chore(deps): update ghcr.io/dexidp/dex docker tag to v2.37.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/dexidp/dex	Kustomization	minor	v2.27.0 -> v2.37.0

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

dexidp/dex (ghcr.io/dexidp/dex)

v2.37.0

Compare Source

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.37.0

What's Changed

Exciting New Features 🎉

• TLS cert reloader by @​seankhliao in https://github.com/dexidp/dex/pull/2964

Enhancements 🚀

• Add xx to cross-compile binaries in Docker by @​sagikazarmark in https://github.com/dexidp/dex/pull/2898
• Spelling by @​jsoref in https://github.com/dexidp/dex/pull/2919
• LDAP case-insensitive DN attribute by @​nabokihms in https://github.com/dexidp/dex/pull/2829
• Utilize native git diff --exit-code by @​marcofranssen in https://github.com/dexidp/dex/pull/2981
• Google: Add Support for Multiple Admin Emails to Retrieve Group Lists by @​vsychov in https://github.com/dexidp/dex/pull/2911

Bug Fixes 🐛

• Do not skip approval screen by default by @​nabokihms in https://github.com/dexidp/dex/pull/2897
• Fail if OIDC config contains hosted domains by @​nabokihms in https://github.com/dexidp/dex/pull/2937

Dependency Updates ⬆️

• build(deps): bump alpine from 3.17.2 to 3.17.3 by @​dependabot in https://github.com/dexidp/dex/pull/2879
• build(deps): bump mheap/github-action-required-labels from 3 to 4 by @​dependabot in https://github.com/dexidp/dex/pull/2881
• build(deps): bump google.golang.org/grpc from 1.53.0 to 1.54.0 by @​dependabot in https://github.com/dexidp/dex/pull/2873
• build(deps): bump golang.org/x/oauth2 from 0.6.0 to 0.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/2892
• build(deps): bump golang from 1.20.2-alpine3.16 to 1.20.3-alpine3.16 by @​dependabot in https://github.com/dexidp/dex/pull/2884
• build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/2885
• build(deps): bump aquasecurity/trivy-action from 0.9.2 to 0.10.0 by @​dependabot in https://github.com/dexidp/dex/pull/2905
• build(deps): bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0 by @​dependabot in https://github.com/dexidp/dex/pull/2900
• build(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0 by @​dependabot in https://github.com/dexidp/dex/pull/2891
• build(deps): bump github.com/russellhaering/goxmldsig from 1.3.0 to 1.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/2920
• build(deps): bump golang from 1.20.3-alpine3.16 to 1.20.4-alpine3.16 by @​dependabot in https://github.com/dexidp/dex/pull/2924
• build(deps): bump github.com/lib/pq from 1.10.7 to 1.10.9 by @​dependabot in https://github.com/dexidp/dex/pull/2922
• build(deps): bump golang.org/x/oauth2 from 0.7.0 to 0.8.0 by @​dependabot in https://github.com/dexidp/dex/pull/2929
• build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by @​dependabot in https://github.com/dexidp/dex/pull/2932
• build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.7 to 3.5.8 by @​dependabot in https://github.com/dexidp/dex/pull/2899
• build(deps): bump github.com/beevik/etree from 1.1.0 to 1.1.4 by @​dependabot in https://github.com/dexidp/dex/pull/2939
• build(deps): bump github.com/go-sql-driver/mysql from 1.7.0 to 1.7.1 by @​dependabot in https://github.com/dexidp/dex/pull/2938
• build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.8 to 3.5.9 by @​dependabot in https://github.com/dexidp/dex/pull/2946
• build(deps): bump github/codeql-action from 2.3.1 to 2.3.3 by @​dependabot in https://github.com/dexidp/dex/pull/2943
• build(deps): bump anchore/sbom-action from 0.14.1 to 0.14.2 by @​dependabot in https://github.com/dexidp/dex/pull/2942
• build(deps): bump alpine from 3.17.3 to 3.18.0 by @​dependabot in https://github.com/dexidp/dex/pull/2930
• build(deps): bump google.golang.org/grpc from 1.53.0 to 1.55.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/2927
• build(deps): bump google.golang.org/api from 0.114.0 to 0.122.0 by @​dependabot in https://github.com/dexidp/dex/pull/2931
• build(deps): bump entgo.io/ent from 0.11.10 to 0.12.3 by @​dependabot in https://github.com/dexidp/dex/pull/2923
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.7 to 3.5.9 by @​dependabot in https://github.com/dexidp/dex/pull/2944
• build(deps): bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1 by @​dependabot in https://github.com/dexidp/dex/pull/2945
• build(deps): bump helm/kind-action from 1.5.0 to 1.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/2956
• build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by @​dependabot in https://github.com/dexidp/dex/pull/2957
• build(deps): bump actions/setup-go from 4.0.0 to 4.0.1 by @​dependabot in https://github.com/dexidp/dex/pull/2949
• build(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0 by @​dependabot in https://github.com/dexidp/dex/pull/2948
• build(deps): bump google.golang.org/api from 0.122.0 to 0.123.0 by @​dependabot in https://github.com/dexidp/dex/pull/2959
• build(deps): bump github.com/beevik/etree from 1.1.4 to 1.2.0 by @​dependabot in https://github.com/dexidp/dex/pull/2947
• build(deps): bump github/codeql-action from 2.3.3 to 2.3.5 by @​dependabot in https://github.com/dexidp/dex/pull/2970
• build(deps): bump google.golang.org/api from 0.123.0 to 0.124.0 by @​dependabot in https://github.com/dexidp/dex/pull/2968
• build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @​dependabot in https://github.com/dexidp/dex/pull/2958
• build(deps): bump aquasecurity/trivy-action from 0.10.0 to 0.11.0 by @​dependabot in https://github.com/dexidp/dex/pull/2984
• build(deps): bump github/codeql-action from 2.3.5 to 2.3.6 by @​dependabot in https://github.com/dexidp/dex/pull/2982
• build(deps): bump actions/dependency-review-action from 3.0.4 to 3.0.6 by @​dependabot in https://github.com/dexidp/dex/pull/2978
• build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by @​dependabot in https://github.com/dexidp/dex/pull/2983
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.16 to 1.14.17 by @​dependabot in https://github.com/dexidp/dex/pull/2979
• build(deps): bump google.golang.org/api from 0.124.0 to 0.125.0 by @​dependabot in https://github.com/dexidp/dex/pull/2976
• build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by @​dependabot in https://github.com/dexidp/dex/pull/2977
• build(deps): bump docker/login-action from 2.1.0 to 2.2.0 by @​dependabot in https://github.com/dexidp/dex/pull/2987
• build(deps): bump docker/setup-qemu-action from 2.1.0 to 2.2.0 by @​dependabot in https://github.com/dexidp/dex/pull/2985
• build(deps): bump docker/metadata-action from 4.4.0 to 4.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/2986
• build(deps): bump docker/setup-buildx-action from 2.5.0 to 2.6.0 by @​dependabot in https://github.com/dexidp/dex/pull/2988
• build(deps): bump mheap/github-action-required-labels from 4 to 5 by @​dependabot in https://github.com/dexidp/dex/pull/2990
• build(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2 by @​dependabot in https://github.com/dexidp/dex/pull/2995
• build(deps): bump github/codeql-action from 2.3.6 to 2.20.0 by @​dependabot in https://github.com/dexidp/dex/pull/3002
• build(deps): bump google.golang.org/api from 0.125.0 to 0.127.0 by @​dependabot in https://github.com/dexidp/dex/pull/2999
• build(deps): bump docker/setup-buildx-action from 2.6.0 to 2.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/3001
• build(deps): bump docker/build-push-action from 4.0.0 to 4.1.1 by @​dependabot in https://github.com/dexidp/dex/pull/3003
• build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by @​dependabot in https://github.com/dexidp/dex/pull/2993
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.4 to 3.4.5 by @​dependabot in https://github.com/dexidp/dex/pull/2997
• build(deps): bump golang.org/x/net from 0.10.0 to 0.11.0 by @​dependabot in https://github.com/dexidp/dex/pull/3004
• build(deps): bump alpine from 3.18.0 to 3.18.2 by @​dependabot in https://github.com/dexidp/dex/pull/3008
• build(deps): bump docker/metadata-action from 4.5.0 to 4.6.0 by @​dependabot in https://github.com/dexidp/dex/pull/3007
• build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 by @​dependabot in https://github.com/dexidp/dex/pull/3005
• build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 by @​dependabot in https://github.com/dexidp/dex/pull/3009
• build(deps): bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0 by @​dependabot in https://github.com/dexidp/dex/pull/3010
• build(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 by @​dependabot in https://github.com/dexidp/dex/pull/3016
• build(deps): bump github/codeql-action from 2.20.0 to 2.20.1 by @​dependabot in https://github.com/dexidp/dex/pull/3015
• build(deps): bump anchore/sbom-action from 0.14.2 to 0.14.3 by @​dependabot in https://github.com/dexidp/dex/pull/3014
• build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @​dependabot in https://github.com/dexidp/dex/pull/3019
• build(deps): bump google.golang.org/api from 0.127.0 to 0.129.0 by @​dependabot in https://github.com/dexidp/dex/pull/3022
• build(deps): bump docker/setup-buildx-action from 2.7.0 to 2.8.0 by @​dependabot in https://github.com/dexidp/dex/pull/3023

New Contributors

• @​marcofranssen made their first contribution in https://github.com/dexidp/dex/pull/2981
• @​vsychov made their first contribution in https://github.com/dexidp/dex/pull/2911

Full Changelog: dexidp/dex@v2.36.0...v2.37.0

v2.36.0

Compare Source

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.36.0

What's Changed

Enhancements 🚀

• TLS configure for OIDC connector by @​xtremerui in https://github.com/dexidp/dex/pull/1632
• Add icon for gitea by @​pinpox in https://github.com/dexidp/dex/pull/2733
• fix: Do not use connector data from the refresh token field by @​nabokihms in https://github.com/dexidp/dex/pull/2729
• Add preferredEmailDomain config option for GitHub connector by @​nobuyo in https://github.com/dexidp/dex/pull/2740
• Move unique functionality into getGroups to reduce calls to google by @​snuggie12 in https://github.com/dexidp/dex/pull/2628
• fix: prevent server-side request forgery using Kubernetes storage by @​nabokihms in https://github.com/dexidp/dex/pull/2479
• fix: return 401 if password is invalid by @​nabokihms in https://github.com/dexidp/dex/pull/2796
• feat: Add default robots.txt by @​nabokihms in https://github.com/dexidp/dex/pull/2834
• Skip redirection to approval when it is not required (#​2686) by @​nobuyo in https://github.com/dexidp/dex/pull/2805
• feat: Bump dependencies and Makefile refactoring by @​nabokihms in https://github.com/dexidp/dex/pull/2844

Bug Fixes 🐛

• Make admin email optional when no service account path is configured by @​sagikazarmark in https://github.com/dexidp/dex/pull/2695
• Only initialize google admin service if necessary by @​sagikazarmark in https://github.com/dexidp/dex/pull/2700

Dependency Updates ⬆️

• build(deps): bump golang from 1.19.1-alpine3.16 to 1.19.2-alpine3.16 by @​dependabot in https://github.com/dexidp/dex/pull/2697
• fix: Update gomplate version to 3.11.3 fix CVE-2022-27665 by @​nabokihms in https://github.com/dexidp/dex/pull/2705
• build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by @​dependabot in https://github.com/dexidp/dex/pull/2708
• build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 by @​dependabot in https://github.com/dexidp/dex/pull/2715
• build(deps): bump google.golang.org/api from 0.98.0 to 0.101.0 by @​dependabot in https://github.com/dexidp/dex/pull/2720
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.15 to 1.14.16 by @​dependabot in https://github.com/dexidp/dex/pull/2721
• build(deps): bump aquasecurity/trivy-action from 0.7.1 to 0.8.0 by @​dependabot in https://github.com/dexidp/dex/pull/2723
• build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 by @​dependabot in https://github.com/dexidp/dex/pull/2718
• build(deps): bump golang from 1.19.2-alpine3.16 to 1.19.3-alpine3.16 by @​dependabot in https://github.com/dexidp/dex/pull/2724
• build(deps): bump alpine from 3.16.2 to 3.17.0 by @​dependabot in https://github.com/dexidp/dex/pull/2746
• build(deps): bump github.com/prometheus/client_golang from 1.13.0 to 1.14.0 by @​dependabot in https://github.com/dexidp/dex/pull/2735
• build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.5 to 3.5.6 by @​dependabot in https://github.com/dexidp/dex/pull/2744
• build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.2 to 3.2.3 by @​dependabot in https://github.com/dexidp/dex/pull/2751
• build(deps): bump golang from 1.19.3-alpine3.16 to 1.19.4-alpine3.16 by @​dependabot in https://github.com/dexidp/dex/pull/2750
• build(deps): bump golang.org/x/crypto from 0.3.0 to 0.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/2755
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.5 to 3.5.6 by @​dependabot in https://github.com/dexidp/dex/pull/2743
• build(deps): bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/2754
• build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/2758
• build(deps): bump google.golang.org/grpc from 1.50.1 to 1.51.0 by @​dependabot in https://github.com/dexidp/dex/pull/2741
• build(deps): bump google.golang.org/api from 0.101.0 to 0.104.0 by @​dependabot in https://github.com/dexidp/dex/pull/2753
• build(deps): bump google.golang.org/grpc from 1.49.0 to 1.51.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/2742
• build(deps): bump golang.org/x/net from 0.3.0 to 0.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/2761
• build(deps): bump entgo.io/ent from 0.11.3 to 0.11.4 by @​dependabot in https://github.com/dexidp/dex/pull/2725
• build(deps): bump google.golang.org/api from 0.104.0 to 0.105.0 by @​dependabot in https://github.com/dexidp/dex/pull/2760
• build(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/2774
• build(deps): bump google.golang.org/api from 0.105.0 to 0.106.0 by @​dependabot in https://github.com/dexidp/dex/pull/2772
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.4.0 to 3.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/2770
• build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/2773
• build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/2777
• build(deps): bump entgo.io/ent from 0.11.4 to 0.11.5 by @​dependabot in https://github.com/dexidp/dex/pull/2779
• build(deps): bump alpine from 3.17.0 to 3.17.1 by @​dependabot in https://github.com/dexidp/dex/pull/2780
• build(deps): bump mheap/github-action-required-labels from 2 to 3 by @​dependabot in https://github.com/dexidp/dex/pull/2769
• build(deps): bump google.golang.org/api from 0.106.0 to 0.107.0 by @​dependabot in https://github.com/dexidp/dex/pull/2788
• build(deps): bump golang from 1.19.4-alpine3.16 to 1.19.5-alpine3.16 by @​dependabot in https://github.com/dexidp/dex/pull/2782
• build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 by @​dependabot in https://github.com/dexidp/dex/pull/2783
• build(deps): bump google.golang.org/api from 0.107.0 to 0.108.0 by @​dependabot in https://github.com/dexidp/dex/pull/2793
• build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/2784
• chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 by @​dlipovetsky in https://github.com/dexidp/dex/pull/2790
• ci: Use go 1.19 by @​dlipovetsky in https://github.com/dexidp/dex/pull/2791
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.6 to 3.5.7 by @​dependabot in https://github.com/dexidp/dex/pull/2798
• build(deps): bump docker/build-push-action from 3 to 4 by @​dependabot in https://github.com/dexidp/dex/pull/2807
• build(deps): bump golang from 1.19.5-alpine3.16 to 1.20.0-alpine3.16 by @​dependabot in https://github.com/dexidp/dex/pull/2811
• build(deps): bump aquasecurity/trivy-action from 0.8.0 to 0.9.0 by @​dependabot in https://github.com/dexidp/dex/pull/2810
• build(deps): bump alpine from 3.17.1 to 3.17.2 by @​dependabot in https://github.com/dexidp/dex/pull/2821
• build(deps): bump aquasecurity/trivy-action from 0.9.0 to 0.9.1 by @​dependabot in https://github.com/dexidp/dex/pull/2822
• build(deps): bump entgo.io/ent from 0.11.5 to 0.11.8 by @​dependabot in https://github.com/dexidp/dex/pull/2823
• build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 by @​dependabot in https://github.com/dexidp/dex/pull/2818
• build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/2828
• build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/2832
• build(deps): bump golang.org/x/sys from 0.0.0-20220114195835-da31bd327af9 to 0.1.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/2837
• build(deps): bump golang.org/x/net from 0.0.0-20220114011407-0dd24b26b47d to 0.7.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/2846
• build(deps): bump golang from 1.20.0-alpine3.16 to 1.20.1-alpine3.16 by @​dependabot in https://github.com/dexidp/dex/pull/2827
• build(deps): bump aquasecurity/trivy-action from 0.9.1 to 0.9.2 by @​dependabot in https://github.com/dexidp/dex/pull/2850
• build(deps): bump golang from 1.20.1-alpine3.16 to 1.20.2-alpine3.16 by @​dependabot in https://github.com/dexidp/dex/pull/2849
• feat: Bump gomplate 3.11.4 by @​nabokihms in https://github.com/dexidp/dex/pull/2840
• build(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/2856
• build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.6.0 by @​dependabot in https://github.com/dexidp/dex/pull/2847
• build(deps): bump google.golang.org/api from 0.108.0 to 0.112.0 by @​dependabot in https://github.com/dexidp/dex/pull/2853
• build(deps): bump google.golang.org/api from 0.112.0 to 0.114.0 by @​dependabot in https://github.com/dexidp/dex/pull/2869
• build(deps): bump actions/setup-go from 3 to 4 by @​dependabot in https://github.com/dexidp/dex/pull/2863
• build(deps): bump github.com/russellhaering/goxmldsig from 1.2.0 to 1.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/2862
• build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 by @​dependabot in https://github.com/dexidp/dex/pull/2866
• build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/2867
• build(deps): bump golang.org/x/crypto from 0.0.0-20220112180741-5e0467b6c7ce to 0.1.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/2845
• build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/2816
• chore: upgrade tools by @​sagikazarmark in https://github.com/dexidp/dex/pull/2870

Other Changes

• Bump image in examples/k8s/dex.yaml to v2.32.0 by @​stealthybox in https://github.com/dexidp/dex/pull/2569

New Contributors

• @​pinpox made their first contribution in https://github.com/dexidp/dex/pull/2733
• @​nobuyo made their first contribution in https://github.com/dexidp/dex/pull/2740
• @​dlipovetsky made their first contribution in https://github.com/dexidp/dex/pull/2790
• @​seankhliao made their first contribution in https://github.com/dexidp/dex/pull/2812
• @​stealthybox made their first contribution in https://github.com/dexidp/dex/pull/2569

Full Changelog: dexidp/dex@v2.35.3...v2.36.0

v2.35.3

Compare Source

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.35.3

What's Changed

Dependency Updates ⬆️

• Backport #​2705 to v2.35.x by @​nabokihms in https://github.com/dexidp/dex/pull/2706

Full Changelog: dexidp/dex@v2.35.2...v2.35.3

v2.35.2

Compare Source

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.35.2

What's Changed

Bug Fixes 🐛

• Backport #​2700 to v2.35.x by @​sagikazarmark in https://github.com/dexidp/dex/pull/2702

Dependency Updates ⬆️

• Backport Go update to v2.35.x by @​sagikazarmark in https://github.com/dexidp/dex/pull/2698

Full Changelog: dexidp/dex@v2.35.1...v2.35.2

v2.35.1

Compare Source

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.35.1

What's Changed

Bug Fixes 🐛

• Backport #​2694 to v2.35.x by @​sagikazarmark in https://github.com/dexidp/dex/pull/2696

Full Changelog: dexidp/dex@v2.35.0...v2.35.1

v2.35.0

Compare Source

⚠️ This release fixes a major vulnerability in Dex. We advise everyone to upgrade as soon as possible! ⚠️

If you use the Google connector, please upgrade to 2.35.1 instead.

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.35.0

What's Changed

Enhancements 🚀

• Reduce HTTP client creations in the Keystone connector by @​erwinvaneyk in https://github.com/dexidp/dex/pull/2659

Bug Fixes 🐛

• fix for issue 2670; check for no serviceAccountFilePath and no email by @​bobcallaway in https://github.com/dexidp/dex/pull/2679
• supply HMACKey in test case by @​bobcallaway in https://github.com/dexidp/dex/pull/2683
• fix: refresh token only once for all concurrent requests by @​nabokihms in https://github.com/dexidp/dex/pull/2692

Dependency Updates ⬆️

• build(deps): bump google.golang.org/api from 0.95.0 to 0.97.0 by @​dependabot in https://github.com/dexidp/dex/pull/2677
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.4 to 3.5.5 by @​dependabot in https://github.com/dexidp/dex/pull/2666
• build(deps): bump google.golang.org/api from 0.97.0 to 0.98.0 by @​dependabot in https://github.com/dexidp/dex/pull/2682
• build(deps): bump helm/kind-action from 1.3.0 to 1.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/2681
• build(deps): bump entgo.io/ent from 0.11.2 to 0.11.3 by @​dependabot in https://github.com/dexidp/dex/pull/2684
• Update golang.org/x packages by @​sagikazarmark in https://github.com/dexidp/dex/pull/2688

New Contributors

• @​jannfis made their first contribution in https://github.com/dexidp/dex/pull/2691

Full Changelog: dexidp/dex@v2.34.0...v2.35.0

v2.34.0

Compare Source

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.34.0

What's Changed

Exciting New Features 🎉

• updated gomplate version and added ppc64le support by @​mayurwaghmode in https://github.com/dexidp/dex/pull/2620

Enhancements 🚀

• fix: Fallback when group claim is a string instead of an array of strings by @​JoooostB in https://github.com/dexidp/dex/pull/2639
• feat(connector/authproxy): support multiple groups by @​mclavel in https://github.com/dexidp/dex/pull/2643
• Implement Application Default Credentials for the google connector by @​ichbinfrog in https://github.com/dexidp/dex/pull/2530
• build: bump Go version to 1.19 in Nix by @​sagikazarmark in https://github.com/dexidp/dex/pull/2648

Dependency Updates ⬆️

• build(deps): bump alpine from 3.16.1 to 3.16.2 by @​dependabot in https://github.com/dexidp/dex/pull/2624
• build(deps): bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 by @​dependabot in https://github.com/dexidp/dex/pull/2623
• build(deps): bump aquasecurity/trivy-action from 0.6.1 to 0.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/2632
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.11 to 1.14.15 by @​dependabot in https://github.com/dexidp/dex/pull/2634
• build(deps): bump aquasecurity/trivy-action from 0.7.0 to 0.7.1 by @​dependabot in https://github.com/dexidp/dex/pull/2635
• build(deps): bump google.golang.org/api from 0.89.0 to 0.93.0 by @​dependabot in https://github.com/dexidp/dex/pull/2633
• build(deps): bump google.golang.org/api from 0.93.0 to 0.94.0 by @​dependabot in https://github.com/dexidp/dex/pull/2637
• chore: Bump ent to 0.11.2 by @​nabokihms in https://github.com/dexidp/dex/pull/2640
• chore: Bump Go to 1.19 by @​nabokihms in https://github.com/dexidp/dex/pull/2641
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.2.0 to 3.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/2646
• build(deps): bump google.golang.org/grpc from 1.47.0 to 1.49.0 by @​dependabot in https://github.com/dexidp/dex/pull/2636
• build(deps): bump google.golang.org/protobuf from 1.28.0 to 1.28.1 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/2611
• build(deps): bump golang from 1.19.0-alpine3.15 to 1.19.1-alpine3.15 by @​dependabot in https://github.com/dexidp/dex/pull/2650
• chore: update alpine version in Go image by @​sagikazarmark in https://github.com/dexidp/dex/pull/2656
• build(deps): bump github.com/lib/pq from 1.10.5 to 1.10.7 by @​dependabot in https://github.com/dexidp/dex/pull/2651
• build(deps): bump google.golang.org/api from 0.94.0 to 0.95.0 by @​dependabot in https://github.com/dexidp/dex/pull/2652
• build(deps): bump google.golang.org/grpc from 1.47.0 to 1.49.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/2638
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.3.0 to 3.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/2658

New Contributors

• @​mayurwaghmode made their first contribution in https://github.com/dexidp/dex/pull/2620
• @​JoooostB made their first contribution in https://github.com/dexidp/dex/pull/2639
• @​mclavel made their first contribution in https://github.com/dexidp/dex/pull/2643
• @​ichbinfrog made their first contribution in https://github.com/dexidp/dex/pull/2530

Full Changelog: dexidp/dex@v2.33.0...v2.34.0

v2.33.1

Compare Source

What's Changed

Enhancements 🚀

• chore: upgrade alpine to 3.16.2 by @​sagikazarmark in https://github.com/dexidp/dex/pull/2655

Full Changelog: dexidp/dex@v2.33.0...v2.33.1

v2.33.0

Compare Source

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.33.0

What's Changed

Exciting New Features 🎉

• add PKCE support to device code flow by @​bobcallaway in https://github.com/dexidp/dex/pull/2575

Enhancements 🚀

• Limit the amount of objects we attempt to GC on each cycle by @​kellyma2 in https://github.com/dexidp/dex/pull/2524
• Use GitLab's refresh_token during Refresh. by @​dhaus67 in https://github.com/dexidp/dex/pull/2352
• Add domainHint parameter to Microsoft Connector by @​josephtknight in https://github.com/dexidp/dex/pull/2586
• add config to explicitly set scopes for microsoft connector by @​bobcallaway in https://github.com/dexidp/dex/pull/2582

Bug Fixes 🐛

• fix: prevent cross-site scripting for the device flow by @​nabokihms in https://github.com/dexidp/dex/pull/2468
• grpc-client: Do not crash on empty response by @​bbusse in https://github.com/dexidp/dex/pull/2584

Dependency Updates ⬆️

• build(deps): bump helm/kind-action from 1.2.0 to 1.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/2555
• build(deps): bump aquasecurity/trivy-action from 0.3.0 to 0.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/2557
• build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0 by @​dependabot in https://github.com/dexidp/dex/pull/2577
• build(deps): bump aquasecurity/trivy-action from 0.4.0 to 0.5.1 by @​dependabot in https://github.com/dexidp/dex/pull/2576
• build(deps): bump mheap/github-action-required-labels from 1 to 2 by @​dependabot in https://github.com/dexidp/dex/pull/2565
• build(deps): bump google.golang.org/api from 0.82.0 to 0.86.0 by @​dependabot in https://github.com/dexidp/dex/pull/2574
• build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/2560
• build(deps): bump aquasecurity/trivy-action from 0.5.1 to 0.6.0 by @​dependabot in https://github.com/dexidp/dex/pull/2602
• build(deps): bump alpine from 3.16.0 to 3.16.1 by @​dependabot in https://github.com/dexidp/dex/pull/2598
• build(deps): bump golang from 1.18.3-alpine3.15 to 1.18.4-alpine3.15 by @​dependabot in https://github.com/dexidp/dex/pull/2592
• build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 by @​dependabot in https://github.com/dexidp/dex/pull/2599
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.2 to 3.4.4 by @​dependabot in https://github.com/dexidp/dex/pull/2606
• build(deps): bump google.golang.org/api from 0.86.0 to 0.89.0 by @​dependabot in https://github.com/dexidp/dex/pull/2605
• build(deps): bump aquasecurity/trivy-action from 0.6.0 to 0.6.1 by @​dependabot in https://github.com/dexidp/dex/pull/2604

New Contributors

• @​kellyma2 made their first contribution in https://github.com/dexidp/dex/pull/2524
• @​josephtknight made their first contribution in https://github.com/dexidp/dex/pull/2586
• @​bbusse made their first contribution in https://github.com/dexidp/dex/pull/2584

Full Changelog: dexidp/dex@v2.32.0...v2.33.0

v2.32.1

Compare Source

v2.32.0

Compare Source

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.32.0

What's Changed

Exciting New Features 🎉

• Publish official distroless images by @​sagikazarmark in https://github.com/dexidp/dex/pull/2478
• Feature: groups in Gitea by @​techknowlogick in https://github.com/dexidp/dex/pull/1789

Enhancements 🚀

• Add support for RefreshConnector for openshift connector. by @​dhaus67 in https://github.com/dexidp/dex/pull/2342
• Allow configuration of returned groups via authproxy connector by @​seuf in https://github.com/dexidp/dex/pull/2371
• Add acr_values support for OIDC by @​dirien in https://github.com/dexidp/dex/pull/2418
• fix: Implicit Grant discovery by @​nabokihms in https://github.com/dexidp/dex/pull/2433
• fix: log only errors on refreshing by @​nabokihms in https://github.com/dexidp/dex/pull/2470
• Create setting to allow to trust the system root CAs by @​dhaus67 in https://github.com/dexidp/dex/pull/2430
• Add numeric user ID support for oauth connector by @​tsl0922 in https://github.com/dexidp/dex/pull/2483
• Remove google specific hd / hosted domain claim config from oidc connector by @​Blorpy in https://github.com/dexidp/dex/pull/2511
• OIDC connector: Support cases where there is no id_token when using a refresh_token grant by @​Blorpy in https://github.com/dexidp/dex/pull/2522
• feat: add enhancement template by @​nabokihms in https://github.com/dexidp/dex/pull/2486
• Release note configuration by @​sagikazarmark in https://github.com/dexidp/dex/pull/2463
• fix: add notification about groups access to the Grant Access page by @​nabokihms in https://github.com/dexidp/dex/pull/2533
• feat: enable profiling endpoints by @​nabokihms in https://github.com/dexidp/dex/pull/2482

Bug Fixes 🐛

• Build multi-platform images in a single build job by @​sagikazarmark in https://github.com/dexidp/dex/pull/2487
• Fixes https://github.com/dexidp/dex/issues/2537 by @​ShivanshVij in https://github.com/dexidp/dex/pull/2538
• correctly handle path escaping for connector IDs by @​bobcallaway in https://github.com/dexidp/dex/pull/2290

Dependency Updates ⬆️

• build(deps): bump golang from 1.17.6-alpine3.14 to 1.17.7-alpine3.14 by @​dependabot in https://github.com/dexidp/dex/pull/2411
• build(deps): bump google.golang.org/api from 0.68.0 to 0.69.0 by @​dependabot in https://github.com/dexidp/dex/pull/2415
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.1 to 3.4.2 by @​dependabot in https://github.com/dexidp/dex/pull/2416
• build(deps): bump google.golang.org/api from 0.69.0 to 0.70.0 by @​dependabot in https://github.com/dexidp/dex/pull/2419
• build(deps): bump actions/checkout from 2 to 3 by @​dependabot in https://github.com/dexidp/dex/pull/2422
• build(deps): bump github.com/russellhaering/goxmldsig from 1.1.1 to 1.2.0 by @​dependabot in https://github.com/dexidp/dex/pull/2424
• build(deps): bump golang from 1.17.7-alpine3.14 to 1.17.8-alpine3.14 by @​dependabot in https://github.com/dexidp/dex/pull/2426
• build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/2437
• build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 by @​dependabot in https://github.com/dexidp/dex/pull/2440
• build(deps): bump alpine from 3.15.0 to 3.15.1 by @​dependabot in https://github.com/dexidp/dex/pull/2444
• build(deps): bump alpine from 3.15.1 to 3.15.3 by @​dependabot in https://github.com/dexidp/dex/pull/2456
• build(deps): bump alpine from 3.15.3 to 3.15.4 by @​dependabot in https://github.com/dexidp/dex/pull/2461
• build(deps): bump google.golang.org/api from 0.70.0 to 0.74.0 by @​dependabot in https://github.com/dexidp/dex/pull/2458
• build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0 by @​dependabot in [https://

---

Configuration

📅 Schedule: Branch creation - "before 11pm" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.