chore(deps): update authelia/authelia docker tag to v4.38.18

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
authelia/authelia (source)	final	minor	4.37.5 -> 4.38.18

---

Release Notes

authelia/authelia (authelia/authelia)

v4.38.18

Compare Source

Bug Fixes

• commands: crypto rand file param missing (#​8533) (d386d06)
• configuration: allow unix socket ports (#​8520) (31565e4), closes #​8509
• configuration: oidc subject not validated (#​8380) (990312b)
• session: add connection timeout and retry options to redis (#​8146) (7584aac)
• templates: add missing functions (#​8494) (7c12781)
• web: include privacy policy when remember me is enabled (#​8540) (a18b1d9), closes #​8537
• web: missing translations (#​8318) (db901a0)
• web: undesirable default method ux (#​8521) (7f515d1), closes #​8345

Docker Container

• docker pull authelia/authelia:4.38.18
• docker pull ghcr.io/authelia/authelia:4.38.18

v4.38.17

Compare Source

Bug Fixes

• configuration: jwk without required key startup panic (#​8023) (af5face)
• configuration: templating panic edge case (#​8130) (feca984)
• configuration: utilise updated psl for domain validation (#​8119) (a89d8b8), closes /github.com/golang/go/issues/15518#issuecomment-217312171 #​8074
• web: feedback missing from password reset (#​8021) (58866f6)
• web: totp credential ui shows too much info (#​8062) (5538c2f)
• web: webauthn buttons crowded (#​8008) (108c58e)

Docker Container

• docker pull authelia/authelia:4.38.17
• docker pull ghcr.io/authelia/authelia:4.38.17

v4.38.16

Compare Source

Bug Fixes

• oidc: select account prompt missing (#​7956) (fd012b7)
• swagger-ui csp, strict csp static files and cleanup obselete files (#​7966) (d7603f0)

Docker Container

• docker pull authelia/authelia:4.38.16
• docker pull ghcr.io/authelia/authelia:4.38.16

v4.38.15

Compare Source

Bug Fixes

• suites: container dependencies for redis stack in ha suite (#​7947) (a821c42)
• templates: reset password link width (#​7944) (d8a8d54)
• web: bad ux on totp only config (#​7946) (ea46df5)

Docker Container

• docker pull authelia/authelia:4.38.15
• docker pull ghcr.io/authelia/authelia:4.38.15

v4.38.14

Compare Source

Bug Fixes

• commands: acl check missing query (#​7940) (3d870e2)

Docker Container

• docker pull authelia/authelia:4.38.14
• docker pull ghcr.io/authelia/authelia:4.38.14

v4.38.13

Compare Source

Bug Fixes

• web: inconsistent authenticated layout (#​7909) (ff6d6b6)

Docker Container

• docker pull authelia/authelia:4.38.13
• docker pull ghcr.io/authelia/authelia:4.38.13

v4.38.12

Compare Source

Bug Fixes

• templates: grammar and enhancements to emails (#​7903) (ef30302)
• web: authenticated layout inconsistent (#​7900) (3b7767a)

Docker Container

• docker pull authelia/authelia:4.38.12
• docker pull ghcr.io/authelia/authelia:4.38.12

v4.38.11

Compare Source

Bug Fixes

• authentication: ldap attributes treated case-sensitive (#​7793) (c6aacd3), closes #​7791
• commands: uid logged instead of gid (#​7774) (82ce0cf)
• configuration: slice init length (#​7720) (a563114)
• email template ux (#​7654) (224f711)
• oidc: jwt assertions aud overly strict (#​7798) (eefd06e)
• web: exact dates too verbose for good ux (#​7650) (071be3c)

Docker Container

• docker pull authelia/authelia:4.38.11
• docker pull ghcr.io/authelia/authelia:4.38.11

v4.38.10

Compare Source

Bug Fixes

• busybox wget zombie ssl client (#​7498) (c4cb630), closes #​7463
• configuration: multiple storage providers allowed (#​7574) (448d52a), closes #​7573
• session: sentinel db index not respected upstream (#​7514) (e2f8fdd)
• storage: change encryption key fails (#​7613) (b3dda10), closes #​7611
• web: average ux when adding credentials (#​7517) (1b8c228)

Docker Container

• docker pull authelia/authelia:4.38.10
• docker pull ghcr.io/authelia/authelia:4.38.10

v4.38.9

Compare Source

Bug Fixes

• authentication: memberof included in groups searches (#​7359) (7af6831), closes #​7310
• commands: validate exit status (#​7364) (5258b10), closes #​7262
• configuration: key with trailing data ignored (#​7358) (2eaef3c)
• handlers: disabling 2fa methods may result in a bad ux (#​7360) (010b7fa)
• middlewares: cors responses without preflight (#​7427) (82e89c6)
• middlewares: header allow set instead of acam (#​7424) (5a3bfa5)
• oidc: include missing amr with value pop (#​7381) (8df2a79)
• suites: adjust envoy connection limits (#​7214) (5942698)
• web: one time code error hangs (#​7208) (403f081), closes #​7206

Reverts

• update traefik docker tag to v3 (#​7425) (1406273)

Docker Container

• docker pull authelia/authelia:4.38.9
• docker pull ghcr.io/authelia/authelia:4.38.9

v4.38.8

Compare Source

Bug Fixes

• authorization: mfa not detected in custom policies (#​7116) (2bd63fa), closes #​7103
• commands: build-info too verbose (#​7128) (93fe754)
• commands: missing hash-password help topic (#​7136) (ab0d501)
• oidc: potential nil panic with misconfigured client (#​7138) (14d04c4), closes #​6933
• oidc: return correct extra claims (#​7071) (a9021aa)
• web: adjust router basename behaviour (#​7130) (e8e5b8a), closes #​5902 #​5902

Docker Container

• docker pull authelia/authelia:4.38.8
• docker pull ghcr.io/authelia/authelia:4.38.8

v4.38.7

Compare Source

Bug Fixes

• commands: acl policy check errors on warnings (#​7000) (4b24678)
• configuration: incorrect sector_identifier_uri validation (#​7037) (a224420)
• configuration: missing request_uris option (#​7033) (ab4d14c)
• oidc: delayed user details refresh (#​7035) (4d51ae7)
• oidc: form post csp not set correctly (#​7017) (2ebc04f)
• oidc: missing introspection claims (#​7049) (2ffd5c5)
• oidc: prompt none not handled (#​7018) (680546b)

Docker Container

• docker pull authelia/authelia:4.38.7
• docker pull ghcr.io/authelia/authelia:4.38.7

v4.38.6

Compare Source

Bug Fixes

• configuration: missing trailing slash (#​6968) (5c7587f)

Docker Container

• docker pull authelia/authelia:4.38.6
• docker pull ghcr.io/authelia/authelia:4.38.6

v4.38.5

Compare Source

Bug Fixes

• configuration: failure to map deprecated value correctly (#​6964) (ef9cbe4), closes #​6909
• configuration: rename token_lifespan in configuration example (#​6951) (05c8989)
• logging: include logs about logging config (#​6960) (6de21b2)
• web: add missing translations and align for consistency (#​6950) (6428864)

Docker Container

• docker pull authelia/authelia:4.38.5
• docker pull ghcr.io/authelia/authelia:4.38.5

v4.38.4

Compare Source

Bug Fixes

• configuration: include logs about loaded files and filters (#​6935) (fdb62da)
• server: header inconsistencies (#​6929) (2535e33), closes #​6882

Build

In addition to the mentioned fixes, we are now building glibc binaries with an older version of glibc to support users who've queried about older operating systems, see #​6924.

Docker Container

• docker pull authelia/authelia:4.38.4
• docker pull ghcr.io/authelia/authelia:4.38.4

v4.38.3

Compare Source

Bug Fixes

• commands: config template empty feedback (#​6917) (1f4db5c)
• configuration: include more helpful address mapping logs (#​6909) (32424bf)
• handlers: bearer authorization assumed intention (#​6920) (2970dd8)
• handlers: bypass fails with authorization header (#​6919) (b64c19a), closes #​6914
• oidc: expose allow multiple auth methods (#​6910) (438e433)
• server: oidc flow failure due to corb (#​6921) (427ed6c)
• web: resolve path conflicts between backend and frontend (#​6906) (a99bb63)

Docker Container

• docker pull authelia/authelia:4.38.3
• docker pull ghcr.io/authelia/authelia:4.38.3

v4.38.2

Compare Source

Bug Fixes

• server: invalid base url (#​6881) (22dd505)

Docker Container

• docker pull authelia/authelia:4.38.2
• docker pull ghcr.io/authelia/authelia:4.38.2

v4.38.1

Compare Source

Bug Fixes

• configuration: default redirection url check fails (#​6867) (65a7fc2)
• storage: mysql migrate failure webauthn (#​6866) (60cae67), closes #​6859

Docker Container

• docker pull authelia/authelia:4.38.1
• docker pull ghcr.io/authelia/authelia:4.38.1

v4.38.0

Compare Source

Overview

It's important users check the Release Notes on the Blog as there are potential necessary changes with experimental/beta features. This fairly large release is primarily a culmination of effort from @​smkent, @​nightah, @​clems4ever, @​mind-ar, @​joshgordon, @​ezrizhu, and @​james-d-elliott. Many others have made contributions in this time either in the form of pull requests, feedback, or some even went as far as contributing their attitudes.

See the change log below for more information about this release.

Bug Fixes

• commands: internal services not cleaned up properly (#​4966) (f44700c), closes #​4963
• commands: missing pkcs8 option (#​5270) (033d3c0)
• commands: no args not enforced on crypto hash generate (#​5237) (0f4f5d5)
• commands: storage cmd fail when implicit config absent (#​5213) (569af0f)
• configuration: deprecated secrets not mapped (#​6150) (5446efb)
• configuration: fail to parse large int duration (#​5408) (713f8e9)
• configuration: illogical refresh interval default (#​6319) (c49b973)
• configuration: optional value not treated as optional (#​5853) (5edd5fc)
• configuration: regression in redis default port (#​6428) (f93a0b5)
• configuration: secret permission errors panic (#​5141) (622bf42), closes #​5138
• configuration: warning about log level env (#​6784) (c70c83f)
• handlers: legacy authz failure on nginx (#​4956) (ab01fa6)
• logging: injected time format inconsistent (#​5004) (b9a6856)
• middlewares: failure to detect remote ip (#​5339) (34ec813)
• model: yaml encoding of totp and webauthn fails (#​5204) (dfbbf1a)
• notification: error on non-normative login responses (#​4729) (8ef90ca), closes #​4717
• notification: missing display name (#​4653) (a771cc6)
• notification: missing use of timeout (#​4652) (a691131)
• notification: smtp auth not configured (#​4647) (7b8ed46)
• notifier: mime parts in reverse order (#​5623) (13b54b4), closes #​5617
• ntp: startup check skipped when it shouldn't be (#​5701) (934f68b)
• ntp: version 4 encoded incorrectly (#​4773) (b815521)
• oidc: client auth basic fails on correctly encoded header (#​5632) (cb116db)
• oidc: client credentials flow not populating session (#​5797) (62c36eb)
• oidc: client id not in audience whitelist (#​5980) (ad82ec7)
• oidc: csp blocks form_post response form submit (#​4719) (cf4010b), closes #​4669
• oidc: default response mode not validated (#​5129) (c8f75b1)
• oidc: failure to insert with client credentials grant (#​5809) (895cdc2)
• oidc: insufficient debug logs on some endpoints (#​5783) (f09dbee)
• oidc: par consent state error (#​5880) (321a380)
• oidc: par context redirect (#​6450) (0d0fda8)
• oidc: par model mapping (#​5879) (e42bbca)
• oidc: pkce session generated needlessly (#​5762) (896752c)
• oidc: pre-config audience not matched (#​6513) (aee9d28)
• oidc: refresh flow scope parameter ignored (#​5782) (e250ad3)
• oidc: userinfo endpoint returns additional audience (#​5781) (0919173)
• server: errors not logged (#​4682) (53a6275)
• storage: postgresql webauthn tbl invalid aaguid constraint (#​5183) (fa250ea), closes #​5182
• templates: plain text email misleading (#​5036) (a91762c), closes #​4915
• utils: fix suite setup timeout (#​4771) (56f0282), closes #​4751
• webauthn credential user id missing (#​5882) (4903567)
• webauthn user handle encoding (f567b67)

Features

• add systemd security hardening (#​6480) (648fdfe)
• authentication: ldap memberof group search (#​5418) (f79db58), closes #​2161
• authentication: ldap time replacements (#​4483) (d67554a), closes #​1964 #​1284
• authentication: suport ldap over unix socket (#​5397) (fb5c285)
• commands: config template command (#​6013) (16b0e20)
• commands: go build info (#​5775) (37ee009)
• commands: storage import/export commands (#​4545) (d7ab3bb)
• configuration: disallow public suffix domains (#​4855) (598ea2b)
• configuration: env config file discovery (#​4618) (0130edb)
• configuration: file filters (#​4515) (c7f4d59)
• configuration: freeipa ldap implementation (#​4482) (d0d80b4), closes #​2177 #​2161
• configuration: glauth ldap implementation (#​4499) (d3d87ff)
• configuration: lldap implementation (#​4498) (5b8b314)
• configuration: load config from directory (#​4616) (cc1e58e)
• configuration: rfc2307bis implementation (#​4900) (2e6d17b)
• configuration: unix socket listener subpath (#​6463) (7a97373)
• handlers: authz authrequest authelia url (#​5181) (2dcfc0b)
• logging: date time layout (#​6333) (786985e), closes #​6136
• metrics: record openid connect histogram (#​5769) (bd04624)
• notification: important events notifications (#​4644) (f685f24)
• oauth2 authorization bearer (#​6774) (fb50f1a), closes #​2023 #​188
• oidc: auth policy applied per-subject (#​5486) (db6d95c), closes #​2621
• oidc: client authentication modes (#​5150) (3d2da0b)
• oidc: client credentials grant type (#​5729) (b829e1b)
• oidc: client_secret_jwt client auth (#​5031) (42671d3)
• oidc: client_secret_jwt client auth (#​5253) (1dbfbc5)
• oidc: disable minimum parameter entropy (#​5495) (32c6880)
• oidc: jwk selection by id (#​5464) (65f69ae)
• oidc: jwt profile for oauth 2.0 access tokens (#​5913) (9a28de5)
• oidc: jwt response for introspection (#​5840) (34b7a47)
• oidc: jwt secured authorization response mode (#​5914) (0196e0b)
• oidc: per-client custom token lifespans (#​5741) (788be59)
• oidc: per-client pkce enforcement policy (#​4692) (adaf069)
• oidc: private_key_jwt client auth (#​5280) (65ecfe4)
• oidc: pushed authorization requests (#​4546) (ff6be40)
• oidc: requested audience policy (#​6002) (c950736)
• oidc: server issuer identification (#​5912) (0da4abf)
• oidc: signed discovery (#​6003) (357ce8e)
• server: customizable authz endpoints (#​4296) (65705a6), closes #​2753 #​3716
• server: handle head method (#​5003) (a345490)
• server: listen on unix sockets (#​5038) (90d1901)
• server: recover panics (2c6a8e1)
• server: update default headers (#​5881) (e9e2969)
• session: multiple session cookie domains (#​3754) (8b29cf7), closes #​1198
• session: redirection by cookie domain (#​6017) (6a6059d)
• templates: add multiline helper functions (#​6227) (00725ec)
• templates: templating functions (#​4635) (55a6794)
• totp: reuse policy (5d3e7a0)
• web: add password policy visible feedback on password change (#​5714) (b0746dc), closes #​5048
• web: caps lock detection (61c30b3)
• web: multiple webauthn credential registration (c0dbdd9), closes #​275 #​4366
• web: one-time codes for identity verification (e618cf3), closes #​3801
• web: per-device two factor method (b33dabb), closes #​1699
• web: privacy policy url (#​4625) (a566c16), closes #​2639
• web: revoke reset password tokens (2a38819), closes #​136
• web: second factor identity verification (d62d79e), closes #​135
• web: user one-time password preferences (87d2a34)

Performance Improvements

• server: cached openapi document (#​4674) (1c3219e)
• web: lazy loading (87747a5)

Docker Container

• docker pull authelia/authelia:4.38.0
• docker pull ghcr.io/authelia/authelia:4.38.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.