Skip to content

PR to pull from dexidp dex master. - #1

Open
anuviswa wants to merge 3196 commits into
anuviswa:merge_from_masterfrom
dexidp:master
Open

PR to pull from dexidp dex master.#1
anuviswa wants to merge 3196 commits into
anuviswa:merge_from_masterfrom
dexidp:master

Conversation

@anuviswa

@anuviswa anuviswa commented Mar 19, 2020

Copy link
Copy Markdown
Owner

No description provided.

dependabot Bot and others added 30 commits April 10, 2026 16:23
@dependabot
build(deps): bump github.com/go-webauthn/webauthn from 0.16.3 to 0.16…
410a58f 
….4 (#4736)

Bumps [github.com/go-webauthn/webauthn](https://github.com/go-webauthn/webauthn) from 0.16.3 to 0.16.4.
- [Release notes](https://github.com/go-webauthn/webauthn/releases)
- [Changelog](https://github.com/go-webauthn/webauthn/blob/master/CHANGELOG.md)
- [Commits](go-webauthn/webauthn@v0.16.3...v0.16.4)

---
updated-dependencies:
- dependency-name: github.com/go-webauthn/webauthn
  dependency-version: 0.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 (#4740)
bdfac38 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@d08e5c3...bcafcac)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#4741)
6f78bb6 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@bbbca2d...043fb46)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump actions/cache from 5.0.4 to 5.0.5 (#4744)
acd853b 
Bumps [actions/cache](https://github.com/actions/cache) from 5.0.4 to 5.0.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@6682284...27d5ce7)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@carlesarnal
feat(oauth2): populate groups claim in client_credentials tokens (#4691)
6f68a40 
Signed-off-by: Carles Arnal <carlesarnal92@gmail.com>
Signed-off-by: Carles Arnal <carnalca@redhat.com>
@dependabot
build(deps): bump alpine from 3.23.3 to 3.23.4 (#4746)
5d33f94 
Bumps alpine from 3.23.3 to 3.23.4.

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.23.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump google.golang.org/api from 0.275.0 to 0.276.0 (#4745)
2d12818 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.275.0 to 0.276.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.275.0...v0.276.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.276.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#4747)
5f9ad5c 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@c10b806...95e58e9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@nabokihms
Add OpenSSF Best Practices badge (#4748)
75934f3 
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
@nabokihms
Add LFX Health Score badge (#4749)
6cf5b52 
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
@nabokihms
Read User Identity once
ec003f5 
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
@nabokihms
feat: disconnect upstream refreshing (#4703)
ed65360 
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
@dependabot
build(deps): bump github.com/go-webauthn/webauthn from 0.16.4 to 0.16…
273de3b 
….5 (#4752)

Bumps [github.com/go-webauthn/webauthn](https://github.com/go-webauthn/webauthn) from 0.16.4 to 0.16.5.
- [Release notes](https://github.com/go-webauthn/webauthn/releases)
- [Changelog](https://github.com/go-webauthn/webauthn/blob/master/CHANGELOG.md)
- [Commits](go-webauthn/webauthn@v0.16.4...v0.16.5)

---
updated-dependencies:
- dependency-name: github.com/go-webauthn/webauthn
  dependency-version: 0.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang from c259ff7 to 18e6f5a (#4750)
15bed0b 
Bumps golang from `c259ff7` to `18e6f5a`.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.2-alpine3.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang from 18e6f5a to 7ef9411 (#4753)
7154549 
Bumps golang from `18e6f5a` to `7ef9411`.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.2-alpine3.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump github.com/go-webauthn/webauthn from 0.16.5 to 0.17…
4c99c75 
….0 (#4754)

Bumps [github.com/go-webauthn/webauthn](https://github.com/go-webauthn/webauthn) from 0.16.5 to 0.17.0.
- [Release notes](https://github.com/go-webauthn/webauthn/releases)
- [Changelog](https://github.com/go-webauthn/webauthn/blob/master/CHANGELOG.md)
- [Commits](go-webauthn/webauthn@v0.16.5...v0.17.0)

---
updated-dependencies:
- dependency-name: github.com/go-webauthn/webauthn
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 (#4756
050b262 
)

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.35.0 to 0.36.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@57a97c7...ed142fd)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump github.com/Azure/go-ntlmssp from 0.1.0 to 0.1.1 (#4757
d7ba134 
)

Bumps [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) from 0.1.0 to 0.1.1.
- [Release notes](https://github.com/Azure/go-ntlmssp/releases)
- [Commits](Azure/go-ntlmssp@v0.1.0...v0.1.1)

---
updated-dependencies:
- dependency-name: github.com/Azure/go-ntlmssp
  dependency-version: 0.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@hisamafahri
fix(google): preserve username when absent in refresh token (#4758)
98c0b47 
Google sometimes does not return username and other claims during
token refresh, which is correct according to OIDC spec. Instead of
calling the userinfo endpoint (which Google throttles more aggressively),
preserve the previous username if absent in the refreshed ID token.

This fix is specific to the Google connector and does not modify
the general refresh flow.

Fixes #4458

Signed-off-by: Hisam Fahri <iam@hisamafahri.com>
@Jabejixo
feat: Add Kerberos support (#4640)
b3bb230 
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
@dependabot
build(deps): bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 (…
0d80ea7 
…#4762)

Bumps [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) from 1.9.3 to 1.10.0.
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)
- [Commits](go-sql-driver/mysql@v1.9.3...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/go-sql-driver/mysql
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump google.golang.org/api from 0.276.0 to 0.277.0 (#4763)
a6b7ef0 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.276.0 to 0.277.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.276.0...v0.277.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.277.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.42 to 1.14.44 (…
2db4a35 
…#4764)

Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.42 to 1.14.44.
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.42...v1.14.44)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#4779)
81ba65a 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@cad07c2...6f9f177)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump google.golang.org/api from 0.277.0 to 0.278.0 (#4778)
60ca776 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.277.0 to 0.278.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.277.0...v0.278.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.278.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump google.golang.org/grpc in /examples (#4775)
5eb9530 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.80.0 to 1.81.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.80.0...v1.81.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 (#4768)
c57f56f 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.35.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@95e58e9...e46ed2c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 (#4772)
b940e43 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.80.0 to 1.81.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.80.0...v1.81.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 (#…
f074c3d 
…4773)

Bumps [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify) from 1.9.0 to 1.10.1.
- [Release notes](https://github.com/fsnotify/fsnotify/releases)
- [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md)
- [Commits](fsnotify/fsnotify@v1.9.0...v1.10.1)

---
updated-dependencies:
- dependency-name: github.com/fsnotify/fsnotify
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@0x2b3bfa0
feat(server): log successful token exchange requests (#4780)
b0ac753 
The authorization code flow emits an "login successful" info log in
finalizeLogin with the resolved identity (user_id, username, email,
groups). The token exchange flow (RFC 8693) never logged a corresponding
success line, making CI/CD-style flows that rely on token exchange
effectively invisible in operator logs even at debug level.

Add an equivalent "token exchange successful" info log after
TokenIdentity returns, mirroring the fields in finalizeLogin and adding
client_id, subject_token_type and requested_token_type for the context
specific to this grant.

Signed-off-by: Helio Machado <0x2b3bfa0+git@googlemail.com>
sagikazarmark and others added 30 commits September 24, 2026 01:10
@sagikazarmark
ci: update dependabot config
b4e5dc0 
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
@dependabot
build(deps): bump the docker group with 2 updates
60f4811 
Bumps the docker group with 2 updates: alpine and distroless/static-debian13.


Updates `alpine` from 3.24.1 to 3.24.2

Updates `distroless/static-debian13` from `1c2c046` to `e2e927e`

---
updated-dependencies:
- dependency-name: alpine
  dependency-version: 3.24.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
- dependency-name: distroless/static-debian13
  dependency-version: nonroot
  dependency-type: direct:production
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the go group with 16 updates
7a3dbe2 
---
updated-dependencies:
- dependency-name: cloud.google.com/go/compute/metadata
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/beevik/etree
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/go-sql-driver/mysql
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/go-webauthn/webauthn
  dependency-version: 0.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/openbao/openbao/api/v2
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/russellhaering/goxmldsig
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/api
  dependency-version: 0.298.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the github-actions group with 4 updates
452f55f 
Bumps the github-actions group with 4 updates: [github/codeql-action/upload-sarif](https://github.com/github/codeql-action), [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [docker/build-push-action](https://github.com/docker/build-push-action).


Updates `github/codeql-action/upload-sarif` from 4.37.9 to 4.38.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@cdf488f...1c5b675)

Updates `docker/setup-qemu-action` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@96fe6ef...9901266)

Updates `docker/setup-buildx-action` from 4.3.0 to 4.4.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@37fe631...f87e599)

Updates `docker/build-push-action` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@53b7df9...c3c9e26)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@sagikazarmark
Merge pull request #5038 from dexidp/dependabot/github_actions/github…
0f622e7 
…-actions-1975af7e18

build(deps): bump the github-actions group with 4 updates
@sagikazarmark
Merge pull request #5035 from dexidp/dependabot/docker/docker-52d9f176c9
3bfe472 
build(deps): bump the docker group with 2 updates
@sagikazarmark
Merge pull request #5025 from dexidp/dependabot/docker/golang-e9bbdf2
53aa86b 
build(deps): bump golang from `cf6fca6` to `e9bbdf2`
@sagikazarmark @claude
test: fix tests after go-oidc and webauthn upgrades
901d6d2 
go-oidc v3.21 skips JWKS keys whose "alg" is not a supported signature
algorithm. The OIDC connector test fixture advertised "alg": "RSA"
(a key type, not an algorithm), so its only key was dropped. Use RS256,
which matches how the test tokens are signed.

go-webauthn v0.18 rejects IP addresses as the relying party ID. Use
localhost instead of 127.0.0.1 in the MFA tests.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
@sagikazarmark
Merge pull request #5037 from dexidp/dependabot/go_modules/go-2f22c7cb4f
ada1a9a 
build(deps): bump the go group with 16 updates
@dependabot
build(deps): bump the go group across 1 directory with 4 updates
2189a14 
Bumps the go group with 4 updates in the /examples directory: [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc), [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/oauth2](https://github.com/golang/oauth2) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `github.com/coreos/go-oidc/v3` from 3.20.0 to 3.21.0
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.20.0...v3.21.0)

Updates `golang.org/x/crypto` from 0.55.0 to 0.57.0
- [Commits](golang/crypto@v0.55.0...v0.57.0)

Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0
- [Commits](golang/oauth2@v0.36.0...v0.37.0)

Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.2...v1.84.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@sagikazarmark
Merge pull request #5036 from dexidp/dependabot/go_modules/examples/g…
98e0af5 
…o-070aa32587

build(deps): bump the go group across 1 directory with 4 updates
@sagikazarmark
Merge pull request #4989 from CasLubbers/group-api
8693278 
feat(api): add groups field to password requests and responses
@dependabot @sagikazarmark
build(deps): bump google.golang.org/grpc
b536fa8 
Bumps the go_modules group with 1 update in the /api/v2 directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `google.golang.org/grpc` from 1.82.0 to 1.83.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.0...v1.83.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: direct:production
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@sagikazarmark
Merge pull request #4997 from dexidp/dependabot/go_modules/api/v2/go_…
856cfef 
…modules-4d54e058aa

build(deps): bump google.golang.org/grpc from 1.82.0 to 1.83.1 in /api/v2 in the go_modules group across 1 directory
@dependabot
build(deps): bump the go group across 1 directory with 2 updates
0740f4c 
Bumps the go group with 2 updates in the /api/v2 directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go) and google.golang.org/protobuf.


Updates `google.golang.org/grpc` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.1...v1.84.0)

Updates `google.golang.org/protobuf` from 1.36.11 to 1.36.12

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@sagikazarmark
build(deps): sync protobuf upgrade in examples
07dba27 
The API module now requires protobuf v1.36.12. Update the examples module and checksums to match so make verify no longer produces a dependency diff.

Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
@sagikazarmark
Merge pull request #5034 from dexidp/dependabot/go_modules/api/v2/go-…
94cbb90 
…bd3ecea6c2

build(deps): bump the go group across 1 directory with 2 updates
@dependabot
build(deps): bump golang from e9bbdf2 to 8a5910f in the docker group
c8298ce 
Bumps the docker group with 1 update: golang.


Updates `golang` from `e9bbdf2` to `8a5910f`

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.27.1-alpine3.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
@akhilnittala
doc changes
a483c4f 
Signed-off-by: akhil nittala <nakhil@redhat.com>
@dependabot
build(deps): bump the go group across 1 directory with 3 updates
3ccdb6d 
---
updated-dependencies:
- dependency-name: cloud.google.com/go/compute/metadata
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/beevik/etree
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/api
  dependency-version: 0.299.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump the etcd group with 2 updates
bbcb348 
Bumps the etcd group with 2 updates: [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) and [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd).


Updates `go.etcd.io/etcd/client/pkg/v3` from 3.7.1 to 3.7.2
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.7.1...v3.7.2)

Updates `go.etcd.io/etcd/client/v3` from 3.7.1 to 3.7.2
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.7.1...v3.7.2)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-version: 3.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: etcd
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-version: 3.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: etcd
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
build(deps): bump github/codeql-action/upload-sarif
0dbaa7c 
Bumps the github-actions group with 1 update: [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@1c5b675...2892aa5)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@sagikazarmark
Merge pull request #5045 from dexidp/dependabot/go_modules/etcd-14327…
4ea6405 
…bddc6

build(deps): bump the etcd group with 2 updates
@sagikazarmark
Merge pull request #5044 from dexidp/dependabot/go_modules/go-4ac864865e
2c4e05e 
build(deps): bump the go group across 1 directory with 3 updates
@sagikazarmark
Merge pull request #5041 from dexidp/dependabot/docker/docker-76babf8976
4cacdec 
build(deps): bump golang from `e9bbdf2` to `8a5910f` in the docker group
@sagikazarmark
Merge pull request #5046 from dexidp/dependabot/github_actions/github…
9bb35f3 
…-actions-b300d6d0aa

build(deps): bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2 in the github-actions group
@sagikazarmark
test(config): add failing test for parsed TLS settings lost in Validate
60b5048 
Validate has a value receiver, so the cipher suite and curve IDs it
parses are written to a copy of Config and discarded. runServe then
always falls back to the default ciphers and curves.

Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
@sagikazarmark
fix(config): apply configured TLS cipher suites and curve preferences
4ccb2bd 
Validate has a value receiver, so the cipher suite and curve IDs it
parsed were stored on a copy of Config and discarded, and the HTTPS
server always used the default ciphers and curves.

Keep Validate read-only and parse the names when building the HTTPS
TLS config instead. Validate still checks the names, but now reports
invalid ones alongside the other config errors instead of returning
early.

Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
@sagikazarmark
fix(config): reject TLS 1.3 cipher suites in tlsCiphers
c8d4482 
tls.Config.CipherSuites only applies to TLS 1.0-1.2; TLS 1.3 cipher
suites are not configurable. Listing them had no effect, and a list
containing only TLS 1.3 suites left no usable suite for TLS 1.2,
causing handshake failures.

Reject cipher suites that only support TLS 1.3 and document the
limitation in the example config.

Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
@sagikazarmark
Merge pull request #4987 from akhilnittala/usr/akhil/Configure_TLS_Cu…
46fd7ef 
…rves_Ciphers

Configure TLS Curve Preferences and Cipher Suites
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.