Winter 2025 FOSS contributions from by the Yaal Coop team

Sponsoring

• Marco 'Lubber' Wienkoop for his work on Fomantic-UI, a nice CSS framework we use in canaille. Fomantic-UI is used on other tools we rely on, like Forgejo.
• Hsiaoming Yang for his work on authlib, a python authentication library we use in canaille.

MarkdownMail

Library to send e-mails with generated HTML content

• Fix screenshot picture, then release 0.11.1.

Ergo-L

Keyboard layout optimised for French, English and programming

• Fix '^' rendering as key pressed
• Add pandoc requirement to generate the website
• Explain basic usage on the homepage
• Add missing characters ('ß' and 'ñ' ) in ergo.svg file

sphinxcontrib-screenshot

Generate dynamic screenshots in Sphinx documentation

• Ability to take screenshots from local WSGI applications
• Pass import path instead of callable in `screenshot_apps
• Python 3.12 and 3.13 GHA
• Pre-commit configuration
• :color-scheme: option
• Tox configuration
• Consider the color scheme when building the image hash
• Implement default size configuration parameters
• Move from setup.cfg to pyproject.toml
• Allow file:// url schemes
• Use the raw URL value to build the image hash
• Add a screenshot_default_color_scheme parameter
• Add :full-page: option
• Custom request headers
• Custom contexts
• Add :browser: option
• Documentation creation
• Documentation fixes
• The screenshot directive inherits from figure

python-libfaketime

A fast time mocking alternative to freezegun that wraps libfaketime.

• Disable FAKETIME_FORCE_MONOTONIC_FIX
• Pre-commit update
• Python 3.13 support

authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS,JWE,JWK,JWA,JWT included.

We published 2 releases during this season.

• Server-side RFC9207 implementation
• kid parameter for generate_id_token
• Migrate from flake8 to ruff
• Add descriptions to InvalidClientError and UnauthorizedClientError
• OpenID Connect Dynamic Client Registration
• Use dependency groups for tests
• Fix RFC9207 iss parameter

mutmut

Mutation testing system

• Annotate mutant dicts and solve Pydantic compatibility
• Avoid to mutate metaclasses

scim2-cli

SCIM application development CLI

We published 1 release during this season.

• Implement --no-verify to avoid perform certificate checks

scim2-models

SCIM resources serialization and validation with Pydantic

We published 1 release during this season.

• Fix startIndex and count lower limits
• ListResponse.total_results is required

Canaille

Lightweight identity and authorization management software

We published 8 releases during this season.

• --version CLI option
• feat: implement --all option of get command
• CLI commands can dump hashed passwords
• SQL migrations with flask-alembic
• Fix password field auto-refilling when input is reset
• HTMX integration with the email confirmation form
• Add automatic screenshots in the documentation
• Implement run server command based on hypercorn
• SECRET_KEY is optional
• Configuration export CLI
• Single binary bundle
• SQL install command fix
• Fix bring i18n in the Canaille executable
• Fix dynamic kid parameter for JWKs
• jwks parameter management with OIDC client dynamic registration
• Implement RFC7523 client JWT authentication and grant
• Use a custom LDAP docker image for the demo
• Implement the LOGIN_ATTRIBUTES configuration parameter
• Full OIDC Dynamic Client Registration implementation
• Signals on object lifetime events
• Update to Fomantic 2.9.4
• Implement RFC9207 with authlib
• Rename Client.preconsent in Client.trusted
• Order SQL relationship tables
• Naive restore command implementation
• The delete command can take filter parameters
• Fix the LDAP restore command with partial payloads
• Prevent locked accounts from resetting their password
• Remove CSS action label icons hotfix
• Automatic discovery of local SMTP server
• Set-up good default ACLs
• Fix various crashes in the web interface when users have no email configured
• Resolve "Handle registration of clients without scopes"
• fix: allows client to access userinfo with openid scope
• Resolve "Ensure that client redirection URI does not have a fragment component at registration"
• Security fix : magic link is not anymore in reset password e-mails unless TRUSTED_HOSTS is configured
• Resolve "Ensure authorization requests have a valid redirect URI"
• Resolve "Accessibility : Add a skip link in base template"
• Replace regex with urlparse in validate_uri
• Use HMAC to build hashes
• Resolve "Accessibility : Fix contrast ratio on buttons and text"
• Improve pagination legibility
• Display policy and terms of service uri in client authorization page if set
• URI with fragments error at client registration now returns a json error page

PSPSDK

Collection of tools and libraries written for Sony's Playstation Portable (PSP) gaming console

• Add description to libraries