ryuupendragon/docker-compose
0
0
Fork 0
Code Issues 1 Pull Requests 11 Actions Packages Projects Releases Wiki Activity

Update ghcr.io/steveiliop56/tinyauth Docker tag to v5.0.4 - autoclosed #224

Closed
renovate-bot wants to merge 1 commits from renovate/ghcr.io-steveiliop56-tinyauth-5.x into main
pull from: renovate/ghcr.io-steveiliop56-tinyauth-5.x
merge into: ryuupendragon:main
Conversation 0 Commits 1 Files Changed 1 +1 -1
renovate-bot commented 2026-03-15 08:02:34 +05:30
Collaborator
Copy Link

This PR contains the following updates:

Package Update Change
ghcr.io/steveiliop56/tinyauth patch v5.0.1 → v5.0.4

Release Notes

steveiliop56/tinyauth (ghcr.io/steveiliop56/tinyauth)

v5.0.4

Compare Source

Tinyauth v5.0.4

Last patch I promise...or not

This release addresses issue #​706 regarding the X-Forwarded-URI header.

Improvements

  • Support for X-Original-URI header

Fixes

  • X-Forwarded-URI should not be required

Technical

  • Update dependencies

Please let me know of any issues so as I can fix them as soon as possible.

v5.0.3

Compare Source

Tinyauth v5.0.3

[!WARNING]
This release contains security fixes, please update as soon as possible.

This release addresses GHSA-xg2q-62g2-cvcm and GHSA-3q28-qjrv-qr39 discovered by @​e1024x.

Fixes

  • Don't continue authentication on empty X-Forwarded-* headers.
  • Ensure user is logged in and not in the 2FA flow in the authorize endpoint
  • Ensure client ID matches the code entry before issuing a token

Technical

  • Update dependencies
  • Update translations

Please let me know of any issues so as I can fix them as soon as possible.

v5.0.2

Compare Source

Tinyauth v5.0.2

Another small patch addressing issues with the healthcheck command and OIDC key management.

Improvements

Fixes

  • Add kid to ID token JWT header
  • Make state a non-required field in the authorize request
  • Accept port and address individually in the healthcheck command @​luizfelipefb

Technical

  • Bump dependencies

New Contributors

Please let me know of any issues so as I can fix them as soon as possible.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/steveiliop56/tinyauth](https://github.com/steveiliop56/tinyauth) | patch | `v5.0.1` → `v5.0.4` | --- ### Release Notes <details> <summary>steveiliop56/tinyauth (ghcr.io/steveiliop56/tinyauth)</summary> ### [`v5.0.4`](https://github.com/steveiliop56/tinyauth/releases/tag/v5.0.4) [Compare Source](https://github.com/steveiliop56/tinyauth/compare/v5.0.3...v5.0.4) ### Tinyauth v5.0.4 *Last patch I promise...or not* This release addresses issue [#&#8203;706](https://github.com/steveiliop56/tinyauth/issues/706) regarding the `X-Forwarded-URI` header. #### Improvements - Support for `X-Original-URI` header #### Fixes - `X-Forwarded-URI` should not be required #### Technical - Update dependencies Please let me know of any issues so as I can fix them as soon as possible. ### [`v5.0.3`](https://github.com/steveiliop56/tinyauth/releases/tag/v5.0.3) [Compare Source](https://github.com/steveiliop56/tinyauth/compare/v5.0.2...v5.0.3) ### Tinyauth v5.0.3 > \[!WARNING] > This release contains security fixes, please update as soon as possible. This release addresses [GHSA-xg2q-62g2-cvcm](https://github.com/steveiliop56/tinyauth/security/advisories/GHSA-xg2q-62g2-cvcm) and [GHSA-3q28-qjrv-qr39](https://github.com/steveiliop56/tinyauth/security/advisories/GHSA-3q28-qjrv-qr39) discovered by [@&#8203;e1024x](https://github.com/e1024x). #### Fixes - Don't continue authentication on empty `X-Forwarded-*` headers. - Ensure user is logged in and not in the 2FA flow in the authorize endpoint - Ensure client ID matches the code entry before issuing a token #### Technical - Update dependencies - Update translations Please let me know of any issues so as I can fix them as soon as possible. ### [`v5.0.2`](https://github.com/steveiliop56/tinyauth/releases/tag/v5.0.2) [Compare Source](https://github.com/steveiliop56/tinyauth/compare/v5.0.1...v5.0.2) ### Tinyauth v5.0.2 Another small patch addressing issues with the `healthcheck` command and OIDC key management. #### Improvements - Support for PKIX public keys [@&#8203;DarkDare](https://github.com/DarkDare) #### Fixes - Add `kid` to ID token JWT header - Make state a non-required field in the authorize request - Accept port and address individually in the `healthcheck` command [@&#8203;luizfelipefb](https://github.com/luizfelipefb) #### Technical - Bump dependencies #### New Contributors - [@&#8203;luizfelipefb](https://github.com/luizfelipefb) made their first contribution in [#&#8203;698](https://github.com/steveiliop56/tinyauth/pull/698) Please let me know of any issues so as I can fix them as soon as possible. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My43NC4wIiwidXBkYXRlZEluVmVyIjoiNDMuNzQuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->
renovate-bot added 1 commit 2026-03-15 08:02:34 +05:30
Update ghcr.io/steveiliop56/tinyauth Docker tag to v5.0.4 5baf390805
renovate-bot changed title from Update ghcr.io/steveiliop56/tinyauth Docker tag to v5.0.4 to Update ghcr.io/steveiliop56/tinyauth Docker tag to v5.0.4 - autoclosed 2026-03-20 18:18:45 +05:30
renovate-bot closed this pull request 2026-03-20 18:18:45 +05:30

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
renovate-bot ryuupendragon
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ryuupendragon/docker-compose#224
Delete Branch "renovate/ghcr.io-steveiliop56-tinyauth-5.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?