chore(deps): update maykinmedia/open-object docker tag to v4.2.0

[renovate]

This PR contains the following updates:

Package	Update	Change
maykinmedia/open-object	minor	4.0.2 → 4.2.0

---

Release Notes

maykinmedia/open-object (maykinmedia/open-object)

v4.2.0

Compare Source

.. note::

The API now allows for strict JSON schema format checking for objects via the environment
variable ``JSONSCHEMA_USE_FORMAT_CHECKER`` (default: ``False`` for existing objecttypes
when upgrading to 4.2.0, default: ``True`` for newly created objecttypes after that).
A new boolean field, ``strict_format_checker``, has also been added to the ObjectType model to control
whether JSON Schema ``format`` validation is applied for that specific objecttype.
When set to ``None``, the value of the ``JSONSCHEMA_USE_FORMAT_CHECKER`` setting is used.

To preserve backward compatibility, existing object types have ``strict_format_checker`` set to ``False``,
effectively disabling JSON Schema ``format`` validation unless it is explicitly enabled for that objecttype.

.. note::

The environment variable used to configure the uWSGI port in the Docker
entrypoint has been renamed from UWSGI_PORT to OPENOBJECT_PORT
(see :ref:installation_env_config). Deployments that override the uWSGI
port need to update their configuration accordingly.

New features

• [:open-object:731] Add validation for custom JSON Schema format attributes, introduce per objecttype control over format validation, and update the data_attrs filter accordingly.
• [:open-object:757] Improve the notifications error queue by adding an admin view to display
  failed notifications and make it possible to reschedule them.

Project maintenance

• [:open-api-framework:224] Migrate frontend toolchain from webpack to esbuild

• [:open-object:771] Set sensible boundaries for Bencher alarms.

• [:open-api-workflows:60] Upgrade open-api-workflows to v7.0.0 and reenable OAS workflow and replace spectral-cli with vacuum.

• Remove unnecessary objecttypes db creation from dockercompose init.

• Fix uwsgi strict-mode crash by renaming UWSGI_PORT to OPENOBJECT_PORT.

• Prevent npm post-install scripts from running via .npmrc.

• Configure Dependabot to keep GitHub Actions up to date, group these updates into a single PR and move the configuration to the .github directory.

• Configure actions/stale to automatically close stale issues and PRs.

• [:open-api-framework:224] Upgrade to nodejs 26.

• Upgrade python dependencies

  • django to 5.2.17
  • cryptography to 50.0.0
  • vcrpy to 8.3.0
  • pyjwt to 2.13.0
  • setuptools to 84.0.0
  • zgw-consumers to 2.0.3
  • django-simple-certmanager to 4.0.0
  • django-privates to 4.0.3
  • commonground-api-common to 2.13.0
  • open-api-framework to 0.14.1
  • notifications-api-common to 0.13.0

Documentation

• [:open-api-workflows:64] Add action to generate and update Docker Hub description

v4.1.1

Compare Source

Security patches

• [CVE ID pending] See GHSA-55w6-rqp5-j5wx_ for more information.

  • Ensure authorizations linked to API token are properly applied to the object history detail endpoint

.. _GHSA-55w6-rqp5-j5wx: GHSA-55w6-rqp5-j5wx

Project maintenance

• Upgrade python dependencies

  • maykin-common to 0.19.1

• Move admin privilege escalation logic to maykin-common

v4.1.0

Compare Source

.. note::

The defaults for several environment variables for the django-log-outgoing-requests
configuration have changed (see :ref:installation_env_config > Logging)

• LOG_REQUESTS is now True by default, instead of False
• LOG_OUTGOING_REQUESTS_DB_SAVE_BODY is now False by default, instead of True
• LOG_OUTGOING_REQUESTS_RESET_DB_SAVE_AFTER (previously not configurable) has a default of 60 minutes

New features

• [:open-object:518] Added a searchable objectType selector to the permissions view in the admin interface.

Bugfixes

• [:open-object:765] Fix bug where PUT/PATCH requests with a UUID in the request body incorrectly returned an error.

Maintenance

• [:open-api-framework:218] Add Zizmor GitHub Actions security scanning and updated workflows

• [:open-api-framework:83] Replace OAF config helper with config helper from maykin-common

• Upgrade python dependencies

  • django to 5.2.15
  • maykin-common to 0.19.0
  • open-api-framework to 0.14.0
  • django-log-outgoing-requests to 0.9.1
  • cryptography to 46.0.7

Documentation

• [:open-api-framework:217] Update application and repository branding by applying the new icons and logos.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.