From bb756751b02b3138a2cba58064a28ddc6f2648df Mon Sep 17 00:00:00 2001
From: WilliButz <willibutz@posteo.de>
Date: Wed, 26 Jun 2024 13:36:02 +0200
Subject: [PATCH] update: 2024.4.2 -> 2024.4.3 (security update)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixes CVE-2024-37905 and CVE-2024-38371

See https://docs.goauthentik.io/docs/releases/2024.4#fixed-in-202443

Flake lock file update:
• Updated input 'authentik-src':
    'github:goauthentik/authentik/1f5953b5b7e72c085246e8f19b94482dac946d83' (2024-05-07)
  → 'github:goauthentik/authentik/5afceaa55f4d831db0cf9d80562e86eb43b622ec' (2024-06-26)
---
 flake.lock | 8 ++++----
 flake.nix  | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/flake.lock b/flake.lock
index 79eab46..774a2ef 100644
--- a/flake.lock
+++ b/flake.lock
@@ -3,16 +3,16 @@
     "authentik-src": {
       "flake": false,
       "locked": {
-        "lastModified": 1715092773,
-        "narHash": "sha256-B+ZLD1D/UQty1urQ0qDFo67vjsk/jtssjqIQOY0Oxq4=",
+        "lastModified": 1719398211,
+        "narHash": "sha256-d4UsYRqHRNabhh28GZZRijmZ1pd9D/o1a4L4d7Yn39M=",
         "owner": "goauthentik",
         "repo": "authentik",
-        "rev": "1f5953b5b7e72c085246e8f19b94482dac946d83",
+        "rev": "5afceaa55f4d831db0cf9d80562e86eb43b622ec",
         "type": "github"
       },
       "original": {
         "owner": "goauthentik",
-        "ref": "version/2024.4.2",
+        "ref": "version/2024.4.3",
         "repo": "authentik",
         "type": "github"
       }
diff --git a/flake.nix b/flake.nix
index 72ce65c..fe9d195 100644
--- a/flake.nix
+++ b/flake.nix
@@ -27,7 +27,7 @@
       };
     };
     authentik-src = { # change version string in outputs as well when updating
-      url = "github:goauthentik/authentik/version/2024.4.2";
+      url = "github:goauthentik/authentik/version/2024.4.3";
       flake = false;
     };
   };
@@ -46,7 +46,7 @@
     { inherit inputs; }
     ({ inputs, lib, withSystem, ... }:
     let
-      authentik-version = "2024.4.2"; # to pass to the drvs of some components
+      authentik-version = "2024.4.3"; # to pass to the drvs of some components
     in {
       systems = [
         "x86_64-linux"