fix(deps): update module github.com/netresearch/simple-ldap-go to v1.12.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/netresearch/simple-ldap-go	v1.12.1 → v1.12.2

---

Release Notes

netresearch/simple-ldap-go (github.com/netresearch/simple-ldap-go)

v1.12.2

Compare Source

Fixed

• Self-service password change now binds as the user on non-AD directories. v1.12.1 stopped ChangePasswordForSAMAccountName writing unicodePwd to OpenLDAP, but it still issued the RFC 3062 Password Modify on the pooled connection — bound as the caller's service account. RFC 3062 authorises a self-service change from the bind identity, so a directory refuses to verify oldPasswd for a caller that cannot write the target entry; slapd answers LDAP Result Code 53 "Unwilling To Perform": unwilling to verify old password. Any deployment binding a read-only service account (the normal arrangement) therefore still could not change a password. The non-AD path now opens a dedicated connection bound as the user with their current password, which is the flow RFC 3062 describes and which makes the bind itself the proof of the old password. The administrative reset path is unchanged: it legitimately uses the service-account connection with no old password.
• A wrong current password now fails at the bind rather than at the modify, so the returned error names an authentication failure instead of a server-side refusal.

Changed

• createDirectConnection delegates to a new internal dialAndBind, so a connection can be opened under a specific identity. The user-bound connection is deliberately unpooled — binding a pooled connection as an end user would leak that identity to the next caller that borrowed it.

Added

• The integration harness now provisions a read-only service account (ReadOnlyDN/ReadOnlyPassword) with a directory-wide read grant. Tests asserting a write must not bind as cn=admin: the superuser can write every entry and so masks any defect that depends on the caller's privileges. The v1.12.1 self-service test did exactly that — it passed while real deployments failed. The rewritten test binds as the read-only account and fails against v1.12.1.

---

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
gomod/github.com/netresearch/simple-ldap-go	1.12.2	🟢 7.5	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed Dependency-Update-Tool 🟢 10 update tool detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 4 security policy file detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Vulnerabilities 🟢 8 2 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Fuzzing 🟢 10 project is fuzzed License 🟢 10 license file detected Branch-Protection 🟢 3 branch protection is not maximal on development and all release branches Contributors 🟢 10 project has 9 contributing companies or organizations CI-Tests 🟢 10 14 out of 14 merged PRs checked by a CI test -- score normalized to 10

Scanned Files

• go.mod

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.39%. Comparing base (923dc96) to head (62dfa3f).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #251   +/-   ##
=======================================
  Coverage   75.39%   75.39%           
=======================================
  Files          11       11           
  Lines         512      512           
=======================================
  Hits          386      386           
  Misses        101      101           
  Partials       25       25           

Flag	Coverage Δ
e2e	75.39% <ø> (ø)
integration	75.39% <ø> (ø)
unittests	75.39% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud