chore: Changes from release branch (#1343)

.github/workflows/ci.yaml

@@ -11,7 +11,7 @@ on:
       - release
 
 env:
-  GO_VERSION: "1.22.1"
+  GO_VERSION: "1.22.2"
   GOLANGCI_LINT_VERSION: "v1.57.2"
   HELM_VERSION: "3.14.1"
   KUBECONFORM_VERSION: "0.6.4"
@@ -193,7 +193,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: Setup k8s tools
-        uses: yokawasa/action-setup-kube-tools@dc0754a9a47b40f22f9bd52ffb082bbe6d142b22 # v0.11.0
+        uses: yokawasa/action-setup-kube-tools@5fe385031665158529decddddb51d6224422836e # v0.11.1
         with:
           setup-tools: |
             helm
@@ -234,7 +234,7 @@ jobs:
       - name: Test
         run: go test -v -coverprofile=coverage.cov -coverpkg=./... ./...
       - name: Code Coverage
-        uses: codecov/codecov-action@c16abc29c95fcf9174b58eb7e1abf4c866893bc8 # v4.1.1
+        uses: codecov/codecov-action@7afa10ed9b269c561c2336fd862446844e0cbf71 # v4.2.0
         with:
           files: coverage.cov
           verbose: true
@@ -377,7 +377,7 @@ jobs:
       - name: Set up QEMU
         uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@2b51285047da1547ffb1b2203d8be4c0af6b1f20 # v3.2.0
+        uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0
       - name: Collect container meta-info
         id: meta
         uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
@@ -490,7 +490,7 @@ jobs:
       - name: Set up QEMU
         uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@2b51285047da1547ffb1b2203d8be4c0af6b1f20 # v3.2.0
+        uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0
       - name: Login to DockerHub
         uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0
         with:
@@ -639,7 +639,7 @@ jobs:
         run: hugo --minify -d ./public
       - name: Deploy documentation
         if: github.ref == 'refs/heads/main'
-        uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847 # v3.9.3
+        uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: ./docs/public
@@ -706,19 +706,19 @@ jobs:
         run: |
           cat ./docs/versions/data.json | jq '. + [{ "version": "${{ needs.prepare-release.outputs.tag_name }}", "path": "/heimdall/${{ needs.prepare-release.outputs.tag_name }}" }]' | tee ./docs/versions/data.json
       - name: Deploy documentation
-        uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847 # v3.9.3
+        uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: ./docs/public
           destination_dir: ${{ needs.prepare-release.outputs.tag_name }}
       - name: Deploy redirect to new released version
-        uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847 # v3.9.3
+        uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: ./docs/redirect
           keep_files: true
       - name: Deploy versions JSON document
-        uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847 # v3.9.3
+        uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: ./docs/versions

.github/workflows/scorecard.yml

@@ -73,6 +73,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
+        uses: github/codeql-action/upload-sarif@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
         with:
           sarif_file: results.sarif

.github/workflows/security.yaml

@@ -1,7 +1,7 @@
 name: "Security Scan"
 
 env:
-  GO_VERSION: "1.22.1"
+  GO_VERSION: "1.22.2"
 
 on:
   push:
@@ -31,7 +31,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@f72b7e8127f2e443feedad3c314e6fe75e5a8b84 # master
+        uses: aquasecurity/trivy-action@207cd40078971bb7a078f8504c2061f908569449 # master
         with:
           scan-type: 'fs'
           ignore-unfixed: true
@@ -40,7 +40,7 @@ jobs:
           severity: 'CRITICAL,HIGH'
           skip-dirs: 'docs/content/docs,docs/build'
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
+        uses: github/codeql-action/upload-sarif@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
         with:
           sarif_file: 'trivy-results.sarif'
 
@@ -63,12 +63,12 @@ jobs:
         with:
           go-version: "${{ env.GO_VERSION }}"
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
+        uses: github/codeql-action/init@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
         with:
           languages: go
           queries: security-and-quality
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
+        uses: github/codeql-action/analyze@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
         with:
           category: "/language:go"
 

CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## [0.14.1-alpha](https://github.com/dadrus/heimdall/compare/v0.14.0-alpha...v0.14.1-alpha) (2024-04-09)
+
+
+### Dependencies
+
+* update golang to v1.22.2 ([#1313](https://github.com/dadrus/heimdall/issues/1313)) ([7c37100](https://github.com/dadrus/heimdall/commit/7c3710058d3936dac367f84b5a317e6f7dd24d80))
+* update golang.org/x/exp digest to c0f41cb ([#1318](https://github.com/dadrus/heimdall/issues/1318)) ([723ad16](https://github.com/dadrus/heimdall/commit/723ad164930021a86ffa19c2ac62421a0c1f015f))
+* update module github.com/knadh/koanf/v2 to v2.1.1 ([#1308](https://github.com/dadrus/heimdall/issues/1308)) ([502cdcb](https://github.com/dadrus/heimdall/commit/502cdcb0a78f60238e11b4be70590692907ee894))
+* update module go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.50.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/contrib/instrumentation/host to v0.50.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.50.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/contrib/instrumentation/runtime to v0.50.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/contrib/propagators/autoprop to v0.50.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/bridge/opentracing to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/exporters/prometheus to v0.47.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/exporters/zipkin to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/metric to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/sdk to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/sdk/metric to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module go.opentelemetry.io/otel/trace to v1.25.0 ([#1329](https://github.com/dadrus/heimdall/issues/1329)) ([dbb40bd](https://github.com/dadrus/heimdall/commit/dbb40bddc7399765a0759a84966300765c184ee7))
+* update module google.golang.org/grpc to v1.63.2 ([#1339](https://github.com/dadrus/heimdall/issues/1339)) ([8ee3942](https://github.com/dadrus/heimdall/commit/8ee3942c9b4a2a65a6ae80e1919ce1e9126a2f2e))
+
 ## [0.14.0-alpha](https://github.com/dadrus/heimdall/compare/v0.13.0-alpha...v0.14.0-alpha) (2024-04-02)
 
 

charts/heimdall/Chart.yaml

@@ -17,7 +17,7 @@
 apiVersion: v2
 name: heimdall
 description: A cloud native Identity Aware Proxy and Access Control Decision Service
-version: 0.13.0
+version: 0.13.1
 appVersion: latest
 kubeVersion: ^1.19.0
 type: application

docker/Dockerfile

@@ -2,7 +2,7 @@
 # Builder image to build the app
 ARG USER=heimdall
 
-FROM --platform=$BUILDPLATFORM golang:1.22.1-bookworm@sha256:d996c645c9934e770e64f05fc2bc103755197b43fd999b3aa5419142e1ee6d78 as builder
+FROM --platform=$BUILDPLATFORM golang:1.22.2-bookworm@sha256:48b942a5a9803fafeb748f1a9c6edeb71e06653bb4df25f63f909151e15e9618 as builder
 ARG USER
 ARG TARGETARCH
 ARG VERSION="unknown"

docker/debug.Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.22.1-bookworm@sha256:d996c645c9934e770e64f05fc2bc103755197b43fd999b3aa5419142e1ee6d78
+FROM golang:1.22.2-bookworm@sha256:48b942a5a9803fafeb748f1a9c6edeb71e06653bb4df25f63f909151e15e9618
 ENV CGO_ENABLED 1
 
 RUN apt-get update && apt-get install -y --no-install-recommends inotify-tools=3.14-7 psmisc=23.2-1+deb10u1 \

docs/versions/data.json

@@ -82,5 +82,9 @@
   {
     "version": "v0.14.0-alpha",
     "path": "/heimdall/v0.14.0-alpha"
+  },
+  {
+    "version": "v0.14.1-alpha",
+    "path": "/heimdall/v0.14.1-alpha"
   }
 ]

go.mod

@@ -1,6 +1,6 @@
 module github.com/dadrus/heimdall
 
-go 1.22.1
+go 1.22.2
 
 require (
 	github.com/Masterminds/sprig/v3 v3.2.3
@@ -38,7 +38,7 @@ require (
 	github.com/knadh/koanf/providers/env v0.1.0
 	github.com/knadh/koanf/providers/rawbytes v0.1.0
 	github.com/knadh/koanf/providers/structs v0.1.0
-	github.com/knadh/koanf/v2 v2.1.0
+	github.com/knadh/koanf/v2 v2.1.1
 	github.com/ory/ladon v1.3.0
 	github.com/pkg/errors v0.9.1
 	github.com/pquerna/cachecontrol v0.2.0
@@ -57,29 +57,29 @@ require (
 	github.com/ybbus/httpretry v1.0.2
 	github.com/yl2chen/cidranger v1.0.2
 	github.com/youmark/pkcs8 v0.0.0-20201027041543-1326539a0a0a
-	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0
-	go.opentelemetry.io/contrib/instrumentation/host v0.49.0
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0
-	go.opentelemetry.io/contrib/instrumentation/runtime v0.49.0
-	go.opentelemetry.io/contrib/propagators/autoprop v0.49.0
-	go.opentelemetry.io/otel v1.24.0
-	go.opentelemetry.io/otel/bridge/opentracing v1.24.0
-	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.24.0
-	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.24.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.24.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.24.0
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.24.0
-	go.opentelemetry.io/otel/exporters/prometheus v0.46.0
-	go.opentelemetry.io/otel/exporters/zipkin v1.24.0
-	go.opentelemetry.io/otel/metric v1.24.0
-	go.opentelemetry.io/otel/sdk v1.24.0
-	go.opentelemetry.io/otel/sdk/metric v1.24.0
-	go.opentelemetry.io/otel/trace v1.24.0
+	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.50.0
+	go.opentelemetry.io/contrib/instrumentation/host v0.50.0
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.50.0
+	go.opentelemetry.io/contrib/instrumentation/runtime v0.50.0
+	go.opentelemetry.io/contrib/propagators/autoprop v0.50.0
+	go.opentelemetry.io/otel v1.25.0
+	go.opentelemetry.io/otel/bridge/opentracing v1.25.0
+	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.25.0
+	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.25.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.25.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.25.0
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.25.0
+	go.opentelemetry.io/otel/exporters/prometheus v0.47.0
+	go.opentelemetry.io/otel/exporters/zipkin v1.25.0
+	go.opentelemetry.io/otel/metric v1.25.0
+	go.opentelemetry.io/otel/sdk v1.25.0
+	go.opentelemetry.io/otel/sdk/metric v1.25.0
+	go.opentelemetry.io/otel/trace v1.25.0
 	go.uber.org/fx v1.21.0
 	gocloud.dev v0.37.0
-	golang.org/x/exp v0.0.0-20240325151524-a685a6edb6d8
+	golang.org/x/exp v0.0.0-20240404231335-c0f41cb1a7a0
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20240401170217-c3f982113cda
-	google.golang.org/grpc v1.62.1
+	google.golang.org/grpc v1.63.2
 	google.golang.org/protobuf v1.33.0
 	gopkg.in/yaml.v3 v3.0.1
 	k8s.io/api v0.29.3
@@ -126,7 +126,7 @@ require (
 	github.com/aws/aws-sdk-go-v2/service/sts v1.28.4 // indirect
 	github.com/aws/smithy-go v1.20.1 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
-	github.com/cenkalti/backoff/v4 v4.2.1 // indirect
+	github.com/cenkalti/backoff/v4 v4.3.0 // indirect
 	github.com/cespare/xxhash/v2 v2.2.0 // indirect
 	github.com/cncf/xds/go v0.0.0-20231128003011-0fa0005c9caa // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
@@ -168,13 +168,13 @@ require (
 	github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
-	github.com/prometheus/client_model v0.6.0 // indirect
+	github.com/prometheus/client_model v0.6.1 // indirect
 	github.com/prometheus/common v0.48.0 // indirect
 	github.com/prometheus/procfs v0.12.0 // indirect
 	github.com/robfig/cron/v3 v3.0.1 // indirect
 	github.com/ryszard/goskiplist v0.0.0-20150312221310-2dfbae5fcf46 // indirect
 	github.com/shabbyrobe/gocovmerge v0.0.0-20190829150210-3e036491d500 // indirect
-	github.com/shirou/gopsutil/v3 v3.24.1 // indirect
+	github.com/shirou/gopsutil/v3 v3.24.2 // indirect
 	github.com/shoenig/go-m1cpu v0.1.6 // indirect
 	github.com/shopspring/decimal v1.2.0 // indirect
 	github.com/spf13/cast v1.3.1 // indirect
@@ -187,25 +187,25 @@ require (
 	github.com/tklauser/go-sysconf v0.3.12 // indirect
 	github.com/tklauser/numcpus v0.6.1 // indirect
 	github.com/yuin/gopher-lua v1.1.1 // indirect
-	github.com/yusufpapurcu/wmi v1.2.3 // indirect
+	github.com/yusufpapurcu/wmi v1.2.4 // indirect
 	go.opencensus.io v0.24.0 // indirect
-	go.opentelemetry.io/contrib/propagators/aws v1.24.0 // indirect
-	go.opentelemetry.io/contrib/propagators/b3 v1.24.0 // indirect
-	go.opentelemetry.io/contrib/propagators/jaeger v1.24.0 // indirect
-	go.opentelemetry.io/contrib/propagators/ot v1.24.0 // indirect
+	go.opentelemetry.io/contrib/propagators/aws v1.25.0 // indirect
+	go.opentelemetry.io/contrib/propagators/b3 v1.25.0 // indirect
+	go.opentelemetry.io/contrib/propagators/jaeger v1.25.0 // indirect
+	go.opentelemetry.io/contrib/propagators/ot v1.25.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.1.0 // indirect
 	go.uber.org/dig v1.17.1 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
-	golang.org/x/crypto v0.21.0 // indirect
-	golang.org/x/net v0.22.0 // indirect
+	golang.org/x/crypto v0.22.0 // indirect
+	golang.org/x/net v0.24.0 // indirect
 	golang.org/x/oauth2 v0.18.0 // indirect
-	golang.org/x/sync v0.6.0 // indirect
-	golang.org/x/sys v0.18.0 // indirect
-	golang.org/x/term v0.18.0 // indirect
+	golang.org/x/sync v0.7.0 // indirect
+	golang.org/x/sys v0.19.0 // indirect
+	golang.org/x/term v0.19.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
 	golang.org/x/time v0.5.0 // indirect
-	golang.org/x/tools v0.19.0 // indirect
+	golang.org/x/tools v0.20.0 // indirect
 	golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
 	google.golang.org/api v0.169.0 // indirect
 	google.golang.org/appengine v1.6.8 // indirect