Skip to content

chore(deps): bump github.com/plexusone/systemforge from 0.11.0 to 0.30.5 - #34

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/plexusone/systemforge-0.30.5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/plexusone/systemforge-0.30.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/plexusone/systemforge from 0.11.0 to 0.30.5.

Release notes

Sourced from github.com/plexusone/systemforge's releases.

v0.30.5

Release Notes: v0.30.5

Full Changelog: plexusone/systemforge@v0.30.4...v0.30.5

v0.30.4

Release Notes: v0.30.4

Full Changelog: plexusone/systemforge@v0.30.3...v0.30.4

v0.30.3

Release Notes: v0.30.3

Full Changelog: plexusone/systemforge@v0.30.2...v0.30.3

v0.30.2

Release Notes: v0.30.2

Full Changelog: plexusone/systemforge@v0.30.1...v0.30.2

v0.30.1

Release Notes: v0.30.1

Full Changelog: plexusone/systemforge@v0.30.0...v0.30.1

v0.30.0

Release Notes: v0.30.0

Full Changelog: plexusone/systemforge@v0.29.0...v0.30.0

v0.29.0

Release Notes: v0.29.0

Full Changelog: plexusone/systemforge@v0.28.0...v0.29.0

v0.28.0

Release Notes: v0.28.0

Full Changelog: plexusone/systemforge@v0.27.0...v0.28.0

v0.27.0

Release Notes: v0.27.0

What's Changed:

Full Changelog: plexusone/systemforge@v0.26.0...v0.27.0

v0.26.0

Release Notes: v0.26.0

... (truncated)

Changelog

Sourced from github.com/plexusone/systemforge's changelog.

[v0.30.5] - 2026-11-02

Highlights

  • A signed-in person can link another provider's sign-in to their account at /account/sign-in-methods, so either reaches the same account

Security

  • Linking needs a session for the account that started it and an allowed origin, never moves an identity from another account, never creates an account and never changes its email (18333eb)

Added

  • /account/sign-in-methods and POST /account/sign-in-methods/{provider}: link a provider's sign-in to the signed-in account (SignInMethodsPath) (18333eb)
  • The security event systemauth.sign_in_method.linked, for a completed link and a link the callback refuses, as OCSF User Management, Update (18333eb)

Documentation

  • The social login guide describes linking sign-in methods; the OCSF guide lists the new event (2159827)

Tests

  • Linking, relinking, signing in with a linked identity, and refusals for another account's identity, a missing session and a cross-origin start (1dc9898)

[v0.30.4] - 2026-11-02

Highlights

  • social_login.signed_out_url lands every sign-out on the product's own page, such as its marketing site
  • SystemAuth's waitlist page links back to signed_out_url as "Back to" the product's name, so it is no longer a dead end

Added

  • social_login.signed_out_url: where every sign-out lands, whatever return_to the app sent; it must pass the redirect allowlist (bba72ce)
  • social_login.signed_out_name: the display name of the site at signed_out_url, shown on the waitlist page's link back to it; default: the URL's host (7552f80)

Documentation

  • The social login and relying-party guides describe signed_out_url (1285b92)
  • The social login and deployment guides describe signed_out_name and the waitlist page's link back (d6c6ff5)

Tests

  • A sign-out lands on signed_out_url, an open return_to is still refused, and an unlisted URL is refused at startup (e0e83eb)
  • The waitlist page links back to signed_out_url by its name before and after joining, names its host by default, and shows no link without one (1257a93)

[v0.30.3] - 2026-11-02

Highlights

  • SystemAuth's sign-in, sign-out, consent, sign-up and email pages are styled: a centered card in light and dark, with the sign-in options as buttons

... (truncated)

Commits
  • 80c55f6 Merge pull request #81 from plexusone/feat/link-sign-in-methods
  • 6c8c548 docs(release): correct v0.30.5's notes on linking
  • fe62eb2 docs(systemauth): describe link refusals and their event precisely
  • 67dcfd8 fix(systemauth): say removing or merging is not available when a link is refused
  • ffcc26f docs(release): add v0.30.5 changelog and release notes
  • 2159827 docs(systemauth): describe linking sign-in methods
  • 1dc9898 test(systemauth): cover linking sign-in methods and its refusals
  • 18333eb feat(systemauth): link another provider's sign-in to the signed-in account
  • c50ec9f Merge pull request #80 from plexusone/feat/signed-out-url
  • 60d7b1a docs(release): add signed_out_name and the waitlist link to v0.30.4
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/plexusone/systemforge](https://github.com/plexusone/systemforge) from 0.11.0 to 0.30.5.
- [Release notes](https://github.com/plexusone/systemforge/releases)
- [Changelog](https://github.com/plexusone/systemforge/blob/main/CHANGELOG.md)
- [Commits](plexusone/systemforge@v0.11.0...v0.30.5)

---
updated-dependencies:
- dependency-name: github.com/plexusone/systemforge
  dependency-version: 0.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 6, 2026
@coderabbitai

coderabbitai Bot commented Nov 6, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 952517d2-10d3-4a95-b32b-71c424307190

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants