inbuxa/inbuxa-admin
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 22 Wiki Activity Sponsor

22 Releases 36 Tags

RSS Feed
  • v2026.10.26.4 a628f21d91
    Compare

    v2026.10.26.4
    ci / build (push) Skipped
    Details
    ci / publish (push) Skipped
    Details
    announce / announce (release) Successful in 41s
    Details
    ci / notices (push) Successful in 1m11s
    Details
    github/ci (branch) GitHub Actions
    Details
    github/ci (tag) GitHub Actions
    Details
    ci / github (push) Successful in 5m44s
    Details
    Stable

    jcoffey-dev released this 2026-11-01 16:21:57 +00:00 | 55 commits to main since this release

    For OpenID Connect directories, this brings the console in line with the server's security release 2026.10.29.1 (GHSA-v3gv-4j87-3mg2, GHSA-2p7h-9hv3-4292).

    • Setup guide: it now asks for the provider's client ID as the audience. The server refuses a new OpenID Connect directory without one, and the guide had no field for it.
    • Security to-do list: it now flags directories with no required audience, and directories that accept any token the provider's user info endpoint answers for. Both can let in tokens issued to other applications.

    If you have an existing OpenID Connect directory, check your Security to-do list after updating.

    Releases from this line will stop moving :latest once 27.1 is out. The GitHub copy of each release now has its files too.

    Downloads