Sync with upstream master by cruizen · Pull Request #6 · platform9/dex

cruizen · 2022-10-17T21:19:14Z

Overview

Sync the pf9 fork with dexidp/dex master to bring in all the changes from https://github.com/dexidp/dex/releases/tag/v2.35.3 + this PR dexidp#2708 from master

What this PR does / why we need it

Bring in the upstream fixes to improve security (there is a known CVE), bring in fixes / optimisations
ArgoCD has now released patches for v2.2 and v2.4 that fix this in ArgoCD's dex server pod (by upgrading to v2.25.3 of upstream dex).
We are missing this (just upgrading ArgoCD will not help) since we use our own forked dex

Special notes for your reviewer

Does this PR introduce a user-facing change?

Note

Medium Risk
Touches CI/release pipelines and container build/signing paths; misconfiguration could break publishing, provenance, or image runtime expectations despite limited application logic changes.

Overview
CI and release automation is revamped: introduces reusable artifacts.yaml (called from ci.yaml and new release.yaml) that builds multi-arch images (adds s390x), optionally pushes on release/tag, signs with cosign, creates provenance attestations, and runs Trivy scans with caching + SARIF uploads; adds OpenSSF Scorecard and a scheduled Trivy DB cache workflow, and removes legacy docker.yaml/codeql-analysis.yaml.

Build/tooling inputs are updated: Docker build now uses tonistiigi/xx + newer Go/Alpine/distroless bases, ensures a nonroot dex user exists in images, bumps gomplate, and threads VERSION into builds; Makefile is reorganized with explicit generate/verify targets, updated tool versions (protoc/kind/golangci-lint), and adds go mod tidy across modules.

Repo hygiene/docs updates: dependabot now includes /examples and groups etcd deps; .golangci.yml is replaced with .golangci.yaml; PR/issue/security templates and README/ADOPTERS links/text are refreshed; protobuf-generated Go files are regenerated with newer protoc/plugins (no API shape change, but new generated code layout).

^{Written by Cursor Bugbot for commit 29c7b6f. This will update automatically on new commits. Configure here.}

cruizen · 2022-10-17T21:28:18Z

Hi @erwinvaneyk , @pshanbhag I don't have write access to the repo and therefore cannot ask for review and / or resolve merge conflicts, it seems.

This PR is in draft state since I see a message that "This branch has conflicts that must be resolved".

cruizen · 2023-10-04T21:17:11Z

This branch has conflicts that must be resolved :-/

bito-code-review · 2025-02-01T18:19:20Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-03T12:28:41Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-04T08:32:41Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-04T10:12:39Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-06T08:19:45Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-06T13:49:47Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-14T22:32:34Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-15T12:52:32Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-16T22:22:32Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-17T16:02:33Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-18T13:31:14Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-19T14:11:01Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-20T16:41:01Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-02-28T23:45:20Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

bito-code-review · 2025-03-05T21:29:01Z

Code Review Agent Run Status

Limitations and other issues: ❌ Failure - Bito Code Review Agent didn't review this pull request automatically because it exceeded the size limit. No action is needed if you didn't intend for the agent to review it. Otherwise, you can initiate the review by typing /review in a comment below.

feat: Microsoft connector; allow pagination when more than 1000 AD groups

…/codeql-action/upload-sarif-4.37.4 build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4

…/login-action-4.6.0 build(deps): bump docker/login-action from 4.5.1 to 4.6.0

…/prometheus/client_golang-1.24.1 build(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1

…ang.org/api-0.291.0 build(deps): bump google.golang.org/api from 0.287.1 to 0.291.0

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>

Upgrade Go to 1.27

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.1 to 1.83.2. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.82.1...v1.83.2) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.83.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.14.0 to 1.15.0. - [Release notes](https://github.com/helm/kind-action/releases) - [Commits](helm/kind-action@ef37e7f...06c1ae1) --- updated-dependencies: - dependency-name: helm/kind-action dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.0 to 1.83.2. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.0...v1.83.2) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.83.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [anchore/sbom-action/download-syft](https://github.com/anchore/sbom-action) from 0.24.0 to 0.24.2. - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@e22c389...3ad7283) --- updated-dependencies: - dependency-name: anchore/sbom-action/download-syft dependency-version: 0.24.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.4 to 4.37.9. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@f205ea1...cdf488f) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps distroless/static-debian13 from `f7f8f72` to `1c2c046`. --- updated-dependencies: - dependency-name: distroless/static-debian13 dependency-version: nonroot dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.2.0 to 4.3.0. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@bb05f3f...37fe631) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 4.1.1 to 4.2.2. - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@0f67c3f...4d10147) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.1 to 1.83.2. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.82.1...v1.83.2) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

…ang.org/grpc-1.83.2 build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2

…ind-action-1.15.0 build(deps): bump helm/kind-action from 1.14.0 to 1.15.0

…ang.org/grpc-1.83.0 build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2

…s/attest-build-provenance-4.2.2 build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2

…/setup-buildx-action-4.3.0 build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0

…tic-debian13-1c2c046 build(deps): bump distroless/static-debian13 from `f7f8f72` to `1c2c046`

…e/sbom-action/download-syft-0.24.2 build(deps): bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2

…/codeql-action/upload-sarif-4.37.9 build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.9

Bumps the etcd group with 2 updates in the / directory: [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) and [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd). Updates `go.etcd.io/etcd/client/pkg/v3` from 3.6.13 to 3.7.1 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.13...v3.7.1) Updates `go.etcd.io/etcd/client/v3` from 3.6.13 to 3.7.1 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.13...v3.7.1) --- updated-dependencies: - dependency-name: go.etcd.io/etcd/client/pkg/v3 dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: etcd - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: etcd ... Signed-off-by: dependabot[bot] <support@github.com>

…8834b build(deps): bump the etcd group across 1 directory with 2 updates

…oogle.golang.org/grpc-1.83.2 build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.2 in /examples

cruizen changed the title ~~Merge master~~ Sync with upstream master Oct 17, 2022

cruizen marked this pull request as ready for review October 17, 2022 21:26

cruizen requested review from jayanth-tjvrr and mithilarun October 4, 2023 21:15

cruizen marked this pull request as draft October 4, 2023 21:17

mithilarun previously approved these changes Oct 4, 2023

View reviewed changes

sagikazarmark dismissed mithilarun’s stale review via b3df6aa October 13, 2023 14:27

cruizen marked this pull request as ready for review March 12, 2024 12:47

cruizen requested review from a team, gauravgavhane05 and mithilarun March 13, 2024 09:23

mithilarun previously approved these changes Mar 13, 2024

View reviewed changes

nabokihms dismissed mithilarun’s stale review via 158a2a2 March 22, 2024 06:57

sagikazarmark and others added 30 commits August 5, 2026 10:45

Merge pull request #4833 from XDanny322/master

3b2ad9a

feat: Microsoft connector; allow pagination when more than 1000 AD groups

Merge pull request #4954 from dexidp/dependabot/github_actions/github…

1496706

…/codeql-action/upload-sarif-4.37.4 build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4

Merge pull request #4946 from dexidp/dependabot/github_actions/docker…

1b594f7

…/login-action-4.6.0 build(deps): bump docker/login-action from 4.5.1 to 4.6.0

Merge pull request #4944 from dexidp/dependabot/go_modules/github.com…

9cd1016

…/prometheus/client_golang-1.24.1 build(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1

Merge pull request #4943 from dexidp/dependabot/go_modules/google.gol…

ba3915f

…ang.org/api-0.291.0 build(deps): bump google.golang.org/api from 0.287.1 to 0.291.0

feat(server): one session per signed-in browser (#4951)

ab64ed7

Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>

build: update developer environment

3598e9d

Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>

fix: lint violations

6a076fd

Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>

build: upgrade Go to 1.27

9743264

Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>

Merge pull request #5009 from dexidp/dev

81bf23b

Upgrade Go to 1.27

Merge pull request #5006 from dexidp/dependabot/go_modules/google.gol…

b9f1897

…ang.org/grpc-1.83.2 build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2

Merge pull request #5002 from dexidp/dependabot/github_actions/helm/k…

bf0abb1

…ind-action-1.15.0 build(deps): bump helm/kind-action from 1.14.0 to 1.15.0

Merge pull request #4958 from dexidp/dependabot/go_modules/google.gol…

b0eb345

…ang.org/grpc-1.83.0 build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2

Merge pull request #4969 from dexidp/dependabot/github_actions/action…

bddd7f1

…s/attest-build-provenance-4.2.2 build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2

Merge pull request #4977 from dexidp/dependabot/github_actions/docker…

857029c

…/setup-buildx-action-4.3.0 build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0

Merge pull request #4980 from dexidp/dependabot/docker/distroless/sta…

4a8c436

…tic-debian13-1c2c046 build(deps): bump distroless/static-debian13 from `f7f8f72` to `1c2c046`

Merge pull request #4992 from dexidp/dependabot/github_actions/anchor…

bcbf0c0

…e/sbom-action/download-syft-0.24.2 build(deps): bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2

Merge pull request #4995 from dexidp/dependabot/github_actions/github…

891116d

…/codeql-action/upload-sarif-4.37.9 build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.9

Merge pull request #4877 from dexidp/dependabot/go_modules/etcd-19935…

0bc09ce

…8834b build(deps): bump the etcd group across 1 directory with 2 updates

Merge pull request #4994 from dexidp/dependabot/go_modules/examples/g…

7ace0e7

…oogle.golang.org/grpc-1.83.2 build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.2 in /examples

Conversation

cruizen commented Oct 17, 2022 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Overview

What this PR does / why we need it

Special notes for your reviewer

Does this PR introduce a user-facing change?

Uh oh!

cruizen commented Oct 17, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cruizen commented Oct 4, 2023

Uh oh!

bito-code-review Bot commented Feb 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Feb 28, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

bito-code-review Bot commented Mar 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Agent Run Status

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

cruizen commented Oct 17, 2022 •

edited by cursor Bot

Loading

cruizen commented Oct 17, 2022 •

edited

Loading

bito-code-review Bot commented Feb 1, 2025 •

edited

Loading

bito-code-review Bot commented Feb 3, 2025 •

edited

Loading

bito-code-review Bot commented Feb 4, 2025 •

edited

Loading

bito-code-review Bot commented Feb 4, 2025 •

edited

Loading

bito-code-review Bot commented Feb 6, 2025 •

edited

Loading

bito-code-review Bot commented Feb 6, 2025 •

edited

Loading

bito-code-review Bot commented Feb 14, 2025 •

edited

Loading

bito-code-review Bot commented Feb 15, 2025 •

edited

Loading

bito-code-review Bot commented Feb 16, 2025 •

edited

Loading

bito-code-review Bot commented Feb 17, 2025 •

edited

Loading

bito-code-review Bot commented Feb 18, 2025 •

edited

Loading

bito-code-review Bot commented Feb 19, 2025 •

edited

Loading

bito-code-review Bot commented Feb 20, 2025 •

edited

Loading

bito-code-review Bot commented Feb 28, 2025 •

edited

Loading

bito-code-review Bot commented Mar 5, 2025 •

edited

Loading