Skip to content

fix: Bump spin to 0.9.9 - #857

Merged
Techassi merged 1 commit into
release-26.7from
fix/bump-yanked-spin-crate
Jul 16, 2026
Merged

Techassi merged 1 commit into
release-26.7from
fix/bump-yanked-spin-crate

Conversation

@NickLarsenNZ

@NickLarsenNZ NickLarsenNZ commented Jul 16, 2026 •

Copy link
Copy Markdown
Member

Discovered in #856

@NickLarsenNZ NickLarsenNZ self-assigned this Jul 16, 2026
@NickLarsenNZ
NickLarsenNZ requested a review from Techassi July 16, 2026 15:05
@NickLarsenNZ NickLarsenNZ changed the title fix(deps): Bump yanked spin crate fix: Bump spin to 0.9.9 Jul 16, 2026
@NickLarsenNZ NickLarsenNZ moved this to Development: Waiting for Review in Stackable Engineering Jul 16, 2026
@Techassi
Techassi merged commit 9247836 into release-26.7 Jul 16, 2026
18 checks passed
@Techassi
Techassi deleted the fix/bump-yanked-spin-crate branch July 16, 2026 18:41
@Techassi Techassi moved this from Development: Waiting for Review to Development: Done in Stackable Engineering Jul 16, 2026
@lfrancke lfrancke moved this from Development: Done to Done in Stackable Engineering Jul 16, 2026
lfrancke added a commit that referenced this pull request Jul 17, 2026
…eouts

Follow-ups to the @odata.nextLink pagination fix in #859:

- Add a 60s request / 15s connect timeout to every user-info-fetcher
  outbound HTTP backend (Keycloak, Entra, XFSC AAS) via a shared
  utils::http::client_builder(); reqwest otherwise waits indefinitely.
- Keep every directory membership by requesting /memberOf instead of
  restricting to microsoft.graph.group, so directory roles and
  administrative units are still returned.
- Cap @odata.nextLink following at 100 pages as a backstop against a
  cyclic or runaway link, warning if the group list may be truncated.
- Bump the yanked spin 0.9.8 to 0.9.9 (matching #857, which only landed
  on release-26.7) so cargo-deny passes, and regenerate Cargo.nix for
  the new wiremock dev-dependency.
NickLarsenNZ added a commit that referenced this pull request Jul 17, 2026
* fix: respect next link in uif entra backend requests

* fix: bound Entra group pagination, keep all memberships, add HTTP timeouts

Follow-ups to the @odata.nextLink pagination fix in #859:

- Add a 60s request / 15s connect timeout to every user-info-fetcher
  outbound HTTP backend (Keycloak, Entra, XFSC AAS) via a shared
  utils::http::client_builder(); reqwest otherwise waits indefinitely.
- Keep every directory membership by requesting /memberOf instead of
  restricting to microsoft.graph.group, so directory roles and
  administrative units are still returned.
- Cap @odata.nextLink following at 100 pages as a backstop against a
  cyclic or runaway link, warning if the group list may be truncated.
- Bump the yanked spin 0.9.8 to 0.9.9 (matching #857, which only landed
  on release-26.7) so cargo-deny passes, and regenerate Cargo.nix for
  the new wiremock dev-dependency.

* fix: address review feedback

- Restructure the Entra group pagination loop guard-first: check the page
  cap and warn/break before doing the request, per review.
- Reword the changelog entry for the pagination fix.

---------

Co-authored-by: maltesander <contact@maltesander.com>
Co-authored-by: Lars Francke <jujutsu@lars-francke.de>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

3 participants