Skip to content

v2.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Oct 15:07
· 36 commits to main since this release
v2.0.0
c740699
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

2.0.0 (2026-10-02)

  • fix(deps): update rust crate resend-rs to 0.34.0 (#154) (c740699), closes #154
  • feat!: MAIR-391 [Audit 02/10] API_lib : middleware admin contournable, comptes archivés, gestion du (2c1bf3b), closes #156

BREAKING CHANGE

  • test_setup and its dependencies (testcontainers,
    tokio-postgres, libc) are behind the test-utils feature, which APIs must
    enable in their dev-dependencies; axum is no longer a dependency. AppState
    panics at startup on a missing or weak JWT configuration unless
    JWT_ALLOW_WEAK_SECRET=true (or the test-utils feature is on).

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

  • ci: MAIR-391 Bump mairie360/CICD to v4.0.0

v4.0.0 (MAIR-416) promotes the tested image by digest, signs it with cosign
and scans it with Trivy, adds Gitleaks, and makes Semgrep blocking. The caller
already grants id-token: write.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

  • chore(deps): MAIR-391 Bump CICD to v4.0.1 and Database images to dev-fb7c223

dev-fb7c223 is the head of Devops/Database main (includes MAIR-413), published
for both ghcr.io/mairie360/database and liquibase-migrations. The compose stacks
and the testcontainers (TEST_DB_VERSION) now run the same schema.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

  • test: Use assert_eq! for the empty roles check (clippy 1.99 assert_is_empty)

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

  • test: Fix the test setup for Database dev-fb7c223 (MAIR-413 schema)
  • Pass -Dallow_template_admin=true to Liquibase: without admin credentials
    or this flag the v1.7.0 migration stops half-way, so is_admin and
    check_access were missing and every admin/access test failed.
  • Fail the shared setup when Liquibase exits non-zero instead of only
    logging it.
  • Declare the seeded document table in resources: check_access now
    answers -1 for undeclared resources.
  • Check the ambiguous Keycloak e-mail guard inside a rolled-back
    transaction, since uq_users_email_lower now forbids such duplicates.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

Assets 2
Loading