Skip to content

fix(security): generate root password, use argon2, update deps#2177

Merged
spetz merged 4 commits into
masterfrom
update_packages_and_security
Sep 18, 2025
Merged

fix(security): generate root password, use argon2, update deps#2177
spetz merged 4 commits into
masterfrom
update_packages_and_security

Conversation

@spetz
Copy link
Copy Markdown
Contributor

@spetz spetz commented Sep 18, 2025

Harden the server security, by generating the default root user password if not provided, change bcrypt hash to argon2, upgrade all dependencies and tests to use the default credentials.
BREAKING

@spetz spetz changed the title security(server): generate root password, switch to argon2 from bcryp… security(server): generate root password, use argon2, update deps Sep 18, 2025
@spetz spetz force-pushed the update_packages_and_security branch from 0cbd66a to 85df2d3 Compare September 18, 2025 10:54
@spetz spetz changed the title security(server): generate root password, use argon2, update deps fix(security): generate root password, use argon2, update deps Sep 18, 2025
@spetz spetz force-pushed the update_packages_and_security branch 8 times, most recently from 91667eb to 16aadf1 Compare September 18, 2025 13:23
@spetz spetz force-pushed the update_packages_and_security branch from 16aadf1 to 581fb2f Compare September 18, 2025 13:36
@spetz spetz merged commit 4323c4f into master Sep 18, 2025
49 checks passed
@spetz spetz deleted the update_packages_and_security branch September 18, 2025 17:27
hageshiame pushed a commit to hageshiame/iggy that referenced this pull request Nov 7, 2025
…e#2177)

Harden the server security, by generating the default root user password
if not provided, change bcrypt hash to argon2, upgrade all dependencies
and tests to use the default credentials.
BREAKING

---------

Co-authored-by: Hubert Gruszecki <h.gruszecki@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants