This PR contains the following updates: | Package | Update | Change | |---|---|---| | [vaultwarden/server](https://github.com/dani-garcia/vaultwarden) | patch | `1.35.2` → `1.35.3` | --- ### Release Notes <details> <summary>dani-garcia/vaultwarden (vaultwarden/server)</summary> ### [`v1.35.3`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.35.3) [Compare Source](https://github.com/dani-garcia/vaultwarden/compare/1.35.2...1.35.3) #### Security Fixes This release contains security fixes for the following advisory. We strongly advice to update as soon as possible if you believe it could affect you. - [GHSA-h265-g7rm-h337](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-h265-g7rm-h337) (Publication in process, waiting for CVE assignment) This vulnerability would allow an authenticated attacker that is part of an organization to access items from collections to which the attacker does not belong. #### What's Changed - Fix User API Key login by [@​BlackDex](https://github.com/BlackDex) in [#​6712](https://github.com/dani-garcia/vaultwarden/pull/6712) - use email instead of empty name for webauhn by [@​stefan0xC](https://github.com/stefan0xC) in [#​6733](https://github.com/dani-garcia/vaultwarden/pull/6733) - hide password hints via CSS by [@​stefan0xC](https://github.com/stefan0xC) in [#​6726](https://github.com/dani-garcia/vaultwarden/pull/6726) - fix email as 2fa with auth requests by [@​stefan0xC](https://github.com/stefan0xC) in [#​6736](https://github.com/dani-garcia/vaultwarden/pull/6736) - Update crates, web-vault, js, workflows by [@​BlackDex](https://github.com/BlackDex) in [#​6749](https://github.com/dani-garcia/vaultwarden/pull/6749) - refactor: improve tooltips in diagnostics page by [@​tessus](https://github.com/tessus) in [#​6765](https://github.com/dani-garcia/vaultwarden/pull/6765) - Empty AccountKeys when no private key by [@​Timshel](https://github.com/Timshel) in [#​6761](https://github.com/dani-garcia/vaultwarden/pull/6761) - fix error message for purging auth requests by [@​stefan0xC](https://github.com/stefan0xC) in [#​6776](https://github.com/dani-garcia/vaultwarden/pull/6776) - Misc updates, crates, rust, js, gha, vault by [@​BlackDex](https://github.com/BlackDex) in [#​6799](https://github.com/dani-garcia/vaultwarden/pull/6799) - Update crates and web-vault by [@​BlackDex](https://github.com/BlackDex) in [#​6810](https://github.com/dani-garcia/vaultwarden/pull/6810) - Fix org-details issue by [@​BlackDex](https://github.com/BlackDex) in [#​6811](https://github.com/dani-garcia/vaultwarden/pull/6811) **Full Changelog**: <https://github.com/dani-garcia/vaultwarden/compare/1.35.2...1.35.3> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsImltYWdlIl19--> Reviewed-on: #3902 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
3.3 KiB
3.3 KiB