DevFW-CICD/argocd-helm

Fork 0

chore(deps): update ghcr.io/dexidp/dex docker tag to v2.45.1 #5

Open

sa-renovate wants to merge 1 commit from renovate/ghcr.io-dexidp-dex-2.x into main

sa-renovate commented

2026-03-17 10:18:55 +00:00

Member

This PR contains the following updates:

Package	Update	Change
ghcr.io/dexidp/dex	minor	`v2.42.0` → `v2.45.1`

Release Notes

dexidp/dex (ghcr.io/dexidp/dex)

`v2.45.1`

Compare Source

Bug Fixes 🐛

Quote groups reserved word in query replacer to fix MySQL 8.0+ storage migration (#4580)
Update authproxy and oauth to match CallbackConnector interface (#4589)

Full Changelog: https://github.com/dexidp/dex/compare/v2.45.0...v2.45.1

`v2.45.0`

Compare Source

Know Before Upgrade

The major version of gomplate has been bumped to v5.0.0, which includes breaking changes. Here is the full list.
There are two known CVEs in the gomplate binary - CVE-2025-68121 and CVE-2026-25934. gomplate is only used for preprocessing configuration files and is optional. Once the CVEs are fixed upstream, the version of gomplate in the dex image will be updated accordingly.
The ContinueOnConnectorFailure feature flag is now enabled by default. To disable it, use the following environment variable: DEX_CONTINUE_ON_CONNECTOR_FAILURE=false.
Pre-release versions of dex now use pseudo-versioning for identifying releases. Unreleased versions will follow the pattern v2.minor+1.0-yyyymmdd-commithash.

What's Changed

Exciting New Features 🎉

Add support to PKCE in OIDC connector by @johnvan7 in #3777
Add Vault signer for JWT by @nabokihms in #4512
Support groups and preferred_username for static passwords by @Jabejixo in #4456
Add name and email_verified fields for static passwords by @Jabejixo in #4526

Enhancements 🚀

Example app pkce by @nabokihms in #4284
Only wrap IPv6 addresses in brackets by @rene-dekker in #4388
Update distroless base image to debian13 by @loosebazooka in #4453
Hide internal server error details from users by @Jabejixo in #4457
Gitlab support custom rootCAData by @Jabejixo in #4496
Enable ContinueOnConnectorFailure feature flag by @manojVivek in #4495
Extend example configs for idEnv and public by @cardoe in #4443
Add unprivileged user setup in Dockerfile by @nabokihms in #4517
Add conformance tests for Vault signer integration by @nabokihms in #4520
Add CRD handling behavior and configuration options by @nabokihms in #4543
Enhance git-version script to generate pseudo-versions by @nabokihms in #4553
Validate redirect URIs and safely append parameters by @nabokihms in #4559
Refactor example-app with a new config by @nabokihms in #4569
Implement device code flow in example-app by @nabokihms in #4570

Bug Fixes 🐛

Do not wrap Kubernetes Address in brackets by @nabokihms in #4363
Device callback URL needs to handle a / by @cardoe in #4448
Suppress deprecation warning for userAttr when not set by @nabokihms in #4539
Use correct id value for label by @loganripplinger in #4541
Respond with forbidden if failed to authenticate by @aljoshare in #4200

Dependency Updates ⬆️

build(deps): bump github.com/dexidp/dex/api/v2 from 2.3.0 to 2.4.0 in /examples by @dependabot[bot] in #4299
build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #4304
build(deps): bump aquasecurity/trivy-action from 0.33.0 to 0.33.1 by @dependabot[bot] in #4305
build(deps): bump golang from 1.25.0-alpine3.22 to 1.25.1-alpine3.22 by @dependabot[bot] in #4307
build(deps): bump distroless/static-debian12 from a9f88e0 to e8a4044 by @dependabot[bot] in #4313
build(deps): bump oras-project/setup-oras from 1.2.3 to 1.2.4 by @dependabot[bot] in #4314
build(deps): bump github/codeql-action from 3.29.11 to 3.30.3 by @dependabot[bot] in #4320
build(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @dependabot[bot] in #4324
build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @dependabot[bot] in #4302
build(deps): bump github.com/prometheus/client_golang from 1.23.0 to 1.23.2 by @dependabot[bot] in #4309
build(deps): bump tonistiigi/xx from 1.6.1 to 1.7.0 by @dependabot[bot] in #4317
build(deps): bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 by @dependabot[bot] in #4310
build(deps): bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 in /examples by @dependabot[bot] in #4311
build(deps): bump github/codeql-action from 3.30.3 to 3.30.4 by @dependabot[bot] in #4339
build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9 by @dependabot[bot] in #4335
build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 by @dependabot[bot] in #4334
build(deps): bump anchore/sbom-action from 0.20.5 to 0.20.6 by @dependabot[bot] in #4332
build(deps): bump golang from 1.25.1-alpine3.22 to 1.25.3-alpine3.22 by @dependabot[bot] in #4368
build(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.1 by @dependabot[bot] in #4366
build(deps): bump github/codeql-action from 3.30.4 to 4.30.8 by @dependabot[bot] in #4365
build(deps): bump google.golang.org/api from 0.248.0 to 0.252.0 by @dependabot[bot] in #4360
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 in /examples by @dependabot[bot] in #4357
build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in #4350
build(deps): bump docker/login-action from 3.5.0 to 3.6.0 by @dependabot[bot] in #4348
build(deps): bump actions/cache from 4.2.4 to 4.3.0 by @dependabot[bot] in #4338
build(deps): bump the etcd group with 2 updates by @dependabot[bot] in #4333
build(deps): bump alpine from 3.22.1 to 3.22.2 by @dependabot[bot] in #4361
build(deps): bump github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0 in /examples by @dependabot[bot] in #4354
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 by @dependabot[bot] in #4355
build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 in /examples by @dependabot[bot] in #4362
build(deps): bump github/codeql-action from 4.30.8 to 4.31.2 by @dependabot[bot] in #4398
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #4395
build(deps): bump anchore/sbom-action from 0.20.6 to 0.20.9 by @dependabot[bot] in #4393
build(deps): bump tonistiigi/xx from 1.7.0 to 1.8.0 by @dependabot[bot] in #4386
build(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @dependabot[bot] in #4376
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 in /api/v2 by @dependabot[bot] in #4356
build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #4380
build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0 by @dependabot[bot] in #4374
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3 by @dependabot[bot] in #4373
build(deps): bump golang from 20ee0b6 to aee43c3 by @dependabot[bot] in #4371
build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in /examples by @dependabot[bot] in #4300
build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 by @dependabot[bot] in #4375
build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.10 in /api/v2 by @dependabot[bot] in #4352
build(deps): bump tonistiigi/xx from 1.8.0 to 1.9.0 by @dependabot[bot] in #4430
build(deps): bump distroless/static-debian12 from e8a4044 to 2b7c93f by @dependabot[bot] in #4427
build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #4419
build(deps): bump github/codeql-action from 4.31.2 to 4.31.3 by @dependabot[bot] in #4414
build(deps): bump actions/dependency-review-action from 4.8.1 to 4.8.2 by @dependabot[bot] in #4411
build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #4405
build(deps): bump docker/metadata-action from 5.8.0 to 5.9.0 by @dependabot[bot] in #4402
build(deps): bump helm/kind-action from 1.12.0 to 1.13.0 by @dependabot[bot] in #4399
build(deps): bump alpine from 3.22.2 to 3.23.0 by @dependabot[bot] in #4425
build(deps): bump golang from 1.25.3-alpine3.22 to 1.25.5-alpine3.22 by @dependabot[bot] in #4424
build(deps): bump google.golang.org/api from 0.252.0 to 0.256.0 by @dependabot[bot] in #4413
build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 by @dependabot[bot] in #4409
build(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 by @dependabot[bot] in #4412
build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.11 to 3.4.12 by @dependabot[bot] in #4401
build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.34.0 in /examples by @dependabot[bot] in #4431
build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 in /examples by @dependabot[bot] in #4417
build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 in /api/v2 by @dependabot[bot] in #4416
build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 in /examples by @dependabot[bot] in #4426
build(deps): bump alpine from 3.23.0 to 3.23.2 by @dependabot[bot] in #4455
build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 in /examples by @dependabot[bot] in #4460
build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 by @dependabot[bot] in #4449
build(deps): bump github/codeql-action from 4.31.3 to 4.31.7 by @dependabot[bot] in #4440
build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by @dependabot[bot] in #4439
build(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 by @dependabot[bot] in #4438
build(deps): bump actions/checkout from 5.0.0 to 6.0.1 by @dependabot[bot] in #4437
build(deps): bump anchore/sbom-action from 0.20.9 to 0.20.11 by @dependabot[bot] in #4435
build(deps): bump docker/metadata-action from 5.9.0 to 5.10.0 by @dependabot[bot] in #4434
build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #4433
build(deps): bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.17.0 by @dependabot[bot] in #4441
build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 in /api/v2 by @dependabot[bot] in #4450
build(deps): bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 in /examples by @dependabot[bot] in #4420
build(deps): bump the etcd group with 2 updates by @dependabot[bot] in #4436
build(deps): bump golang from 1.25.5-alpine3.22 to 1.25.6-alpine3.22 by @dependabot[bot] in #4481
build(deps): bump distroless/static-debian13 from b5b9fd0 to f9f84bd by @dependabot[bot] in #4468
build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #4476
build(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 by @dependabot[bot] in #4472
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.32 to 1.14.33 by @dependabot[bot] in #4474
build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 by @dependabot[bot] in #4475
build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 by @dependabot[bot] in #4469
build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #4477
build(deps): bump actions/cache from 4.3.0 to 5.0.1 by @dependabot[bot] in #4473
build(deps): bump github/codeql-action from 4.31.7 to 4.31.10 by @dependabot[bot] in #4470
build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #4471
build(deps): bump google.golang.org/api from 0.257.0 to 0.259.0 by @dependabot[bot] in #4478
build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 in /api/v2 by @dependabot[bot] in #4459
build(deps): bump actions/cache from 5.0.1 to 5.0.2 by @dependabot[bot] in #4484
build(deps): bump golang from d9c983d to ad295fc by @dependabot[bot] in #4493
build(deps): bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by @dependabot[bot] in #4485
build(deps): bump anchore/sbom-action from 0.20.11 to 0.22.0 by @dependabot[bot] in #4487
build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #4489
build(deps): bump github/codeql-action from 4.31.10 to 4.31.11 by @dependabot[bot] in #4492
build(deps): bump google.golang.org/api from 0.260.0 to 0.263.0 by @dependabot[bot] in #4494
build(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 by @dependabot[bot] in #4505
build(deps): bump actions/cache from 5.0.2 to 5.0.3 by @dependabot[bot] in #4504
build(deps): bump github/codeql-action from 4.31.11 to 4.32.0 by @dependabot[bot] in #4502
build(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @dependabot[bot] in #4501
build(deps): bump anchore/sbom-action from 0.22.0 to 0.22.1 by @dependabot[bot] in #4499
build(deps): bump alpine from 3.23.2 to 3.23.3 by @dependabot[bot] in #4498
build(deps): bump google.golang.org/api from 0.263.0 to 0.265.0 by @dependabot[bot] in #4508
build(deps): bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #4503
build(deps): bump golang from 1.25.6-alpine3.22 to 1.25.7-alpine3.22 by @dependabot[bot] in #4514
build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 by @dependabot[bot] in #4515
build(deps): bump github/codeql-action from 4.32.0 to 4.32.2 by @dependabot[bot] in #4509
build(deps): bump anchore/sbom-action from 0.22.1 to 0.22.2 by @dependabot[bot] in #4510
build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 in /examples by @dependabot[bot] in #4516
build(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 by @dependabot[bot] in #4518
build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 by @dependabot[bot] in #4519
build(deps): bump google.golang.org/api from 0.265.0 to 0.266.0 by @dependabot[bot] in #4523
build(deps): bump docker/build-push-action from 6.18.0 to 6.19.1 by @dependabot[bot] in #4530
build(deps): bump golang from 1.25.7-alpine3.22 to 1.26.0-alpine3.22 by @dependabot[bot] in #4522
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.33 to 1.14.34 by @dependabot[bot] in #4524
build(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 by @dependabot[bot] in #4525
build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 in /examples by @dependabot[bot] in #4537
build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 by @dependabot[bot] in #4534
build(deps): bump docker/build-push-action from 6.19.1 to 6.19.2 by @dependabot[bot] in #4535
build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 by @dependabot[bot] in #4533
build(deps): bump distroless/static-debian13 from f9f84bd to 01e550f by @dependabot[bot] in #4546
build(deps): bump google.golang.org/grpc from 1.79.0 to 1.79.1 in /examples by @dependabot[bot] in #4551
build(deps): bump google.golang.org/grpc from 1.79.0 to 1.79.1 by @dependabot[bot] in #4549
build(deps): bump the etcd group with 2 updates by @dependabot[bot] in #4548
build(deps): bump github/codeql-action from 4.32.2 to 4.32.3 by @dependabot[bot] in #4547
build(deps): update gRPC to v1.79.1 and other dependencies by @nabokihms in #4554
build(deps): bump helm/kind-action from 1.13.0 to 1.14.0 by @dependabot[bot] in #4557
build(deps): bump google.golang.org/api from 0.266.0 to 0.267.0 by @dependabot[bot] in #4558
build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 by @dependabot[bot] in #4562
build(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in #4563
build(deps): bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 by @dependabot[bot] in #4574
build(deps): bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #4573

Other Changes

Add Terrakube to Adopters by @shurup in #4316

New Contributors

@Zash made their first contribution in #4327
@rene-dekker made their first contribution in #4388
@loosebazooka made their first contribution in #4453
@Jabejixo made their first contribution in #4456
@loganripplinger made their first contribution in #4541
@johnvan7 made their first contribution in #3777
@aljoshare made their first contribution in #4200

Full Changelog: https://github.com/dexidp/dex/compare/v2.44.0...v2.45.0

`v2.44.0`

Compare Source

What's Changed

Enhancements 🚀

Allow server startup with partial connector failures by @manojVivek in #4159
Add recursive LDAP parent group search (AD-style hierarchy across all LDAPs) by @EthanDieterich in #4113
feat: Add ModifyGroupNames claimMutation to oidc connector by @peschmae in #4144
authproxy connector: add support for specifying group header separator by @a-buck in #3745
fix: join issuer URL with discovery path without extra slash after issuer URL by @vizv in #4263
feat: grpc api list clients by @daemonfire300 in #4202

Bug Fixes 🐛

🐛 remove extra method="get" from device-code template by @tuminoid in #4145
[oidc] pass httpClient to the TokenIdentity context by @marriva in #4223
Resolve CVE by updating gomplate to 4.3.3 by @philBrown in #4224
fix: device code should not require scope by @cardoe in #4203
fix: device code pending HTTP response by @cardoe in #4204
Allow compilation without CGO by @nabokihms in #4266

Dependency Updates ⬆️

Resolve CVE by updating gomplate to 4.3.2 by @nathanlaceyraft in #4146
build(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by @dependabot[bot] in #4180
build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot[bot] in #4171
build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /examples by @dependabot[bot] in #4174
build(deps): bump github/codeql-action from 3.28.18 to 3.29.0 by @dependabot[bot] in #4179
build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 by @dependabot[bot] in #4167
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @dependabot[bot] in #4162
build(deps): bump docker/build-push-action from 6.17.0 to 6.18.0 by @dependabot[bot] in #4155
build(deps): bump distroless/static-debian12 from 188ddfb to 627d6c5 by @dependabot[bot] in #4181
build(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @dependabot[bot] in #4187
build(deps): bump google.golang.org/api from 0.233.0 to 0.238.0 by @dependabot[bot] in #4186
build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0 by @dependabot[bot] in #4185
build(deps): bump anchore/sbom-action from 0.20.0 to 0.20.1 by @dependabot[bot] in #4184
build(deps): bump github.com/go-sql-driver/mysql from 1.9.2 to 1.9.3 by @dependabot[bot] in #4183
build(deps): bump the etcd group with 2 updates by @dependabot[bot] in #4175
build(deps): bump alpine from 3.21.3 to 3.22.0 by @dependabot[bot] in #4163
build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /api/v2 by @dependabot[bot] in #4170
build(deps): bump docker/setup-buildx-action from 3.11.0 to 3.11.1 by @dependabot[bot] in #4189
build(deps): bump mheap/github-action-required-labels from 5.5.0 to 5.5.1 by @dependabot[bot] in #4190
build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.0 in /examples by @dependabot[bot] in #4219
build(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 by @dependabot[bot] in #4205
build(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.2 by @dependabot[bot] in #4225
build(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @dependabot[bot] in #4210
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.1 by @dependabot[bot] in #4196
build(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @dependabot[bot] in #4214
build(deps): bump alpine from 3.22.0 to 3.22.1 by @dependabot[bot] in #4217
build(deps): bump the etcd group with 2 updates by @dependabot[bot] in #4213
build(deps): bump github.com/oklog/run from 1.1.0 to 1.2.0 by @dependabot[bot] in #4199
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.29 by @dependabot[bot] in #4239
build(deps): bump github/codeql-action from 3.29.0 to 3.29.4 by @dependabot[bot] in #4238
build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @dependabot[bot] in #4235
build(deps): bump the etcd group with 2 updates by @dependabot[bot] in #4233
build(deps): bump google.golang.org/grpc from 1.74.0 to 1.74.2 in /examples by @dependabot[bot] in #4232
build(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 by @dependabot[bot] in #4229
build(deps): bump google.golang.org/api from 0.238.0 to 0.243.0 by @dependabot[bot] in #4234
build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @dependabot[bot] in #4227
build(deps): bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.15.0 in /examples by @dependabot[bot] in #4246
build(deps): bump the etcd group with 2 updates by @dependabot[bot] in #4243
build(deps): bump distroless/static-debian12 from 627d6c5 to cdf4daa by @dependabot[bot] in #4253
build(deps): bump docker/metadata-action from 5.7.0 to 5.8.0 by @dependabot[bot] in #4252
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.29 to 1.14.30 by @dependabot[bot] in #4249
build(deps): bump github/codeql-action from 3.29.4 to 3.29.5 by @dependabot[bot] in #4244
build(deps): bump google.golang.org/api from 0.243.0 to 0.244.0 by @dependabot[bot] in #4247
build(deps): bump docker/login-action from 3.4.0 to 3.5.0 by @dependabot[bot] in #4254
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.2 by @dependabot[bot] in #4255
build(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @dependabot[bot] in #4257
build(deps): bump google.golang.org/api from 0.244.0 to 0.246.0 by @dependabot[bot] in #4258
build(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 by @dependabot[bot] in #4272
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.30 to 1.14.32 by @dependabot[bot] in #4271
build(deps): bump github/codeql-action from 3.29.7 to 3.29.9 by @dependabot[bot] in #4269
build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #4267
build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #4262
build(deps): bump actions/cache from 4.2.3 to 4.2.4 by @dependabot[bot] in #4261
build(deps): bump cloud.google.com/go/compute/metadata from 0.7.0 to 0.8.0 by @dependabot[bot] in #4259
build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @dependabot[bot] in #4275
build(deps): bump google.golang.org/api from 0.246.0 to 0.247.0 by @dependabot[bot] in #4274
chore: update ent generated code by @sagikazarmark in #4276
feat: update Go to 1.25 by @sagikazarmark in #4277
build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 in /api/v2 by @dependabot[bot] in #4236
build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 in /api/v2 by @dependabot[bot] in #4260
build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.2 by @dependabot[bot] in #4278
build(deps): bump distroless/static-debian12 from cdf4daa to a9f88e0 by @dependabot[bot] in #4291
build(deps): bump github.com/beevik/etree from 1.5.1 to 1.6.0 by @dependabot[bot] in #4288
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @dependabot[bot] in #4287
build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 in /examples by @dependabot[bot] in #4282
build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @dependabot[bot] in #4281
build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 in /api/v2 by @dependabot[bot] in #4280
build(deps): bump google.golang.org/api from 0.247.0 to 0.248.0 by @dependabot[bot] in #4283
build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 by @dependabot[bot] in #4285
build(deps): bump actions/dependency-review-action from 4.7.2 to 4.7.3 by @dependabot[bot] in #4290
build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 in /api/v2 by @dependabot[bot] in #4286
build(deps): bump actions/attest-build-provenance from 2.4.0 to 3.0.0 by @dependabot[bot] in #4296
build(deps): bump aquasecurity/trivy-action from 0.32.0 to 0.33.0 by @dependabot[bot] in #4293
build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in #4292

New Contributors

@nathanlaceyraft made their first contribution in #4146
@manojVivek made their first contribution in #4159
@marriva made their first contribution in #4223
@peschmae made their first contribution in #4144
@philBrown made their first contribution in #4224
@a-buck made their first contribution in #3745
@vizv made their first contribution in #4263
@daemonfire300 made their first contribution in #4202

Full Changelog: https://github.com/dexidp/dex/compare/v2.43.0...v2.44.0

`v2.43.1`

Compare Source

What's Changed

Dependency Updates ⬆️

Backport #4146 to 2.43.x by @sagikazarmark in #4148

Full Changelog: https://github.com/dexidp/dex/compare/v2.43.0...v2.43.1

`v2.43.0`

Compare Source

What's Changed

Enhancements 🚀

Generate access tokens for implicit & hybrid flows only when needed by @mfila in #3857
k8s storage: Request only one object to check if API exists by @nabokihms in #4027
refactor: simplify tests by using slog.DiscardHandler by @alexandear in #4058

Bug Fixes 🐛

Fix Makefile to Support Spaces in Paths by @EthanDieterich in #4000
fix: remove version controlled files from dockerignore by @sagikazarmark in #4087
fix Incorrect Group Handling in RequestContextHandler logger.go by @alihasan070707 in #4082

Dependency Updates ⬆️

build(deps): bump actions/cache from 4.2.0 to 4.2.1 by @dependabot in #3998
build(deps): bump docker/build-push-action from 6.13.0 to 6.14.0 by @dependabot in #3997
build(deps): bump github.com/dexidp/dex/api/v2 from 2.2.0 to 2.3.0 in /examples by @dependabot in #3996
build(deps): bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @dependabot in #3995
build(deps): bump google.golang.org/api from 0.221.0 to 0.222.0 by @dependabot in #3994
build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group by @dependabot in #4008
build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 in /examples in the go_modules group by @dependabot in #4007
build(deps): bump golang from 1.24.0-alpine3.20 to 1.24.1-alpine3.20 by @dependabot in #4021
build(deps): bump sigstore/cosign-installer from 3.8.0 to 3.8.1 by @dependabot in #4001
build(deps): bump github/codeql-action from 3.28.9 to 3.28.11 by @dependabot in #4038
build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 in the go_modules group by @dependabot in #4043
build(deps): bump distroless/static-debian12 from 6ec5aa9 to b35229a by @dependabot in #4052
build(deps): bump google.golang.org/api from 0.222.0 to 0.228.0 by @dependabot in #4059
build(deps): bump distroless/static-debian12 from b35229a to c0f429e by @dependabot in #4062
build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 by @dependabot in #4060
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.2 by @dependabot in #4053
build(deps): bump docker/build-push-action from 6.14.0 to 6.15.0 by @dependabot in #4039
build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.1 by @dependabot in #4064
build(deps): bump docker/setup-qemu-action from 3.4.0 to 3.6.0 by @dependabot in #4031
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @dependabot in #4005
build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @dependabot in #4014
build(deps): bump github.com/prometheus/client_golang from 1.21.0 to 1.22.0 by @dependabot in #4083
build(deps): bump github.com/go-sql-driver/mysql from 1.9.0 to 1.9.2 by @dependabot in #4080
build(deps): bump golang from 1.24.1-alpine3.20 to 1.24.2-alpine3.20 by @dependabot in #4079
build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.18 to 3.5.21 by @dependabot in #4074
build(deps): bump actions/cache from 4.2.1 to 4.2.3 by @dependabot in #4072
build(deps): bump actions/attest-build-provenance from 2.2.0 to 2.2.3 by @dependabot in #4071
build(deps): bump docker/login-action from 3.3.0 to 3.4.0 by @dependabot in #4070
build(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot in #4069
build(deps): bump docker/metadata-action from 5.6.1 to 5.7.0 by @dependabot in #4068
build(deps): bump github.com/russellhaering/goxmldsig from 1.4.0 to 1.5.0 by @dependabot in #4073
build(deps): bump github.com/beevik/etree from 1.5.0 to 1.5.1 by @dependabot in #4096
build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @dependabot in #4095
build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.10 to 3.4.11 by @dependabot in #4093
build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @dependabot in #4092
build(deps): bump github/codeql-action from 3.28.11 to 3.28.15 by @dependabot in #4091
build(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 by @dependabot in #4090
build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot in #4094
build(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by @dependabot in #4116
build(deps): bump google.golang.org/api from 0.228.0 to 0.231.0 by @dependabot in #4114
build(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @dependabot in #4111
build(deps): bump anchore/sbom-action from 0.18.0 to 0.19.0 by @dependabot in #4109
build(deps): bump docker/build-push-action from 6.15.0 to 6.16.0 by @dependabot in #4108
build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 by @dependabot in #4101
build(deps): bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in #4105
build(deps): bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.14.1 by @dependabot in #4099
build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.0 by @dependabot in #4100
build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /api/v2 by @dependabot in #4057
build(deps): bump golang from 1.24.2-alpine3.20 to 1.24.3-alpine3.20 by @dependabot in #4124
build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @dependabot in #4122
build(deps): bump oras-project/setup-oras from 1.2.2 to 1.2.3 by @dependabot in #4119
build(deps): bump google.golang.org/api from 0.231.0 to 0.232.0 by @dependabot in #4120
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.24 to 1.14.28 by @dependabot in #4123
build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in #4121
build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.0 by @dependabot in #4127
build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in #4126
build(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0 by @dependabot in #4132
build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot in #4131
build(deps): bump cloud.google.com/go/compute/metadata from 0.6.0 to 0.7.0 by @dependabot in #4130
build(deps): bump actions/dependency-review-action from 4.7.0 to 4.7.1 by @dependabot in #4128
build(deps): bump google.golang.org/api from 0.232.0 to 0.233.0 by @dependabot in #4129
build(deps): bump distroless/static-debian12 from c0f429e to 188ddfb by @dependabot in #4140
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot in #4139
build(deps): bump docker/build-push-action from 6.16.0 to 6.17.0 by @dependabot in #4135
build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.21 to 3.6.0 by @dependabot in #4136
chore: update dependencies by @sagikazarmark in #4141

New Contributors

@mfila made their first contribution in #3857
@EthanDieterich made their first contribution in #4000
@alexandear made their first contribution in #4058
@shurup made their first contribution in #4097
@alihasan070707 made their first contribution in #4082

Full Changelog: https://github.com/dexidp/dex/compare/v2.42.0...v2.43.0

`v2.42.1`

Compare Source

What's Changed

Bug Fixes 🐛

fix: remove version controlled files from dockerignore by @sagikazarmark in #4089

Full Changelog: https://github.com/dexidp/dex/compare/v2.42.0...v2.42.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/dexidp/dex](https://github.com/dexidp/dex) | minor | `v2.42.0` → `v2.45.1` | --- ### Release Notes <details> <summary>dexidp/dex (ghcr.io/dexidp/dex)</summary> ### [`v2.45.1`](https://github.com/dexidp/dex/releases/tag/v2.45.1) [Compare Source](https://github.com/dexidp/dex/compare/v2.45.0...v2.45.1)  ##### Bug Fixes 🐛 - Quote `groups` reserved word in query replacer to fix MySQL 8.0+ storage migration ([#4580](https://github.com/dexidp/dex/issues/4580)) - Update `authproxy` and `oauth` to match CallbackConnector interface ([#4589](https://github.com/dexidp/dex/issues/4589)) **Full Changelog**: <https://github.com/dexidp/dex/compare/v2.45.0...v2.45.1> ### [`v2.45.0`](https://github.com/dexidp/dex/releases/tag/v2.45.0) [Compare Source](https://github.com/dexidp/dex/compare/v2.44.0...v2.45.0)  #### Know Before Upgrade - The major version of `gomplate` has been bumped to v5.0.0, which includes breaking changes. Here is [the full list](https://github.com/hairyhenderson/gomplate/releases/tag/v5.0.0). - There are two known CVEs in the `gomplate` binary - `CVE-2025-68121` and `CVE-2026-25934`. `gomplate` is only used for preprocessing configuration files and is optional. Once the CVEs are fixed upstream, the version of gomplate in the dex image will be updated accordingly. - The `ContinueOnConnectorFailure` feature flag is now enabled by default. To disable it, use the following environment variable: `DEX_CONTINUE_ON_CONNECTOR_FAILURE=false`. - Pre-release versions of dex now use pseudo-versioning for identifying releases. Unreleased versions will follow the pattern `v2.minor+1.0-yyyymmdd-commithash`. #### What's Changed ##### Exciting New Features 🎉 - Add support to PKCE in OIDC connector by [@johnvan7](https://github.com/johnvan7) in [#3777](https://github.com/dexidp/dex/pull/3777) - Add Vault signer for JWT by [@nabokihms](https://github.com/nabokihms) in [#4512](https://github.com/dexidp/dex/pull/4512) - Support groups and preferred\_username for static passwords by [@Jabejixo](https://github.com/Jabejixo) in [#4456](https://github.com/dexidp/dex/pull/4456) - Add name and email\_verified fields for static passwords by [@Jabejixo](https://github.com/Jabejixo) in [#4526](https://github.com/dexidp/dex/pull/4526) ##### Enhancements 🚀 - Example app pkce by [@nabokihms](https://github.com/nabokihms) in [#4284](https://github.com/dexidp/dex/pull/4284) - Only wrap IPv6 addresses in brackets by [@rene-dekker](https://github.com/rene-dekker) in [#4388](https://github.com/dexidp/dex/pull/4388) - Update distroless base image to debian13 by [@loosebazooka](https://github.com/loosebazooka) in [#4453](https://github.com/dexidp/dex/pull/4453) - Hide internal server error details from users by [@Jabejixo](https://github.com/Jabejixo) in [#4457](https://github.com/dexidp/dex/pull/4457) - Gitlab support custom rootCAData by [@Jabejixo](https://github.com/Jabejixo) in [#4496](https://github.com/dexidp/dex/pull/4496) - Enable `ContinueOnConnectorFailure` feature flag by [@manojVivek](https://github.com/manojVivek) in [#4495](https://github.com/dexidp/dex/pull/4495) - Extend example configs for idEnv and public by [@cardoe](https://github.com/cardoe) in [#4443](https://github.com/dexidp/dex/pull/4443) - Add unprivileged user setup in Dockerfile by [@nabokihms](https://github.com/nabokihms) in [#4517](https://github.com/dexidp/dex/pull/4517) - Add conformance tests for Vault signer integration by [@nabokihms](https://github.com/nabokihms) in [#4520](https://github.com/dexidp/dex/pull/4520) - Add CRD handling behavior and configuration options by [@nabokihms](https://github.com/nabokihms) in [#4543](https://github.com/dexidp/dex/pull/4543) - Enhance git-version script to generate pseudo-versions by [@nabokihms](https://github.com/nabokihms) in [#4553](https://github.com/dexidp/dex/pull/4553) - Validate redirect URIs and safely append parameters by [@nabokihms](https://github.com/nabokihms) in [#4559](https://github.com/dexidp/dex/pull/4559) - Refactor example-app with a new config by [@nabokihms](https://github.com/nabokihms) in [#4569](https://github.com/dexidp/dex/pull/4569) - Implement device code flow in example-app by [@nabokihms](https://github.com/nabokihms) in [#4570](https://github.com/dexidp/dex/pull/4570) ##### Bug Fixes 🐛 - Do not wrap Kubernetes Address in brackets by [@nabokihms](https://github.com/nabokihms) in [#4363](https://github.com/dexidp/dex/pull/4363) - Device callback URL needs to handle a / by [@cardoe](https://github.com/cardoe) in [#4448](https://github.com/dexidp/dex/pull/4448) - Suppress deprecation warning for userAttr when not set by [@nabokihms](https://github.com/nabokihms) in [#4539](https://github.com/dexidp/dex/pull/4539) - Use correct id value for label by [@loganripplinger](https://github.com/loganripplinger) in [#4541](https://github.com/dexidp/dex/pull/4541) - Respond with forbidden if failed to authenticate by [@aljoshare](https://github.com/aljoshare) in [#4200](https://github.com/dexidp/dex/pull/4200) ##### Dependency Updates ⬆️ - build(deps): bump github.com/dexidp/dex/api/v2 from 2.3.0 to 2.4.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4299](https://github.com/dexidp/dex/pull/4299) - build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4304](https://github.com/dexidp/dex/pull/4304) - build(deps): bump aquasecurity/trivy-action from 0.33.0 to 0.33.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4305](https://github.com/dexidp/dex/pull/4305) - build(deps): bump golang from 1.25.0-alpine3.22 to 1.25.1-alpine3.22 by [@dependabot](https://github.com/dependabot)\[bot] in [#4307](https://github.com/dexidp/dex/pull/4307) - build(deps): bump distroless/static-debian12 from `a9f88e0` to `e8a4044` by [@dependabot](https://github.com/dependabot)\[bot] in [#4313](https://github.com/dexidp/dex/pull/4313) - build(deps): bump oras-project/setup-oras from 1.2.3 to 1.2.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#4314](https://github.com/dexidp/dex/pull/4314) - build(deps): bump github/codeql-action from 3.29.11 to 3.30.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#4320](https://github.com/dexidp/dex/pull/4320) - build(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4324](https://github.com/dexidp/dex/pull/4324) - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4302](https://github.com/dexidp/dex/pull/4302) - build(deps): bump github.com/prometheus/client\_golang from 1.23.0 to 1.23.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4309](https://github.com/dexidp/dex/pull/4309) - build(deps): bump tonistiigi/xx from 1.6.1 to 1.7.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4317](https://github.com/dexidp/dex/pull/4317) - build(deps): bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4310](https://github.com/dexidp/dex/pull/4310) - build(deps): bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4311](https://github.com/dexidp/dex/pull/4311) - build(deps): bump github/codeql-action from 3.30.3 to 3.30.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#4339](https://github.com/dexidp/dex/pull/4339) - build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9 by [@dependabot](https://github.com/dependabot)\[bot] in [#4335](https://github.com/dexidp/dex/pull/4335) - build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4334](https://github.com/dexidp/dex/pull/4334) - build(deps): bump anchore/sbom-action from 0.20.5 to 0.20.6 by [@dependabot](https://github.com/dependabot)\[bot] in [#4332](https://github.com/dexidp/dex/pull/4332) - build(deps): bump golang from 1.25.1-alpine3.22 to 1.25.3-alpine3.22 by [@dependabot](https://github.com/dependabot)\[bot] in [#4368](https://github.com/dexidp/dex/pull/4368) - build(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4366](https://github.com/dexidp/dex/pull/4366) - build(deps): bump github/codeql-action from 3.30.4 to 4.30.8 by [@dependabot](https://github.com/dependabot)\[bot] in [#4365](https://github.com/dexidp/dex/pull/4365) - build(deps): bump google.golang.org/api from 0.248.0 to 0.252.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4360](https://github.com/dexidp/dex/pull/4360) - build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4357](https://github.com/dexidp/dex/pull/4357) - build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#4350](https://github.com/dexidp/dex/pull/4350) - build(deps): bump docker/login-action from 3.5.0 to 3.6.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4348](https://github.com/dexidp/dex/pull/4348) - build(deps): bump actions/cache from 4.2.4 to 4.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4338](https://github.com/dexidp/dex/pull/4338) - build(deps): bump the etcd group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#4333](https://github.com/dexidp/dex/pull/4333) - build(deps): bump alpine from 3.22.1 to 3.22.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4361](https://github.com/dexidp/dex/pull/4361) - build(deps): bump github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4354](https://github.com/dexidp/dex/pull/4354) - build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4355](https://github.com/dexidp/dex/pull/4355) - build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4362](https://github.com/dexidp/dex/pull/4362) - build(deps): bump github/codeql-action from 4.30.8 to 4.31.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4398](https://github.com/dexidp/dex/pull/4398) - build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4395](https://github.com/dexidp/dex/pull/4395) - build(deps): bump anchore/sbom-action from 0.20.6 to 0.20.9 by [@dependabot](https://github.com/dependabot)\[bot] in [#4393](https://github.com/dexidp/dex/pull/4393) - build(deps): bump tonistiigi/xx from 1.7.0 to 1.8.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4386](https://github.com/dexidp/dex/pull/4386) - build(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4376](https://github.com/dexidp/dex/pull/4376) - build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 in /api/v2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4356](https://github.com/dexidp/dex/pull/4356) - build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4380](https://github.com/dexidp/dex/pull/4380) - build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4374](https://github.com/dexidp/dex/pull/4374) - build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#4373](https://github.com/dexidp/dex/pull/4373) - build(deps): bump golang from `20ee0b6` to `aee43c3` by [@dependabot](https://github.com/dependabot)\[bot] in [#4371](https://github.com/dexidp/dex/pull/4371) - build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4300](https://github.com/dexidp/dex/pull/4300) - build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4375](https://github.com/dexidp/dex/pull/4375) - build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.10 in /api/v2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4352](https://github.com/dexidp/dex/pull/4352) - build(deps): bump tonistiigi/xx from 1.8.0 to 1.9.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4430](https://github.com/dexidp/dex/pull/4430) - build(deps): bump distroless/static-debian12 from `e8a4044` to `2b7c93f` by [@dependabot](https://github.com/dependabot)\[bot] in [#4427](https://github.com/dexidp/dex/pull/4427) - build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4419](https://github.com/dexidp/dex/pull/4419) - build(deps): bump github/codeql-action from 4.31.2 to 4.31.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#4414](https://github.com/dexidp/dex/pull/4414) - build(deps): bump actions/dependency-review-action from 4.8.1 to 4.8.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4411](https://github.com/dexidp/dex/pull/4411) - build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4405](https://github.com/dexidp/dex/pull/4405) - build(deps): bump docker/metadata-action from 5.8.0 to 5.9.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4402](https://github.com/dexidp/dex/pull/4402) - build(deps): bump helm/kind-action from 1.12.0 to 1.13.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4399](https://github.com/dexidp/dex/pull/4399) - build(deps): bump alpine from 3.22.2 to 3.23.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4425](https://github.com/dexidp/dex/pull/4425) - build(deps): bump golang from 1.25.3-alpine3.22 to 1.25.5-alpine3.22 by [@dependabot](https://github.com/dependabot)\[bot] in [#4424](https://github.com/dexidp/dex/pull/4424) - build(deps): bump google.golang.org/api from 0.252.0 to 0.256.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4413](https://github.com/dexidp/dex/pull/4413) - build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4409](https://github.com/dexidp/dex/pull/4409) - build(deps): bump golang.org/x/crypto from 0.43.0 to 0.44.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4412](https://github.com/dexidp/dex/pull/4412) - build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.11 to 3.4.12 by [@dependabot](https://github.com/dependabot)\[bot] in [#4401](https://github.com/dexidp/dex/pull/4401) - build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.34.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4431](https://github.com/dexidp/dex/pull/4431) - build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4417](https://github.com/dexidp/dex/pull/4417) - build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 in /api/v2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4416](https://github.com/dexidp/dex/pull/4416) - build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4426](https://github.com/dexidp/dex/pull/4426) - build(deps): bump alpine from 3.23.0 to 3.23.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4455](https://github.com/dexidp/dex/pull/4455) - build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4460](https://github.com/dexidp/dex/pull/4460) - build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 by [@dependabot](https://github.com/dependabot)\[bot] in [#4449](https://github.com/dexidp/dex/pull/4449) - build(deps): bump github/codeql-action from 4.31.3 to 4.31.7 by [@dependabot](https://github.com/dependabot)\[bot] in [#4440](https://github.com/dexidp/dex/pull/4440) - build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4439](https://github.com/dexidp/dex/pull/4439) - build(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4438](https://github.com/dexidp/dex/pull/4438) - build(deps): bump actions/checkout from 5.0.0 to 6.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4437](https://github.com/dexidp/dex/pull/4437) - build(deps): bump anchore/sbom-action from 0.20.9 to 0.20.11 by [@dependabot](https://github.com/dependabot)\[bot] in [#4435](https://github.com/dexidp/dex/pull/4435) - build(deps): bump docker/metadata-action from 5.9.0 to 5.10.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4434](https://github.com/dexidp/dex/pull/4434) - build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4433](https://github.com/dexidp/dex/pull/4433) - build(deps): bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.17.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4441](https://github.com/dexidp/dex/pull/4441) - build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 in /api/v2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4450](https://github.com/dexidp/dex/pull/4450) - build(deps): bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4420](https://github.com/dexidp/dex/pull/4420) - build(deps): bump the etcd group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#4436](https://github.com/dexidp/dex/pull/4436) - build(deps): bump golang from 1.25.5-alpine3.22 to 1.25.6-alpine3.22 by [@dependabot](https://github.com/dependabot)\[bot] in [#4481](https://github.com/dexidp/dex/pull/4481) - build(deps): bump distroless/static-debian13 from `b5b9fd0` to `f9f84bd` by [@dependabot](https://github.com/dependabot)\[bot] in [#4468](https://github.com/dexidp/dex/pull/4468) - build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4476](https://github.com/dexidp/dex/pull/4476) - build(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4472](https://github.com/dexidp/dex/pull/4472) - build(deps): bump github.com/mattn/go-sqlite3 from 1.14.32 to 1.14.33 by [@dependabot](https://github.com/dependabot)\[bot] in [#4474](https://github.com/dexidp/dex/pull/4474) - build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4475](https://github.com/dexidp/dex/pull/4475) - build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4469](https://github.com/dexidp/dex/pull/4469) - build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4477](https://github.com/dexidp/dex/pull/4477) - build(deps): bump actions/cache from 4.3.0 to 5.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4473](https://github.com/dexidp/dex/pull/4473) - build(deps): bump github/codeql-action from 4.31.7 to 4.31.10 by [@dependabot](https://github.com/dependabot)\[bot] in [#4470](https://github.com/dexidp/dex/pull/4470) - build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4471](https://github.com/dexidp/dex/pull/4471) - build(deps): bump google.golang.org/api from 0.257.0 to 0.259.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4478](https://github.com/dexidp/dex/pull/4478) - build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 in /api/v2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4459](https://github.com/dexidp/dex/pull/4459) - build(deps): bump actions/cache from 5.0.1 to 5.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4484](https://github.com/dexidp/dex/pull/4484) - build(deps): bump golang from `d9c983d` to `ad295fc` by [@dependabot](https://github.com/dependabot)\[bot] in [#4493](https://github.com/dexidp/dex/pull/4493) - build(deps): bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4485](https://github.com/dexidp/dex/pull/4485) - build(deps): bump anchore/sbom-action from 0.20.11 to 0.22.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4487](https://github.com/dexidp/dex/pull/4487) - build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4489](https://github.com/dexidp/dex/pull/4489) - build(deps): bump github/codeql-action from 4.31.10 to 4.31.11 by [@dependabot](https://github.com/dependabot)\[bot] in [#4492](https://github.com/dexidp/dex/pull/4492) - build(deps): bump google.golang.org/api from 0.260.0 to 0.263.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4494](https://github.com/dexidp/dex/pull/4494) - build(deps): bump github.com/lib/pq from 1.10.9 to 1.11.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4505](https://github.com/dexidp/dex/pull/4505) - build(deps): bump actions/cache from 5.0.2 to 5.0.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#4504](https://github.com/dexidp/dex/pull/4504) - build(deps): bump github/codeql-action from 4.31.11 to 4.32.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4502](https://github.com/dexidp/dex/pull/4502) - build(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4501](https://github.com/dexidp/dex/pull/4501) - build(deps): bump anchore/sbom-action from 0.22.0 to 0.22.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4499](https://github.com/dexidp/dex/pull/4499) - build(deps): bump alpine from 3.23.2 to 3.23.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#4498](https://github.com/dexidp/dex/pull/4498) - build(deps): bump google.golang.org/api from 0.263.0 to 0.265.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4508](https://github.com/dexidp/dex/pull/4508) - build(deps): bump docker/login-action from 3.6.0 to 3.7.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4503](https://github.com/dexidp/dex/pull/4503) - build(deps): bump golang from 1.25.6-alpine3.22 to 1.25.7-alpine3.22 by [@dependabot](https://github.com/dependabot)\[bot] in [#4514](https://github.com/dexidp/dex/pull/4514) - build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4515](https://github.com/dexidp/dex/pull/4515) - build(deps): bump github/codeql-action from 4.32.0 to 4.32.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4509](https://github.com/dexidp/dex/pull/4509) - build(deps): bump anchore/sbom-action from 0.22.1 to 0.22.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4510](https://github.com/dexidp/dex/pull/4510) - build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4516](https://github.com/dexidp/dex/pull/4516) - build(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4518](https://github.com/dexidp/dex/pull/4518) - build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4519](https://github.com/dexidp/dex/pull/4519) - build(deps): bump google.golang.org/api from 0.265.0 to 0.266.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4523](https://github.com/dexidp/dex/pull/4523) - build(deps): bump docker/build-push-action from 6.18.0 to 6.19.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4530](https://github.com/dexidp/dex/pull/4530) - build(deps): bump golang from 1.25.7-alpine3.22 to 1.26.0-alpine3.22 by [@dependabot](https://github.com/dependabot)\[bot] in [#4522](https://github.com/dexidp/dex/pull/4522) - build(deps): bump github.com/mattn/go-sqlite3 from 1.14.33 to 1.14.34 by [@dependabot](https://github.com/dependabot)\[bot] in [#4524](https://github.com/dexidp/dex/pull/4524) - build(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4525](https://github.com/dexidp/dex/pull/4525) - build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4537](https://github.com/dexidp/dex/pull/4537) - build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4534](https://github.com/dexidp/dex/pull/4534) - build(deps): bump docker/build-push-action from 6.19.1 to 6.19.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4535](https://github.com/dexidp/dex/pull/4535) - build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4533](https://github.com/dexidp/dex/pull/4533) - build(deps): bump distroless/static-debian13 from `f9f84bd` to `01e550f` by [@dependabot](https://github.com/dependabot)\[bot] in [#4546](https://github.com/dexidp/dex/pull/4546) - build(deps): bump google.golang.org/grpc from 1.79.0 to 1.79.1 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4551](https://github.com/dexidp/dex/pull/4551) - build(deps): bump google.golang.org/grpc from 1.79.0 to 1.79.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4549](https://github.com/dexidp/dex/pull/4549) - build(deps): bump the etcd group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#4548](https://github.com/dexidp/dex/pull/4548) - build(deps): bump github/codeql-action from 4.32.2 to 4.32.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#4547](https://github.com/dexidp/dex/pull/4547) - build(deps): update gRPC to v1.79.1 and other dependencies by [@nabokihms](https://github.com/nabokihms) in [#4554](https://github.com/dexidp/dex/pull/4554) - build(deps): bump helm/kind-action from 1.13.0 to 1.14.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4557](https://github.com/dexidp/dex/pull/4557) - build(deps): bump google.golang.org/api from 0.266.0 to 0.267.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4558](https://github.com/dexidp/dex/pull/4558) - build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4562](https://github.com/dexidp/dex/pull/4562) - build(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#4563](https://github.com/dexidp/dex/pull/4563) - build(deps): bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4574](https://github.com/dexidp/dex/pull/4574) - build(deps): bump github/codeql-action from 4.32.3 to 4.32.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#4573](https://github.com/dexidp/dex/pull/4573) ##### Other Changes - Add Terrakube to Adopters by [@shurup](https://github.com/shurup) in [#4316](https://github.com/dexidp/dex/pull/4316) #### New Contributors - [@Zash](https://github.com/Zash) made their first contribution in [#4327](https://github.com/dexidp/dex/pull/4327) - [@rene-dekker](https://github.com/rene-dekker) made their first contribution in [#4388](https://github.com/dexidp/dex/pull/4388) - [@loosebazooka](https://github.com/loosebazooka) made their first contribution in [#4453](https://github.com/dexidp/dex/pull/4453) - [@Jabejixo](https://github.com/Jabejixo) made their first contribution in [#4456](https://github.com/dexidp/dex/pull/4456) - [@loganripplinger](https://github.com/loganripplinger) made their first contribution in [#4541](https://github.com/dexidp/dex/pull/4541) - [@johnvan7](https://github.com/johnvan7) made their first contribution in [#3777](https://github.com/dexidp/dex/pull/3777) - [@aljoshare](https://github.com/aljoshare) made their first contribution in [#4200](https://github.com/dexidp/dex/pull/4200) **Full Changelog**: <https://github.com/dexidp/dex/compare/v2.44.0...v2.45.0> ### [`v2.44.0`](https://github.com/dexidp/dex/releases/tag/v2.44.0) [Compare Source](https://github.com/dexidp/dex/compare/v2.43.1...v2.44.0)  #### What's Changed ##### Enhancements 🚀 - Allow server startup with partial connector failures by [@manojVivek](https://github.com/manojVivek) in [#4159](https://github.com/dexidp/dex/pull/4159) - Add recursive LDAP parent group search (AD-style hierarchy across all LDAPs) by [@EthanDieterich](https://github.com/EthanDieterich) in [#4113](https://github.com/dexidp/dex/pull/4113) - feat: Add ModifyGroupNames claimMutation to oidc connector by [@peschmae](https://github.com/peschmae) in [#4144](https://github.com/dexidp/dex/pull/4144) - authproxy connector: add support for specifying group header separator by [@a-buck](https://github.com/a-buck) in [#3745](https://github.com/dexidp/dex/pull/3745) - fix: join issuer URL with discovery path without extra slash after issuer URL by [@vizv](https://github.com/vizv) in [#4263](https://github.com/dexidp/dex/pull/4263) - feat: grpc api list clients by [@daemonfire300](https://github.com/daemonfire300) in [#4202](https://github.com/dexidp/dex/pull/4202) ##### Bug Fixes 🐛 - :bug: remove extra method="get" from device-code template by [@tuminoid](https://github.com/tuminoid) in [#4145](https://github.com/dexidp/dex/pull/4145) - \[oidc] pass httpClient to the TokenIdentity context by [@marriva](https://github.com/marriva) in [#4223](https://github.com/dexidp/dex/pull/4223) - Resolve CVE by updating gomplate to 4.3.3 by [@philBrown](https://github.com/philBrown) in [#4224](https://github.com/dexidp/dex/pull/4224) - fix: device code should not require scope by [@cardoe](https://github.com/cardoe) in [#4203](https://github.com/dexidp/dex/pull/4203) - fix: device code pending HTTP response by [@cardoe](https://github.com/cardoe) in [#4204](https://github.com/dexidp/dex/pull/4204) - Allow compilation without CGO by [@nabokihms](https://github.com/nabokihms) in [#4266](https://github.com/dexidp/dex/pull/4266) ##### Dependency Updates ⬆️ - Resolve CVE by updating gomplate to 4.3.2 by [@nathanlaceyraft](https://github.com/nathanlaceyraft) in [#4146](https://github.com/dexidp/dex/pull/4146) - build(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4180](https://github.com/dexidp/dex/pull/4180) - build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4171](https://github.com/dexidp/dex/pull/4171) - build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4174](https://github.com/dexidp/dex/pull/4174) - build(deps): bump github/codeql-action from 3.28.18 to 3.29.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4179](https://github.com/dexidp/dex/pull/4179) - build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4167](https://github.com/dexidp/dex/pull/4167) - build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4162](https://github.com/dexidp/dex/pull/4162) - build(deps): bump docker/build-push-action from 6.17.0 to 6.18.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4155](https://github.com/dexidp/dex/pull/4155) - build(deps): bump distroless/static-debian12 from `188ddfb` to `627d6c5` by [@dependabot](https://github.com/dependabot)\[bot] in [#4181](https://github.com/dexidp/dex/pull/4181) - build(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4187](https://github.com/dexidp/dex/pull/4187) - build(deps): bump google.golang.org/api from 0.233.0 to 0.238.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4186](https://github.com/dexidp/dex/pull/4186) - build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4185](https://github.com/dexidp/dex/pull/4185) - build(deps): bump anchore/sbom-action from 0.20.0 to 0.20.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4184](https://github.com/dexidp/dex/pull/4184) - build(deps): bump github.com/go-sql-driver/mysql from 1.9.2 to 1.9.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#4183](https://github.com/dexidp/dex/pull/4183) - build(deps): bump the etcd group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#4175](https://github.com/dexidp/dex/pull/4175) - build(deps): bump alpine from 3.21.3 to 3.22.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4163](https://github.com/dexidp/dex/pull/4163) - build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /api/v2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4170](https://github.com/dexidp/dex/pull/4170) - build(deps): bump docker/setup-buildx-action from 3.11.0 to 3.11.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4189](https://github.com/dexidp/dex/pull/4189) - build(deps): bump mheap/github-action-required-labels from 5.5.0 to 5.5.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4190](https://github.com/dexidp/dex/pull/4190) - build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4219](https://github.com/dexidp/dex/pull/4219) - build(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4205](https://github.com/dexidp/dex/pull/4205) - build(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4225](https://github.com/dexidp/dex/pull/4225) - build(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4210](https://github.com/dexidp/dex/pull/4210) - build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4196](https://github.com/dexidp/dex/pull/4196) - build(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4214](https://github.com/dexidp/dex/pull/4214) - build(deps): bump alpine from 3.22.0 to 3.22.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4217](https://github.com/dexidp/dex/pull/4217) - build(deps): bump the etcd group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#4213](https://github.com/dexidp/dex/pull/4213) - build(deps): bump github.com/oklog/run from 1.1.0 to 1.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4199](https://github.com/dexidp/dex/pull/4199) - build(deps): bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.29 by [@dependabot](https://github.com/dependabot)\[bot] in [#4239](https://github.com/dexidp/dex/pull/4239) - build(deps): bump github/codeql-action from 3.29.0 to 3.29.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#4238](https://github.com/dexidp/dex/pull/4238) - build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4235](https://github.com/dexidp/dex/pull/4235) - build(deps): bump the etcd group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#4233](https://github.com/dexidp/dex/pull/4233) - build(deps): bump google.golang.org/grpc from 1.74.0 to 1.74.2 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4232](https://github.com/dexidp/dex/pull/4232) - build(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#4229](https://github.com/dexidp/dex/pull/4229) - build(deps): bump google.golang.org/api from 0.238.0 to 0.243.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4234](https://github.com/dexidp/dex/pull/4234) - build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4227](https://github.com/dexidp/dex/pull/4227) - build(deps): bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.15.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4246](https://github.com/dexidp/dex/pull/4246) - build(deps): bump the etcd group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#4243](https://github.com/dexidp/dex/pull/4243) - build(deps): bump distroless/static-debian12 from `627d6c5` to `cdf4daa` by [@dependabot](https://github.com/dependabot)\[bot] in [#4253](https://github.com/dexidp/dex/pull/4253) - build(deps): bump docker/metadata-action from 5.7.0 to 5.8.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4252](https://github.com/dexidp/dex/pull/4252) - build(deps): bump github.com/mattn/go-sqlite3 from 1.14.29 to 1.14.30 by [@dependabot](https://github.com/dependabot)\[bot] in [#4249](https://github.com/dexidp/dex/pull/4249) - build(deps): bump github/codeql-action from 3.29.4 to 3.29.5 by [@dependabot](https://github.com/dependabot)\[bot] in [#4244](https://github.com/dexidp/dex/pull/4244) - build(deps): bump google.golang.org/api from 0.243.0 to 0.244.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4247](https://github.com/dexidp/dex/pull/4247) - build(deps): bump docker/login-action from 3.4.0 to 3.5.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4254](https://github.com/dexidp/dex/pull/4254) - build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4255](https://github.com/dexidp/dex/pull/4255) - build(deps): bump github.com/prometheus/client\_golang from 1.22.0 to 1.23.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4257](https://github.com/dexidp/dex/pull/4257) - build(deps): bump google.golang.org/api from 0.244.0 to 0.246.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4258](https://github.com/dexidp/dex/pull/4258) - build(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 by [@dependabot](https://github.com/dependabot)\[bot] in [#4272](https://github.com/dexidp/dex/pull/4272) - build(deps): bump github.com/mattn/go-sqlite3 from 1.14.30 to 1.14.32 by [@dependabot](https://github.com/dependabot)\[bot] in [#4271](https://github.com/dexidp/dex/pull/4271) - build(deps): bump github/codeql-action from 3.29.7 to 3.29.9 by [@dependabot](https://github.com/dependabot)\[bot] in [#4269](https://github.com/dexidp/dex/pull/4269) - build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4267](https://github.com/dexidp/dex/pull/4267) - build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4262](https://github.com/dexidp/dex/pull/4262) - build(deps): bump actions/cache from 4.2.3 to 4.2.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#4261](https://github.com/dexidp/dex/pull/4261) - build(deps): bump cloud.google.com/go/compute/metadata from 0.7.0 to 0.8.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4259](https://github.com/dexidp/dex/pull/4259) - build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by [@dependabot](https://github.com/dependabot)\[bot] in [#4275](https://github.com/dexidp/dex/pull/4275) - build(deps): bump google.golang.org/api from 0.246.0 to 0.247.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4274](https://github.com/dexidp/dex/pull/4274) - chore: update ent generated code by [@sagikazarmark](https://github.com/sagikazarmark) in [#4276](https://github.com/dexidp/dex/pull/4276) - feat: update Go to 1.25 by [@sagikazarmark](https://github.com/sagikazarmark) in [#4277](https://github.com/dexidp/dex/pull/4277) - build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 in /api/v2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4236](https://github.com/dexidp/dex/pull/4236) - build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 in /api/v2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4260](https://github.com/dexidp/dex/pull/4260) - build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4278](https://github.com/dexidp/dex/pull/4278) - build(deps): bump distroless/static-debian12 from `cdf4daa` to `a9f88e0` by [@dependabot](https://github.com/dependabot)\[bot] in [#4291](https://github.com/dexidp/dex/pull/4291) - build(deps): bump github.com/beevik/etree from 1.5.1 to 1.6.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4288](https://github.com/dexidp/dex/pull/4288) - build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by [@dependabot](https://github.com/dependabot)\[bot] in [#4287](https://github.com/dexidp/dex/pull/4287) - build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 in /examples by [@dependabot](https://github.com/dependabot)\[bot] in [#4282](https://github.com/dexidp/dex/pull/4282) - build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4281](https://github.com/dexidp/dex/pull/4281) - build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 in /api/v2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4280](https://github.com/dexidp/dex/pull/4280) - build(deps): bump google.golang.org/api from 0.247.0 to 0.248.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4283](https://github.com/dexidp/dex/pull/4283) - build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 by [@dependabot](https://github.com/dependabot)\[bot] in [#4285](https://github.com/dexidp/dex/pull/4285) - build(deps): bump actions/dependency-review-action from 4.7.2 to 4.7.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#4290](https://github.com/dexidp/dex/pull/4290) - build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 in /api/v2 by [@dependabot](https://github.com/dependabot)\[bot] in [#4286](https://github.com/dexidp/dex/pull/4286) - build(deps): bump actions/attest-build-provenance from 2.4.0 to 3.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4296](https://github.com/dexidp/dex/pull/4296) - build(deps): bump aquasecurity/trivy-action from 0.32.0 to 0.33.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#4293](https://github.com/dexidp/dex/pull/4293) - build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#4292](https://github.com/dexidp/dex/pull/4292) #### New Contributors - [@nathanlaceyraft](https://github.com/nathanlaceyraft) made their first contribution in [#4146](https://github.com/dexidp/dex/pull/4146) - [@manojVivek](https://github.com/manojVivek) made their first contribution in [#4159](https://github.com/dexidp/dex/pull/4159) - [@marriva](https://github.com/marriva) made their first contribution in [#4223](https://github.com/dexidp/dex/pull/4223) - [@peschmae](https://github.com/peschmae) made their first contribution in [#4144](https://github.com/dexidp/dex/pull/4144) - [@philBrown](https://github.com/philBrown) made their first contribution in [#4224](https://github.com/dexidp/dex/pull/4224) - [@a-buck](https://github.com/a-buck) made their first contribution in [#3745](https://github.com/dexidp/dex/pull/3745) - [@vizv](https://github.com/vizv) made their first contribution in [#4263](https://github.com/dexidp/dex/pull/4263) - [@daemonfire300](https://github.com/daemonfire300) made their first contribution in [#4202](https://github.com/dexidp/dex/pull/4202) **Full Changelog**: <https://github.com/dexidp/dex/compare/v2.43.0...v2.44.0> ### [`v2.43.1`](https://github.com/dexidp/dex/releases/tag/v2.43.1) [Compare Source](https://github.com/dexidp/dex/compare/v2.43.0...v2.43.1)  #### What's Changed ##### Dependency Updates ⬆️ - Backport [#4146](https://github.com/dexidp/dex/issues/4146) to 2.43.x by [@sagikazarmark](https://github.com/sagikazarmark) in [#4148](https://github.com/dexidp/dex/pull/4148) **Full Changelog**: <https://github.com/dexidp/dex/compare/v2.43.0...v2.43.1> ### [`v2.43.0`](https://github.com/dexidp/dex/releases/tag/v2.43.0) [Compare Source](https://github.com/dexidp/dex/compare/v2.42.1...v2.43.0)  #### What's Changed ##### Enhancements 🚀 - Generate access tokens for implicit & hybrid flows only when needed by [@mfila](https://github.com/mfila) in [#3857](https://github.com/dexidp/dex/pull/3857) - k8s storage: Request only one object to check if API exists by [@nabokihms](https://github.com/nabokihms) in [#4027](https://github.com/dexidp/dex/pull/4027) - refactor: simplify tests by using slog.DiscardHandler by [@alexandear](https://github.com/alexandear) in [#4058](https://github.com/dexidp/dex/pull/4058) ##### Bug Fixes 🐛 - Fix Makefile to Support Spaces in Paths by [@EthanDieterich](https://github.com/EthanDieterich) in [#4000](https://github.com/dexidp/dex/pull/4000) - fix: remove version controlled files from dockerignore by [@sagikazarmark](https://github.com/sagikazarmark) in [#4087](https://github.com/dexidp/dex/pull/4087) - fix Incorrect Group Handling in RequestContextHandler logger.go by [@alihasan070707](https://github.com/alihasan070707) in [#4082](https://github.com/dexidp/dex/pull/4082) ##### Dependency Updates ⬆️ - build(deps): bump actions/cache from 4.2.0 to 4.2.1 by [@dependabot](https://github.com/dependabot) in [#3998](https://github.com/dexidp/dex/pull/3998) - build(deps): bump docker/build-push-action from 6.13.0 to 6.14.0 by [@dependabot](https://github.com/dependabot) in [#3997](https://github.com/dexidp/dex/pull/3997) - build(deps): bump github.com/dexidp/dex/api/v2 from 2.2.0 to 2.3.0 in /examples by [@dependabot](https://github.com/dependabot) in [#3996](https://github.com/dexidp/dex/pull/3996) - build(deps): bump github.com/prometheus/client\_golang from 1.20.5 to 1.21.0 by [@dependabot](https://github.com/dependabot) in [#3995](https://github.com/dexidp/dex/pull/3995) - build(deps): bump google.golang.org/api from 0.221.0 to 0.222.0 by [@dependabot](https://github.com/dependabot) in [#3994](https://github.com/dexidp/dex/pull/3994) - build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go\_modules group by [@dependabot](https://github.com/dependabot) in [#4008](https://github.com/dexidp/dex/pull/4008) - build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 in /examples in the go\_modules group by [@dependabot](https://github.com/dependabot) in [#4007](https://github.com/dexidp/dex/pull/4007) - build(deps): bump golang from 1.24.0-alpine3.20 to 1.24.1-alpine3.20 by [@dependabot](https://github.com/dependabot) in [#4021](https://github.com/dexidp/dex/pull/4021) - build(deps): bump sigstore/cosign-installer from 3.8.0 to 3.8.1 by [@dependabot](https://github.com/dependabot) in [#4001](https://github.com/dexidp/dex/pull/4001) - build(deps): bump github/codeql-action from 3.28.9 to 3.28.11 by [@dependabot](https://github.com/dependabot) in [#4038](https://github.com/dexidp/dex/pull/4038) - build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 in the go\_modules group by [@dependabot](https://github.com/dependabot) in [#4043](https://github.com/dexidp/dex/pull/4043) - build(deps): bump distroless/static-debian12 from `6ec5aa9` to `b35229a` by [@dependabot](https://github.com/dependabot) in [#4052](https://github.com/dexidp/dex/pull/4052) - build(deps): bump google.golang.org/api from 0.222.0 to 0.228.0 by [@dependabot](https://github.com/dependabot) in [#4059](https://github.com/dexidp/dex/pull/4059) - build(deps): bump distroless/static-debian12 from `b35229a` to `c0f429e` by [@dependabot](https://github.com/dependabot) in [#4062](https://github.com/dexidp/dex/pull/4062) - build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 by [@dependabot](https://github.com/dependabot) in [#4060](https://github.com/dexidp/dex/pull/4060) - build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.2 by [@dependabot](https://github.com/dependabot) in [#4053](https://github.com/dexidp/dex/pull/4053) - build(deps): bump docker/build-push-action from 6.14.0 to 6.15.0 by [@dependabot](https://github.com/dependabot) in [#4039](https://github.com/dexidp/dex/pull/4039) - build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.1 by [@dependabot](https://github.com/dependabot) in [#4064](https://github.com/dexidp/dex/pull/4064) - build(deps): bump docker/setup-qemu-action from 3.4.0 to 3.6.0 by [@dependabot](https://github.com/dependabot) in [#4031](https://github.com/dexidp/dex/pull/4031) - build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by [@dependabot](https://github.com/dependabot) in [#4005](https://github.com/dexidp/dex/pull/4005) - build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by [@dependabot](https://github.com/dependabot) in [#4014](https://github.com/dexidp/dex/pull/4014) - build(deps): bump github.com/prometheus/client\_golang from 1.21.0 to 1.22.0 by [@dependabot](https://github.com/dependabot) in [#4083](https://github.com/dexidp/dex/pull/4083) - build(deps): bump github.com/go-sql-driver/mysql from 1.9.0 to 1.9.2 by [@dependabot](https://github.com/dependabot) in [#4080](https://github.com/dexidp/dex/pull/4080) - build(deps): bump golang from 1.24.1-alpine3.20 to 1.24.2-alpine3.20 by [@dependabot](https://github.com/dependabot) in [#4079](https://github.com/dexidp/dex/pull/4079) - build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.18 to 3.5.21 by [@dependabot](https://github.com/dependabot) in [#4074](https://github.com/dexidp/dex/pull/4074) - build(deps): bump actions/cache from 4.2.1 to 4.2.3 by [@dependabot](https://github.com/dependabot) in [#4072](https://github.com/dexidp/dex/pull/4072) - build(deps): bump actions/attest-build-provenance from 2.2.0 to 2.2.3 by [@dependabot](https://github.com/dependabot) in [#4071](https://github.com/dexidp/dex/pull/4071) - build(deps): bump docker/login-action from 3.3.0 to 3.4.0 by [@dependabot](https://github.com/dependabot) in [#4070](https://github.com/dexidp/dex/pull/4070) - build(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by [@dependabot](https://github.com/dependabot) in [#4069](https://github.com/dexidp/dex/pull/4069) - build(deps): bump docker/metadata-action from 5.6.1 to 5.7.0 by [@dependabot](https://github.com/dependabot) in [#4068](https://github.com/dexidp/dex/pull/4068) - build(deps): bump github.com/russellhaering/goxmldsig from 1.4.0 to 1.5.0 by [@dependabot](https://github.com/dependabot) in [#4073](https://github.com/dexidp/dex/pull/4073) - build(deps): bump github.com/beevik/etree from 1.5.0 to 1.5.1 by [@dependabot](https://github.com/dependabot) in [#4096](https://github.com/dexidp/dex/pull/4096) - build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by [@dependabot](https://github.com/dependabot) in [#4095](https://github.com/dexidp/dex/pull/4095) - build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.10 to 3.4.11 by [@dependabot](https://github.com/dependabot) in [#4093](https://github.com/dexidp/dex/pull/4093) - build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by [@dependabot](https://github.com/dependabot) in [#4092](https://github.com/dexidp/dex/pull/4092) - build(deps): bump github/codeql-action from 3.28.11 to 3.28.15 by [@dependabot](https://github.com/dependabot) in [#4091](https://github.com/dexidp/dex/pull/4091) - build(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 by [@dependabot](https://github.com/dependabot) in [#4090](https://github.com/dexidp/dex/pull/4090) - build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by [@dependabot](https://github.com/dependabot) in [#4094](https://github.com/dexidp/dex/pull/4094) - build(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by [@dependabot](https://github.com/dependabot) in [#4116](https://github.com/dexidp/dex/pull/4116) - build(deps): bump google.golang.org/api from 0.228.0 to 0.231.0 by [@dependabot](https://github.com/dependabot) in [#4114](https://github.com/dexidp/dex/pull/4114) - build(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by [@dependabot](https://github.com/dependabot) in [#4111](https://github.com/dexidp/dex/pull/4111) - build(deps): bump anchore/sbom-action from 0.18.0 to 0.19.0 by [@dependabot](https://github.com/dependabot) in [#4109](https://github.com/dexidp/dex/pull/4109) - build(deps): bump docker/build-push-action from 6.15.0 to 6.16.0 by [@dependabot](https://github.com/dependabot) in [#4108](https://github.com/dexidp/dex/pull/4108) - build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 by [@dependabot](https://github.com/dependabot) in [#4101](https://github.com/dexidp/dex/pull/4101) - build(deps): bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by [@dependabot](https://github.com/dependabot) in [#4105](https://github.com/dexidp/dex/pull/4105) - build(deps): bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.14.1 by [@dependabot](https://github.com/dependabot) in [#4099](https://github.com/dexidp/dex/pull/4099) - build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.0 by [@dependabot](https://github.com/dependabot) in [#4100](https://github.com/dexidp/dex/pull/4100) - build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /api/v2 by [@dependabot](https://github.com/dependabot) in [#4057](https://github.com/dexidp/dex/pull/4057) - build(deps): bump golang from 1.24.2-alpine3.20 to 1.24.3-alpine3.20 by [@dependabot](https://github.com/dependabot) in [#4124](https://github.com/dexidp/dex/pull/4124) - build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by [@dependabot](https://github.com/dependabot) in [#4122](https://github.com/dexidp/dex/pull/4122) - build(deps): bump oras-project/setup-oras from 1.2.2 to 1.2.3 by [@dependabot](https://github.com/dependabot) in [#4119](https://github.com/dexidp/dex/pull/4119) - build(deps): bump google.golang.org/api from 0.231.0 to 0.232.0 by [@dependabot](https://github.com/dependabot) in [#4120](https://github.com/dexidp/dex/pull/4120) - build(deps): bump github.com/mattn/go-sqlite3 from 1.14.24 to 1.14.28 by [@dependabot](https://github.com/dependabot) in [#4123](https://github.com/dexidp/dex/pull/4123) - build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by [@dependabot](https://github.com/dependabot) in [#4121](https://github.com/dexidp/dex/pull/4121) - build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.0 by [@dependabot](https://github.com/dependabot) in [#4127](https://github.com/dexidp/dex/pull/4127) - build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by [@dependabot](https://github.com/dependabot) in [#4126](https://github.com/dexidp/dex/pull/4126) - build(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0 by [@dependabot](https://github.com/dependabot) in [#4132](https://github.com/dexidp/dex/pull/4132) - build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 by [@dependabot](https://github.com/dependabot) in [#4131](https://github.com/dexidp/dex/pull/4131) - build(deps): bump cloud.google.com/go/compute/metadata from 0.6.0 to 0.7.0 by [@dependabot](https://github.com/dependabot) in [#4130](https://github.com/dexidp/dex/pull/4130) - build(deps): bump actions/dependency-review-action from 4.7.0 to 4.7.1 by [@dependabot](https://github.com/dependabot) in [#4128](https://github.com/dexidp/dex/pull/4128) - build(deps): bump google.golang.org/api from 0.232.0 to 0.233.0 by [@dependabot](https://github.com/dependabot) in [#4129](https://github.com/dexidp/dex/pull/4129) - build(deps): bump distroless/static-debian12 from `c0f429e` to `188ddfb` by [@dependabot](https://github.com/dependabot) in [#4140](https://github.com/dexidp/dex/pull/4140) - build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by [@dependabot](https://github.com/dependabot) in [#4139](https://github.com/dexidp/dex/pull/4139) - build(deps): bump docker/build-push-action from 6.16.0 to 6.17.0 by [@dependabot](https://github.com/dependabot) in [#4135](https://github.com/dexidp/dex/pull/4135) - build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.21 to 3.6.0 by [@dependabot](https://github.com/dependabot) in [#4136](https://github.com/dexidp/dex/pull/4136) - chore: update dependencies by [@sagikazarmark](https://github.com/sagikazarmark) in [#4141](https://github.com/dexidp/dex/pull/4141) #### New Contributors - [@mfila](https://github.com/mfila) made their first contribution in [#3857](https://github.com/dexidp/dex/pull/3857) - [@EthanDieterich](https://github.com/EthanDieterich) made their first contribution in [#4000](https://github.com/dexidp/dex/pull/4000) - [@alexandear](https://github.com/alexandear) made their first contribution in [#4058](https://github.com/dexidp/dex/pull/4058) - [@shurup](https://github.com/shurup) made their first contribution in [#4097](https://github.com/dexidp/dex/pull/4097) - [@alihasan070707](https://github.com/alihasan070707) made their first contribution in [#4082](https://github.com/dexidp/dex/pull/4082) **Full Changelog**: <https://github.com/dexidp/dex/compare/v2.42.0...v2.43.0> ### [`v2.42.1`](https://github.com/dexidp/dex/releases/tag/v2.42.1) [Compare Source](https://github.com/dexidp/dex/compare/v2.42.0...v2.42.1)  #### What's Changed ##### Bug Fixes 🐛 - fix: remove version controlled files from dockerignore by [@sagikazarmark](https://github.com/sagikazarmark) in [#4089](https://github.com/dexidp/dex/pull/4089) **Full Changelog**: <https://github.com/dexidp/dex/compare/v2.42.0...v2.42.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

sa-renovate added 1 commit

2026-03-17 10:18:55 +00:00

chore(deps): update ghcr.io/dexidp/dex docker tag to v2.45.1

PR Labeling / size-label (pull_request_target) Failing after 1s

Details

PR Labeling / triage (pull_request_target) Failing after 1s

Details

Lint PR / Validate PR title (pull_request_target) Failing after 1s

Details

f021ecfc72

Signed-off-by: sa-renovate <renovate@buildth.ing>

PR Labeling / size-label (pull_request_target) Failing after 1s

Details

PR Labeling / triage (pull_request_target) Failing after 1s

Details

Lint PR / Validate PR title (pull_request_target) Failing after 1s

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin renovate/ghcr.io-dexidp-dex-2.x:renovate/ghcr.io-dexidp-dex-2.x

git switch renovate/ghcr.io-dexidp-dex-2.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff renovate/ghcr.io-dexidp-dex-2.x

git switch renovate/ghcr.io-dexidp-dex-2.x

git rebase main

git switch main

git merge --ff-only renovate/ghcr.io-dexidp-dex-2.x

git switch renovate/ghcr.io-dexidp-dex-2.x

git rebase main

git switch main

git merge --no-ff renovate/ghcr.io-dexidp-dex-2.x

git switch main

git merge --squash renovate/ghcr.io-dexidp-dex-2.x

git switch main

git merge --ff-only renovate/ghcr.io-dexidp-dex-2.x

git switch main

git merge renovate/ghcr.io-dexidp-dex-2.x

git push origin main

No reviewers

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

DevFW-CICD/argocd-helm!5

No description provided.

Rows
Columns