New
v2.43.0
What's Changed
Enhancements 🚀
- Generate access tokens for implicit & hybrid flows only when needed by @mfila in https://github.com/dexidp/dex/pull/3857
- k8s storage: Request only one object to check if API exists by @nabokihms in https://github.com/dexidp/dex/pull/4027
- refactor: simplify tests by using slog.DiscardHandler by @alexandear in https://github.com/dexidp/dex/pull/4058
Bug Fixes 🐛
- Fix Makefile to Support Spaces in Paths by @EthanDieterich in https://github.com/dexidp/dex/pull/4000
- fix: remove version controlled files from dockerignore by @sagikazarmark in https://github.com/dexidp/dex/pull/4087
- fix Incorrect Group Handling in RequestContextHandler logger.go by @alihasan070707 in https://github.com/dexidp/dex/pull/4082
Dependency Updates ⬆️
- build(deps): bump actions/cache from 4.2.0 to 4.2.1 by @dependabot in https://github.com/dexidp/dex/pull/3998
- build(deps): bump docker/build-push-action from 6.13.0 to 6.14.0 by @dependabot in https://github.com/dexidp/dex/pull/3997
- build(deps): bump github.com/dexidp/dex/api/v2 from 2.2.0 to 2.3.0 in /examples by @dependabot in https://github.com/dexidp/dex/pull/3996
- build(deps): bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @dependabot in https://github.com/dexidp/dex/pull/3995
- build(deps): bump google.golang.org/api from 0.221.0 to 0.222.0 by @dependabot in https://github.com/dexidp/dex/pull/3994
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group by @dependabot in https://github.com/dexidp/dex/pull/4008
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 in /examples in the go_modules group by @dependabot in https://github.com/dexidp/dex/pull/4007
- build(deps): bump golang from 1.24.0-alpine3.20 to 1.24.1-alpine3.20 by @dependabot in https://github.com/dexidp/dex/pull/4021
- build(deps): bump sigstore/cosign-installer from 3.8.0 to 3.8.1 by @dependabot in https://github.com/dexidp/dex/pull/4001
- build(deps): bump github/codeql-action from 3.28.9 to 3.28.11 by @dependabot in https://github.com/dexidp/dex/pull/4038
- build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 in the go_modules group by @dependabot in https://github.com/dexidp/dex/pull/4043
- build(deps): bump distroless/static-debian12 from
6ec5aa9tob35229aby @dependabot in https://github.com/dexidp/dex/pull/4052 - build(deps): bump google.golang.org/api from 0.222.0 to 0.228.0 by @dependabot in https://github.com/dexidp/dex/pull/4059
- build(deps): bump distroless/static-debian12 from
b35229atoc0f429eby @dependabot in https://github.com/dexidp/dex/pull/4062 - build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 by @dependabot in https://github.com/dexidp/dex/pull/4060
- build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.2 by @dependabot in https://github.com/dexidp/dex/pull/4053
- build(deps): bump docker/build-push-action from 6.14.0 to 6.15.0 by @dependabot in https://github.com/dexidp/dex/pull/4039
- build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.1 by @dependabot in https://github.com/dexidp/dex/pull/4064
- build(deps): bump docker/setup-qemu-action from 3.4.0 to 3.6.0 by @dependabot in https://github.com/dexidp/dex/pull/4031
- build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @dependabot in https://github.com/dexidp/dex/pull/4005
- build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @dependabot in https://github.com/dexidp/dex/pull/4014
- build(deps): bump github.com/prometheus/client_golang from 1.21.0 to 1.22.0 by @dependabot in https://github.com/dexidp/dex/pull/4083
- build(deps): bump github.com/go-sql-driver/mysql from 1.9.0 to 1.9.2 by @dependabot in https://github.com/dexidp/dex/pull/4080
- build(deps): bump golang from 1.24.1-alpine3.20 to 1.24.2-alpine3.20 by @dependabot in https://github.com/dexidp/dex/pull/4079
- build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.18 to 3.5.21 by @dependabot in https://github.com/dexidp/dex/pull/4074
- build(deps): bump actions/cache from 4.2.1 to 4.2.3 by @dependabot in https://github.com/dexidp/dex/pull/4072
- build(deps): bump actions/attest-build-provenance from 2.2.0 to 2.2.3 by @dependabot in https://github.com/dexidp/dex/pull/4071
- build(deps): bump docker/login-action from 3.3.0 to 3.4.0 by @dependabot in https://github.com/dexidp/dex/pull/4070
- build(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot in https://github.com/dexidp/dex/pull/4069
- build(deps): bump docker/metadata-action from 5.6.1 to 5.7.0 by @dependabot in https://github.com/dexidp/dex/pull/4068
- build(deps): bump github.com/russellhaering/goxmldsig from 1.4.0 to 1.5.0 by @dependabot in https://github.com/dexidp/dex/pull/4073
- build(deps): bump github.com/beevik/etree from 1.5.0 to 1.5.1 by @dependabot in https://github.com/dexidp/dex/pull/4096
- build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @dependabot in https://github.com/dexidp/dex/pull/4095
- build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.10 to 3.4.11 by @dependabot in https://github.com/dexidp/dex/pull/4093
- build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @dependabot in https://github.com/dexidp/dex/pull/4092
- build(deps): bump github/codeql-action from 3.28.11 to 3.28.15 by @dependabot in https://github.com/dexidp/dex/pull/4091
- build(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 by @dependabot in https://github.com/dexidp/dex/pull/4090
- build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot in https://github.com/dexidp/dex/pull/4094
- build(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by @dependabot in https://github.com/dexidp/dex/pull/4116
- build(deps): bump google.golang.org/api from 0.228.0 to 0.231.0 by @dependabot in https://github.com/dexidp/dex/pull/4114
- build(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @dependabot in https://github.com/dexidp/dex/pull/4111
- build(deps): bump anchore/sbom-action from 0.18.0 to 0.19.0 by @dependabot in https://github.com/dexidp/dex/pull/4109
- build(deps): bump docker/build-push-action from 6.15.0 to 6.16.0 by @dependabot in https://github.com/dexidp/dex/pull/4108
- build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 by @dependabot in https://github.com/dexidp/dex/pull/4101
- build(deps): bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in https://github.com/dexidp/dex/pull/4105
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.14.1 by @dependabot in https://github.com/dexidp/dex/pull/4099
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.0 by @dependabot in https://github.com/dexidp/dex/pull/4100
- build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /api/v2 by @dependabot in https://github.com/dexidp/dex/pull/4057
- build(deps): bump golang from 1.24.2-alpine3.20 to 1.24.3-alpine3.20 by @dependabot in https://github.com/dexidp/dex/pull/4124
- build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @dependabot in https://github.com/dexidp/dex/pull/4122
- build(deps): bump oras-project/setup-oras from 1.2.2 to 1.2.3 by @dependabot in https://github.com/dexidp/dex/pull/4119
- build(deps): bump google.golang.org/api from 0.231.0 to 0.232.0 by @dependabot in https://github.com/dexidp/dex/pull/4120
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.24 to 1.14.28 by @dependabot in https://github.com/dexidp/dex/pull/4123
- build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in https://github.com/dexidp/dex/pull/4121
- build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.0 by @dependabot in https://github.com/dexidp/dex/pull/4127
- build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in https://github.com/dexidp/dex/pull/4126
- build(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0 by @dependabot in https://github.com/dexidp/dex/pull/4132
- build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot in https://github.com/dexidp/dex/pull/4131
- build(deps): bump cloud.google.com/go/compute/metadata from 0.6.0 to 0.7.0 by @dependabot in https://github.com/dexidp/dex/pull/4130
- build(deps): bump actions/dependency-review-action from 4.7.0 to 4.7.1 by @dependabot in https://github.com/dexidp/dex/pull/4128
- build(deps): bump google.golang.org/api from 0.232.0 to 0.233.0 by @dependabot in https://github.com/dexidp/dex/pull/4129
- build(deps): bump distroless/static-debian12 from
c0f429eto188ddfbby @dependabot in https://github.com/dexidp/dex/pull/4140 - build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot in https://github.com/dexidp/dex/pull/4139
- build(deps): bump docker/build-push-action from 6.16.0 to 6.17.0 by @dependabot in https://github.com/dexidp/dex/pull/4135
- build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.21 to 3.6.0 by @dependabot in https://github.com/dexidp/dex/pull/4136
- chore: update dependencies by @sagikazarmark in https://github.com/dexidp/dex/pull/4141
New Contributors
- @mfila made their first contribution in https://github.com/dexidp/dex/pull/3857
- @EthanDieterich made their first contribution in https://github.com/dexidp/dex/pull/4000
- @alexandear made their first contribution in https://github.com/dexidp/dex/pull/4058
- @shurup made their first contribution in https://github.com/dexidp/dex/pull/4097
- @alihasan070707 made their first contribution in https://github.com/dexidp/dex/pull/4082
Full Changelog: https://github.com/dexidp/dex/compare/v2.42.0...v2.43.0