From 9c883a07a2308e76bfa3b08fcd91596ab47af290 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sun, 13 Sep 2026 15:49:05 +0000 Subject: [PATCH] chore: update version and changelog --- .changeset/sequelize-keeps-its-ssl-options.md | 12 ------------ CHANGELOG.md | 13 +++++++++++++ package.json | 2 +- 3 files changed, 14 insertions(+), 13 deletions(-) delete mode 100644 .changeset/sequelize-keeps-its-ssl-options.md diff --git a/.changeset/sequelize-keeps-its-ssl-options.md b/.changeset/sequelize-keeps-its-ssl-options.md deleted file mode 100644 index 677ad1c..0000000 --- a/.changeset/sequelize-keeps-its-ssl-options.md +++ /dev/null @@ -1,12 +0,0 @@ ---- -'seamless-auth-api': patch ---- - -Keep the TLS options when `DATABASE_URL` carries `sslmode`. `resolveSslOptions` turns `DB_SSL`, -or an `sslmode` on the connection string, into Sequelize's `dialectOptions.ssl`, but Sequelize -then read the same `sslmode` for itself and let pg-connection-string's reading of it replace -those options. A URL carrying the parameter had its certificate verified whatever `DB_SSL` or -`DB_SSL_REJECT_UNAUTHORIZED` said, which against Amazon RDS is a boot failure, and `DB_SSL=false` -could not turn TLS off for it. Sequelize is now constructed with `sslmode` taken out of the URL, -once `resolveSslOptions` has read it. Nothing changes on the discrete `DB_*` path, whose URL -never carries the parameter. diff --git a/CHANGELOG.md b/CHANGELOG.md index 6350466..ebceb58 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,18 @@ # seamless-auth-api +## 0.13.2 + +### Patch Changes + +- 528f627: Keep the TLS options when `DATABASE_URL` carries `sslmode`. `resolveSslOptions` turns `DB_SSL`, + or an `sslmode` on the connection string, into Sequelize's `dialectOptions.ssl`, but Sequelize + then read the same `sslmode` for itself and let pg-connection-string's reading of it replace + those options. A URL carrying the parameter had its certificate verified whatever `DB_SSL` or + `DB_SSL_REJECT_UNAUTHORIZED` said, which against Amazon RDS is a boot failure, and `DB_SSL=false` + could not turn TLS off for it. Sequelize is now constructed with `sslmode` taken out of the URL, + once `resolveSslOptions` has read it. Nothing changes on the discrete `DB_*` path, whose URL + never carries the parameter. + ## 0.13.1 ### Patch Changes diff --git a/package.json b/package.json index 86ae900..7a42833 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "seamless-auth-api", - "version": "0.13.1", + "version": "0.13.2", "description": "Seamless Auth API - A web application server for supporting a Seamless Auth server instance.", "main": "index.js", "type": "module",