabled by default. Creating a link requires `create_symlinks` on both
the link's directory and the directory it points into, so per-directory
permissions are enforced consistently on the path the client requests.
- OIDC redirect: the WebClient OIDC login now preserves a `next`
redirect target across the IdP round-trip.
##### Bug fixes
- httpd: return after a CSRF failure in the web client login. The login
POST handler rendered the CSRF error page but did not return, so
execution fell through into the post-connect hook and the credential
verification pipeline. Added the missing `return` to match the admin
login, password reset, and setup handlers.
##### Hardening
- Improve symbolic links handling and add more test cases.
- httpd: clean and unify the WebClient post-login redirect target
validation.
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzMC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImFwcC9zZnRwZ28iLCJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->
