Update dependency scheb/2fa to v7 - autoclosed #573
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
⚠ Artifact update problemRenovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below: File name: composer.lock |
renovate
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^6.0->^7.0Release Notes
scheb/2fa (scheb/2fa)
v7.6.0Compare Source
v7.5.0Compare Source
v7.4.0Compare Source
v7.3.1Compare Source
Symfony\Component\HttpKernel\DependencyInjection\Extensionby @Chris53897 in https://github.com/scheb/2fa/pull/233v7.3.0Compare Source
v7.2.0Compare Source
ip_whitelistoption, #217, thanks to @danielburger1337v7.1.0Compare Source
v7.0.0Compare Source
New major release including support for Symfony 7.
Please check the instructions to upgrade from bundle version 6.x to 7.x.
v6.12.0Compare Source
Declare conflict with
symfony/security-corev7.Background: When using 2fa-bundle v6 on Symfony 6.4, you might have
symfony/security-corev7 pulled in as a dependency. The v7 version is missing theSymfony\Component\Security\Core\Securityclass, which is necessary for 2fa-bundle v6 to work.v6.11.0Compare Source
The
windowconfig option is deprecated and will be removed in bundle version 7. Please use the new optionleewayinstead.See the configuration reference for details
Background: The options
scheb_two_factor.google.windowandscheb_two_factor.totp.windowbehave differently, depending on the version ofSpomky-Labs/otphpused:Spomky-Labs/otphpv10: How many codes before/after the current one would be acceptedSpomky-Labs/otphpv11: Acceptable time drift in secondsTo address this confusing ambiguous behavior (#201), the new config option
leewayis introduced, which is only allowed in conjunction withSpomky-Labs/otphpv11.v6.10.0Compare Source
HttpKernelInterface::MASTER_REQUESTwas replaced withHttpKernelInterface::MAIN_REQUESTv6.9.0Compare Source
v6.8.0Compare Source
v6.7.0Compare Source
lcobucci/jwtValidAt, #178, thanks to @maxheliaslcobucci/jwtwas bumped up to 4.1v6.6.0Compare Source
v6.5.0Compare Source
v6.4.0Compare Source
v6.3.0Compare Source
A configuration option
scheb_two_factor.trusted_device.keywas added to configure an encryption key for the trusted device token. Before, it was hard-coded to use the application'skernel.secret. This is still the case, if you don't set a value forscheb_two_factor.trusted_device.key.Background:
If you're using
lcobucci/jwtversion 4.2 or higher, a 265bit key is required for the trusted device token. If yourkernel.secretisn't long enough, you'll run into problems. In that case, you have the option to configure ascheb_two_factor.trusted_device.keyvalue with sufficient length, if you don't want to change thekernel.secretvalue for your entire application (which may have unforeseen consequences (λ) for your application). Warning: This will invalidate all trusted device tokens for your users.Thanks to @lcobucci for suggesting the approach in #158 and doing the majority of work :)
v6.2.0Compare Source
v6.1.0Compare Source
Allow to use symfony mailer default configuration, #153, thanks to @alexander-schranz
(This is setting the bundle's default
sender_emailconfigurationnull. So if you haven't defined anything else in the bundle's configuration, the default sender email from Symfony's mailer-bundle configuration is used)v6.0.3Compare Source
device, #155, thanks to @jmscheConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.