Update module github.com/greenpau/caddy-security to v1.6.2 #5

Open

renovate-bot wants to merge 1 commit from renovate/all-minor-patch into main

pull from: renovate/all-minor-patch

merge into: lukasdotcom:main

lukasdotcom:main

Conversation 0 Commits 1 Files changed 1 +1 -1

renovate-bot commented 2026-10-27 23:20:21 -04:00

Collaborator

Copy link

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/greenpau/caddy-security	v1.5.0 → v1.6.2

---

Release Notes

greenpau/caddy-security (github.com/greenpau/caddy-security)

v1.6.2

Compare Source

This release upgrades go-authcrunch from v1.4.1 to v1.5.0, bringing refreshed embedded portal applications and improved application routing to Caddy. Dependency update.

Embedded portal applications

The portal now ships refreshed User Profile, Security Manager, and File Vault applications. Links appear according to API enablement and the signed-in user's role. Upstream implementation.

Application	URL with a /auth portal mount	Access requirements
User Profile	/auth/profile/	Portal user or administrator; profile APIs retain their independent enablement.
Security Manager	/auth/operator/	Enabled admin API and portal administrator role.
File Vault	/auth/documents/	Enabled and initialized Documents API, plus a portal user or administrator role.

Routing and asset fixes

• Applications support root and nested portal mounts, deep links, and lazy-loaded assets. Missing asset files and translation catalogs return 404 instead of application HTML. Application routing.
• Inferred mounts containing URL-escaped characters preserve the correct application base, asset lookup, and redirect queries. Explicitly declared mounts retain their existing strict validation. Escaped-mount fix.
• Application assets enforce authorization before conditional responses and use no-store caching. Only an enabled application's exact manifest is public. Asset handling.

Upgrade notes

• operator and documents are now reserved complete segments in declared portal mounts. Review custom mount names before upgrading. Mount reservations.
• Custom templates referencing the retired profile/images/banner.svg, old fonts, or hashed Profile bundles need updated asset references. Profile asset refresh.
• File Vault retains the Documents API's storage, origin, mount, and current local browser-session requirements. An administrator role or external-provider login alone does not grant Documents API access. Documents integration requirements.

Full changelogs

• caddy-security: v1.5.0 → v1.6.2
• go-authcrunch: v1.4.1 → v1.5.0

v1.6.1

Compare Source

v1.6.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/greenpau/caddy-security](https://github.com/greenpau/caddy-security) | `v1.5.0` → `v1.6.2` |  |  | --- ### Release Notes <details> <summary>greenpau/caddy-security (github.com/greenpau/caddy-security)</summary> ### [`v1.6.2`](https://github.com/greenpau/caddy-security/releases/tag/v1.6.2) [Compare Source](https://github.com/greenpau/caddy-security/compare/v1.6.1...v1.6.2) This release upgrades go-authcrunch from v1.4.1 to v1.5.0, bringing refreshed embedded portal applications and improved application routing to Caddy. [Dependency update](https://github.com/greenpau/caddy-security/commit/0b227e3c6f3bc4a586de342f5d4023ea2929068b). #### Embedded portal applications The portal now ships refreshed **User Profile**, **Security Manager**, and **File Vault** applications. Links appear according to API enablement and the signed-in user's role. [Upstream implementation](https://github.com/greenpau/go-authcrunch/commit/3dd75a9cb57b8829e7a6e1fd56add74cc3f079fd). | Application | URL with a `/auth` portal mount | Access requirements | | ---------------- | ------------------------------- | -------------------------------------------------------------------------------- | | User Profile | `/auth/profile/` | Portal user or administrator; profile APIs retain their independent enablement. | | Security Manager | `/auth/operator/` | Enabled admin API and portal administrator role. | | File Vault | `/auth/documents/` | Enabled and initialized Documents API, plus a portal user or administrator role. | #### Routing and asset fixes - Applications support root and nested portal mounts, deep links, and lazy-loaded assets. Missing asset files and translation catalogs return `404` instead of application HTML. [Application routing](https://github.com/greenpau/go-authcrunch/commit/3dd75a9cb57b8829e7a6e1fd56add74cc3f079fd). - Inferred mounts containing URL-escaped characters preserve the correct application base, asset lookup, and redirect queries. Explicitly declared mounts retain their existing strict validation. [Escaped-mount fix](https://github.com/greenpau/go-authcrunch/commit/950a5719f7ee2f3797c90ca3121000765dadaa41). - Application assets enforce authorization before conditional responses and use `no-store` caching. Only an enabled application's exact manifest is public. [Asset handling](https://github.com/greenpau/go-authcrunch/commit/3dd75a9cb57b8829e7a6e1fd56add74cc3f079fd). #### Upgrade notes - `operator` and `documents` are now reserved complete segments in declared portal mounts. Review custom mount names before upgrading. [Mount reservations](https://github.com/greenpau/go-authcrunch/commit/3dd75a9cb57b8829e7a6e1fd56add74cc3f079fd). - Custom templates referencing the retired `profile/images/banner.svg`, old fonts, or hashed Profile bundles need updated asset references. [Profile asset refresh](https://github.com/greenpau/go-authcrunch/commit/3dd75a9cb57b8829e7a6e1fd56add74cc3f079fd). - File Vault retains the Documents API's storage, origin, mount, and current local browser-session requirements. An administrator role or external-provider login alone does not grant Documents API access. [Documents integration requirements](https://github.com/greenpau/caddy-security/blob/v1.6.0/.codex/skills/configuration-authentication/references/documents.md#identity-origin-and-mount). #### Full changelogs - [caddy-security: v1.5.0 → v1.6.2](https://github.com/greenpau/caddy-security/compare/v1.5.0...v1.6.2) - [go-authcrunch: v1.4.1 → v1.5.0](https://github.com/greenpau/go-authcrunch/compare/v1.4.1...v1.5.0) ### [`v1.6.1`](https://github.com/greenpau/caddy-security/compare/v1.6.0...v1.6.1) [Compare Source](https://github.com/greenpau/caddy-security/compare/v1.6.0...v1.6.1) ### [`v1.6.0`](https://github.com/greenpau/caddy-security/compare/v1.5.0...v1.6.0) [Compare Source](https://github.com/greenpau/caddy-security/compare/v1.5.0...v1.6.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xOTAuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE5MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

renovate-bot added 1 commit 2026-10-27 23:20:21 -04:00

Update module github.com/greenpau/caddy-security to v1.6.2 70fd5d21de

All checks were successful

Hide checks

/ test (pull_request) Successful in 12s

Details

/ cleanup (pull_request) Successful in 1s

Details

/ docker (pull_request) Has been skipped

Details

/ resolve-go (pull_request) Successful in 3s

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/all-minor-patch:renovate/all-minor-patch

git switch renovate/all-minor-patch

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff renovate/all-minor-patch

git switch renovate/all-minor-patch

git rebase main

git switch main

git merge --ff-only renovate/all-minor-patch

git switch renovate/all-minor-patch

git rebase main

git switch main

git merge --no-ff renovate/all-minor-patch

git switch main

git merge --squash renovate/all-minor-patch

git switch main

git merge --ff-only renovate/all-minor-patch

git switch main

git merge renovate/all-minor-patch

git push origin main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

lukasdotcom/turnstile-caddy!5

No description provided.