Update ghcr.io/lldap/lldap Docker tag to v0.6.3 #255

Merged
ryuupendragon merged 1 commits from renovate/ghcr.io-lldap-lldap-0.x into main 2026-05-12 15:29:49 +05:30
Collaborator

This PR contains the following updates:

Package Update Change
ghcr.io/lldap/lldap patch v0.6.2-alpine-rootlessv0.6.3-alpine-rootless

Release Notes

lldap/lldap (ghcr.io/lldap/lldap)

v0.6.3

Compare Source

[0.6.3] 2026-05-01

Small release, focused on LDAP compatibility, TLS maintenance, dependency upgrades and documentation/examples.

Added
  • LDAP schema definitions for memberOf, modifyTimestamp and pwdChangedTime
  • Support for configuring the healthcheck listen addresses
  • Usernames are now included in password recovery emails
Changed
  • JWT exp and iat claims are now serialized as NumericDate values to comply with RFC7519
  • Migrated to rustls 0.23 and centralized TLS handling
  • The login form no longer enforces a password length limit
Fixed
  • pwdChangedTime is now emitted as LDAP GeneralizedTime instead of RFC3339
  • LDAP base-scope searches for non-existent entries now return NoSuchObject
  • cn equality filters are now case insensitive
  • The server now shuts down the database connection pool gracefully
  • The bootstrap script now handles empty globs correctly
Security
  • Updated the LDAP dependency stack, including ldap3_proto, in response to
    security advisory
    GHSA-qcxq-75wr-5cm8,
    where a specially crafted LDAP query could make the server crash
Cleanups
  • Split GraphQL queries and mutations into smaller modules
  • Refactored configuration and user update logic
  • Upgraded the Rust toolchain and shared dependencies
New services
  • Apache WebDAV
  • Continuwuity
  • Gerrit
  • Gogs
  • Open WebUI
  • OpenCloud
  • Pocket ID
  • Semaphore
  • TrueNAS

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/lldap/lldap](https://github.com/lldap/lldap) | patch | `v0.6.2-alpine-rootless` → `v0.6.3-alpine-rootless` | --- ### Release Notes <details> <summary>lldap/lldap (ghcr.io/lldap/lldap)</summary> ### [`v0.6.3`](https://github.com/lldap/lldap/releases/tag/v0.6.3) [Compare Source](https://github.com/lldap/lldap/compare/v0.6.2...v0.6.3) #### \[0.6.3] 2026-05-01 Small release, focused on LDAP compatibility, TLS maintenance, dependency upgrades and documentation/examples. ##### Added - LDAP schema definitions for `memberOf`, `modifyTimestamp` and `pwdChangedTime` - Support for configuring the healthcheck listen addresses - Usernames are now included in password recovery emails ##### Changed - JWT `exp` and `iat` claims are now serialized as NumericDate values to comply with RFC7519 - Migrated to `rustls` 0.23 and centralized TLS handling - The login form no longer enforces a password length limit ##### Fixed - `pwdChangedTime` is now emitted as LDAP GeneralizedTime instead of RFC3339 - LDAP base-scope searches for non-existent entries now return `NoSuchObject` - `cn` equality filters are now case insensitive - The server now shuts down the database connection pool gracefully - The bootstrap script now handles empty globs correctly ##### Security - Updated the LDAP dependency stack, including `ldap3_proto`, in response to security advisory [`GHSA-qcxq-75wr-5cm8`](https://github.com/kanidm/ldap3/security/advisories/GHSA-qcxq-75wr-5cm8), where a specially crafted LDAP query could make the server crash ##### Cleanups - Split GraphQL queries and mutations into smaller modules - Refactored configuration and user update logic - Upgraded the Rust toolchain and shared dependencies ##### New services - Apache WebDAV - Continuwuity - Gerrit - Gogs - Open WebUI - OpenCloud - Pocket ID - Semaphore - TrueNAS </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNjAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE2MC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
renovate-bot added 1 commit 2026-05-01 08:02:03 +05:30
ryuupendragon merged commit 682fea8e9a into main 2026-05-12 15:29:49 +05:30
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ryuupendragon/docker-compose#255