Management UI OAuth2 login now works with identity providers that require a specific scope (e.g. Entra ID), via the new mgmt_scopes config option #2127
Accept JWKS keys that omit the alg parameter when fetching keys for OAuth/OIDC #2124
Document that OAuth/OIDC JWTs must include a kid header matching a JWKS key #2107
Enforce policymaker role checks on the shovel management endpoints #2133
Apply SNI certificate changes on config reload #2129
Stream cleanup_consumer_offsets overflow when the consumer_offsets file is near full #1995
Clustered localhost listener bind failures during startup #2114
Heartbeat frames on non-zero channels now close the connection with UNEXPECTED_FRAME#1999
Normalize IPv4-mapped peer addresses in connection metadata, logs and API fields #2122
Configuration
📅Schedule: (UTC)
Branch creation
At any time (no schedule defined)
Automerge
At any time (no schedule defined)
🚦Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕Ignore: Close this PR and you won't be reminded about this update again.
If you want to rebase/retry this PR, check this box
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [cloudamqp/lavinmq](https://github.com/cloudamqp/lavinmq) | patch | `2.9.0` → `2.9.1` |
---
### Release Notes
<details>
<summary>cloudamqp/lavinmq (cloudamqp/lavinmq)</summary>
### [`v2.9.1`](https://github.com/cloudamqp/lavinmq/blob/HEAD/CHANGELOG.md#291---2026-07-01)
[Compare Source](https://github.com/cloudamqp/lavinmq/compare/v2.9.0...v2.9.1)
##### Fixed
- Management UI OAuth2 login now works with identity providers that require a specific scope (e.g. Entra ID), via the new `mgmt_scopes` config option [#​2127](https://github.com/cloudamqp/lavinmq/pull/2127)
- Accept JWKS keys that omit the `alg` parameter when fetching keys for OAuth/OIDC [#​2124](https://github.com/cloudamqp/lavinmq/pull/2124)
- Document that OAuth/OIDC JWTs must include a `kid` header matching a JWKS key [#​2107](https://github.com/cloudamqp/lavinmq/pull/2107)
- Enforce policymaker role checks on the shovel management endpoints [#​2133](https://github.com/cloudamqp/lavinmq/pull/2133)
- Apply SNI certificate changes on config reload [#​2129](https://github.com/cloudamqp/lavinmq/pull/2129)
- Stream `cleanup_consumer_offsets` overflow when the `consumer_offsets` file is near full [#​1995](https://github.com/cloudamqp/lavinmq/pull/1995)
- Clustered localhost listener bind failures during startup [#​2114](https://github.com/cloudamqp/lavinmq/pull/2114)
- Heartbeat frames on non-zero channels now close the connection with `UNEXPECTED_FRAME` [#​1999](https://github.com/cloudamqp/lavinmq/pull/1999)
- Normalize IPv4-mapped peer addresses in connection metadata, logs and API fields [#​2122](https://github.com/cloudamqp/lavinmq/pull/2122)
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDMuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0My4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
2.9.0→2.9.1Release Notes
cloudamqp/lavinmq (cloudamqp/lavinmq)
v2.9.1Compare Source
Fixed
mgmt_scopesconfig option #2127algparameter when fetching keys for OAuth/OIDC #2124kidheader matching a JWKS key #2107cleanup_consumer_offsetsoverflow when theconsumer_offsetsfile is near full #1995UNEXPECTED_FRAME#1999Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.