fix(deps): update module github.com/netresearch/simple-ldap-go to v1.13.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/netresearch/simple-ldap-go	v1.12.2 → v1.13.0

---

Release Notes

netresearch/simple-ldap-go (github.com/netresearch/simple-ldap-go)

v1.13.0

Compare Source

Added

• Password-expiry reporting for Active Directory and OpenLDAP (#​186). PasswordExpiryFor(ctx, user) returns a directory-independent answer to when a password expires, and UsersWithExpiringPasswords(ctx, within) returns the enabled users whose password expires inside a window, oldest deadline first. The result distinguishes four states — expires (with the moment), never-expires, must-change, unknown — rather than a bare timestamp, because they are not interchangeable: a caller that treats unknown as expiring would act on every account the directory happens to be quiet about.
  • Active Directory resolves from the constructed msDS-UserPasswordExpiryTimeComputed, which folds in the domain policy and any Password Settings Object server-side, so no privileged read of the Password Settings Container is needed. New User fields PasswordExpiresAt, PwdChangedAt, PasswordPolicyDN expose the underlying attributes.
  • OpenLDAP resolves from the ppolicy operational pwdChangedTime plus the governing policy's pwdMaxAge, taken from the entry's pwdPolicySubentry or the new Config.PasswordPolicyDN. pwdMaxAge is memoised per policy DN, so a directory scan costs one policy read per distinct policy rather than one per user.
  • OpenLDAP has no userAccountControl, so every OpenLDAP user reads as enabled; a caller that must exclude deactivated OpenLDAP accounts has to do so by its own criterion.

Fixed

• FindUserByDNContext requested a shorter attribute list than the other user searches, so it silently returned a User with pwdLastSet, accountExpires, lockoutTime and whenCreated zeroed — the same type meaning different things depending on which finder produced it. It now uses the shared userFields like every other user search.

CI

• The codecov unit flag is declared as unittests to match what go-check.yml uploads under (#​187); the previous unit name left real unit coverage attributed to an undeclared flag while a stale one carried forward.

---

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
gomod/github.com/netresearch/simple-ldap-go	1.13.0	🟢 7.5	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed Dependency-Update-Tool 🟢 10 update tool detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 4 security policy file detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Vulnerabilities 🟢 8 2 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Fuzzing 🟢 10 project is fuzzed License 🟢 10 license file detected Branch-Protection 🟢 3 branch protection is not maximal on development and all release branches Contributors 🟢 10 project has 9 contributing companies or organizations CI-Tests 🟢 10 14 out of 14 merged PRs checked by a CI test -- score normalized to 10

Scanned Files

• go.mod

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 75.39%. Comparing base (dfee909) to head (1472c17).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #252   +/-   ##
=======================================
  Coverage   75.39%   75.39%           
=======================================
  Files          11       11           
  Lines         512      512           
=======================================
  Hits          386      386           
  Misses        101      101           
  Partials       25       25           

Flag	Coverage Δ
e2e	75.39% <ø> (ø)
integration	75.39% <ø> (ø)
unittests	75.39% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.