Commit ccd851a
authored
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?v=4&size=40){kind=avatar}
fix(deps): update module github.com/netresearch/simple-ldap-go to v1.13.0 (#252)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/netresearch/simple-ldap-go](https://redirect.github.com/netresearch/simple-ldap-go)
| `v1.12.2` → `v1.13.0` |
|
|
---
### Release Notes
<details>
<summary>netresearch/simple-ldap-go
(github.com/netresearch/simple-ldap-go)</summary>
###
[`v1.13.0`](https://redirect.github.com/netresearch/simple-ldap-go/blob/HEAD/CHANGELOG.md#v1130---2026-07-23)
[Compare
Source](https://redirect.github.com/netresearch/simple-ldap-go/compare/v1.12.2...v1.13.0)
##### Added
- **Password-expiry reporting for Active Directory and OpenLDAP**
([#​186](https://redirect.github.com/netresearch/simple-ldap-go/pull/186)).
`PasswordExpiryFor(ctx, user)` returns a directory-independent answer to
when a password expires, and `UsersWithExpiringPasswords(ctx, within)`
returns the enabled users whose password expires inside a window, oldest
deadline first. The result distinguishes four states — `expires` (with
the moment), `never-expires`, `must-change`, `unknown` — rather than a
bare timestamp, because they are not interchangeable: a caller that
treats `unknown` as expiring would act on every account the directory
happens to be quiet about.
- Active Directory resolves from the constructed
`msDS-UserPasswordExpiryTimeComputed`, which folds in the domain policy
and any Password Settings Object server-side, so no privileged read of
the Password Settings Container is needed. New `User` fields
`PasswordExpiresAt`, `PwdChangedAt`, `PasswordPolicyDN` expose the
underlying attributes.
- OpenLDAP resolves from the ppolicy operational `pwdChangedTime` plus
the governing policy's `pwdMaxAge`, taken from the entry's
`pwdPolicySubentry` or the new `Config.PasswordPolicyDN`. `pwdMaxAge` is
memoised per policy DN, so a directory scan costs one policy read per
distinct policy rather than one per user.
- OpenLDAP has no `userAccountControl`, so every OpenLDAP user reads as
enabled; a caller that must exclude deactivated OpenLDAP accounts has to
do so by its own criterion.
##### Fixed
- `FindUserByDNContext` requested a shorter attribute list than the
other user searches, so it silently returned a `User` with `pwdLastSet`,
`accountExpires`, `lockoutTime` and `whenCreated` zeroed — the same type
meaning different things depending on which finder produced it. It now
uses the shared `userFields` like every other user search.
##### CI
- The codecov unit flag is declared as `unittests` to match what
`go-check.yml` uploads under
([#​187](https://redirect.github.com/netresearch/simple-ldap-go/pull/187));
the previous `unit` name left real unit coverage attributed to an
undeclared flag while a stale one carried forward.
***
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/netresearch/raybeam).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->2 files changed
Lines changed: 3 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
| 8 | + | |
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
131 | 131 | | |
132 | 132 | | |
133 | 133 | | |
| 134 | + | |
| 135 | + | |
134 | 136 | | |
135 | 137 | | |
136 | 138 | | |
| |||
0 commit comments