⬆️ Update ghcr.io/lldap/lldap ( v0.6.2 → v0.6.3 )

[feisar-bot]

This PR contains the following updates:

Package	Update	Change
ghcr.io/lldap/lldap	patch	v0.6.2 → v0.6.3

---

Release Notes

lldap/lldap (ghcr.io/lldap/lldap)

v0.6.3

Compare Source

[0.6.3] 2026-05-01

Small release, focused on LDAP compatibility, TLS maintenance, dependency upgrades and documentation/examples.

Added

• LDAP schema definitions for memberOf, modifyTimestamp and pwdChangedTime
• Support for configuring the healthcheck listen addresses
• Usernames are now included in password recovery emails

Changed

• JWT exp and iat claims are now serialized as NumericDate values to comply with RFC7519
• Migrated to rustls 0.23 and centralized TLS handling
• The login form no longer enforces a password length limit

Fixed

• pwdChangedTime is now emitted as LDAP GeneralizedTime instead of RFC3339
• LDAP base-scope searches for non-existent entries now return NoSuchObject
• cn equality filters are now case insensitive
• The server now shuts down the database connection pool gracefully
• The bootstrap script now handles empty globs correctly

Security

• Updated the LDAP dependency stack, including ldap3_proto, in response to
  security advisory
  GHSA-qcxq-75wr-5cm8,
  where a specially crafted LDAP query could make the server crash

Cleanups

• Split GraphQL queries and mutations into smaller modules
• Refactored configuration and user update logic
• Upgraded the Rust toolchain and shared dependencies

New services

• Apache WebDAV
• Continuwuity
• Gerrit
• Gogs
• Open WebUI
• OpenCloud
• Pocket ID
• Semaphore
• TrueNAS

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[feisar-bot]

--- kubernetes/apps/default/lldap/app Kustomization: default/lldap HelmRelease: default/lldap

+++ kubernetes/apps/default/lldap/app Kustomization: default/lldap HelmRelease: default/lldap

@@ -36,13 +36,13 @@

               TZ: Europe/Paris
             envFrom:
             - secretRef:
                 name: lldap-secret
             image:
               repository: ghcr.io/lldap/lldap
-              tag: v0.6.2@sha256:9e605a66c02514bfcffd1b67cafb1e98d50992216bb2871d7ae44622047dd09d
+              tag: v0.6.3@sha256:2a8454b668c1aba7157e832eab0e242e1e7eb5fb7591d7e7774ba05286511ca8
             resources:
               limits:
                 memory: 500Mi
               requests:
                 cpu: 100m
                 memory: 100Mi

[feisar-bot]

--- HelmRelease: default/lldap Deployment: default/lldap

+++ HelmRelease: default/lldap Deployment: default/lldap

@@ -47,13 +47,13 @@

           value: '5389'
         - name: TZ
           value: Europe/Paris
         envFrom:
         - secretRef:
             name: lldap-secret
-        image: ghcr.io/lldap/lldap:v0.6.2@sha256:9e605a66c02514bfcffd1b67cafb1e98d50992216bb2871d7ae44622047dd09d
+        image: ghcr.io/lldap/lldap:v0.6.3@sha256:2a8454b668c1aba7157e832eab0e242e1e7eb5fb7591d7e7774ba05286511ca8
         name: app
         resources:
           limits:
             memory: 500Mi
           requests:
             cpu: 100m