Skip to content

chore(deps): bump github.com/plexusone/systemforge from 0.11.0 to 0.16.0 - #21

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/plexusone/systemforge-0.16.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/plexusone/systemforge-0.16.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/plexusone/systemforge from 0.11.0 to 0.16.0.

Release notes

Sourced from github.com/plexusone/systemforge's releases.

v0.16.0

Release Notes: v0.16.0

Full Changelog: plexusone/systemforge@v0.15.0...v0.16.0

v0.15.0

Release Notes: v0.15.0

Full Changelog: plexusone/systemforge@v0.14.0...v0.15.0

v0.14.0

Release Notes: v0.14.0

Full Changelog: plexusone/systemforge@v0.13.0...v0.14.0

v0.13.0

Release Notes: v0.13.0

Full Changelog: plexusone/systemforge@v0.12.0...v0.13.0

v0.12.0

Release Notes: v0.12.0

Full Changelog: plexusone/systemforge@v0.11.0...v0.12.0

Changelog

Sourced from github.com/plexusone/systemforge's changelog.

[v0.16.0] - 2026-10-14

Highlights

  • Connections can be reconnected in place, track what depends on them with bindings, and be shared with a principal through per-connection role grants
  • The connection library is renamed from connectionforge to connectforge; imports, tables (connectforge_*) and the key purpose (connectforge.credential) change, which is breaking for deployments that enabled connections in v0.15.0

Upgrade Guide

  • Update imports from connectionforge to connectforge
  • Deployments that enabled connections in v0.15.0 must re-create connections or rename the tables and re-seal credentials; migrate does not copy rows or re-seal
  • Run systemauth migrate to create the connectforge_* tables

Added

  • POST .../connections/{id}/reconnect, GET, PUT and DELETE .../connections/{id}/bindings, and GET, PUT and DELETE .../connections/{id}/grants/{principal} (5a4bf33)
  • systemauthsvc registers the systemforge_connection resource type so connection grants are role grants read by the role-based provider (8f501c3)

Changed

  • BREAKING: Depend on connectforge instead of connectionforge; tables are now connectforge_* and credentials are sealed under the connectforge.credential purpose (7eb410b)

Dependencies

  • 1 dependency update

Documentation

  • Connections guide covers reconnecting, bindings and grants; ADR-017 updated for the rename and the grant vocabulary (0a5c80b)

Tests

  • Cover reconnect, bindings and grants over the API (26d6b64)

[v0.15.0] - 2026-10-13

Highlights

  • Key management: keys wires keyforge as the platform's one key library, with envelope encryption, rotation without re-encrypting, the root key read through omnivault, and key events sent to the audit trail (ADR-013)
  • Connections to external services: connections composes connectionforge so organizations connect accounts at services such as a CDN or analytics product, with credentials sealed under managed keys and applications receiving an authenticated HTTP client, never the secret (ADR-017)
  • A connections API at /api/v1/organizations/{org}/connections, enabled by the new connections configuration section and protected by systemforge:connections:read and :write scopes
  • Invite-only sign-up: a gate on social login that admits only verified emails holding an invite, a consent-recording waitlist for everyone else, and systemauth invite and systemauth waitlist commands
  • App catalog: a host publishes the applications it runs, and the browser session lists it so each shell can show the products a person holds a role in, for a product switcher
  • Embedded SystemAuth emits the orgs claim with per-application roles, limited to the deployment's default entitlements
  • Fixed rls.Helper.SetTenant and SetUser, which failed on every PostgreSQL connection because SET LOCAL does not accept bind parameters
  • No breaking changes; run systemauth migrate for the new tables

Upgrade Guide

  • Run systemauth migrate (or systemauthsvc.Service.Migrate) to create sf_signup_invites and sf_signup_waitlist. Existing tables are unchanged and no SQL migration file is needed

... (truncated)

Commits
  • bc83f07 docs(release): add v0.16.0 release notes and changelog
  • 787bb8a build(deps): record the connectforge v0.3.0 checksums
  • 7eb410b refactor(connections)!: depend on connectforge, the renamed connectionforge
  • 0a5c80b docs(guides): document reconnecting, bindings and grants on connections
  • 8f501c3 feat(systemauthsvc): register the connections vocabulary and wire grants
  • 26d6b64 test(connections): cover reconnect, bindings and grants
  • 5a4bf33 feat(connections): reconnect, bindings and grants over the API
  • bc245f5 docs(release): correct the app catalog session wording for v0.15.0
  • 40ee27e docs(changelog): add v0.15.0
  • e5f188e docs(release): add the v0.15.0 release notes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/plexusone/systemforge](https://github.com/plexusone/systemforge) from 0.11.0 to 0.16.0.
- [Release notes](https://github.com/plexusone/systemforge/releases)
- [Changelog](https://github.com/plexusone/systemforge/blob/main/CHANGELOG.md)
- [Commits](plexusone/systemforge@v0.11.0...v0.16.0)

---
updated-dependencies:
- dependency-name: github.com/plexusone/systemforge
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 19, 2026
@coderabbitai

coderabbitai Bot commented Oct 19, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: ff4d5283-1084-4eef-a370-72935bec7eb2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #22.

@dependabot dependabot Bot closed this Oct 22, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/plexusone/systemforge-0.16.0 branch October 22, 2026 18:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants