Skip to content

core: Bump fido2 from 1.1.3 to 1.2.0#12218

Merged
BeryJu merged 1 commit intomainfrom
dependabot/pip/fido2-1.2.0
Nov 28, 2024
Merged

core: Bump fido2 from 1.1.3 to 1.2.0#12218
BeryJu merged 1 commit intomainfrom
dependabot/pip/fido2-1.2.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 28, 2024

Bumps fido2 from 1.1.3 to 1.2.0.

Release notes

Sourced from fido2's releases.

python-fido2 1.2.0

Version 1.2.0 (released 2024-11-27)

  • Improved extension handling: Several new extensions are now supported, both for Fido2Client and WindowsClient. Extension APIs have been redesigned, and old APIs have been deprecated, slated for removal in version 2.0.
    • Disable hmac-secret extension by default, preferring prf.
  • Improved (de-)serialization of dataclasses to/from JSON-friendly dicts.
  • Fido2Client:
    • Support allowCredentials/excludeCredentials of arbitrary length.
    • Handle PUAT_REQUIRED by re-attempting with PIN/UV.
  • Allow localhost (and subdomains) to use http:// in RP ID verification by default.
  • NFC: Support for Authenticators that return SW=61XX on SELECT.
  • USB: Improve connection recovery and use more specific exceptions for errors.
  • Fix: Handle residentKey=preferred properly.
  • Fix: Handle Authentictors that do not pass extensions in GetInfo.
Changelog

Sourced from fido2's changelog.

  • Version 1.2.0 (released 2024-11-27) ** Improved extension handling: Several new extensions are now supported, both for Fido2Client and WindowsClient. Extension APIs have been redesigned, and old APIs have been deprecated, slated for removal in version 2.0. *** Disable hmac-secret extension by default, preferring prf. ** Improved (de-)serialization of dataclasses to/from JSON-friendly dicts. ** Fido2Client: *** Support allowCredentials/excludeCredentials of arbitrary length. *** Handle PUAT_REQUIRED by re-attempting with PIN/UV. ** Allow localhost (and subdomains) to use http:// in RP ID verification by default. ** NFC: Support for Authenticators that return SW=61XX on SELECT. ** USB: Improve connection recovery and use more specific exceptions for errors. ** Fix: Handle residentKey=preferred properly. ** Fix: Handle Authentictors that do not pass extensions in GetInfo.
Commits
  • d529d2a Bump version and update NEWS
  • 5b0c87c Update public suffix list
  • 43d39c5 Deprecate U2F server class
  • 12fd6ab Improve docstrings
  • 55b0b22 Exclude "logger" from docs
  • b11537f Improve docstrings for extensions
  • d40f7e7 Move extension outputs class to webauthn.py
  • 1a950e1 Add TODO comments
  • 10c4575 Bump server example dependencies and update suffix list
  • 023e880 More type fixes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fido2](https://github.com/Yubico/python-fido2) from 1.1.3 to 1.2.0.
- [Release notes](https://github.com/Yubico/python-fido2/releases)
- [Changelog](https://github.com/Yubico/python-fido2/blob/main/NEWS)
- [Commits](Yubico/python-fido2@1.1.3...1.2.0)

---
updated-dependencies:
- dependency-name: fido2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner November 28, 2024 04:23
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 28, 2024
@netlify
Copy link

netlify bot commented Nov 28, 2024

Deploy Preview for authentik-storybook ready!

Name Link
🔨 Latest commit a15bbc6
🔍 Latest deploy log https://app.netlify.com/sites/authentik-storybook/deploys/6747f059109108000888d83d
😎 Deploy Preview https://deploy-preview-12218--authentik-storybook.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@netlify
Copy link

netlify bot commented Nov 28, 2024

Deploy Preview for authentik-docs ready!

Name Link
🔨 Latest commit a15bbc6
🔍 Latest deploy log https://app.netlify.com/sites/authentik-docs/deploys/6747f059790a6d0008b24202
😎 Deploy Preview https://deploy-preview-12218--authentik-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@github-actions
Copy link
Contributor

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-a15bbc6fe69d0c0558d90e6bf2b6f2dd8d7f2a51
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

For arm64, use these values:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-a15bbc6fe69d0c0558d90e6bf2b6f2dd8d7f2a51-arm64
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-a15bbc6fe69d0c0558d90e6bf2b6f2dd8d7f2a51

For arm64, use these values:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
global:
    image:
        repository: ghcr.io/goauthentik/dev-server
        tag: gh-a15bbc6fe69d0c0558d90e6bf2b6f2dd8d7f2a51-arm64

Afterwards, run the upgrade commands from the latest release notes.

@BeryJu BeryJu merged commit 87259c3 into main Nov 28, 2024
@BeryJu BeryJu deleted the dependabot/pip/fido2-1.2.0 branch November 28, 2024 10:26
kensternberg-authentik added a commit that referenced this pull request Dec 2, 2024
* main: (31 commits)
  web/admin: bugfix: dual select initialization revision (#12051)
  web: update tests for Chromedriver 131 (#12199)
  website/integrations: add Aruba Orchestrator (#12220)
  core: bump aws-cdk-lib from 2.167.1 to 2.171.1 (#12237)
  website: bump aws-cdk from 2.167.1 to 2.171.1 in /website (#12241)
  core, web: update translations (#12236)
  core: bump python-kadmin-rs from 0.2.0 to 0.3.0 (#12238)
  core: bump pytest from 8.3.3 to 8.3.4 (#12239)
  core: bump drf-spectacular from 0.27.2 to 0.28.0 (#12240)
  core, web: update translations (#12222)
  core: Bump ruff from 0.8.0 to 0.8.1 (#12224)
  core: Bump ua-parser from 0.18.0 to 1.0.0 (#12225)
  core: Bump msgraph-sdk from 1.13.0 to 1.14.0 (#12226)
  stages/authenticator_webauthn: Update FIDO MDS3 & Passkey aaguid blobs (#12234)
  website/docs: install: add aws (#12082)
  core: Bump pyjwt from 2.10.0 to 2.10.1 (#12217)
  core: Bump fido2 from 1.1.3 to 1.2.0 (#12218)
  core: Bump cryptography from 43.0.3 to 44.0.0 (#12219)
  providers/oauth2: allow m2m for JWKS without alg in keys (#12196)
  translate: Updates for file locale/en/LC_MESSAGES/django.po in fr (#12210)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant