Livio Spring c07ddc15d1 fix: improve random string generation (#12266) ...

# Which Problems Are Solved

`GenerateRandomString` used for generating codes incl. OTP was
incorrectly ignoring the last rune of the possible set.

# How the Problems Are Solved

Refactored the function to get the full randomness.

# Additional Changes

None

# Additional Context

Thanks @AyushParkara for pointing this out.

(cherry picked from commit d78ed6b5f2)

2026-07-28 14:02:26 +02:00

..

actions

fix(actions): prevent disk access via require

2026-07-17 08:27:23 +02:00

activity

feat: trusted (instance) domains (#8369)

2024-07-31 18:00:38 +03:00

admin/repository/eventsourcing

chore(removing dead code): removing LabelPolicyAssetsRemovedEventType event is never made (#10742)

2025-09-30 07:11:26 +02:00

api

fix: Correctly remove adjacent roles on user grants

2026-07-09 13:34:19 +02:00

auth/repository

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-24 06:55:26 +02:00

auth_request/repository

chore: fix generators in crypto package (#12008)

2026-04-24 06:55:24 +02:00

authz

fix(oidc): use authenticated encryption for opaque tokens (#12017)

2026-04-24 06:55:26 +02:00

cache

chore: update go dependencies (#11883)

2026-04-01 09:09:02 +02:00

command

fix: Correctly remove adjacent roles on user grants

2026-07-09 13:34:19 +02:00

config

fix: correctly send links to login v2 in email notifications (#10711)

2026-02-27 10:09:02 +01:00

crypto

fix: improve random string generation (#12266)

2026-07-28 14:02:26 +02:00

database

feat: add DSN/URL connection string support for PostgreSQL and Redis (#11729)

2026-03-23 07:06:57 +01:00

denylist

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

domain

fix: Correctly remove adjacent roles on user grants

2026-07-09 13:34:19 +02:00

eventstore

fix: increase performance of ListUser by login name ignore case (#12350)

2026-06-30 15:28:37 +02:00

execution

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

feature

fix: revert renaming of (management) console feature flag (#11706)

2026-03-02 08:23:30 +01:00

form

refactor: rename package errors to zerrors (#7039)

2023-12-08 15:30:55 +01:00

i18n

fix: use a single translator for middleware (#10633)

2025-09-15 08:30:05 +02:00

iam

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

id

chore: fix generators in crypto package (#12008)

2026-04-24 06:55:24 +02:00

idp

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

integration

feat: supporting metadata updates in actions v2 via RetrieveIdentityProviderIntent API (#11810)

2026-03-23 07:01:36 +01:00

logstore

docs: fixed some typos, formatting, grammar (#11540)

2026-02-27 09:53:35 +01:00

migration

chore: rename IAM to instance (#11351)

2026-02-27 09:42:24 +01:00

net

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

notification

fix: use protected http client for outgoing connections

2026-06-15 16:08:00 +02:00

org

refactor: cleanup unused code (#7130)

2024-01-02 14:26:31 +00:00

project

feat: App API v2 (#10077)

2025-06-27 17:25:44 +02:00

protoc

feat: exchange gRPC server implementation to connectRPC (#10145)

2025-07-04 14:06:20 +00:00

qrcode

docs(legal): Updated agreements and policies v2 (#3823)

2022-06-15 08:30:58 +02:00

query

fix: increase performance of ListUser by login name ignore case (#12350)

2026-06-30 15:28:37 +02:00

queue

feat(logging): add streams (#11435)

2026-02-09 14:24:57 +01:00

renderer

fix: use a single translator for middleware (#10633)

2025-09-15 08:30:05 +02:00

repository

fix(jwt idp): manage and validate audience

2026-06-15 16:06:55 +02:00

serviceping

chore: fix generators in crypto package (#12008)

2026-04-24 06:55:24 +02:00

static

chore: fix generators in crypto package (#12008)

2026-04-24 06:55:24 +02:00

statik

chore: initial version of a devcontainer (#6352)

2023-08-15 10:49:05 +02:00

telemetry/tracing

feat(telemetry): improved instrumentation for observability (#11159)

2026-02-05 09:31:50 +01:00

test

feat: list users scim v2 endpoint (#9187)

2025-01-21 13:31:54 +01:00

user

fix(login v1): only check password expiry for local users with password (#11344)

2026-01-23 11:24:54 +01:00

v2

docs: fixed some typos, formatting, grammar (#11540)

2026-02-27 09:53:35 +01:00

view/repository

perf(query): remove transactions for queries (#8614)

2024-11-04 10:06:14 +01:00

webauthn

chore: management console naming inconsistency (#11390)

2026-02-27 07:29:26 +01:00

zerrors

fix: recover from request panics (#11713)

2026-03-04 12:41:39 +01:00

AGENTS.md

chore(agents): add agents files (#11497)

2026-02-27 10:11:22 +01:00