Commit graph

8 commits

Author SHA1 Message Date
3540050284 Update ghcr.io/pocket-id/pocket-id Docker tag to v2.11.0 (#21)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.10.0` → `v2.11.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.11.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2110)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.10.0...v2.11.0)

##### Bug Fixes

- postgres migration [`2025082`](20250822) remove public schema references ([#&#8203;1582](https://github.com/pocket-id/pocket-id/pull/1582) by [@&#8203;MarcoScabbiolo](https://github.com/MarcoScabbiolo))
- allow insecure callback URLs by default until next major release ([d9ead47](d9ead47d19) by [@&#8203;stonith404](https://github.com/stonith404))
- sort signup tokens by creation date explicitly ([77398a5](77398a558d) by [@&#8203;stonith404](https://github.com/stonith404))
- login code mobile ux ([#&#8203;1584](https://github.com/pocket-id/pocket-id/pull/1584) by [@&#8203;James18232](https://github.com/James18232))
- `INTERNAL_APP_URL` not reflected in UI URLs ([316cf47](316cf47ceb) by [@&#8203;stonith404](https://github.com/stonith404))
- ignore tab URL hashes in navigation history ([a3f27ec](a3f27ec2ec) by [@&#8203;stonith404](https://github.com/stonith404))
- block link-local addresses in SSRF protection ([9714296](9714296efb) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- update README ([ff5e565](ff5e565eeb) by [@&#8203;stonith404](https://github.com/stonith404))

##### Features

- add support for CIDR and IP address lists in `TRUST_PROXY` ([187cd8d](187cd8ddcd) by [@&#8203;stonith404](https://github.com/stonith404))

##### Other

- manage instance ID in the KV table ([#&#8203;1579](https://github.com/pocket-id/pocket-id/pull/1579) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#&#8203;1578](https://github.com/pocket-id/pocket-id/pull/1578) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- remove low demand issue closer ([bb03660](bb03660bd7) by [@&#8203;stonith404](https://github.com/stonith404))

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.10.0...v2.11.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #21
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-13 13:13:51 +02:00
624ff9e2ed Update ghcr.io/pocket-id/pocket-id Docker tag to v2.10.0 (#19)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.9.0` → `v2.10.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.10.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v2100)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.9.0...v2.10.0)

##### Bug Fixes

- login code null submission and login code length check ([#&#8203;1512](https://github.com/pocket-id/pocket-id/pull/1512) by [@&#8203;James18232](https://github.com/James18232))
- don't reject `offline_access`scope ([2ed7035](2ed703540d) by [@&#8203;stonith404](https://github.com/stonith404))
- CSP error with `response_mode=form_post` ([16b5c16](16b5c16a66) by [@&#8203;stonith404](https://github.com/stonith404))
- various bugs in observability / OTel ([#&#8203;1564](https://github.com/pocket-id/pocket-id/pull/1564) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- restore behavior that unknown scopes get ignored ([34e9a6d](34e9a6d198) by [@&#8203;stonith404](https://github.com/stonith404))
- re-check api permissions on access token refresh ([e8cb0c8](e8cb0c831c) by [@&#8203;stonith404](https://github.com/stonith404))
- merge requested scopes instead of replacing them ([5e2cc6f](5e2cc6f40e) by [@&#8203;stonith404](https://github.com/stonith404))
- device authorization resolve resource creating device\_code ([2f55b7c](2f55b7cbc3) by [@&#8203;stonith404](https://github.com/stonith404))
- add missing burst to rate limit ([f3b6ceb](f3b6ceb876) by [@&#8203;stonith404](https://github.com/stonith404))
- disable one time access token exchange for disabled users ([c85a4e6](c85a4e63da) by [@&#8203;stonith404](https://github.com/stonith404))
- /authorize endpoint crashes when list of scopes is empty ([#&#8203;1575](https://github.com/pocket-id/pocket-id/pull/1575) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- mobile layout improvements ([2910c51](2910c517bb) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- add link to API docs ([968d072](968d07229e) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong OpenAPI documentation ([da3677f](da3677f33d) by [@&#8203;stonith404](https://github.com/stonith404))

##### Features

- upgrade shadcn components ([80509c8](80509c83ee) by [@&#8203;stonith404](https://github.com/stonith404))
- improve error handling on authorize page ([8689ddd](8689ddd72b) by [@&#8203;stonith404](https://github.com/stonith404))
- add ability to skip consent for client ([d467855](d467855870) by [@&#8203;stonith404](https://github.com/stonith404))
- prompt admin with PKCE client support hint ([#&#8203;1499](https://github.com/pocket-id/pocket-id/pull/1499) by [@&#8203;James18232](https://github.com/James18232))
- login code input boxes ([#&#8203;1545](https://github.com/pocket-id/pocket-id/pull/1545) by [@&#8203;James18232](https://github.com/James18232))
- drop TOFU support for callback URL ([931a6c2](931a6c2adb) by [@&#8203;stonith404](https://github.com/stonith404))
- add OAuth APIs with scoped permissions ([#&#8203;1542](https://github.com/pocket-id/pocket-id/pull/1542) by [@&#8203;stonith404](https://github.com/stonith404))
- add support for unencrypted OIDC request parameter ([25dcad7](25dcad757a) by [@&#8203;stonith404](https://github.com/stonith404))
- add description field to oidc clients ([#&#8203;1547](https://github.com/pocket-id/pocket-id/pull/1547) by [@&#8203;seanmckenzie428](https://github.com/seanmckenzie428))
- add tab bar navigation for crowded pages ([28a553f](28a553f63b) by [@&#8203;stonith404](https://github.com/stonith404))

##### Other

- close low-demand feature requests ([35987b9](35987b9c8d) by [@&#8203;stonith404](https://github.com/stonith404))
- Bump the "all-dependencies" group with 2 updates across multiple ecosystems ([#&#8203;1528](https://github.com/pocket-id/pocket-id/pull/1528) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- fix locators after shadcn upgrade ([dbbe2a4](dbbe2a403a) by [@&#8203;stonith404](https://github.com/stonith404))
- use fosite for OAuth 2.0 logic ([#&#8203;1520](https://github.com/pocket-id/pocket-id/pull/1520) by [@&#8203;stonith404](https://github.com/stonith404))
- wrap last two migrations into transaction ([cf9a319](cf9a31986f) by [@&#8203;stonith404](https://github.com/stonith404))
- remove dead code ([519cda0](519cda0eef) by [@&#8203;stonith404](https://github.com/stonith404))
- update vulnerable dependencies ([e538ea0](e538ea0bf1) by [@&#8203;stonith404](https://github.com/stonith404))
- fix flaky test ([7eaaea7](7eaaea717b) by [@&#8203;stonith404](https://github.com/stonith404))
- add AGENTS.md ([d0243fe](d0243fe396) by [@&#8203;stonith404](https://github.com/stonith404))
- use goreleaser for binaries and static image builds ([#&#8203;1478](https://github.com/pocket-id/pocket-id/pull/1478) by [@&#8203;kmendell](https://github.com/kmendell))
- add support for Docker Hub ([99ab38d](99ab38dc79) by [@&#8203;stonith404](https://github.com/stonith404))
- remove static next image tag ([49305ed](49305ed1f9) by [@&#8203;stonith404](https://github.com/stonith404))
- don't build unnecessary binaries for `next` image ([4b957a0](4b957a0106) by [@&#8203;stonith404](https://github.com/stonith404))
- change Depot project ([cdc2374](cdc23744ae) by [@&#8203;stonith404](https://github.com/stonith404))
- don't tag `next` image with current version ([cf54786](cf54786cc3) by [@&#8203;stonith404](https://github.com/stonith404))
- add exempt user to PR quality checks ([254ae88](254ae88cda) by [@&#8203;stonith404](https://github.com/stonith404))
- migrate API key functionality to single `apikey` module ([9fce987](9fce987106) by [@&#8203;stonith404](https://github.com/stonith404))
- migrate Webauthn functionality to single `webauthn` module ([58fcf7c](58fcf7cbe6) by [@&#8203;stonith404](https://github.com/stonith404))
- migrate signup functionality to single `usersignup` module ([ecad31c](ecad31cae2) by [@&#8203;stonith404](https://github.com/stonith404))
- make API key renewal date picker navigation date-independent ([#&#8203;1560](https://github.com/pocket-id/pocket-id/pull/1560) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- integrate Francis actor framework for background jobs, cron scheduling, and rate limiting ([#&#8203;1556](https://github.com/pocket-id/pocket-id/pull/1556) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- Bump the "all-dependencies" group with 3 updates across multiple ecosystems ([#&#8203;1563](https://github.com/pocket-id/pocket-id/pull/1563) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- use go-kit for sending emails ([#&#8203;1565](https://github.com/pocket-id/pocket-id/pull/1565) by [@&#8203;ItalyPaleAle](https://github.com/ItalyPaleAle))
- update AAGUIDs ([#&#8203;1567](https://github.com/pocket-id/pocket-id/pull/1567) by [@&#8203;github-actions](https://github.com/github-actions)\[bot])
- move Pocket ID specific logic from Fosite into Pocket ID repo ([9a94aa0](9a94aa0694) by [@&#8203;stonith404](https://github.com/stonith404))
- update Fosite version ([337fc6f](337fc6fd1e) by [@&#8203;stonith404](https://github.com/stonith404))
- pass transaction to `resolveResource` ([7667377](7667377c98) by [@&#8203;stonith404](https://github.com/stonith404))
- remove redundant dtos ([fa2d08c](fa2d08cb6d) by [@&#8203;stonith404](https://github.com/stonith404))
- rename migrations ([c72da58](c72da58eaf) by [@&#8203;stonith404](https://github.com/stonith404))
- remove duplicate fosite config properties ([190914f](190914fd72) by [@&#8203;stonith404](https://github.com/stonith404))
- fix migration version in `database.json` ([a5f2192](a5f2192d67) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong migration name ([ce7d3a7](ce7d3a7e1d) by [@&#8203;stonith404](https://github.com/stonith404))
- run formatter ([59a6868](59a6868ecd) by [@&#8203;stonith404](https://github.com/stonith404))
- upgrade go version ([f62d476](f62d476c56) by [@&#8203;stonith404](https://github.com/stonith404))

##### Performance Improvements

- include permissions in api list response ([8035a4c](8035a4c8d5) by [@&#8203;stonith404](https://github.com/stonith404))

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.9.0...v2.10.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #19
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-07-12 19:11:30 +02:00
51286912e9 Update ghcr.io/pocket-id/pocket-id Docker tag to v2.9.0 (#4)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/pocket-id/pocket-id](https://github.com/pocket-id/pocket-id) | minor | `v2.8.0` → `v2.9.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>pocket-id/pocket-id (ghcr.io/pocket-id/pocket-id)</summary>

### [`v2.9.0`](https://github.com/pocket-id/pocket-id/blob/HEAD/CHANGELOG.md#v290)

[Compare Source](https://github.com/pocket-id/pocket-id/compare/v2.8.0...v2.9.0)

##### Bug Fixes

- issues with loading new font ([#&#8203;1496](https://github.com/pocket-id/pocket-id/pull/1496) by [@&#8203;MelvinSnijders](https://github.com/MelvinSnijders))
- PAR parameters not respected by authorize page ([3d9d4de](3d9d4de619) by [@&#8203;stonith404](https://github.com/stonith404))
- add responsive css for api/user/group/client page add buttons ([#&#8203;1508](https://github.com/pocket-id/pocket-id/pull/1508) by [@&#8203;James18232](https://github.com/James18232))
- load Gloock font from static path instead of inline ([89b4abb](89b4abb8b5) by [@&#8203;stonith404](https://github.com/stonith404))
- update terminology from public key code exchange to proof key co… ([#&#8203;1515](https://github.com/pocket-id/pocket-id/pull/1515) by [@&#8203;maxwassiljew](https://github.com/maxwassiljew))
- callback URL validation not validated if prompt=none ([8a75774](8a75774971) by [@&#8203;stonith404](https://github.com/stonith404))
- passkey card not rounded ([84678c3](84678c3a7b) by [@&#8203;stonith404](https://github.com/stonith404))

##### Documentation

- add AI Usage Policy to CONTRIBUTING.md ([fea933b](fea933b62d) by [@&#8203;stonith404](https://github.com/stonith404))
- add PR template ([bf9f76b](bf9f76bbd5) by [@&#8203;stonith404](https://github.com/stonith404))
- add "needs more upvotes" label as default ([fc42f62](fc42f6211d) by [@&#8203;stonith404](https://github.com/stonith404))
- fix link to watchtower repo ([#&#8203;1500](https://github.com/pocket-id/pocket-id/pull/1500) by [@&#8203;wollew](https://github.com/wollew))

##### Features

- add support for Pushed Authorization Requests (RFC9126) ([#&#8203;1404](https://github.com/pocket-id/pocket-id/pull/1404) by [@&#8203;Zenithar](https://github.com/Zenithar))

##### Other

- fix linter issues ([4f97cd4](4f97cd4188) by [@&#8203;stonith404](https://github.com/stonith404))
- update AAGUIDs ([#&#8203;1511](https://github.com/pocket-id/pocket-id/pull/1511) by [@&#8203;github-actions](https://github.com/github-actions)\[bot])
- run svelte check and unit tests in breaking branches ([83b45f6](83b45f682d) by [@&#8203;stonith404](https://github.com/stonith404))
- run formatter ([2726ddd](2726ddd0c2) by [@&#8203;stonith404](https://github.com/stonith404))
- bump vite from 8.0.13 to 8.0.16 ([#&#8203;1521](https://github.com/pocket-id/pocket-id/pull/1521) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])
- npm dependabot not run from root ([c0d96a0](c0d96a0b13) by [@&#8203;stonith404](https://github.com/stonith404))
- fix wrong assertion ([effd2a1](effd2a146f) by [@&#8203;stonith404](https://github.com/stonith404))
- Bump the "all-dependencies" group with 4 updates across multiple ecosystems ([#&#8203;1523](https://github.com/pocket-id/pocket-id/pull/1523) by [@&#8203;dependabot](https://github.com/dependabot)\[bot])

**Full Changelog**: <https://github.com/pocket-id/pocket-id/compare/v2.8.0...v2.9.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: #4
Co-authored-by: Renovate Bot <renovate@jfreudenberger.de>
Co-committed-by: Renovate Bot <renovate@jfreudenberger.de>
2026-06-22 22:24:51 +02:00
7d3ce606ca Inline oci image versions and add image digests 2026-06-18 02:29:34 +02:00
0f29ecacfd pocket-id: 2.6.2 -> 2.8.0 2026-06-11 23:21:13 +02:00
c9326284d3 Use netbird url for GeoLite city database download in pocket-id 2026-05-04 01:50:25 +02:00
90b63bd24f Rename traefik network to traefik
Webproxy is the name intended for the network where the netbird
container used for proxying resides.
2026-04-30 23:04:04 +02:00
e8d9329e8e Add containerized pocket-id module 2026-04-25 02:32:41 +02:00