piotrkochan/go-cerebro v0.13.0 on GitHub

v0.13.0 - 2026-11-04

Added ordered LDAP server failover with auth.ldap.urls, while preserving auth.ldap.url and named provider configuration.
Added auth.ldap.dial_timeout_seconds (default 5 seconds) and auth.ldap.read_timeout_seconds (default 30 seconds). Failover occurs on connection or TLS errors, without retrying rejected credentials across the URL list.
Added opt-in LDAP StartTLS on port 389 with certificate validation before binding, including failover across urls.

Rejected proxy username header names associated with credentials to prevent common configuration mistakes, while keeping usernames in authentication audit logs. This name-based check does not inspect header values.

Bump source-map-js from 1.2.1 to 1.2.2 (#92)
Bump github.com/go-chi/chi/v5 from 5.3.2 to 5.4.0 (#103)
Bump the go-dependencies group across 1 directory with 9 updates (#104)
Bump github/codeql-action/upload-sarif from 4.38.2 to 4.39.1 (#100)
Bump vite from 8.3.1 to 8.3.5 (#99)
build(deps): bump the npm-minor-patch group across 1 directory with 11 updates (#108)