Bump flask from 3.0.3 to 3.1.3 in /docker/oidc-test-client

Bumps [flask](https://github.com/pallets/flask) from 3.0.3 to 3.1.3. - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/flask/compare/3.0.3...3.1.3) --- updated-dependencies: - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
🔐(secrets) update secrets to current main
2026-02-21 00:08:14 +00:00 · 2026-02-11 10:35:53 +01:00 · 2025-12-03 23:14:01 +01:00 · 2025-11-24 18:06:22 +01:00 · 2025-11-24 18:05:40 +01:00 · 2025-11-24 18:04:18 +01:00
7 changed files with 129 additions and 105 deletions
@@ -104,8 +104,10 @@ jobs:

  helmfile-lint:
    runs-on: ubuntu-latest
+    # skip this job on forks since they won't have access to the required secrets
+    if: github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request'
    container:
-      image: ghcr.io/helmfile/helmfile:v0.171.0
+      image: ghcr.io/helmfile/helmfile:v1.2.0
    steps:
      -
        uses: actions/create-github-app-token@v1
@@ -123,15 +125,13 @@ jobs:
          token: ${{ steps.app-token.outputs.token }}
      -
        name: Helmfile lint
-        shell: bash
+        env:
+          SOPS_AGE_KEY: ${{ secrets.SOPS_PRIVATE }}
        run: |
-          mkdir -p ~/.config/sops/age/
-          echo ${{ secrets.SOPS_PRIVATE }} > ~/.config/sops/age/keys.txt
-          set -e
-          HELMFILE=src/helm/helmfile.yaml
-          environments=$(awk '/environments:/ {flag=1; next} flag && NF {print} !NF {flag=0}' "$HELMFILE" | grep -E '^[[:space:]]{2}[a-zA-Z]+' | sed 's/^[[:space:]]*//;s/:.*//')
+          HELMFILE=src/helm/helmfile.yaml.gotmpl
+          environments=$(< $HELMFILE awk -F'[ :]+' '/^  [^ ]/ {print $2} /^---/ { exit }')
          for env in $environments; do
            echo "################### $env lint ###################"
-            helmfile -e $env -f src/helm/helmfile.yaml lint || exit 1
+            helmfile -e $env -f "$HELMFILE" lint || exit 1
            echo -e "\n"
          done
@@ -6,6 +6,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0),
 and this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

+## [1.0.11] - 2025-11-24
+- remove setuptools, wheel and pip from production Docker image
+
+## [1.0.10] - 2025-11-21
+- rename helmfile.yaml for compatibility with helmfile 1.x
+
 ## [1.0.9] - 2025-10-03
 - map SAML entity IDs to SIRET (#34)
 - include ACR claim in ID token only if requested (#32)
@@ -68,7 +68,8 @@ COPY ./src/satosa /app/

 WORKDIR /app

-RUN pip install .
+# Uninstall pip, setuptools and wheel after installation to reduce attack surface
+RUN pip install . && pip uninstall -y setuptools wheel pip

 # Switch to unprivileged user
 USER ${DOCKER_USER}
@@ -1,2 +1,2 @@
-Flask==3.0.3
+Flask==3.1.3
 oic==1.7.0
@@ -1,7 +1,7 @@
 image:
  repository: ghcr.io/proconnect-gouv/oidc2fer
  pullPolicy: Always
-  tag: "v1.0.8"
+  tag: "v1.0.11"

 satosa:
  replicas: 2
@@ -24,92 +24,110 @@ satosa:

    OIDC_DB_URI: { secretKeyRef: { name: redis.redis.libre.sh, key: url } }

-    # As provided by RENATER on 2025-09-19
+    # As provided by RENATER
    SIRET_MAP: |-
      {
-        "https://shibboleth.grenoble-inp.fr/idp/shibboleth": "19381912500017",
-        "https://identites.ensea.fr/idp/shibboleth": "19951376300011",
-        "https://idp.ent.dauphine.fr/idp/shibboleth": "19754692200018",
-        "https://idp.univ-lyon2.fr/idp/shibboleth": "19691775100014",
-        "https://shibboleth.insa-rouen.fr/idp/shibboleth": "19760165100023",
-        "https://idp1.univ-fcomte.fr/idp/shibboleth": "19251215000363",
-        "https://idp.univ-tours.fr/idp/shibboleth": "19370800500478",
+        "http://idp.univ-poitiers.fr": "19860856400375",
        "https://apps.univ-lr.fr/idp/shibboleth": "19170032700015",
-        "https://shib.mines-albi.fr/idp/shibboleth": "19811200500022",
+        "https://auth.sso.vet-alfort.fr/saml/metadata": "19940608300014",
+        "https://auth.uttop.fr/saml/metadata": "19650048200019",
+        "https://authentification.inrae.fr/saml/metadata/idp": "18007003901803",
+        "https://federation.ens.psl.eu/idp/shibboleth": "19753459700012",
+        "https://federation.umontpellier.fr/idp/shibboleth": "13002979600013",
+        "https://federation.unimes.fr/idp/shibboleth": "93249157400012",
        "https://federation.upf.pf/idp/shibboleth": "19987001500013",
        "https://federation.utbm.fr/idp/shibboleth": "19900356700013",
-        "urn:mace:cru.fr:federation:univ-paris1.fr": "19751717000019",
-        "https://idp.sciencespobordeaux.fr/idp/shibboleth": "19330192600039",
-        "https://vip.espci.fr/saml2/idp/metadata.php": "20000068500012",
-        "urn:mace:cru.fr:federation:univ-nantes.fr": "13002974700016",
-        "https://shibboleth.univ-corse.fr/idp/shibboleth": "19202664900264",
-        "https://srv-fii.insa-toulouse.fr/idp/shibboleth": "19310152400018",
-        "urn:mace:cru.fr:federation:univ-rouen.fr": "19761904200017",
+        "https://federation3.univ-brest.fr/idp/shibboleth": "94129831700012",
+        "https://idauthproxy.insa-lyon.fr/Saml2IDP/metadata": "19690192000013",
        "https://ident-shib.ensc-rennes.fr/idp/shibboleth": "19350077400016",
-        "urn:mace:cru.fr:federation:unilim.fr": "19870669900321",
-        "https://idp.inha.fr/idp/shibboleth": "19754688000018",
-        "https://federation.unimes.fr/idp/shibboleth": "13000375900029",
-        "urn:mace:cru.fr:federation:univ-rennes1.fr": "13003051300019",
-        "urn:mace:cru.fr:federation:univ-ubs.fr": "19561718800600",
-        "https://idp.univ-orleans.fr/idp/shibboleth": "19450855200016",
-        "https://shibboleth.univ-savoie.fr/idp/shibboleth": "19730858800015",
-        "https://idp.cirad.fr/idp/shibboleth": "33159627000016",
-        "https://sso.ird.fr/idp/shibboleth": "18000602500159",
-        "https://idp.ensma.fr/idp/shibboleth": "19860073600021",
-        "https://idp.renater.fr/idp/shibboleth": "18008947600055",
-        "https://idp.inp-toulouse.fr/idp/shibboleth": "19311381800127",
-        "https://idp.unistra.fr/idp/shibboleth": "13000545700010",
-        "https://idp1.agroparistech.fr/idp/shibboleth": "13000285000134",
-        "https://janus.cnrs.fr/idp": "18008901303720",
-        "https://federation.umontpellier.fr/idp/shibboleth": "13002979600013",
-        "https://idp.sciencespo-lyon.fr/idp/shibboleth": "19690173000024",
-        "https://shibboleth.univ-grenoble-alpes.fr/idp/shibboleth": "13002608100013",
-        "https://idp.bnu.fr/idp/shibboleth": "18004406700015",
-        "https://ruhnu.univ-tlse2.fr/idp/shibboleth": "19311383400017",
-        "https://idp2.amue.fr/idp/shibboleth": "18004312700083",
-        "https://idpv3.univ-amu.fr/idp/shibboleth": "13001533200013",
-        "https://idp-ng.univ-st-etienne.fr/idp/shibboleth": "93850168100010",
+        "https://identification.univ-toulouse.fr": "13002132200016",
+        "https://identites.ec-lyon.fr/idp/shibboleth": "19690187000010",
+        "https://identites.ensea.fr/idp/shibboleth": "19951376300011",
        "https://identities.univ-jfc.fr/idp/prod": "19811201300018",
-        "https://idp3.univ-lorraine.fr/idp/shibboleth": "13001550600012",
+        "https://idp-genci.renater.fr/idp/shibboleth": "49468697500041",
+        "https://idp-ng.univ-st-etienne.fr/idp/shibboleth": "93850168100010",
+        "https://idp-septa.onisep.fr/idp/shibboleth": "18004302800653",
+        "https://idp-v4.univ-montp3.fr/idp/shibboleth": "93249089900014",
+        "https://idp.bnu.fr/idp/shibboleth": "18004406700015",
+        "https://idp.cirad.fr/idp/shibboleth": "33159627000016",
+        "https://idp.crous-reims.fr/idp/shibboleth": "18510200100327",
+        "https://idp.ec-nantes.fr/idp/shibboleth": "19440100600011",
+        "https://idp.ehesp.fr/idp/shibboleth": "13000362700010",
+        "https://idp.ens-lyon.fr/idp/shibboleth": "13000812100019",
+        "https://idp.ensam.eu/idp/shibboleth": "19753472000010",
+        "https://idp.ensfea.fr/idp/shibboleth": "19310143300012",
+        "https://idp.ensma.fr/idp/shibboleth": "19860073600021",
+        "https://idp.ent.dauphine.fr/idp/shibboleth": "19754692200018",
+        "https://idp.imt-atlantique.fr/idp/shibboleth": "18009202500121",
+        "https://idp.inha.fr/idp/shibboleth": "19754688000018",
+        "https://idp.inp-toulouse.fr/idp/shibboleth": "19311381800127",
+        "https://idp.insa-rennes.fr/idp/shibboleth": "19350097200016",
+        "https://idp.institut-agro.fr/idp": "13002622200013",
+        "https://idp.isae.fr/idp/shibboleth": "13000427800011",
+        "https://idp.lyon.archi.fr/idp/shibboleth": "19690184700018",
+        "https://idp.renater.fr/idp/shibboleth": "18008947600055",
+        "https://idp.rennes.archi.fr/idp/shibboleth": "19350089900029",
+        "https://idp.sciencespo-lyon.fr/idp/shibboleth": "19690173000024",
+        "https://idp.sciencespobordeaux.fr/idp/shibboleth": "19330192600039",
+        "https://idp.uca.fr/idp/shibboleth": "13002806100013",
+        "https://idp.uha.fr/idp/shibboleth": "19681166500013",
+        "https://idp.unistra.fr/idp/shibboleth": "13000545700010",
+        "https://idp.univ-avignon.fr/idp/shibboleth": "19840685200204",
+        "https://idp.univ-cotedazur.fr/idp/shibboleth": "13002566100013",
+        "https://idp.univ-eiffel.fr/idp/shibboleth": "13002612300013",
        "https://idp.univ-lemans.fr/idp/shibboleth": "19720916600010",
        "https://idp.univ-lille.fr/idp/shibboleth": "13002975400012",
-        "https://idp.univ-tln.fr/idp/shibboleth": "19830766200017",
-        "https://idp.uca.fr/idp/shibboleth": "13002806100013",
-        "https://shibboleth3.utt.fr/idp/shibboleth": "19101060200032",
-        "https://idp3.ut-capitole.fr/idp/shibboleth": "19311382600013",
-        "https://idp.imt-atlantique.fr/idp/shibboleth": "18009202500121",
-        "https://shib.univ-lehavre.fr/idp/shibboleth": "19762762300097",
-        "https://idp2.univ-paris8.fr/idp/shibboleth": "19931827000014",
-        "https://shib2.unc.nc/idp/shibboleth": "13000322100012",
-        "https://upnidp2.parisnanterre.fr/idp/shibboleth": "19921204400010",
-        "https://idp.ensfea.fr/idp/shibboleth": "19310143300012",
-        "https://idp.univ-eiffel.fr/idp/shibboleth": "13002612300013",
-        "https://idp.insa-rennes.fr/idp/shibboleth": "19350097200016",
-        "https://idp.univ-tlse3.fr/idp/shibboleth": "93827139200012",
-        "https://idp.universite-paris-saclay.fr/idp": "13002602400054",
-        "https://shibboleth.ens2m.fr/idp/shibboleth": "19250082500026",
-        "https://sso-ciation-saclay.centralesupelec.fr/idp/shibboleth": "13002076100016",
-        "https://federation.ens.psl.eu/idp/shibboleth": "19753459700012",
-        "https://authentification.inrae.fr/saml/metadata/idp": "18007003901803",
-        "https://idp.ensam.eu/idp/shibboleth": "19753472000010",
-        "https://idp1.ens-paris-saclay.fr/idp/shibboleth": "19940607500036",
-        "https://idp2.emse.fr/idp/shibboleth": "18009202500105",
-        "https://idp-septa.onisep.fr/idp/shibboleth": "18004302800653",
-        "https://papangue.vetagro-sup.fr/idp/shibboleth": "13000858400018",
-        "https://multipass.imt-nord-europe.fr/idp/shibboleth": "18009202500139",
-        "https://idp4.unicaen.fr/idp/shibboleth": "19141408500016",
-        "https://sso.bordeaux-inp.fr/idp/shibboleth": "13000635600013",
-        "https://auth.uttop.fr/saml/metadata": "19650048200019",
-        "https://idp.univ-cotedazur.fr/idp/shibboleth": "13002566100013",
-        "https://idp2.brgm.fr/idp/shibboleth": "58205614900120",
-        "https://idp.crous-reims.fr/idp/shibboleth": "18510200100012",
-        "https://idp.univ-avignon.fr/idp/shibboleth": "19840685200204",
-        "https://idp-genci.renater.fr/idp/shibboleth": "49468697500041",
-        "https://auth.sso.vet-alfort.fr/saml/metadata": "19940608300014",
+        "https://idp.univ-lyon2.fr/idp/shibboleth": "19691775100014",
+        "https://idp.univ-lyon3.fr/idp/shibboleth": "19692437700282",
+        "https://idp.univ-orleans.fr/idp/shibboleth": "19450855200016",
        "https://idp.univ-perp.fr/idp/shibboleth": "19660437500010",
-        "https://idp.institut-agro.fr/idp": "13000279300011",
+        "https://idp.univ-tln.fr/idp/shibboleth": "19830766200017",
+        "https://idp.univ-tlse3.fr/idp/shibboleth": "93827139200012",
+        "https://idp.univ-tours.fr/idp/shibboleth": "19370800500478",
+        "https://idp.universite-paris-saclay.fr/idp": "13002602400054",
+        "https://idp1.agroparistech.fr/idp/shibboleth": "13000285000134",
+        "https://idp1.ens-paris-saclay.fr/idp/shibboleth": "19940607500036",
+        "https://idp1.univ-fcomte.fr/idp/shibboleth": "93810656400017",
+        "https://idp2.amue.fr/idp/shibboleth": "18004312700091",
+        "https://idp2.brgm.fr/idp/shibboleth": "58205614900120",
+        "https://idp2.emse.fr/idp/shibboleth": "18009202500105",
+        "https://idp2.univ-paris8.fr/idp/shibboleth": "19931827000014",
+        "https://idp3.univ-lorraine.fr/idp/shibboleth": "13001550600012",
+        "https://idp3.ut-capitole.fr/idp/shibboleth": "13003061200019",
+        "https://idp4.unicaen.fr/idp/shibboleth": "19141408500016",
+        "https://idpv3.univ-amu.fr/idp/shibboleth": "13001533200013",
+        "https://janus.cnrs.fr/idp": "18008901303720",
+        "https://multipass.imt-nord-europe.fr/idp/shibboleth": "18009202500139",
+        "https://papangue.vetagro-sup.fr/idp/shibboleth": "13000858400018",
        "https://prod-idp.inria.fr": "18008904700013",
-        "https://idp.ec-nantes.fr/idp/shibboleth": "19440100600011"
+        "https://ruhnu.univ-tlse2.fr/idp/shibboleth": "19311383400017",
+        "https://shib.mines-albi.fr/idp/shibboleth": "18009202500097",
+        "https://shib.univ-lehavre.fr/idp/shibboleth": "19762762300097",
+        "https://identite.univ-reims.fr/idp/shibboleth": "19511296600799",
+        "https://shib2.unc.nc/idp/shibboleth": "13000322100012",
+        "https://shibboleth.ens2m.fr/idp/shibboleth": "19250082500026",
+        "https://shibboleth.grenoble-inp.fr/idp/shibboleth": "19381912500017",
+        "https://shibboleth.insa-rouen.fr/idp/shibboleth": "19760165100023",
+        "https://shibboleth.ube.fr/idp/shibboleth": "93823061200013",
+        "https://shibboleth.univ-corse.fr/idp/shibboleth": "19202664900264",
+        "https://shibboleth.univ-evry.fr/idp/shibboleth": "19911975100014",
+        "https://shibboleth.univ-grenoble-alpes.fr/idp/shibboleth": "13002608100013",
+        "https://shibboleth.univ-savoie.fr/idp/shibboleth": "19730858800015",
+        "https://shibboleth03.chartes.psl.eu/idp/shibboleth": "19753478700043",
+        "https://shibboleth3.utt.fr/idp/shibboleth": "19101060200032",
+        "https://srv-fii.insa-toulouse.fr/idp/shibboleth": "19310152400018",
+        "https://sso-ciation-saclay.centralesupelec.fr/idp/shibboleth": "13002076100016",
+        "https://sso.bordeaux-inp.fr/idp/shibboleth": "13000635600013",
+        "https://sso.ird.fr/idp/shibboleth": "18000602500159",
+        "https://upnidp2.parisnanterre.fr/idp/shibboleth": "19921204400010",
+        "https://vip.espci.fr/saml2/idp/metadata.php": "20000068500012",
+        "urn:mace:cru.fr:federation:uhb.fr": "19350937900015",
+        "urn:mace:cru.fr:federation:unilim.fr": "19870669900321",
+        "urn:mace:cru.fr:federation:univ-nantes.fr": "13002974700016",
+        "urn:mace:cru.fr:federation:univ-paris1.fr": "19751717000019",
+        "urn:mace:cru.fr:federation:univ-rennes1.fr": "13003051300019",
+        "urn:mace:cru.fr:federation:univ-rouen.fr": "19761904200017",
+        "urn:mace:cru.fr:federation:univ-ubs.fr": "19561718800600"
      }

 ingress:
@@ -1,3 +1,20 @@
+environments:
+  dev:
+    values:
+      - version: 0.0.1
+    secrets:
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
+  staging:
+    values:
+      - version: 0.0.1
+    secrets:
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
+  outscale-production:
+    values:
+      - version: 0.0.1
+    secrets:
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
+---
 repositories:
 - name: bitnami
  url: registry-1.docker.io/bitnamicharts
@@ -29,21 +46,3 @@ releases:
      - env.d/{{ .Environment.Name }}/values.oidc2fer.yaml.gotmpl
    secrets:
      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
-
-environments:
-  dev:
-    values:
-      - version: 0.0.1
-    secrets:
-      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
-  staging:
-    values:
-      - version: 0.0.1
-    secrets:
-      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
-  outscale-production:
-    values:
-      - version: 0.0.1
-    secrets:
-      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
-
Author	SHA1	Message	Date
dependabot[bot]	d606ac7439	Bump flask from 3.0.3 to 3.1.3 in /docker/oidc-test-client Bumps [flask](https://github.com/pallets/flask) from 3.0.3 to 3.1.3. - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/flask/compare/3.0.3...3.1.3) --- updated-dependencies: - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-02-21 00:08:14 +00:00
Jonathan Perret	208c4467df	🔐(secrets) update secrets to current main	2026-02-11 10:35:53 +01:00
Jonathan Perret	0e82e8b771	🔧(siret) fix stray space in SIRET map This was preventing EHESP users from connecting since their IdP's entity ID was not matched.	2025-12-03 23:14:01 +01:00
Jonathan Perret	798afdf2a9	Deploy release v1.0.11 to production	2025-11-24 18:06:22 +01:00
Jonathan Perret	7cf9fda7d8	v1.0.11 release	2025-11-24 18:05:40 +01:00
Jonathan Perret	1816d2a8de	Merge pull request #36 from proconnect-gouv/update-setuptools ⬆️(setuptools) remove setuptools from production Docker image	2025-11-24 18:04:18 +01:00
Jonathan Perret	c89b9b7ada	⬆️(setuptools) remove setuptools from production Docker image To fix a CVE reported by Cyberwatch. These tools are not required at runtime so there's no need to keep them around.	2025-11-24 17:51:02 +01:00
Jonathan Perret	c0d252f390	🔧(siret) fix entity ID for two entities As provided by RENATER.	2025-11-24 11:47:36 +01:00
Jonathan Perret	fa39964a64	🔧(siret) add new entities to SIRET map As provided by RENATER.	2025-11-24 09:42:00 +01:00
Jonathan Perret	44b9879a3b	Deploy release v1.0.10 to production	2025-11-21 11:10:07 +01:00
Jonathan Perret	7c3a0fccc9	v1.0.10 release	2025-11-21 11:07:03 +01:00
Jonathan Perret	c224e31a66	Merge pull request #35 from rouja/helm-refacto ⬆️(helmfile) rename helmfile to be compatible with new helmfile plugin	2025-11-20 16:09:14 +01:00
Jacques ROUSSEL	4892192b85	⬆️(helmfile) rename `helmfile.yaml` to `helmfile.yaml.gotmpl` For compatibility with helmfile v1.x.	2025-11-20 16:02:50 +01:00
Jonathan Perret	79aee346a2	🔧(siret) update SIRET map to replace closed entities These new SIRET numbers were found using https://annuaire-entreprises.data.gouv.fr/	2025-10-23 10:21:57 +02:00
Jonathan Perret	4e84ec0f2b	Deploy release v1.0.9 to production	2025-10-03 13:22:03 +02:00