Skip to content

fix: Bump spin to 0.9.9#857

Merged
Techassi merged 1 commit into
release-26.7from
fix/bump-yanked-spin-crate
Jul 16, 2026
Merged

fix: Bump spin to 0.9.9#857
Techassi merged 1 commit into
release-26.7from
fix/bump-yanked-spin-crate

Conversation

@NickLarsenNZ

@NickLarsenNZ NickLarsenNZ commented Jul 16, 2026

Copy link
Copy Markdown
Member

Discovered in #856

@NickLarsenNZ NickLarsenNZ self-assigned this Jul 16, 2026
@NickLarsenNZ
NickLarsenNZ requested a review from Techassi July 16, 2026 15:05
@NickLarsenNZ NickLarsenNZ changed the title fix(deps): Bump yanked spin crate fix: Bump spin to 0.9.9 Jul 16, 2026
@NickLarsenNZ NickLarsenNZ moved this to Development: Waiting for Review in Stackable Engineering Jul 16, 2026
@Techassi
Techassi merged commit 9247836 into release-26.7 Jul 16, 2026
18 checks passed
@Techassi
Techassi deleted the fix/bump-yanked-spin-crate branch July 16, 2026 18:41
@Techassi Techassi moved this from Development: Waiting for Review to Development: Done in Stackable Engineering Jul 16, 2026
@lfrancke lfrancke moved this from Development: Done to Done in Stackable Engineering Jul 16, 2026
lfrancke added a commit that referenced this pull request Jul 17, 2026
…eouts

Follow-ups to the @odata.nextLink pagination fix in #859:

- Add a 60s request / 15s connect timeout to every user-info-fetcher
  outbound HTTP backend (Keycloak, Entra, XFSC AAS) via a shared
  utils::http::client_builder(); reqwest otherwise waits indefinitely.
- Keep every directory membership by requesting /memberOf instead of
  restricting to microsoft.graph.group, so directory roles and
  administrative units are still returned.
- Cap @odata.nextLink following at 100 pages as a backstop against a
  cyclic or runaway link, warning if the group list may be truncated.
- Bump the yanked spin 0.9.8 to 0.9.9 (matching #857, which only landed
  on release-26.7) so cargo-deny passes, and regenerate Cargo.nix for
  the new wiremock dev-dependency.
NickLarsenNZ added a commit that referenced this pull request Jul 17, 2026
* fix: respect next link in uif entra backend requests

* fix: bound Entra group pagination, keep all memberships, add HTTP timeouts

Follow-ups to the @odata.nextLink pagination fix in #859:

- Add a 60s request / 15s connect timeout to every user-info-fetcher
  outbound HTTP backend (Keycloak, Entra, XFSC AAS) via a shared
  utils::http::client_builder(); reqwest otherwise waits indefinitely.
- Keep every directory membership by requesting /memberOf instead of
  restricting to microsoft.graph.group, so directory roles and
  administrative units are still returned.
- Cap @odata.nextLink following at 100 pages as a backstop against a
  cyclic or runaway link, warning if the group list may be truncated.
- Bump the yanked spin 0.9.8 to 0.9.9 (matching #857, which only landed
  on release-26.7) so cargo-deny passes, and regenerate Cargo.nix for
  the new wiremock dev-dependency.

* fix: address review feedback

- Restructure the Entra group pagination loop guard-first: check the page
  cap and warn/break before doing the request, per review.
- Reword the changelog entry for the pagination fix.

---------

Co-authored-by: maltesander <contact@maltesander.com>
Co-authored-by: Lars Francke <jujutsu@lars-francke.de>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

Development

Successfully merging this pull request may close these issues.

3 participants