head 1.4; access; symbols pkgsrc-2026Q2:1.3.0.8 pkgsrc-2026Q2-base:1.3 pkgsrc-2026Q1:1.3.0.6 pkgsrc-2026Q1-base:1.3 pkgsrc-2025Q4:1.3.0.4 pkgsrc-2025Q4-base:1.3 pkgsrc-2025Q3:1.3.0.2 pkgsrc-2025Q3-base:1.3 pkgsrc-2025Q2:1.2.0.6 pkgsrc-2025Q2-base:1.2 pkgsrc-2025Q1:1.2.0.4 pkgsrc-2025Q1-base:1.2 pkgsrc-2024Q4:1.2.0.2 pkgsrc-2024Q4-base:1.2 pkgsrc-2024Q3:1.1.0.18 pkgsrc-2024Q3-base:1.1 pkgsrc-2024Q2:1.1.0.16 pkgsrc-2024Q2-base:1.1 pkgsrc-2024Q1:1.1.0.14 pkgsrc-2024Q1-base:1.1 pkgsrc-2023Q4:1.1.0.12 pkgsrc-2023Q4-base:1.1 pkgsrc-2023Q3:1.1.0.10 pkgsrc-2023Q3-base:1.1 pkgsrc-2023Q2:1.1.0.8 pkgsrc-2023Q2-base:1.1 pkgsrc-2023Q1:1.1.0.6 pkgsrc-2023Q1-base:1.1 pkgsrc-2022Q4:1.1.0.4 pkgsrc-2022Q4-base:1.1 pkgsrc-2022Q3:1.1.0.2 pkgsrc-2022Q3-base:1.1; locks; strict; comment @# @; 1.4 date 2026.07.27.13.32.05; author hauke; state Exp; branches; next 1.3; commitid uJM82SaWPvP6miPG; 1.3 date 2025.08.07.11.12.19; author adam; state Exp; branches; next 1.2; commitid fj2GFsr5BBqvYM5G; 1.2 date 2024.12.01.00.04.58; author pin; state Exp; branches; next 1.1; commitid BY5a6kukmL85iJzF; 1.1 date 2022.08.17.15.44.17; author hauke; state Exp; branches; next ; commitid UDdA1QiTGs10ofQD; desc @@ 1.4 log @security/vaultwarden -- Update to v1.37.0 XXX Pull-up candidate From upstream's changelog: Note This update is required for support with clients with version 2026.7.0+, please update before reporting any issues with them. Security Fixes This release contains security fixes for the following advisories. We strongly advice to update as soon as possible. SSRF via the icon endpoint [GHSA-hw4g-2v3f-74x5] [GHSA-vh5m-fc9v-m84g] (Medium, 5.8 / 6.3) Cross-Organization Cipher Access [GHSA-xwf8-pjh7-h589] (Medium, 5.9) Organization Policy Bypass on Directory Import [GHSA-88qc-6ch9-mc3j] (Medium, 5.5) Send Access-Count Bypass [GHSA-rxhg-2pw9-vf25] (Medium, 5.3) Unauthenticated WebSocket Flooding DDOS [GHSA-96f7-78q5-j345] (Medium, 5.3) Cross-Organization Secret Sharing [GHSA-455c-vgg9-jxw8] (Medium, 4.3) Organization Import Authorization [GHSA-f3qw-qg77-hmm4] [GHSA-jq2g-h4xr-4mcr] (Medium, 4.3) Organization Data Enumeration via the Manager role [GHSA-rqf8-2568-r7mc] (Medium, 4.3) These are private for now, pending CVE assignment and publishing at a later date. What's Changed OpenDAL S3 parameter support by @@txase in #6127 Fix SSO Cookie path by @@BlackDex in #7187 fix email 2fa for bw cli by @@stefan0xC in #7225 sso_auth improvements by @@Timshel in #7197 Reject unrecognised DATABASE_URL instead of silent SQLite fallback by @@mfw78 in #7061 Switch to xx-cargo by @@dfunkt in #6640 Updates and fixes by @@BlackDex in #7235 Switch to Edition 2024, more clippy lints, and less macro calls by @@BlackDex in #7200 Serve Apple app site association file by @@user71424q in #7191 Update Rust, Crates and GHA by @@BlackDex in #7307 Fix enforce blocked by @@Timshel in #7246 Admin password recovery endpoint change by @@Timshel in #7270 fix(sends): emit hideEmail as non-null boolean in sync response by @@kvdb in #7283 Org membership delete remove Invitation by @@Timshel in #7284 [v2026.5.0] Registration request update by @@Timshel in #7295 [v2026.5.0] PutPolicy now using vnext format by @@Timshel in #7296 2026.6.0 send support by @@Timshel in #7346 Add SSO_AUTHORIZE_BODY by @@Timshel in #7357 Add pm-26340-linux-biometrics-v2 feature flag by @@pilotstew in #7358 improve CI by @@TriplEight in #6991 Misc updates and fixes by @@BlackDex in #7406 Remove old compatibility code by @@Timshel in #7434 Fix compilation with newer rust-musl version by @@dfunkt in #7453 Fix Custom Role CSS for new dialog markup by @@tom27052006 in #7442 Remove unused fields by @@Timshel in #7458 Update API response, crates and GHA by @@BlackDex in #7470 Trusted proxy support, unauthenticated rate limit & other fixes by @@dani-garcia in #7472 @ text @$NetBSD: patch-.env.template,v 1.3 2025/08/07 11:12:19 adam Exp $ Set for package defaults: Use sqlite, and the log directory we set up --- .env.template.orig 2026-07-24 16:27:32.000000000 +0000 +++ .env.template @@@@ -42,8 +42,8 @@@@ # RELOAD_TEMPLATES=false ## Web vault settings -# WEB_VAULT_FOLDER=web-vault/ -# WEB_VAULT_ENABLED=true +WEB_VAULT_FOLDER=@@PREFIX@@/@@WEB_VAULT_DIR@@/ +WEB_VAULT_ENABLED=true ######################### ### Database settings ### @@@@ -54,7 +54,7 @@@@ ## to the DB file. It defaults to sqlite://%DATA_FOLDER%/db.sqlite3. ## Bare paths without the sqlite:// scheme are supported for backwards compatibility, ## but only if the database file already exists. -# DATABASE_URL=sqlite://data/db.sqlite3 +DATABASE_URL=sqlite://data/db.sqlite3 ## When using MySQL, specify an appropriate connection URI. ## Details: https://docs.diesel.rs/2.1.x/diesel/mysql/struct.MysqlConnection.html # DATABASE_URL=mysql://user:password@@host[:port]/database_name @@@@ -415,7 +415,7 @@@@ # USE_SYSLOG=false ## Logging to file -# LOG_FILE=/path/to/log +LOG_FILE=@@VAULTWARDEN_LOGDIR@@/vaultwarden.log ## Log level ## Change the verbosity of the log output @ 1.3 log @vaultwarden: updated to 1.34.3 1.34.3 Notable changes This release should fix an issue with MySQL/MariaDB database connections when using the Alpine images. The alpine build image has reverted to use MariaDB Connector/C v3.4.5 which resolved the issue. What's Changed Update crates to trigger rebuild for mysql issue fix hiding of signup link 1.34.2 Notable changes Updated web vault to 2025.7.0 Included experimental support for S3 file backend using OpenDAL. This currently requires compiling from source with the s3 feature flag, check 5626 for more details. What's Changed fix css to hide login with passkey fix css for locked screen Abstract persistent files through Apache OpenDAL Some small admin updates Fix and improvements to password policies Update Alpine to version 3.22 make css for login-page position independent Minor fixes to copy in .env.template Update crates and web-vault allow signup for invited users fix account recovery withdrawal Fix an issue with yubico keys not validating Misc Updates and favicon fixes Update flags version and enable manual error reporting Use existing reqwest client for AWS S3 requests Fix v2025.6.x clients and newer to delete items chore: fix some minor issues in the comments fix hiding email as 2fa provider Update web-vault and admin resources improve the usage section of the README close unmatched left parenthesis in the README Update crates, workflow and issue template Update release.yml fix hash reference in release.yml Fix digest SHA extraction step Hide login form custom fields Adjust issue template fix: resolve group permission conflicts with multiple groups Update crates fix account key rotation @ text @d1 1 a1 1 $NetBSD: patch-.env.template,v 1.2 2024/12/01 00:04:58 pin Exp $ d5 1 a5 1 --- .env.template.orig 2025-07-29 10:13:02.000000000 +0000 d18 6 a23 6 @@@@ -53,7 +53,7 @@@@ ## When using SQLite, this is the path to the DB file, and it defaults to ## %DATA_FOLDER%/db.sqlite3. If DATA_FOLDER is set to an external location, this ## must be set to a local sqlite3 file path. -# DATABASE_URL=data/db.sqlite3 +DATABASE_URL=data/db.sqlite3 d27 1 a27 1 @@@@ -386,7 +386,7 @@@@ @ 1.2 log @security/vaultwarden: update to 1.32.5 Update from 1.30.1 Too much to list here, please see https://github.com/dani-garcia/vaultwarden/releases Next time, please ask for help when having issues with a Rust package :) @ text @d1 1 a1 1 $NetBSD$ d5 1 a5 1 --- .env.template.orig 2024-11-30 22:34:24.970004290 +0000 d7 1 a7 1 @@@@ -31,8 +31,8 @@@@ d18 4 a21 4 @@@@ -40,7 +40,7 @@@@ ## Database URL ## When using SQLite, this is the path to the DB file, default to %DATA_FOLDER%/db.sqlite3 d27 1 a27 1 @@@@ -370,7 +370,7 @@@@ @ 1.1 log @Vaultwarden is a Bitwarden server API implementation written in Rust, compatible with upstream Bitwarden password manager clients. It is well-suited for self-hosted deployment, where running the official resource-heavy service might not be ideal. @ text @d5 1 a5 1 --- .env.template.orig 2022-07-27 15:39:07.000000000 +0000 d7 12 a18 1 @@@@ -14,7 +14,8 @@@@ a23 1 + d25 1 a25 1 ## Details: https://docs.diesel.rs/diesel/mysql/struct.MysqlConnection.html d27 2 a28 13 @@@@ -61,8 +62,8 @@@@ # ICON_CACHE_NEGTTL=259200 ## Web vault settings -# WEB_VAULT_FOLDER=web-vault/ -# WEB_VAULT_ENABLED=true +WEB_VAULT_FOLDER=@@PREFIX@@/@@WEB_VAULT_DIR@@/ +WEB_VAULT_ENABLED=true ## Enables websocket notifications # WEBSOCKET_ENABLED=false @@@@ -117,7 +118,7 @@@@ # LOG_TIMESTAMP_FORMAT="%Y-%m-%d %H:%M:%S.%3f" d34 2 a35 2 ## Logging to Syslog ## This requires extended logging @