What's Changed

Exciting New Features 🎉

• feat: also allow localhost equivalent IP addresses by @dsonck92 in https://github.com/dexidp/dex/pull/3778

Enhancements 🚀

• Added Discovery to grpc by @koendelaat in https://github.com/dexidp/dex/pull/3598
• feat(metrics): add response_size, request_duration histograms by @IvoGoman in https://github.com/dexidp/dex/pull/3748
• Handle root path better (than nothing) by @nabokihms in https://github.com/dexidp/dex/pull/3747
• Support base64 encoded and PEM encoded certs by @nabokihms in https://github.com/dexidp/dex/pull/3751
• GitLab connector: add GitLab additional group with role by @zvlb in https://github.com/dexidp/dex/pull/2941
• OIDC Connector: Support for IssuerAlias and group claims with maps instead of strings by @meldsza in https://github.com/dexidp/dex/pull/3676
• Add CSS for example app to make it prettier by @nabokihms in https://github.com/dexidp/dex/pull/3886
• feat: set resource revision for connectors by @nrwiersma in https://github.com/dexidp/dex/pull/3868
• Add authproxy preferred_username header by @kotx in https://github.com/dexidp/dex/pull/3950
• Passing context storage by @bobmaertz in https://github.com/dexidp/dex/pull/3941

Bug Fixes 🐛

• Fix scheme for DialURL ldap connection by @nabokihms in https://github.com/dexidp/dex/pull/3677
• Change workdir for gomplate by @nabokihms in https://github.com/dexidp/dex/pull/3684
• fix unmarshaling of expanded environment variables with special characters by @tuminoid in https://github.com/dexidp/dex/pull/3770
• saml connector: fix nil pointer PANIC on validate saml by @siarhei-haurylau in https://github.com/dexidp/dex/pull/3793
• fix: update enhancement proposal link by @emmanuel-ferdman in https://github.com/dexidp/dex/pull/3755
• Create offline sessions if approval is skipped by @nabokihms in https://github.com/dexidp/dex/pull/3828

Dependency Updates ⬆️

• build(deps): bump golang from 1.22.5-alpine3.20 to 1.23.1-alpine3.20 by @dependabot in https://github.com/dexidp/dex/pull/3728
• build(deps): bump alpine from 3.20.2 to 3.20.3 by @dependabot in https://github.com/dexidp/dex/pull/3729
• build(deps): bump golang.org/x/net from 0.27.0 to 0.29.0 by @dependabot in https://github.com/dexidp/dex/pull/3726
• build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.23.0 in /examples by @dependabot in https://github.com/dexidp/dex/pull/3722
• build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.3 by @dependabot in https://github.com/dexidp/dex/pull/3727
• build(deps): bump google.golang.org/grpc from 1.65.0 to 1.66.1 in /examples by @dependabot in https://github.com/dexidp/dex/pull/3731
• build(deps): bump distroless/static-debian12 from 8dd8d3c to 42d15c6 by @dependabot in https://github.com/dexidp/dex/pull/3724
• build(deps): bump tonistiigi/xx from 1.4.0 to 1.5.0 by @dependabot in https://github.com/dexidp/dex/pull/3705
• build(deps): bump google.golang.org/api from 0.190.0 to 0.196.0 by @dependabot in https://github.com/dexidp/dex/pull/3721
• build(deps): bump docker/build-push-action from 6.5.0 to 6.7.0 by @dependabot in https://github.com/dexidp/dex/pull/3696
• build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.23.0 by @dependabot in https://github.com/dexidp/dex/pull/3723
• build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by @dependabot in https://github.com/dexidp/dex/pull/3685
• build(deps): bump actions/upload-artifact from 4.3.4 to 4.4.0 by @dependabot in https://github.com/dexidp/dex/pull/3720
• build(deps): bump github.com/dexidp/dex/api/v2 from 2.1.0 to 2.2.0 in /examples by @dependabot in https://github.com/dexidp/dex/pull/3734
• build(deps): bump mheap/github-action-required-labels from 5.4.1 to 5.4.2 by @dependabot in https://github.com/dexidp/dex/pull/3735
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.22 to 1.14.23 by @dependabot in https://github.com/dexidp/dex/pull/3738
• build(deps): bump google.golang.org/grpc from 1.66.0 to 1.66.2 by @dependabot in https://github.com/dexidp/dex/pull/3742
• build(deps): bump distroless/static-debian12 from 42d15c6 to dcd3f1f by @dependabot in https://github.com/dexidp/dex/pull/3754
• build(deps): bump anchore/sbom-action from 0.17.0 to 0.17.2 by @dependabot in https://github.com/dexidp/dex/pull/3746
• build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0 by @dependabot in https://github.com/dexidp/dex/pull/3753
• build(deps): bump aquasecurity/trivy-action from 0.24.0 to 0.28.0 by @dependabot in https://github.com/dexidp/dex/pull/3797
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.13 by @dependabot in https://github.com/dexidp/dex/pull/3795

New Contributors

• @hur made their first contribution in https://github.com/dexidp/dex/pull/3700
• @koendelaat made their first contribution in https://github.com/dexidp/dex/pull/3598
• @IvoGoman made their first contribution in https://github.com/dexidp/dex/pull/3748
• @dsonck92 made their first contribution in https://github.com/dexidp/dex/pull/3778
• @siarhei-haurylau made their first contribution in https://github.com/dexidp/dex/pull/3793
• @emmanuel-ferdman made their first contribution in https://github.com/dexidp/dex/pull/3755
• @zvlb made their first contribution in https://github.com/dexidp/dex/pull/2941
• @meldsza made their first contribution in https://github.com/dexidp/dex/pull/3676
• @nrwiersma made their first contribution in https://github.com/dexidp/dex/pull/3868
• @JanMkl made their first contribution in https://github.com/dexidp/dex/pull/3930
• @kotx made their first contribution in https://github.com/dexidp/dex/pull/3950
• @bobmaertz made their first contribution in https://github.com/dexidp/dex/pull/3941

Full Changelog: https://github.com/dexidp/dex/compare/v2.41.0...v2.42.0