Authly

1 repository weighed: 0 at attention, 1 to watch

• Unreleased, medium, costs 20 points: authly: Unreleased changes since 0.5.7, released 15 months ago
• Quiet, low, costs 10 points: authly: No change by a person for 12 months
• Old updates, low, costs 5 points: authly: 9 dependency updates open for more than 30 days

1. chore(deps): update cryptography to 50.0.0 [SECURITY]

   Needs review, waits for a reviewauthly #37renovate[bot] (automation)·last week

2. chore(deps): update python-multipart to 0.0.31 [SECURITY]

   Needs review, waits for a reviewauthly #36renovate[bot] (automation)·last week

3. chore(deps): update python-dotenv to 1.2.2 [SECURITY]

   Needs review, waits for a reviewauthly #42renovate[bot] (automation)·last week

4. chore(deps): update pytest to 9.0.3 [SECURITY]

   Needs review, waits for a reviewauthly #41renovate[bot] (automation)·last week

5. chore(deps): update starlette to 1.3.1 [SECURITY]

   Needs review, waits for a reviewauthly #32renovate[bot] (automation)·last week

1. Dependency Dashboard

   Needs triage, waits for a maintainer to look at itauthly #1renovate[bot] (automation)·idle 2 days ago

1. descoped/authlyv0.5.7Release v0.5.7last year by oranheim
   Release notes

   🎯 Highlights

   This release focuses on improving the standalone Docker container experience with enhanced admin account management, better modularization, updated dependencies, and optimized CI/CD workflows.

   ✨ New Features

   Admin Account Management

   • New unlock-admin-account CLI command - Directly unlock the admin account via database connection when locked out
   • Added convenient wrapper scripts for better container CLI experience
   • Improved admin account security with better rate limiting defaults (100 requests/60 seconds)

   Standalone Container Improvements

   • Refactored Dockerfile.standalone for better maintainability with modular setup scripts
   • Added version identifier to /health endpoint response for easier deployment tracking
   • Optimized container build process with better caching and reduced image size
   • Consolidated to single optimized Dockerfile (removed minimal variant)
   • Database connections now use dedicated authly user instead of postgres superuser

   🔧 Infrastructure & DevOps

   CI/CD Improvements

   • Optimized Docker builds with PostgreSQL builder caching strategy
     • Separated postgres-builder stage for better caching
     • Multi-stage caching reduces build times significantly
     • Cached builder images stored in GitHub Container Registry
   • Python 3.13 adoption in CI/CD pipelines
     • Updated conformance tests to use Python 3.13
     • Modernized test runner configurations
   • Enhanced release workflow
     • Split Docker builds into production and standalone variants
     • Improved deployment summaries with clearer instructions
     • Better image tagging and metadata handling

   Build System

   • Modularized container setup into separate scripts:
     • configure-all.sh - Main configuration orchestrator
     • setup-environment.sh - Environment variables setup
     • setup-postgres.sh - PostgreSQL configuration
     • setup-python.sh - Python environment setup
     • setup-s6-services.sh - S6 supervision configuration
     • setup-wrappers.sh - CLI wrapper scripts

   Testing

   • Added PostgreSQL builder cache testing script
   • Enhanced health check endpoint with version information
   • Removed "90% Target" from OIDC conformance tests (now achieving 100% compliance)

   📦 Dependencies

   • Python: Updated to 3.13.6
   • Docker base images: Updated to latest versions
   • UV lock file: Refreshed with latest compatible dependencies

   📚 Documentation

   • Archived completed AI assistant instructions
   • Updated Gemini project memory
   • Enhanced Docker standalone documentation
   • Added comprehensive implementation notes for Docker improvements

   🔄 Changes Summary

   • 11 commits since v0.5.6
   • 34 files changed: 1,408 insertions(+), 635 deletions(-)
   • Major refactoring of standalone Docker implementation
   • Improved developer experience with better CLI tools
   • Optimized CI/CD pipeline with better caching strategies

   New Admin Unlock Feature

   If the admin account gets locked due to failed login attempts:

   # Direct database unlock
   ./scripts/unlock-admin-account.sh
   
   # Or within container
   docker exec authly-standalone authly-unlock-admin
   

   📝 Notes

   • The minimal Dockerfile variant has been removed in favor of a single optimized build
   • Rate limiting defaults have been adjusted to 100 requests per 60 seconds for better security
   • The health endpoint now returns version information for easier deployment verification
   • CI/CD builds now leverage multi-stage caching for faster deployments

   ---

   Full Changelog: https://github.com/descoped/authly/compare/v0.5.6...v0.5.7

1. R

   chore(deps): update astral-sh/setup-uv action to v10.3.3 (#52)5 additions and 5 deletions in 2 files+5−5

   descoped/authlyrenovate[bot] ·last week·0af0945

2. R

   chore(deps): update astral-sh/setup-uv action to v10.3.2 (#51)5 additions and 5 deletions in 2 files+5−5

   descoped/authlyrenovate[bot] ·2 weeks ago·614178b

3. R

   chore(deps): update github-actions (#50)6 additions and 6 deletions in 3 files+6−6

   descoped/authlyrenovate[bot] ·last month·d94bfd1

4. R

   chore(deps): update astral-sh/setup-uv action to v10.2.0 (#48)5 additions and 5 deletions in 2 files+5−5

   descoped/authlyrenovate[bot] ·last month·c29d63b

5. R

   chore(deps): update java-jdk to 25.0.4+7.0.LTS (#47)1 addition and 1 deletion in 1 file+1−1

   descoped/authlyrenovate[bot] ·last month·e7b272b

6. R

   chore(deps): update astral-sh/setup-uv action to v10.1.0 (#46)5 additions and 5 deletions in 2 files+5−5

   descoped/authlyrenovate[bot] ·2 months ago·c25d2fc

7. R

   chore(deps): update github-actions (#44)31 additions and 31 deletions in 6 files+31−31

   descoped/authlyrenovate[bot] ·2 months ago·280d35e

8. R

   chore(deps): update github-actions (#39)

   descoped/authlyrenovate[bot] ·8 months ago·0f2fe61

9. R

   chore(deps): update github-actions (#38)

   descoped/authlyrenovate[bot] ·8 months ago·b84eee9

10. R

    chore(deps): update python to 3.14.3 (#33)

    descoped/authlyrenovate[bot] ·8 months ago·206b5e1