Skip to content

chore(deps): bump github.com/plexusone/systemforge from 0.11.0 to 0.19.0 - #23

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/plexusone/systemforge-0.19.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/plexusone/systemforge-0.19.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/plexusone/systemforge from 0.11.0 to 0.19.0.

Release notes

Sourced from github.com/plexusone/systemforge's releases.

v0.19.0

Release Notes: v0.19.0

Full Changelog: plexusone/systemforge@v0.18.0...v0.19.0

v0.18.0

Release Notes: v0.18.0

Full Changelog: plexusone/systemforge@v0.17.0...v0.18.0

v0.17.0

Release Notes: v0.17.0

Full Changelog: plexusone/systemforge@v0.16.0...v0.17.0

v0.16.0

Release Notes: v0.16.0

Full Changelog: plexusone/systemforge@v0.15.0...v0.16.0

v0.15.0

Release Notes: v0.15.0

Full Changelog: plexusone/systemforge@v0.14.0...v0.15.0

v0.14.0

Release Notes: v0.14.0

Full Changelog: plexusone/systemforge@v0.13.0...v0.14.0

v0.13.0

Release Notes: v0.13.0

Full Changelog: plexusone/systemforge@v0.12.0...v0.13.0

v0.12.0

Release Notes: v0.12.0

Full Changelog: plexusone/systemforge@v0.11.0...v0.12.0

Changelog

Sourced from github.com/plexusone/systemforge's changelog.

[v0.19.0] - 2026-10-22

Highlights

  • SystemAuth asks a minimum sign-up age before a first upstream login creates an account, refusing anyone younger while keeping nothing about them

Upgrade Guide

  • To ask a minimum age at sign-up, set social_login.signup_minimum_age; 0, the default, asks nothing, and accounts created before it are not asked

Added

  • social_login.signup_minimum_age: SystemAuth asks a person's birth month and year on /signup/age before a first upstream login creates their account, refuses anyone younger while keeping nothing about them, and asks after the invite gate so an invite is used only once the age is confirmed; hosts set the wording with Options.SignupAgePage (34ae846)

Documentation

  • Minimum sign-up age in the deployment and social login guides (b8f07f8)
  • Minimum Sign-Up Age guide: what a person sees, configuration, how the answer is decided, invite-only sign-up and limits
  • v0.19.0 release notes

Tests

  • Minimum sign-up age: the birth-month boundary, refusal, single use, cross-origin answers and the invite gate (3fde13c)

[v0.18.0] - 2026-10-20

Highlights

  • SystemAuth serves the organization console under /console, where organizations manage their connections to external services, signed in with the SystemAuth login session
  • The connections API records the rotation mode chosen when connecting, from the provider manifest's guidance

Upgrade Guide

  • To enable the organization console, set console.web_dir to a build of @plexusone/console; social login must be configured
  • To offer the console from an application's chrome, list it in the app catalog with the ID console

Added

  • console package: the connections API under /console/api with a login-session authenticator, session routes, return-address checks, and built pages served with a sign-in redirect; state-changing requests must be same-origin and every response carries a restrictive content security policy (e901768)
  • console.web_dir in the SystemAuth configuration; a console without social login is refused (fbf6773)
  • systemauthsvc mounts the organization console when configured, listing organizations from the orgs claim and including connections when they are enabled (5e7f85e)
  • Console session routes under /console/bff in the format @plexusone/host reads: GET session, sign-in redirects and POST auth/logout; each organization grants the console application the person's organization role (25fc039)
  • The console's session lists each organization's product roles and carries the app catalog, so the console's product switcher links back to the products (4e2609a)
  • systemauth.Server.ValidateReturnTo accepts a return address only where the sign-in redirect policy allows (57307ca)
  • systemauth.Server.EndLoginSession signs a person out as POST /logout does, for handlers that check the request's origin themselves (4c74b57)
  • Connect requests accept an optional rotation mode from the auth method's manifest, kept in the connection's metadata under rotation; an unlisted mode is refused (15f4b5d)

Dependencies

  • 2 dependency updates

... (truncated)

Commits
  • 69797fb docs(release): add v0.19.0 release notes and changelog
  • b5e4009 docs(guides): add the minimum sign-up age guide
  • dac2ba0 docs(changelog): record the minimum sign-up age as unreleased
  • b8f07f8 docs(systemauth): describe the minimum sign-up age
  • 3fde13c test(systemauth): cover the minimum sign-up age
  • 34ae846 feat(systemauth): ask a minimum age before creating an account
  • 712e145 fix(console): release the pages directory when the console closes
  • 0b9e938 docs(release): add v0.18.0 release notes and changelog
  • c04e5e7 docs(guides): describe setup steps, rotation modes and credential expiry
  • 300e24a test(systemauth): cover ending a login session from another handler
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/plexusone/systemforge](https://github.com/plexusone/systemforge) from 0.11.0 to 0.19.0.
- [Release notes](https://github.com/plexusone/systemforge/releases)
- [Changelog](https://github.com/plexusone/systemforge/blob/main/CHANGELOG.md)
- [Commits](plexusone/systemforge@v0.11.0...v0.19.0)

---
updated-dependencies:
- dependency-name: github.com/plexusone/systemforge
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 26, 2026
@coderabbitai

coderabbitai Bot commented Oct 26, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: a329effb-603a-4b70-a14e-986c37d3f723

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #24.

@dependabot dependabot Bot closed this Oct 27, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/plexusone/systemforge-0.19.0 branch October 27, 2026 18:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants