Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 22, 2023

Bumps rodauth from 2.10.0 to 2.30.0.

Changelog

Sourced from rodauth's changelog.

=== 2.30.0 (2023-05-22)

  • Make load_memory in the remember feature not raise NoMethodError if logged in when the account no longer exists (jeremyevans) (#331)

  • Add webauthn_autofill feature, for supporting autofill of webauthn information on the login form (janko) (#328)

=== 2.29.0 (2023-03-22)

  • Support :render=>false plugin options (davekaro) (#319)

  • Add remove_active_session method for removing the active session for a given session id (janko) (#317)

  • Remove current active session when adding new active session (janko) (#314)

  • Extend the remember cookie deadline once an hour by default while logged in (janko, jeremyevans) (#313)

  • Add account! method for returning associated account or loading account based on the session value (janko) (#309)

=== 2.28.0 (2023-02-22)

  • Skip rendering reset password request form on invalid internal request logins (janko) (#303)

  • Make logged_in? return false if using verify_account_grace_period feature and grace_period has expired (janko) (#300)

  • Make password_hash method public (janko) (#299)

  • Add webauthn_key_insert_hash auth method to webauthn feature to control inserts into webauthn keys table (janko) (#298)

=== 2.27.0 (2023-01-24)

  • Rename webauth_credentials_for_get to webauthn_credentials_for_get for consistency (janko) (#295)

  • Hide WebAuthn text inputs by default when using Bootstrap (janko) (#294)

  • Attempt to avoid database errors when invalid tokens are submitted (jeremyevans)

  • Allow button template to be overridden just as other templates can be (jeremyevans) (#280)

=== 2.26.1 (2022-11-08)

  • Fix regression in QR code generation in otp feature causing all black QR code (janko) (#279)

=== 2.26.0 (2022-10-21)

  • Raise a more informative error when using a feature requiring hmac_secret but not setting hmac_secret (janko) (#271)

  • Limit parameter bytesize to 1024 by default, override with max_param_bytesize configuration method (jeremyevans)

  • Skip displaying links for disabled routes (janko) (#269)

... (truncated)

Commits
  • 5c3747b Bump version to 2.30.0
  • 90f5b6b DRY up password hash table access in specs
  • 4d400fc Stop testing Ruby 2.2 in CI as it no longer works with ubuntu-latest
  • 5014ad4 Move to actions/checkout@v3
  • bf99445 Fix spec authorization header to not use a newline (Fixes #330)
  • 5968d21 Make load_memory in the remember feature not raise NoMethodError if logged in...
  • 5b39b4c Make webauthn_login_options? return boolean
  • 747122e Add WebAuthn Autofill feature
  • f604dae Fix db_setup_postgres rake task to work on PostgreSQL 15+
  • cb72e98 Bump version to 2.29.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rodauth](https://github.com/jeremyevans/rodauth) from 2.10.0 to 2.30.0.
- [Changelog](https://github.com/jeremyevans/rodauth/blob/master/CHANGELOG)
- [Commits](jeremyevans/rodauth@2.10.0...2.30.0)

---
updated-dependencies:
- dependency-name: rodauth
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants