This website requires JavaScript.
c5e11b5f29
Bump version to 0.1.0-RC.13 [skip ci]
CI
2026-11-11 01:58:11 +00:00
0b5a59badb
Merge pull request 'Merge develop into release/0.1 for 0.1.0-RC.13' (#75 ) from merge/develop-into-release-0-1-rc13 into release/0.1
james.maes
2026-11-11 01:45:30 +00:00
c3ca9c8ffc
Merge develop into release/0.1 for 0.1.0-RC.13 (one permission universe per resolution; token_broker check only when tokens are enabled)
james.maes and Claude Fable 5.2
2026-11-10 19:33:02 -06:00
7fcf061455
Merge pull request 'perf(policy): one permission universe per resolution; PolicyResult.replacement' (#74 ) from perf/policy-resolution-single-universe into develop
james.maes
2026-11-11 01:08:27 +00:00
537e56d744
perf(policy): one permission universe per resolution; PolicyResult.replacement
james.maes and Claude Fable 5.2
2026-11-10 18:51:54 -06:00
620dfccb7f
ci: re-run (run 7362 could not start Testcontainers: runner Docker networking error; unit tests passed)
james.maes and Claude Fable 5.2
2026-11-10 12:43:40 -06:00
f19ddf83ee
docs(session): the idle timeout counts requests; example at 15 minutes
james.maes and Claude Fable 5.2
2026-11-10 12:13:18 -06:00
5bf86725eb
fix(session): Authentik answers 403 when the account may view no provider
james.maes and Claude Fable 5.2
2026-11-10 11:40:03 -06:00
848378d3bc
feat(session): session policy declared in host code, checked against the Authentik provider
james.maes and Claude Fable 5.2
2026-11-10 11:24:22 -06:00
d91c4e8d5b
Bump version to 0.1.0-RC.12 [skip ci]
CI
2026-11-09 19:09:07 +00:00
a3fa59efe7
Merge pull request 'fix(health): token_broker health check only when tokens are enabled' (#72 ) from fix/health-token-broker-develop into develop
james.maes
2026-11-09 18:46:33 +00:00
d9e969f3e1
Merge pull request 'fix(health): token_broker health check only when tokens are enabled' (#71 ) from fix/health-token-broker-only-when-tokens-on into release/0.1
james.maes
2026-11-09 18:36:24 +00:00
82c79d69be
fix(health): register the token_broker health check only when tokens are enabled
james.maes and Claude Sonnet 5.5
2026-11-09 12:24:32 -06:00
477bfff3a2
fix(health): register the token_broker health check only when tokens are enabled
james.maes and Claude Sonnet 5.5
2026-11-09 12:24:32 -06:00
dd8cebd666
Bump version to 0.1.0-RC.11 [skip ci]
CI
2026-11-09 03:43:12 +00:00
7e579cc1cd
Merge pull request 'Merge develop into release/0.1 (policy format 1.1.0, RC.10)' (#70 ) from merge/develop-into-release-0-1-rc10 into release/0.1
james.maes
2026-11-09 03:31:23 +00:00
a058403857
ci: re-run (previous run hit a runner Docker port-binding error in Testcontainers; unit tests passed)
james.maes and Claude Sonnet 5.5
2026-11-08 21:05:06 -06:00
ce9cf33fd4
Merge develop into release/0.1 (policy format 1.1.0, RC.10)
james.maes
2026-11-08 21:01:35 -06:00
4c2ea3b889
Merge pull request 'feat(policy): format 1.1.0 with Deny, prefix wildcards and named permissions' (#69 ) from feat/policy-1-1-deny-prefix into develop
james.maes
2026-11-09 03:01:04 +00:00
2c5baa336d
ci: re-run (the previous run hit a runner Docker port-binding error in Testcontainers)
james.maes and Claude Sonnet 5.5
2026-11-08 20:48:19 -06:00
e2a3cd3021
test(policy): skip the python blueprint run when the CI image has no python
james.maes and Claude Sonnet 5.5
2026-11-08 20:38:27 -06:00
49905f8e86
fix(policy): break-glass operators keep identity permissions; absent groups claim is unavailable
james.maes and Claude Sonnet 5.5
2026-11-08 20:32:00 -06:00
a76843d622
docs(policy): break-glass operators, absent groups claim, claim-only mapper
james.maes and Claude Sonnet 5.5
2026-11-08 20:31:59 -06:00
cd1ebc0f73
fix(policy): one shared session-permission rule; Deny beats the mirror; void/unavailable
james.maes and Claude Sonnet 5.5
2026-11-08 19:56:28 -06:00
81fa5b53bf
docs(policy): one shared session rule, void/unavailable, blueprint shape
james.maes and Claude Sonnet 5.5
2026-11-08 19:56:26 -06:00
bad06d806a
fix(policy): guard-blocked and floor Deny, unavailable state, strict documents
james.maes and Claude Sonnet 5.5
2026-11-08 19:24:01 -06:00
4a375848f2
docs(policy): vectors and spec for document shape, blocked-guard and floors
james.maes and Claude Sonnet 5.5
2026-11-08 19:23:59 -06:00
a6ac960f3a
fix(policy): close fail-open edges found in review
james.maes and Claude Sonnet 5.5
2026-11-08 18:54:02 -06:00
86aa863c7e
docs(policy): vectors, spec and blueprint for review fixes
james.maes and Claude Sonnet 5.5
2026-11-08 18:54:02 -06:00
33e75b6d45
test(policy): golden vectors, Deny properties, consumer tests; blueprint, changelog, upgrade notes
james.maes and Claude Sonnet 5.5
2026-11-08 18:09:24 -06:00
1ca28ecce6
feat(policy): format 1.1.0 typed rules (Deny, prefix resources, named permissions)
james.maes and Claude Sonnet 5.5
2026-11-08 18:09:24 -06:00
9c76ff389e
docs(policy): vectors and spec for hyphenated names, one universe, host names, claim shape
james.maes and Claude Sonnet 5.5
2026-11-08 18:01:26 -06:00
6f9ec41f35
docs(policy): specify format 1.1.0 (Deny, prefix wildcards, named permissions)
james.maes and Claude Sonnet 5.5
2026-11-08 17:28:33 -06:00
c089ea5749
Bump version to 0.1.0-RC.10 [skip ci]
CI
2026-11-07 18:56:58 +00:00
178bf01857
Merge pull request 'Merge develop into release/0.1 (Gitea-aligned RC)' (#68 ) from align/develop-into-release-0.1 into release/0.1
james.maes
2026-11-07 18:22:02 +00:00
5e114114c5
Merge develop into release/0.1 (Gitea-aligned RC)
James Maes
2026-11-07 12:21:39 -06:00
e342a39f8e
Merge pull request 'build(deps): align with Gitea registry (parent 2.2.1, QQQ 4.1.0-RC.26)' (#67 ) from deps/align-gitea into develop
james.maes
2026-11-07 18:20:43 +00:00
dcd0645f72
build(deps): align with Gitea registry (parent 2.2.1, QQQ 4.1.0-RC.26)
james.maes and Claude Opus 5.5
2026-11-07 18:03:06 +00:00
ed139520df
Bump version to 0.1.0-RC.9 [skip ci]
CI
2026-11-07 13:59:39 +00:00
67d1ec0eec
Merge pull request 'ci: build on container-build-large' (#66 ) from ci/large-runner into develop
james.maes
2026-11-07 13:58:14 +00:00
afedbd1f29
Merge remote-tracking branch 'origin/develop' into release/0.1
James Maes
2026-11-07 07:46:09 -06:00
d49e79f4ac
ci: build on container-build-large (Authentik stack per build)
james.maes and Claude Opus 5.5
2026-11-07 12:54:05 +00:00
e521f54018
Merge pull request 'ci: pin shared workflow to v1' (#62 ) from ci/pin-v1-develop into develop
james.maes
2026-11-07 00:28:46 +00:00
d87ada10d2
Merge develop into ci/pin-v1-develop
James Maes and Claude Opus 5.5
2026-11-06 18:08:38 -06:00
914b3ac58f
Merge pull request 'test(authentik): fix slow contract stack startup in CI (Postgres JIT)' (#65 ) from ci/authentik-ci-stability into develop
james.maes
2026-11-07 00:08:27 +00:00
d3f334cd42
fix(test): turn off Postgres JIT in the contract stack
James Maes and Claude Opus 5.5
2026-11-06 17:36:47 -06:00
7adc25bf7e
fix(test): drain Authentik's first-boot blueprint work before re-applying ours
James Maes and Claude Opus 5.5
2026-11-06 12:00:01 -06:00
2f6a83db27
test(authentik): print the worker task queue on contract-test timeouts; restore seed state in BlueprintReapplyIT
James Maes and Claude Opus 5.5
2026-11-06 10:38:25 -06:00
3ee07e26ba
Merge pull request 'release: promote develop to release/0.1 (0.1.0-RC.9)' (#64 ) from develop into release/0.1
james.maes
2026-11-06 15:35:39 +00:00
4d45796651
Merge pull request 'fix(admin): queue two-person approval when Create Group grants authentik.*' (#63 ) from fix/create-time-approval-20261106 into develop
james.maes
2026-11-06 15:31:54 +00:00
53bc414490
fix(admin): queue two-person approval when Create Group grants authentik.*
james.maes and Claude Fable 5.1
2026-11-06 08:40:17 -06:00
c657eb7e28
ci: pin shared workflow to v1
james.maes and Claude Opus 5.5
2026-11-06 14:04:27 +00:00
d928575104
Merge pull request 'ci: use shared ci-workflows Maven workflow' (#61 ) from ci/ci-workflows into develop
james.maes
2026-11-06 00:48:15 +00:00
ea5c5ab65e
test(authentik): surface Authentik error logs when the contract stack fails to start
James Maes and Claude Opus 5.5
2026-11-05 18:28:50 -06:00
38660be0f5
test(authentik): also re-apply never-applied kof22 blueprints at startup
James Maes and Claude Opus 5.5
2026-11-05 17:30:04 -06:00
8b52f583e9
test(authentik): re-apply errored kof22 blueprints during contract stack startup
James Maes and Claude Opus 5.5
2026-11-05 17:11:53 -06:00
ba5a688525
test(authentik): make contract ITs run against a non-loopback Docker host
James Maes and Claude Opus 5.5
2026-11-05 16:52:46 -06:00
c9806e2b82
ci: rerun shared workflow
CI
2026-11-05 16:23:54 -06:00
8f91c08e3e
ci: rerun shared workflow
CI
2026-11-05 16:15:15 -06:00
021a9ae446
ci: use shared ci-workflows Maven workflow
james.maes and Claude Opus 5.5
2026-11-05 22:02:07 +00:00
19cec0f147
Merge pull request 'Merge develop into release/0.1 for the next 0.1.0 RC' (#60 ) from develop into release/0.1
Gitea Actions
2026-11-05 11:43:05 +00:00
98275d42ea
Merge pull request 'feat(authentik): application access and synchronization RC checkpoint' (#59 ) from james.maes/authentik-rc-checkpoint-20261105 into develop
james.maes
2026-11-05 11:40:19 +00:00
2e356b8117
feat(authentik): checkpoint application access and identity synchronization RC
james.maes and GPT-6
2026-11-05 05:29:54 -06:00
fe6f716e87
ci: enroll shared Gitea lifecycle
forge-recovery
2026-11-03 22:07:34 +00:00
6290b23a32
ci: restore Auth fixture startup order and shared lifecycle
forge-recovery and Codex
2026-11-03 17:57:26 +00:00
02338f5981
test(ci): compare Authentik fixture startup order
forge-recovery and Codex
2026-11-03 17:13:52 +00:00
0ec064b7c2
test(ci): compare Authentik single-worker startup
forge-recovery and Codex
2026-11-03 16:54:44 +00:00
7ee9553880
test(ci): compare Authentik single-worker startup
forge-recovery and Codex
2026-11-03 16:49:06 +00:00
85e70c5296
test(ci): isolate existing Authentik bootstrap setup
forge-recovery and Codex
2026-11-03 15:58:20 +00:00
4d675b18f6
test(ci): qualify original Authentik tests through job-local localhost
forge-recovery and Codex
2026-11-03 01:19:10 +00:00
ae4f1ad61e
test(ci): qualify the original unchanged Maven command
forge-recovery and Codex
2026-11-02 23:54:54 +00:00
a6229e3d1a
ci: enroll shared Gitea release-candidate lifecycle
forge-recovery and Codex
2026-11-02 20:13:31 +00:00
5ba505aa0f
Merge pull request 'ci: move the QRun release caller to the thin v2 contract' (#56 ) from ci-qrun-release-caller-main-v2 into main
forge-recovery
2026-11-02 18:20:06 +00:00
fcea48de32
ci: add the isolated postpublish job to the QRun release caller
2026-11-02 15:45:40 +00:00
916bb012dc
ci: move the QRun release caller to the thin v2 contract
2026-11-02 06:15:59 +00:00
f480e09cf6
test(ci): qualify required Docker integration runtime
forge-recovery and GPT-6.1
2026-10-31 20:04:19 +00:00
402ab80d9e
test(ci): document exact historical fixture scanner fingerprints
forge-recovery and GPT-6.1
2026-10-31 20:01:52 +00:00
da35a4332b
test(ci): qualify organization-wide Gitea Java workflow
forge-recovery and GPT-6.1
2026-10-31 12:41:26 +00:00
c81e12d617
build(deps): Bump the maven-minor-and-patch group across 1 directory with 5 updates
dependabot[bot]
2026-10-26 06:57:58 +00:00
94a4b29548
build(deps): Bump the github-actions group with 3 updates
dependabot[bot]
2026-10-26 06:57:32 +00:00
77c39f7f22
ci: enroll in the shared QQQ orb (#52 )
james.maes and Codex
2026-10-21 19:49:53 -05:00
b22ed15719
ci: adopt managed orb 0.8 patch track (#51 )
james.maes and Codex
2026-10-21 15:39:11 -05:00
6d8e85bacb
ci: adopt managed orb 0.8 patch track
james.maes and Codex
2026-10-21 15:22:58 -05:00
366d55b9ec
ci: adopt shared orb 0.7.18 (#50 )
james.maes and Codex
2026-10-21 14:52:21 -05:00
a9ef71269b
ci: adopt shared orb 0.7.18
james.maes and Codex
2026-10-21 14:39:11 -05:00
f1ed82a92f
ci: adopt shared orb 0.7.17 (#49 )
james.maes and Codex
2026-10-21 14:25:22 -05:00
a04fa718a7
ci: adopt shared orb 0.7.17
james.maes and Codex
2026-10-21 14:09:40 -05:00
16a41e02f8
ci: centralize release branch verification and workflows
james.maes and Codex
2026-10-21 13:51:13 -05:00
dd55a61105
ci: use the shared branch-aware CodeQL worker (#47 )
james.maes and Codex
2026-10-21 10:56:39 -05:00
f99988fc27
ci: use the shared orb pipeline on main (#46 )
james.maes and Codex
2026-10-21 10:47:15 -05:00
d72ab492b3
ci: use the shared branch-aware CodeQL worker
james.maes and Codex
2026-10-21 10:24:37 -05:00
c677055200
ci: use the shared branch-aware CodeQL worker
james.maes and Codex
2026-10-21 10:24:31 -05:00
17486b88d2
ci: adopt central orb 0.7.12 and stable gates (#45 )
james.maes and Codex
2026-10-21 09:03:12 -05:00
53c54c659c
ci: use the shared orb pipeline on main
james.maes and Codex
2026-10-21 09:00:59 -05:00
eae632669b
ci: adopt central orb 0.7.12 and stable gates
james.maes and Codex
2026-10-21 08:49:18 -05:00
7d1227adf5
ci: centralize rc release completion in qqq orb (#44 )
james.maes and Codex
2026-10-21 02:35:07 -05:00
686c7ba844
ci: centralize rc release completion in qqq orb
james.maes and Codex
2026-10-21 02:22:24 -05:00
7df05f2324
ci: align canonical shared orb workers (#43 )
james.maes and Codex
2026-10-21 01:39:22 -05:00
6bdd8f0fcc
ci: align canonical shared orb workers
james.maes and Codex
2026-10-21 01:23:31 -05:00
28cb654d13
ci: adopt shared orb 0.7.11 (#42 )
james.maes and Codex
2026-10-21 01:10:02 -05:00
CI
james.maes
forge-recovery