Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[pull] master from dexidp:master #224

Open
wants to merge 1,277 commits into
base: master
Choose a base branch
from
Open

[pull] master from dexidp:master #224

wants to merge 1,277 commits into from
This pull request is big! We’re only showing the most recent 250 commits.

Commits on Jan 10, 2024

  1. Sign container images 

    Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Jan 10, 2024
    Configuration menu
    Copy the full SHA
    d0189b0 View commit details
    Browse the repository at this point in the history

Commits on Jan 12, 2024

  1. bug: return initialConfig instead of empty tlsConfig 

    When TLS certificate reloading functionality was implemented and
released in Dex 2.37.0, added newTLSReloader() returns empty tlsConfig
and discards the provided, already configured tlsConfig. Server's with
empty tlsConfig override Go's sensible defaults, and starts serving Dex
over TLS 1.0 and TLS 1.1 in addition to Go's defaults TLS 1.2+.

TLS 1.0 and 1.1 are long deprecated and vulnerable, making this a
security risk. Server and its secrets are vulnerable to attackers.
    @tuminoid
    tuminoid committed Jan 12, 2024
    Configuration menu
    Copy the full SHA
    8cf9094 View commit details
    Browse the repository at this point in the history

Commits on Jan 15, 2024

  1. build(deps): bump google.golang.org/api from 0.155.0 to 0.156.0 (#3270) 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.155.0 to 0.156.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.155.0...v0.156.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    5d64dc7 View commit details
    Browse the repository at this point in the history

  2. Propagate Dex version from build args 

    Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    520ed32 View commit details
    Browse the repository at this point in the history

Commits on Jan 16, 2024

  1. Introduce a dedicated pkg for featureflags 

    Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    0834824 View commit details
    Browse the repository at this point in the history

  2. Remove the expose call 

    Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
    @nabokihms
    nabokihms committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    adde14b View commit details
    Browse the repository at this point in the history

  3. Pin actions and container image dependencies 

    Images:
* builder
* stager
* gomplate
* base alpine
* base distroless

Actions:
* check required labels
* kind

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    15511da View commit details
    Browse the repository at this point in the history

Commits on Jan 18, 2024

  1. build(deps): bump github/codeql-action from 3.23.0 to 3.23.1 (#3282) 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.23.0 to 3.23.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@e5f05b8...0b21cf2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Jan 18, 2024
    Configuration menu
    Copy the full SHA
    f0c4113 View commit details
    Browse the repository at this point in the history

Commits on Jan 20, 2024

  1. build(deps): bump google.golang.org/api from 0.156.0 to 0.157.0 (#3285) 

    Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Jan 20, 2024
    Configuration menu
    Copy the full SHA
    bc8cbdb View commit details
    Browse the repository at this point in the history

  2. build(deps): bump anchore/sbom-action from 0.15.3 to 0.15.4 (#3286) 

    Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.15.3 to 0.15.4.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@c7f031d...41f7a6c)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Jan 20, 2024
    Configuration menu
    Copy the full SHA
    0c59579 View commit details
    Browse the repository at this point in the history

  3. build(deps): bump actions/dependency-review-action from 3.1.5 to 4.0.0 ( 

    #3287)

Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3.1.5 to 4.0.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@c74b580...4901385)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Jan 20, 2024
    Configuration menu
    Copy the full SHA
    11bea4d View commit details
    Browse the repository at this point in the history

Commits on Jan 23, 2024

  1. build(deps): bump anchore/sbom-action from 0.15.4 to 0.15.5 

    Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.15.4 to 0.15.5.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@41f7a6c...24b0d52)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 23, 2024
    Configuration menu
    Copy the full SHA
    a6f7f66 View commit details
    Browse the repository at this point in the history

  2. Bump gomplate to v3.11.7 

    Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Jan 23, 2024
    Configuration menu
    Copy the full SHA
    47b2268 View commit details
    Browse the repository at this point in the history

Commits on Jan 24, 2024

  1. build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.60.1 to 1.61.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.60.1...v1.61.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    2289971 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #3293 from dexidp/gomplate-3-11-7 

    Bump gomplate to v3.11.7
    @sagikazarmark
    sagikazarmark committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    12eb47c View commit details
    Browse the repository at this point in the history

  3. Merge pull request #3291 from dexidp/dependabot/github_actions/anchor… 

    …e/sbom-action-0.15.5

build(deps): bump anchore/sbom-action from 0.15.4 to 0.15.5
    @sagikazarmark
    sagikazarmark committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    26e7876 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #3296 from dexidp/dependabot/go_modules/google.gol… 

    …ang.org/grpc-1.61.0

build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0
    @sagikazarmark
    sagikazarmark committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    ae64845 View commit details
    Browse the repository at this point in the history

  5. build(deps): bump google.golang.org/grpc in /api/v2 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.60.1 to 1.61.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.60.1...v1.61.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    285deaf View commit details
    Browse the repository at this point in the history

  6. Merge pull request #3294 from dexidp/dependabot/go_modules/api/v2/goo… 

    …gle.golang.org/grpc-1.61.0

build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 in /api/v2
    @sagikazarmark
    sagikazarmark committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    1aa740c View commit details
    Browse the repository at this point in the history

  7. Merge pull request #3280 from deckhouse/pin-dependencies 

    Pin actions and container image dependencies
    @sagikazarmark
    sagikazarmark committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    cd46043 View commit details
    Browse the repository at this point in the history

  8. Merge pull request #3278 from deckhouse/featureflags-pkg 

    Introduce a dedicated pkg for featureflags
    @sagikazarmark
    sagikazarmark committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    e3a44c9 View commit details
    Browse the repository at this point in the history

  9. Merge pull request #3268 from deckhouse/dependabot-for-example-app 

    Add dependabot for example app
    @sagikazarmark
    sagikazarmark committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    d7891d8 View commit details
    Browse the repository at this point in the history

  10. Merge pull request #3276 from deckhouse/propagate-version-from-build-… 

    …args

Propagate Dex version from build args
    @sagikazarmark
    sagikazarmark committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    c323df3 View commit details
    Browse the repository at this point in the history

  11. build(deps): bump google.golang.org/grpc in /examples 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.59.0 to 1.61.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.59.0...v1.61.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    5c22ad5 View commit details
    Browse the repository at this point in the history

  12. build(deps): bump golang from 869193e to 3bd4475 

    Bumps golang from `869193e` to `3bd4475`.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    55861a0 View commit details
    Browse the repository at this point in the history

  13. build(deps): bump github.com/coreos/go-oidc/v3 in /examples (#3298) 

    Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.7.0 to 3.9.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.7.0...v3.9.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Jan 24, 2024
    Configuration menu
    Copy the full SHA
    bf10e77 View commit details
    Browse the repository at this point in the history

Commits on Jan 25, 2024

  1. Merge pull request from GHSA-gr79-9v6v-gc9r 

    bug: return initialConfig instead of empty tlsConfig
    @sagikazarmark
    sagikazarmark committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    2fa0676 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #3269 from deckhouse/add-cosign 

    Sign container images
    @sagikazarmark
    sagikazarmark committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    dff6f51 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #3300 from dexidp/dependabot/go_modules/examples/g… 

    …oogle.golang.org/grpc-1.61.0

build(deps): bump google.golang.org/grpc from 1.59.0 to 1.61.0 in /examples
    @sagikazarmark
    sagikazarmark committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9a64f2c View commit details
    Browse the repository at this point in the history

  4. build(deps): bump github.com/spf13/cobra in /examples 

    Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.7.0...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    0843953 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #3301 from dexidp/dependabot/docker/golang-3bd4475 

    build(deps): bump golang from `869193e` to `3bd4475`
    @sagikazarmark
    sagikazarmark committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    83ed15e View commit details
    Browse the repository at this point in the history

  6. Merge pull request #3299 from dexidp/dependabot/go_modules/examples/g… 

    …ithub.com/spf13/cobra-1.8.0

build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 in /examples
    @sagikazarmark
    sagikazarmark committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    392a8ed View commit details
    Browse the repository at this point in the history

  7. build(deps): bump golang.org/x/oauth2 from 0.13.0 to 0.16.0 in /examples 

    Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.13.0 to 0.16.0.
- [Commits](golang/oauth2@v0.13.0...v0.16.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    205d18d View commit details
    Browse the repository at this point in the history

  8. Merge pull request #3297 from dexidp/dependabot/go_modules/examples/g… 

    …olang.org/x/oauth2-0.16.0

build(deps): bump golang.org/x/oauth2 from 0.13.0 to 0.16.0 in /examples
    @sagikazarmark
    sagikazarmark committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    7ca42d7 View commit details
    Browse the repository at this point in the history

  9. Add context to storage's Create endpoints (#2935) 

    * Initial commit

Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>

* Finish the syntex fixes

Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>

* Add fixes after running the tests

Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>

* Change background context to request context

Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>

---------

Signed-off-by: PumpkinSeed <qwer.kocka@gmail.com>
    @PumpkinSeed
    PumpkinSeed committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    2377b0a View commit details
    Browse the repository at this point in the history

  10. feat: add TLS versions configuration 

    Add configuration options for TLSMinVersion and TLSMaxVersion.
This enables setting TLS 1.3 as minimum version for example for both
GRPC and Web, or enforcing TLS 1.2 only for easier debugging of
secure connections.

Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
    @tuminoid
    tuminoid committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    5bbdb44 View commit details
    Browse the repository at this point in the history

  11. Merge pull request #3303 from Nordix/tuomo/add-tls-version-config 

    feat: add TLS versions configuration
    @sagikazarmark
    sagikazarmark committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    9451d87 View commit details
    Browse the repository at this point in the history

Commits on Jan 26, 2024

  1. Also set the username in authproxy connector (#3307) 

    Signed-off-by: Patrick Pacher <patrick.pacher@gmail.com>
    @ppacher
    ppacher committed Jan 26, 2024
    Configuration menu
    Copy the full SHA
    8e07edc View commit details
    Browse the repository at this point in the history

Commits on Jan 29, 2024

  1. build(deps): bump mheap/github-action-required-labels 

    Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels) from 5.1.0 to 5.2.0.
- [Release notes](https://github.com/mheap/github-action-required-labels/releases)
- [Commits](mheap/github-action-required-labels@4e9ef4c...cc7a79f)

---
updated-dependencies:
- dependency-name: mheap/github-action-required-labels
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    cf99c2b View commit details
    Browse the repository at this point in the history

  2. build(deps): bump golang from 3bd4475 to 3354c3a 

    Bumps golang from `3bd4475` to `3354c3a`.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    3705f58 View commit details
    Browse the repository at this point in the history

  3. build(deps): bump alpine from 3.19.0 to 3.19.1 

    Bumps alpine from 3.19.0 to 3.19.1.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    a515697 View commit details
    Browse the repository at this point in the history

Commits on Jan 30, 2024

  1. build(deps): bump anchore/sbom-action from 0.15.5 to 0.15.6 (#3314) 

    Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.15.5 to 0.15.6.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@24b0d52...c6aed38)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Jan 30, 2024
    Configuration menu
    Copy the full SHA
    daf1bf2 View commit details
    Browse the repository at this point in the history

Commits on Jan 31, 2024

  1. build(deps): bump google.golang.org/api from 0.157.0 to 0.161.0 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.157.0 to 0.161.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.157.0...v0.161.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 31, 2024
    Configuration menu
    Copy the full SHA
    be61e0d View commit details
    Browse the repository at this point in the history

Commits on Feb 1, 2024

  1. build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.11 to 3.5.12 

    Bumps [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) from 3.5.11 to 3.5.12.
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.11...v3.5.12)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    e8e44c6 View commit details
    Browse the repository at this point in the history

  2. build(deps): bump anchore/sbom-action from 0.15.6 to 0.15.8 

    Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.15.6 to 0.15.8.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@c6aed38...b6a39da)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    fa4f09c View commit details
    Browse the repository at this point in the history

Commits on Feb 5, 2024

  1. build(deps): bump github/codeql-action from 3.23.1 to 3.24.0 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.23.1 to 3.24.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@0b21cf2...e8893c5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    13afbbb View commit details
    Browse the repository at this point in the history

  2. build(deps): bump github.com/mattn/go-sqlite3 from 1.14.19 to 1.14.22 

    Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.19 to 1.14.22.
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.19...v1.14.22)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-sqlite3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    6a78022 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #3328 from dexidp/dependabot/go_modules/github.com… 

    …/mattn/go-sqlite3-1.14.22

build(deps): bump github.com/mattn/go-sqlite3 from 1.14.19 to 1.14.22
    @sagikazarmark
    sagikazarmark committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    0d6261b View commit details
    Browse the repository at this point in the history

  4. Merge pull request #3327 from dexidp/dependabot/github_actions/github… 

    …/codeql-action-3.24.0

build(deps): bump github/codeql-action from 3.23.1 to 3.24.0
    @sagikazarmark
    sagikazarmark committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    0deca25 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #3325 from dexidp/dependabot/github_actions/anchor… 

    …e/sbom-action-0.15.8

build(deps): bump anchore/sbom-action from 0.15.6 to 0.15.8
    @sagikazarmark
    sagikazarmark committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    e36a3d6 View commit details
    Browse the repository at this point in the history

  6. build(deps): bump sigstore/cosign-installer from 3.2.0 to 3.4.0 

    Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.2.0 to 3.4.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@1fc5bd3...e1523de)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    76312a5 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #3323 from dexidp/dependabot/go_modules/go.etcd.io… 

    …/etcd/client/pkg/v3-3.5.12

build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.11 to 3.5.12
    @sagikazarmark
    sagikazarmark committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    f0dbaa8 View commit details
    Browse the repository at this point in the history

  8. Merge pull request #3317 from dexidp/dependabot/go_modules/google.gol… 

    …ang.org/api-0.161.0

build(deps): bump google.golang.org/api from 0.157.0 to 0.161.0
    @sagikazarmark
    sagikazarmark committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    6350a91 View commit details
    Browse the repository at this point in the history

  9. Merge pull request #3311 from dexidp/dependabot/docker/alpine-3.19.1 

    build(deps): bump alpine from 3.19.0 to 3.19.1
    @sagikazarmark
    sagikazarmark committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    f0bc3fe View commit details
    Browse the repository at this point in the history

  10. build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12 

    Bumps [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) from 3.5.11 to 3.5.12.
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.11...v3.5.12)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    0ec151e View commit details
    Browse the repository at this point in the history

  11. Merge pull request #3310 from dexidp/dependabot/docker/golang-3354c3a 

    build(deps): bump golang from `3bd4475` to `3354c3a`
    @sagikazarmark
    sagikazarmark committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    5a3e04e View commit details
    Browse the repository at this point in the history

  12. Merge pull request #3308 from dexidp/dependabot/github_actions/mheap/… 

    …github-action-required-labels-5.2.0

build(deps): bump mheap/github-action-required-labels from 5.1.0 to 5.2.0
    @sagikazarmark
    sagikazarmark committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    9aabf9e View commit details
    Browse the repository at this point in the history

  13. Merge pull request #3324 from dexidp/dependabot/github_actions/sigsto… 

    …re/cosign-installer-3.4.0

build(deps): bump sigstore/cosign-installer from 3.2.0 to 3.4.0
    @sagikazarmark
    sagikazarmark committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    5dc3146 View commit details
    Browse the repository at this point in the history

  14. Merge pull request #3321 from dexidp/dependabot/go_modules/go.etcd.io… 

    …/etcd/client/v3-3.5.12

build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.11 to 3.5.12
    @sagikazarmark
    sagikazarmark committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    9a67dbd View commit details
    Browse the repository at this point in the history

Commits on Feb 9, 2024

  1. build(deps): bump golang.org/x/oauth2 from 0.16.0 to 0.17.0 in /examp… 

    …les (#3340)

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.16.0 to 0.17.0.
- [Commits](golang/oauth2@v0.16.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 9, 2024
    Configuration menu
    Copy the full SHA
    75195bd View commit details
    Browse the repository at this point in the history

  2. build(deps): bump tonistiigi/xx from 1.3.0 to 1.4.0 (#3333) 

    Bumps tonistiigi/xx from 1.3.0 to 1.4.0.

---
updated-dependencies:
- dependency-name: tonistiigi/xx
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 9, 2024
    Configuration menu
    Copy the full SHA
    fdb4dc6 View commit details
    Browse the repository at this point in the history

  3. build(deps): bump golang from 1.21.6-alpine3.18 to 1.22.0-alpine3.18 

    Bumps golang from 1.21.6-alpine3.18 to 1.22.0-alpine3.18.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 9, 2024
    Configuration menu
    Copy the full SHA
    e593d12 View commit details
    Browse the repository at this point in the history

  4. fix(tokenExchange): use correct token type for userInfo requests (#3336) 

    Signed-off-by: Chris H <33393789+MrDeerly@users.noreply.github.com>
    @MrDeerly
    MrDeerly committed Feb 9, 2024
    Configuration menu
    Copy the full SHA
    79d5874 View commit details
    Browse the repository at this point in the history

Commits on Feb 12, 2024

  1. build(deps): bump haya14busa/action-cond from 1.1.1 to 1.2.1 

    Bumps [haya14busa/action-cond](https://github.com/haya14busa/action-cond) from 1.1.1 to 1.2.1.
- [Release notes](https://github.com/haya14busa/action-cond/releases)
- [Commits](haya14busa/action-cond@1d6e8a1...94f77f7)

---
updated-dependencies:
- dependency-name: haya14busa/action-cond
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 12, 2024
    Configuration menu
    Copy the full SHA
    b4af716 View commit details
    Browse the repository at this point in the history

Commits on Feb 13, 2024

  1. fix: Do not evaluate skipApproval on approval page (#3086) 

    Signed-off-by: MM53 <28218664+MM53@users.noreply.github.com>
    @MM53
    MM53 committed Feb 13, 2024
    Configuration menu
    Copy the full SHA
    a0cf8b2 View commit details
    Browse the repository at this point in the history

  2. Log failed login attempt (#2454) 

    Signed-off-by: i312042 <viktoria.lyomcheva@sap.com>
Co-authored-by: i312042 <viktoria.lyomcheva@sap.com>
    @i-amelia
    i-amelia and i312042 committed Feb 13, 2024
    Configuration menu
    Copy the full SHA
    457e133 View commit details
    Browse the repository at this point in the history

Commits on Feb 15, 2024

  1. build(deps): bump golang.org/x/oauth2 from 0.16.0 to 0.17.0 (#3341) 

    Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.16.0 to 0.17.0.
- [Commits](golang/oauth2@v0.16.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 15, 2024
    Configuration menu
    Copy the full SHA
    85c158e View commit details
    Browse the repository at this point in the history

  2. build(deps): bump google.golang.org/grpc in /examples (#3352) 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.61.0 to 1.61.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.61.0...v1.61.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 15, 2024
    Configuration menu
    Copy the full SHA
    27c6a16 View commit details
    Browse the repository at this point in the history

  3. build(deps): bump distroless/static from 9be3fcc to a43abc8 (#3350) 

    Bumps distroless/static from `9be3fcc` to `a43abc8`.

---
updated-dependencies:
- dependency-name: distroless/static
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 15, 2024
    Configuration menu
    Copy the full SHA
    0740dae View commit details
    Browse the repository at this point in the history

  4. build(deps): bump aquasecurity/trivy-action from 0.16.1 to 0.17.0 (#3332 

    )

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.16.1 to 0.17.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@d43c1f1...84384bd)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 15, 2024
    Configuration menu
    Copy the full SHA
    ec2d934 View commit details
    Browse the repository at this point in the history

  5. build(deps): bump docker/metadata-action from 5.5.0 to 5.5.1 (#3330) 

    Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.5.0 to 5.5.1.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@dbef880...8e5442c)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 15, 2024
    Configuration menu
    Copy the full SHA
    62ccd58 View commit details
    Browse the repository at this point in the history

  6. build(deps): bump mheap/github-action-required-labels (#3347) 

    Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/mheap/github-action-required-labels/releases)
- [Commits](mheap/github-action-required-labels@cc7a79f...80a96a4)

---
updated-dependencies:
- dependency-name: mheap/github-action-required-labels
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 15, 2024
    Configuration menu
    Copy the full SHA
    fbddae6 View commit details
    Browse the repository at this point in the history

  7. build(deps): bump helm/kind-action from 1.8.0 to 1.9.0 (#3345) 

    Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](helm/kind-action@dda0770...99576bf)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 15, 2024
    Configuration menu
    Copy the full SHA
    80d530d View commit details
    Browse the repository at this point in the history

Commits on Feb 16, 2024

  1. build(deps): bump github/codeql-action from 3.24.0 to 3.24.3 (#3360) 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.0 to 3.24.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@e8893c5...3796146)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 16, 2024
    Configuration menu
    Copy the full SHA
    510054a View commit details
    Browse the repository at this point in the history

  2. build(deps): bump google.golang.org/api from 0.161.0 to 0.165.0 (#3355) 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.161.0 to 0.165.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.161.0...v0.165.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 16, 2024
    Configuration menu
    Copy the full SHA
    35c323d View commit details
    Browse the repository at this point in the history

Commits on Feb 17, 2024

  1. build(deps): bump actions/dependency-review-action from 4.0.0 to 4.1.0 ( 

    #3359)

Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@4901385...80f10bf)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Feb 17, 2024
    Configuration menu
    Copy the full SHA
    ed920dc View commit details
    Browse the repository at this point in the history

Commits on Feb 21, 2024

  1. build(deps): bump actions/dependency-review-action from 4.1.0 to 4.1.3 

    Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.1.0 to 4.1.3.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@80f10bf...9129d7d)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 21, 2024
    Configuration menu
    Copy the full SHA
    9fa0b8c View commit details
    Browse the repository at this point in the history

Commits on Feb 22, 2024

  1. build(deps): bump google.golang.org/grpc in /examples 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.61.1 to 1.62.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.61.1...v1.62.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 22, 2024
    Configuration menu
    Copy the full SHA
    c9e7bae View commit details
    Browse the repository at this point in the history

Commits on Feb 26, 2024

  1. build(deps): bump distroless/static from a43abc8 to 072d78b 

    Bumps distroless/static from `a43abc8` to `072d78b`.

---
updated-dependencies:
- dependency-name: distroless/static
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 26, 2024
    Configuration menu
    Copy the full SHA
    d37877d View commit details
    Browse the repository at this point in the history

  2. build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.3 to 3.24.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@3796146...47b3d88)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 26, 2024
    Configuration menu
    Copy the full SHA
    d85f63b View commit details
    Browse the repository at this point in the history

  3. build(deps): bump google.golang.org/api from 0.165.0 to 0.167.0 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.165.0 to 0.167.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.165.0...v0.167.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 26, 2024
    Configuration menu
    Copy the full SHA
    d32bc95 View commit details
    Browse the repository at this point in the history

Commits on Feb 27, 2024

  1. build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0 

    Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.19.0 to 0.20.0.
- [Commits](golang/crypto@v0.19.0...v0.20.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    1d11a6d View commit details
    Browse the repository at this point in the history

  2. Merge pull request #3377 from dexidp/dependabot/go_modules/golang.org… 

    …/x/crypto-0.20.0

build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    83d2f09 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #3376 from dexidp/dependabot/go_modules/google.gol… 

    …ang.org/api-0.167.0

build(deps): bump google.golang.org/api from 0.165.0 to 0.167.0
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    3a9985e View commit details
    Browse the repository at this point in the history

  4. Merge pull request #3375 from dexidp/dependabot/github_actions/github… 

    …/codeql-action-3.24.5

build(deps): bump github/codeql-action from 3.24.3 to 3.24.5
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    dde1cac View commit details
    Browse the repository at this point in the history

  5. Merge pull request #3374 from dexidp/dependabot/docker/distroless/sta… 

    …tic-072d78b

build(deps): bump distroless/static from `a43abc8` to `072d78b`
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    9bbb6ff View commit details
    Browse the repository at this point in the history

  6. Merge pull request #3368 from dexidp/dependabot/go_modules/examples/g… 

    …oogle.golang.org/grpc-1.62.0

build(deps): bump google.golang.org/grpc from 1.61.1 to 1.62.0 in /examples
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    0b1e148 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #3363 from dexidp/dependabot/github_actions/action… 

    …s/dependency-review-action-4.1.3

build(deps): bump actions/dependency-review-action from 4.1.0 to 4.1.3
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    2f51252 View commit details
    Browse the repository at this point in the history

  8. Merge pull request #3346 from dexidp/dependabot/github_actions/haya14… 

    …busa/action-cond-1.2.1

build(deps): bump haya14busa/action-cond from 1.1.1 to 1.2.1
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    c5597b4 View commit details
    Browse the repository at this point in the history

  9. build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.61.0 to 1.62.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.61.0...v1.62.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    d375c73 View commit details
    Browse the repository at this point in the history

  10. Merge pull request #3334 from dexidp/dependabot/docker/golang-1.22.0-… 

    …alpine3.18

build(deps): bump golang from 1.21.6-alpine3.18 to 1.22.0-alpine3.18
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    1ee75ce View commit details
    Browse the repository at this point in the history

  11. Merge pull request #3367 from dexidp/dependabot/go_modules/google.gol… 

    …ang.org/grpc-1.62.0

build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    033cf8b View commit details
    Browse the repository at this point in the history

  12. chore: update flake 

    Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    9ce65f3 View commit details
    Browse the repository at this point in the history

  13. chore: regenerate proto 

    Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    70b32ee View commit details
    Browse the repository at this point in the history

  14. chore: update ent 

    Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    3905389 View commit details
    Browse the repository at this point in the history

  15. chore: update tool versions 

    Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    0537d5b View commit details
    Browse the repository at this point in the history

  16. Merge pull request #3379 from dexidp/update-ent 

    Update ent
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    d59145b View commit details
    Browse the repository at this point in the history

  17. build(deps): bump google.golang.org/grpc in /api/v2 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.61.0 to 1.62.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.61.0...v1.62.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    34f5634 View commit details
    Browse the repository at this point in the history

  18. Merge pull request #3365 from dexidp/dependabot/go_modules/api/v2/goo… 

    …gle.golang.org/grpc-1.62.0

build(deps): bump google.golang.org/grpc from 1.61.0 to 1.62.0 in /api/v2
    @sagikazarmark
    sagikazarmark committed Feb 27, 2024
    Configuration menu
    Copy the full SHA
    8652a7c View commit details
    Browse the repository at this point in the history

Commits on Mar 11, 2024

  1. build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 (#… 

    …3405)

Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.1 to 3.0.3.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/v3.0.3/CHANGELOG.md)
- [Commits](go-jose/go-jose@v3.0.1...v3.0.3)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    6f8e3fd View commit details
    Browse the repository at this point in the history

  2. build(deps): bump github.com/prometheus/client_golang (#3380) 

    Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.18.0 to 1.19.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.19.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.18.0...v1.19.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    daa27ee View commit details
    Browse the repository at this point in the history

  3. build(deps): bump golang from 1.22.0-alpine3.18 to 1.22.1-alpine3.18 (#… 

    …3398)

Bumps golang from 1.22.0-alpine3.18 to 1.22.1-alpine3.18.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    047abc3 View commit details
    Browse the repository at this point in the history

  4. build(deps): bump github.com/go-jose/go-jose/v3 in /examples (#3406) 

    Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.1 to 3.0.3.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/v3.0.3/CHANGELOG.md)
- [Commits](go-jose/go-jose@v3.0.1...v3.0.3)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    3b0951b View commit details
    Browse the repository at this point in the history

  5. build(deps): bump google.golang.org/api from 0.167.0 to 0.169.0 (#3407) 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.167.0 to 0.169.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.167.0...v0.169.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    d4f4bb7 View commit details
    Browse the repository at this point in the history

  6. Update go-jose to v4.0.1 (#3409) 

    Signed-off-by: Matthias Loibl <mail@matthiasloibl.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
Co-authored-by: Matthias Loibl <mail@matthiasloibl.com>
    @nabokihms @metalmatze
    nabokihms and metalmatze committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    60ddd18 View commit details
    Browse the repository at this point in the history

  7. build(deps): bump distroless/static from 072d78b to 9235ad9 (#3381) 

    Bumps distroless/static from `072d78b` to `9235ad9`.

---
updated-dependencies:
- dependency-name: distroless/static
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    cc98349 View commit details
    Browse the repository at this point in the history

  8. build(deps): bump docker/setup-buildx-action from 3.0.0 to 3.1.0 (#3382) 

    Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@f95db51...0d103c3)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    22d94bb View commit details
    Browse the repository at this point in the history

  9. build(deps): bump aquasecurity/trivy-action from 0.17.0 to 0.18.0 (#3384 

    )

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.17.0 to 0.18.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@84384bd...062f259)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    eee7005 View commit details
    Browse the repository at this point in the history

  10. build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 (#3386) 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.5 to 3.24.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@47b3d88...8a470fd)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    09b57cb View commit details
    Browse the repository at this point in the history

  11. build(deps): bump anchore/sbom-action from 0.15.8 to 0.15.9 (#3397) 

    Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.15.8 to 0.15.9.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@b6a39da...9fece9e)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    75557f6 View commit details
    Browse the repository at this point in the history

  12. build(deps): bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 (#3393) 

    Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.17.0 to 0.18.0.
- [Commits](golang/oauth2@v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    82d881d View commit details
    Browse the repository at this point in the history

  13. build(deps): bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 in /examp… 

    …les (#3394)

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.17.0 to 0.18.0.
- [Commits](golang/oauth2@v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    54ff639 View commit details
    Browse the repository at this point in the history

  14. fix: add sanitizer to ldap account and password (#3372) 

    Signed-off-by: hsinhoyeh <yhh92u@gmail.com>
    @hsinhoyeh
    hsinhoyeh committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    77333d6 View commit details
    Browse the repository at this point in the history

  15. Add headers control to dex web server (#3339) 

    Customization of headers in the authentication server is crucial for enforcing stringent security measures by allowing the inclusion of specific headers required for authentication protocols and compliance standards. This customization ensures that authentication requests are processed securely, mitigating potential vulnerabilities and ensuring adherence to security policies.

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    088339f View commit details
    Browse the repository at this point in the history

  16. build(deps): bump google.golang.org/grpc in /examples (#3401) 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.0 to 1.62.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.0...v1.62.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 11, 2024
    Configuration menu
    Copy the full SHA
    b4bc42c View commit details
    Browse the repository at this point in the history

Commits on Mar 12, 2024

  1. OIDC connector: Allow specifying empty prompt type (#3373) 

    Enhanced the OIDC connector to allow specifying an empty promptType parameter. Previously, the default behavior always appended 'consent' if promptType was not specified. This adjustment was necessary due to variations in default behaviors across certain Identity Providers (IDPs).

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Mar 12, 2024
    Configuration menu
    Copy the full SHA
    e5dce3d View commit details
    Browse the repository at this point in the history

  2. build(deps): bump github.com/go-sql-driver/mysql from 1.7.1 to 1.8.0 (#… 

    …3414)

Bumps [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) from 1.7.1 to 1.8.0.
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)
- [Commits](go-sql-driver/mysql@v1.7.1...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/go-sql-driver/mysql
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 12, 2024
    Configuration menu
    Copy the full SHA
    fb63f7f View commit details
    Browse the repository at this point in the history

  3. build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#… 

    …3413)

Bumps google.golang.org/protobuf from 1.32.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 12, 2024
    Configuration menu
    Copy the full SHA
    053331d View commit details
    Browse the repository at this point in the history

  4. Set read only permissions to the check job (#3415) 

    Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Mar 12, 2024
    Configuration menu
    Copy the full SHA
    1d973dd View commit details
    Browse the repository at this point in the history

  5. build(deps): bump distroless/static from 9235ad9 to 7e5c6a2 (#3410) 

    Bumps distroless/static from `9235ad9` to `7e5c6a2`.

---
updated-dependencies:
- dependency-name: distroless/static
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 12, 2024
    Configuration menu
    Copy the full SHA
    a69ede0 View commit details
    Browse the repository at this point in the history

  6. build(deps): bump docker/build-push-action from 5.1.0 to 5.2.0 (#3411) 

    Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5.1.0 to 5.2.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@4a13e50...af5a7ed)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 12, 2024
    Configuration menu
    Copy the full SHA
    91a34c7 View commit details
    Browse the repository at this point in the history

  7. build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 (#3412) 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.0 to 1.62.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.0...v1.62.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 12, 2024
    Configuration menu
    Copy the full SHA
    7e1babb View commit details
    Browse the repository at this point in the history

  8. build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#3389 

    )

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.4 to 1.9.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.8.4...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 12, 2024
    Configuration menu
    Copy the full SHA
    aa1c6a4 View commit details
    Browse the repository at this point in the history

Commits on Mar 22, 2024

  1. build(deps): bump actions/checkout from 4.1.1 to 4.1.2 (#3417) 

    Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@b4ffde6...9bb5618)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    158a2a2 View commit details
    Browse the repository at this point in the history

  2. build(deps): bump github/codeql-action from 3.24.6 to 3.24.8 (#3422) 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.6 to 3.24.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@8a470fd...05963f4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    8e6a314 View commit details
    Browse the repository at this point in the history

  3. build(deps): bump google.golang.org/api from 0.169.0 to 0.171.0 (#3426) 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.169.0 to 0.171.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.169.0...v0.171.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    6832ab5 View commit details
    Browse the repository at this point in the history

  4. build(deps): bump docker/login-action from 3.0.0 to 3.1.0 (#3418) 

    Bumps [docker/login-action](https://github.com/docker/login-action) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@343f7c4...e92390c)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    5c72115 View commit details
    Browse the repository at this point in the history

  5. build(deps): bump github.com/coreos/go-oidc/v3 in /examples (#3424) 

    Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.9.0...v3.10.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    f0966f8 View commit details
    Browse the repository at this point in the history

  6. build(deps): bump github.com/coreos/go-oidc/v3 from 3.9.0 to 3.10.0 (#… 

    …3425)

Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](coreos/go-oidc@v3.9.0...v3.10.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    e9f998c View commit details
    Browse the repository at this point in the history

  7. build(deps): bump docker/build-push-action from 5.2.0 to 5.3.0 (#3420) 

    Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@af5a7ed...2cdde99)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    3871b84 View commit details
    Browse the repository at this point in the history

  8. build(deps): bump golang from 010f3b3 to ede158f (#3421) 

    Bumps golang from `010f3b3` to `ede158f`.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    c14eef3 View commit details
    Browse the repository at this point in the history

  9. build(deps): bump google.golang.org/grpc in /api/v2 (#3399) 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.0 to 1.62.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.0...v1.62.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    5589826 View commit details
    Browse the repository at this point in the history

  10. build(deps): bump google.golang.org/protobuf in /api/v2 (#3400) 

    Bumps google.golang.org/protobuf from 1.32.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Mar 22, 2024
    Configuration menu
    Copy the full SHA
    f611470 View commit details
    Browse the repository at this point in the history

Commits on Mar 25, 2024

  1. build(deps): bump docker/setup-buildx-action from 3.1.0 to 3.2.0 

    Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@0d103c3...2b51285)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Mar 25, 2024
    Configuration menu
    Copy the full SHA
    9bea2e0 View commit details
    Browse the repository at this point in the history

Commits on Mar 27, 2024

  1. build(deps): bump github.com/go-sql-driver/mysql from 1.8.0 to 1.8.1 

    Bumps [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/v1.8.1/CHANGELOG.md)
- [Commits](go-sql-driver/mysql@v1.8.0...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/go-sql-driver/mysql
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Mar 27, 2024
    Configuration menu
    Copy the full SHA
    fe45a29 View commit details
    Browse the repository at this point in the history

  2. build(deps): bump actions/dependency-review-action from 4.1.3 to 4.2.5 

    Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.1.3 to 4.2.5.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@9129d7d...5bbc3ba)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Mar 27, 2024
    Configuration menu
    Copy the full SHA
    5a80a70 View commit details
    Browse the repository at this point in the history

Commits on Mar 28, 2024

  1. [RFC7662] Add introspect endpoint to introspect access & refresh token ( 

    #3404)

Signed-off-by: Romain Caire <super.cairos@gmail.com>
    @supercairos
    supercairos committed Mar 28, 2024
    Configuration menu
    Copy the full SHA
    8755308 View commit details
    Browse the repository at this point in the history

  2. Update Distroless to Debian 12 (#3432) 

    gcr.io/distroless/static is Debian 10, which is quite outdated. Updated to the Debian 12 version of the static image, and used the nonroot tag since the root user isn't needed.

We've been running a version of Dex in production with this image without issue.

Signed-off-by: Hayden B <hblauzvern@google.com>
    @haydentherapper
    haydentherapper committed Mar 28, 2024
    Configuration menu
    Copy the full SHA
    38cef0c View commit details
    Browse the repository at this point in the history

  3. Update max length of kubernetes object to fit kubernetes policy (#3439) 

    Signed-off-by: Denys Romanenko <65756796+RomanenkoDenys@users.noreply.github.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
    @RomanenkoDenys @nabokihms
    RomanenkoDenys and nabokihms committed Mar 28, 2024
    Configuration menu
    Copy the full SHA
    7225198 View commit details
    Browse the repository at this point in the history

Commits on Mar 29, 2024

  1. build(deps): bump distroless/static-debian12 from 67686c9 to 42c8865 

    Bumps distroless/static-debian12 from `67686c9` to `42c8865`.

---
updated-dependencies:
- dependency-name: distroless/static-debian12
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Mar 29, 2024
    Configuration menu
    Copy the full SHA
    3b61d9a View commit details
    Browse the repository at this point in the history

Commits on Mar 31, 2024

  1. fix: wrong error code returned in case of inactive token (#3441) 

    Signed-off-by: Romain Caire <super.cairos@gmail.com>
    @supercairos
    supercairos committed Mar 31, 2024
    Configuration menu
    Copy the full SHA
    86e92aa View commit details
    Browse the repository at this point in the history

Commits on Apr 1, 2024

  1. build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.12 to 3.5.13 

    Bumps [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) from 3.5.12 to 3.5.13.
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.12...v3.5.13)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 1, 2024
    Configuration menu
    Copy the full SHA
    1e76411 View commit details
    Browse the repository at this point in the history

Commits on Apr 4, 2024

  1. build(deps): bump golang from 1.22.1-alpine3.18 to 1.22.2-alpine3.18 

    Bumps golang from 1.22.1-alpine3.18 to 1.22.2-alpine3.18.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    b40f964 View commit details
    Browse the repository at this point in the history

Commits on Apr 5, 2024

  1. build(deps): bump golang.org/x/net from 0.22.0 to 0.24.0 

    Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.24.0.
- [Commits](golang/net@v0.22.0...v0.24.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    9222b70 View commit details
    Browse the repository at this point in the history

  2. build(deps): bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 in /examples 

    Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.18.0 to 0.19.0.
- [Commits](golang/oauth2@v0.18.0...v0.19.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 5, 2024
    Configuration menu
    Copy the full SHA
    65d8125 View commit details
    Browse the repository at this point in the history

Commits on Apr 8, 2024

  1. build(deps): bump github/codeql-action from 3.24.8 to 3.24.10 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.8 to 3.24.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@05963f4...4355270)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    af38034 View commit details
    Browse the repository at this point in the history

  2. use the default cosign version from the action 

    Signed-off-by: cpanato <ctadeu@gmail.com>
    @cpanato
    cpanato committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    84954fc View commit details
    Browse the repository at this point in the history

  3. run release note label ci only in dexidp/dex repo not in forks 

    Signed-off-by: cpanato <ctadeu@gmail.com>
    @cpanato
    cpanato committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    76f2c8b View commit details
    Browse the repository at this point in the history

  4. Merge pull request #3459 from cpanato/update-ci 

    chore: run release note label ci only in dexidp/dex repo not in forks
    @sagikazarmark
    sagikazarmark committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    65c18a1 View commit details
    Browse the repository at this point in the history

  5. build(deps): bump mheap/github-action-required-labels 

    Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/mheap/github-action-required-labels/releases)
- [Commits](mheap/github-action-required-labels@80a96a4...132879b)

---
updated-dependencies:
- dependency-name: mheap/github-action-required-labels
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    b740a26 View commit details
    Browse the repository at this point in the history

Commits on Apr 9, 2024

  1. Merge pull request #3458 from cpanato/update-cosign 

    use the default cosign version from the action
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    a3d3f3b View commit details
    Browse the repository at this point in the history

  2. Merge pull request #3457 from dexidp/dependabot/github_actions/github… 

    …/codeql-action-3.24.10

build(deps): bump github/codeql-action from 3.24.8 to 3.24.10
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    f88b7cf View commit details
    Browse the repository at this point in the history

  3. Merge pull request #3452 from dexidp/dependabot/go_modules/examples/g… 

    …olang.org/x/oauth2-0.19.0

build(deps): bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 in /examples
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    b12883c View commit details
    Browse the repository at this point in the history

  4. Merge pull request #3451 from dexidp/dependabot/go_modules/golang.org… 

    …/x/net-0.24.0

build(deps): bump golang.org/x/net from 0.22.0 to 0.24.0
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    0261110 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #3446 from dexidp/dependabot/docker/golang-1.22.2-… 

    …alpine3.18

build(deps): bump golang from 1.22.1-alpine3.18 to 1.22.2-alpine3.18
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    e5123f1 View commit details
    Browse the repository at this point in the history

  6. Merge pull request #3443 from dexidp/dependabot/go_modules/go.etcd.io… 

    …/etcd/client/pkg/v3-3.5.13

build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.12 to 3.5.13
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    3b1b174 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #3440 from dexidp/dependabot/docker/distroless/sta… 

    …tic-debian12-42c8865

build(deps): bump distroless/static-debian12 from `67686c9` to `42c8865`
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    f1772cb View commit details
    Browse the repository at this point in the history

  8. Merge pull request #3435 from dexidp/dependabot/github_actions/action… 

    …s/dependency-review-action-4.2.5

build(deps): bump actions/dependency-review-action from 4.1.3 to 4.2.5
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    b2e0f96 View commit details
    Browse the repository at this point in the history

  9. build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.12 to 3.5.13 

    Bumps [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) from 3.5.12 to 3.5.13.
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.12...v3.5.13)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    090d3b0 View commit details
    Browse the repository at this point in the history

  10. Merge pull request #3434 from dexidp/dependabot/go_modules/github.com… 

    …/go-sql-driver/mysql-1.8.1

build(deps): bump github.com/go-sql-driver/mysql from 1.8.0 to 1.8.1
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    e53e962 View commit details
    Browse the repository at this point in the history

  11. build(deps): bump google.golang.org/api from 0.171.0 to 0.172.0 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.171.0 to 0.172.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.171.0...v0.172.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    68d8ad0 View commit details
    Browse the repository at this point in the history

  12. Merge pull request #3430 from dexidp/dependabot/github_actions/mheap/… 

    …github-action-required-labels-5.4.0

build(deps): bump mheap/github-action-required-labels from 5.3.0 to 5.4.0
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    231481f View commit details
    Browse the repository at this point in the history

  13. Merge pull request #3428 from dexidp/dependabot/github_actions/docker… 

    …/setup-buildx-action-3.2.0

build(deps): bump docker/setup-buildx-action from 3.1.0 to 3.2.0
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    4078a17 View commit details
    Browse the repository at this point in the history

  14. Merge pull request #3442 from dexidp/dependabot/go_modules/go.etcd.io… 

    …/etcd/client/v3-3.5.13

build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.12 to 3.5.13
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    ca27d3c View commit details
    Browse the repository at this point in the history

  15. Merge pull request #3438 from dexidp/dependabot/go_modules/google.gol… 

    …ang.org/api-0.172.0

build(deps): bump google.golang.org/api from 0.171.0 to 0.172.0
    @sagikazarmark
    sagikazarmark committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    98980ca View commit details
    Browse the repository at this point in the history

  16. build(deps): bump docker/setup-buildx-action from 3.2.0 to 3.3.0 

    Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@2b51285...d70bba7)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    b13f5ac View commit details
    Browse the repository at this point in the history

  17. build(deps): bump distroless/static-debian12 from 42c8865 to e9ac71e 

    Bumps distroless/static-debian12 from `42c8865` to `e9ac71e`.

---
updated-dependencies:
- dependency-name: distroless/static-debian12
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    cd693d3 View commit details
    Browse the repository at this point in the history

  18. Do not escape password for LDAP connectors (#3470) 

    With the change introduced in #3372 Dex declines passwords that contain special characters. Since password is not passed to any kind of filters, it is safe to pass a password as is. No LDAP query injections are possible.

This commit is a revert of password escaping.

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    3705207 View commit details
    Browse the repository at this point in the history

Commits on Apr 11, 2024

  1. build(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 

    Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@e1523de...59acb62)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 11, 2024
    Configuration menu
    Copy the full SHA
    7cd76c8 View commit details
    Browse the repository at this point in the history

Commits on Apr 12, 2024

  1. fix k8s guide link in README (#3474) 

    Signed-off-by: Michele Mastropietro <elehcim@users.noreply.github.com>
    @elehcim
    elehcim committed Apr 12, 2024
    Configuration menu
    Copy the full SHA
    1ca4583 View commit details
    Browse the repository at this point in the history

Commits on Apr 15, 2024

  1. feat: Add support for configurable prompt type for Google connector (#… 

    …3475)

Signed-off-by: abhisek <abhisek.datta@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Maksim Nabokikh <max.nabokih@gmail.com>
    @abhisek @nabokihms
    abhisek and nabokihms committed Apr 15, 2024
    Configuration menu
    Copy the full SHA
    677ab36 View commit details
    Browse the repository at this point in the history

Commits on Apr 19, 2024

  1. build(deps): bump golang.org/x/net in /api/v2 in the go_modules group 

    Bumps the go_modules group in /api/v2 with 1 update: [golang.org/x/net](https://github.com/golang/net).


Updates `golang.org/x/net` from 0.20.0 to 0.23.0
- [Commits](golang/net@v0.20.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 19, 2024
    Configuration menu
    Copy the full SHA
    c96c493 View commit details
    Browse the repository at this point in the history

Commits on Apr 29, 2024

  1. build(deps): bump anchore/sbom-action from 0.15.9 to 0.15.11 

    Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.15.9 to 0.15.11.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@9fece9e...7ccf588)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    d5b22a6 View commit details
    Browse the repository at this point in the history

Commits on May 6, 2024

  1. build(deps): bump golang.org/x/oauth2 from 0.19.0 to 0.20.0 in /examples 

    Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.19.0 to 0.20.0.
- [Commits](golang/oauth2@v0.19.0...v0.20.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 6, 2024
    Configuration menu
    Copy the full SHA
    d3ae7e2 View commit details
    Browse the repository at this point in the history

Commits on May 8, 2024

  1. build(deps): bump aquasecurity/trivy-action from 0.18.0 to 0.20.0 

    Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.18.0 to 0.20.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@062f259...b2933f5)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 8, 2024
    Configuration menu
    Copy the full SHA
    2c74baa View commit details
    Browse the repository at this point in the history

  2. build(deps): bump golang from 1.22.2-alpine3.18 to 1.22.3-alpine3.18 

    Bumps golang from 1.22.2-alpine3.18 to 1.22.3-alpine3.18.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 8, 2024
    Configuration menu
    Copy the full SHA
    3a541eb View commit details
    Browse the repository at this point in the history

Commits on May 10, 2024

  1. build(deps): bump google.golang.org/api from 0.172.0 to 0.179.0 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.172.0 to 0.179.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.172.0...v0.179.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 10, 2024
    Configuration menu
    Copy the full SHA
    5e7fb02 View commit details
    Browse the repository at this point in the history

Commits on May 12, 2024

  1. Merge pull request #3516 from dexidp/dependabot/go_modules/google.gol… 

    …ang.org/api-0.179.0

build(deps): bump google.golang.org/api from 0.172.0 to 0.179.0
    @sagikazarmark
    sagikazarmark committed May 12, 2024
    Configuration menu
    Copy the full SHA
    bdb2836 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #3514 from dexidp/dependabot/docker/golang-1.22.3-… 

    …alpine3.18

build(deps): bump golang from 1.22.2-alpine3.18 to 1.22.3-alpine3.18
    @sagikazarmark
    sagikazarmark committed May 12, 2024
    Configuration menu
    Copy the full SHA
    3e13398 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #3512 from dexidp/dependabot/github_actions/aquase… 

    …curity/trivy-action-0.20.0

build(deps): bump aquasecurity/trivy-action from 0.18.0 to 0.20.0
    @sagikazarmark
    sagikazarmark committed May 12, 2024
    Configuration menu
    Copy the full SHA
    4129017 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #3508 from dexidp/dependabot/go_modules/examples/g… 

    …olang.org/x/oauth2-0.20.0

build(deps): bump golang.org/x/oauth2 from 0.19.0 to 0.20.0 in /examples
    @sagikazarmark
    sagikazarmark committed May 12, 2024
    Configuration menu
    Copy the full SHA
    c1caa2f View commit details
    Browse the repository at this point in the history

  5. Merge pull request #3497 from dexidp/dependabot/github_actions/anchor… 

    …e/sbom-action-0.15.11

build(deps): bump anchore/sbom-action from 0.15.9 to 0.15.11
    @sagikazarmark
    sagikazarmark committed May 12, 2024
    Configuration menu
    Copy the full SHA
    f9c12cb View commit details
    Browse the repository at this point in the history

  6. Merge pull request #3483 from dexidp/dependabot/go_modules/api/v2/go_… 

    …modules-b9ac453758

build(deps): bump golang.org/x/net from 0.20.0 to 0.23.0 in /api/v2 in the go_modules group
    @sagikazarmark
    sagikazarmark committed May 12, 2024
    Configuration menu
    Copy the full SHA
    c240288 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #3472 from dexidp/dependabot/github_actions/sigsto… 

    …re/cosign-installer-3.5.0

build(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0
    @sagikazarmark
    sagikazarmark committed May 12, 2024
    Configuration menu
    Copy the full SHA
    d2cce5d View commit details
    Browse the repository at this point in the history

  8. Merge pull request #3469 from dexidp/dependabot/docker/distroless/sta… 

    …tic-debian12-e9ac71e

build(deps): bump distroless/static-debian12 from `42c8865` to `e9ac71e`
    @sagikazarmark
    sagikazarmark committed May 12, 2024
    Configuration menu
    Copy the full SHA
    d7fb98e View commit details
    Browse the repository at this point in the history

  9. Merge pull request #3462 from dexidp/dependabot/github_actions/docker… 

    …/setup-buildx-action-3.3.0

build(deps): bump docker/setup-buildx-action from 3.2.0 to 3.3.0
    @sagikazarmark
    sagikazarmark committed May 12, 2024
    Configuration menu
    Copy the full SHA
    c333aee View commit details
    Browse the repository at this point in the history

  10. build(deps): bump google.golang.org/protobuf in /api/v2 

    Bumps google.golang.org/protobuf from 1.33.0 to 1.34.1.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 12, 2024
    Configuration menu
    Copy the full SHA
    8288210 View commit details
    Browse the repository at this point in the history

  11. Merge pull request #3510 from dexidp/dependabot/go_modules/api/v2/goo… 

    …gle.golang.org/protobuf-1.34.1

build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1 in /api/v2
    @sagikazarmark
    sagikazarmark committed May 12, 2024
    Configuration menu
    Copy the full SHA
    dbb28db View commit details
    Browse the repository at this point in the history

  12. build(deps): bump google.golang.org/grpc in /examples 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.1 to 1.63.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.1...v1.63.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 12, 2024
    Configuration menu
    Copy the full SHA
    2c93bf2 View commit details
    Browse the repository at this point in the history

  13. build(deps): bump google.golang.org/grpc in /api/v2 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.1 to 1.63.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.1...v1.63.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 12, 2024
    Configuration menu
    Copy the full SHA
    e5de464 View commit details
    Browse the repository at this point in the history

Commits on May 13, 2024

  1. build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 

    Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@0c52d54...cdcb360)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 13, 2024
    Configuration menu
    Copy the full SHA
    ae016b4 View commit details
    Browse the repository at this point in the history

  2. build(deps): bump mheap/github-action-required-labels 

    Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels) from 5.4.0 to 5.4.1.
- [Release notes](https://github.com/mheap/github-action-required-labels/releases)
- [Commits](mheap/github-action-required-labels@132879b...5847eef)

---
updated-dependencies:
- dependency-name: mheap/github-action-required-labels
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 13, 2024
    Configuration menu
    Copy the full SHA
    659784a View commit details
    Browse the repository at this point in the history

  3. build(deps): bump github/codeql-action from 3.24.10 to 3.25.4 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.10 to 3.25.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@4355270...ccf74c9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 13, 2024
    Configuration menu
    Copy the full SHA
    8e0aec1 View commit details
    Browse the repository at this point in the history

  4. build(deps): bump helm/kind-action from 1.9.0 to 1.10.0 

    Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](helm/kind-action@99576bf...0025e74)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 13, 2024
    Configuration menu
    Copy the full SHA
    d6a4d9e View commit details
    Browse the repository at this point in the history

  5. build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2 

    Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.2.5 to 4.3.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@5bbc3ba...0c155c5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 13, 2024
    Configuration menu
    Copy the full SHA
    cfd085e View commit details
    Browse the repository at this point in the history

  6. build(deps): bump google.golang.org/api from 0.179.0 to 0.180.0 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.179.0 to 0.180.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.179.0...v0.180.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 13, 2024
    Configuration menu
    Copy the full SHA
    76ec7f1 View commit details
    Browse the repository at this point in the history

  7. build(deps): bump github.com/prometheus/client_golang 

    Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.19.0...v1.19.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 13, 2024
    Configuration menu
    Copy the full SHA
    7e21fd6 View commit details
    Browse the repository at this point in the history

  8. Merge pull request #3526 from dexidp/dependabot/go_modules/github.com… 

    …/prometheus/client_golang-1.19.1

build(deps): bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1
    @sagikazarmark
    sagikazarmark committed May 13, 2024
    Configuration menu
    Copy the full SHA
    b1c86e2 View commit details
    Browse the repository at this point in the history

  9. Merge pull request #3525 from dexidp/dependabot/go_modules/google.gol… 

    …ang.org/api-0.180.0

build(deps): bump google.golang.org/api from 0.179.0 to 0.180.0
    @sagikazarmark
    sagikazarmark committed May 13, 2024
    Configuration menu
    Copy the full SHA
    117bb24 View commit details
    Browse the repository at this point in the history

  10. Merge pull request #3524 from dexidp/dependabot/github_actions/action… 

    …s/dependency-review-action-4.3.2

build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2
    @sagikazarmark
    sagikazarmark committed May 13, 2024
    Configuration menu
    Copy the full SHA
    e695f13 View commit details
    Browse the repository at this point in the history

  11. Merge pull request #3523 from dexidp/dependabot/github_actions/helm/k… 

    …ind-action-1.10.0

build(deps): bump helm/kind-action from 1.9.0 to 1.10.0
    @sagikazarmark
    sagikazarmark committed May 13, 2024
    Configuration menu
    Copy the full SHA
    0c841ca View commit details
    Browse the repository at this point in the history

  12. Merge pull request #3522 from dexidp/dependabot/github_actions/github… 

    …/codeql-action-3.25.4

build(deps): bump github/codeql-action from 3.24.10 to 3.25.4
    @sagikazarmark
    sagikazarmark committed May 13, 2024
    Configuration menu
    Copy the full SHA
    94e060d View commit details
    Browse the repository at this point in the history

  13. Merge pull request #3521 from dexidp/dependabot/github_actions/mheap/… 

    …github-action-required-labels-5.4.1

build(deps): bump mheap/github-action-required-labels from 5.4.0 to 5.4.1
    @sagikazarmark
    sagikazarmark committed May 13, 2024
    Configuration menu
    Copy the full SHA
    e32431a View commit details
    Browse the repository at this point in the history

  14. Merge pull request #3520 from dexidp/dependabot/github_actions/action… 

    …s/setup-go-5.0.1

build(deps): bump actions/setup-go from 5.0.0 to 5.0.1
    @sagikazarmark
    sagikazarmark committed May 13, 2024
    Configuration menu
    Copy the full SHA
    a04fc49 View commit details
    Browse the repository at this point in the history

  15. Merge pull request #3465 from dexidp/dependabot/go_modules/api/v2/goo… 

    …gle.golang.org/grpc-1.63.2

build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2 in /api/v2
    @sagikazarmark
    sagikazarmark committed May 13, 2024
    Configuration menu
    Copy the full SHA
    4236cb1 View commit details
    Browse the repository at this point in the history

  16. Merge pull request #3460 from dexidp/dependabot/go_modules/examples/g… 

    …oogle.golang.org/grpc-1.63.2

build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2 in /examples
    @sagikazarmark
    sagikazarmark committed May 13, 2024
    Configuration menu
    Copy the full SHA
    2e823e3 View commit details
    Browse the repository at this point in the history

  17. chore: fix function names in comment (#3464) 

    Signed-off-by: mountcount <cuimoman@outlook.com>
    @mountcount
    mountcount committed May 13, 2024
    Configuration menu
    Copy the full SHA
    c6fa455 View commit details
    Browse the repository at this point in the history

  18. Revert autogenerated columnChecker description (#3528) 

    Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed May 13, 2024
    Configuration menu
    Copy the full SHA
    347beba View commit details
    Browse the repository at this point in the history

Commits on May 14, 2024

  1. build(deps): bump github.com/beevik/etree from 1.3.0 to 1.4.0 

    Bumps [github.com/beevik/etree](https://github.com/beevik/etree) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/beevik/etree/releases)
- [Changelog](https://github.com/beevik/etree/blob/main/RELEASE_NOTES.md)
- [Commits](beevik/etree@v1.3.0...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/beevik/etree
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 14, 2024
    Configuration menu
    Copy the full SHA
    369369c View commit details
    Browse the repository at this point in the history

  2. build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.2 

    Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](go-jose/go-jose@v4.0.1...v4.0.2)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 14, 2024
    Configuration menu
    Copy the full SHA
    0088565 View commit details
    Browse the repository at this point in the history

  3. build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 

    Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.1 to 2.3.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@0864cf1...dc50aa9)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 14, 2024
    Configuration menu
    Copy the full SHA
    6951f8d View commit details
    Browse the repository at this point in the history

Commits on May 15, 2024

  1. build(deps): bump google.golang.org/grpc in /examples 

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.63.2 to 1.64.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.63.2...v1.64.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 15, 2024
    Configuration menu
    Copy the full SHA
    524f2b5 View commit details
    Browse the repository at this point in the history

  2. build(deps): bump golang from 4531927 to ff6ab2b 

    Bumps golang from `4531927` to `ff6ab2b`.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 15, 2024
    Configuration menu
    Copy the full SHA
    fca8571 View commit details
    Browse the repository at this point in the history

Commits on May 17, 2024

  1. build(deps): bump google.golang.org/api from 0.180.0 to 0.181.0 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.180.0 to 0.181.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.180.0...v0.181.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 17, 2024
    Configuration menu
    Copy the full SHA
    7eadefe View commit details
    Browse the repository at this point in the history

  2. build(deps): bump actions/checkout from 4.1.2 to 4.1.6 

    Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.2 to 4.1.6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9bb5618...a5ac7e5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 17, 2024
    Configuration menu
    Copy the full SHA
    7415e88 View commit details
    Browse the repository at this point in the history

Commits on May 21, 2024

  1. --- 

    updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 21, 2024
    Configuration menu
    Copy the full SHA
    d3f8c0c View commit details
    Browse the repository at this point in the history

  2. --- 

    updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 21, 2024
    Configuration menu
    Copy the full SHA
    83a8bc6 View commit details
    Browse the repository at this point in the history

Commits on May 23, 2024

  1. build(deps): bump alpine from 3.19.1 to 3.20.0 

    Bumps alpine from 3.19.1 to 3.20.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed May 23, 2024
    Configuration menu
    Copy the full SHA
    25959fc View commit details
    Browse the repository at this point in the history

Commits on May 28, 2024

  1. add provanance 

    Signed-off-by: cpanato <ctadeu@gmail.com>
    @cpanato
    cpanato committed May 28, 2024
    Configuration menu
    Copy the full SHA
    9fd4c74 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #3548 from cpanato/attestation 

    introduce Provenance Attestation
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    6b21e6a View commit details
    Browse the repository at this point in the history

  3. Merge pull request #3547 from dexidp/dependabot/docker/alpine-3.20.0 

    build(deps): bump alpine from 3.19.1 to 3.20.0
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    6c49f9f View commit details
    Browse the repository at this point in the history

  4. Merge pull request #3545 from dexidp/dependabot/github_actions/anchor… 

    …e/sbom-action-0.16.0

build(deps): bump anchore/sbom-action from 0.15.11 to 0.16.0
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    0d6861b View commit details
    Browse the repository at this point in the history

  5. Merge pull request #3544 from dexidp/dependabot/github_actions/github… 

    …/codeql-action-3.25.6

build(deps): bump github/codeql-action from 3.25.4 to 3.25.6
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    805080c View commit details
    Browse the repository at this point in the history

  6. Merge pull request #3542 from dexidp/dependabot/github_actions/action… 

    …s/checkout-4.1.6

build(deps): bump actions/checkout from 4.1.2 to 4.1.6
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    c2b5fd0 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #3541 from dexidp/dependabot/go_modules/google.gol… 

    …ang.org/api-0.181.0

build(deps): bump google.golang.org/api from 0.180.0 to 0.181.0
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    02424be View commit details
    Browse the repository at this point in the history

  8. Merge pull request #3536 from dexidp/dependabot/docker/golang-ff6ab2b 

    build(deps): bump golang from `4531927` to `ff6ab2b`
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    59f06cf View commit details
    Browse the repository at this point in the history

  9. Merge pull request #3534 from dexidp/dependabot/github_actions/ossf/s… 

    …corecard-action-2.3.3

build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    6fd2e9c View commit details
    Browse the repository at this point in the history

  10. Merge pull request #3531 from dexidp/dependabot/go_modules/github.com… 

    …/go-jose/go-jose/v4-4.0.2

build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.2
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    4f9398b View commit details
    Browse the repository at this point in the history

  11. Merge pull request #3530 from dexidp/dependabot/go_modules/github.com… 

    …/beevik/etree-1.4.0

build(deps): bump github.com/beevik/etree from 1.3.0 to 1.4.0
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    b081933 View commit details
    Browse the repository at this point in the history

  12. Merge pull request #3535 from dexidp/dependabot/go_modules/examples/g… 

    …oogle.golang.org/grpc-1.64.0

build(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0 in /examples
    @sagikazarmark
    sagikazarmark committed May 28, 2024
    Configuration menu
    Copy the full SHA
    a5a47ef View commit details
    Browse the repository at this point in the history

Commits on May 29, 2024

  1. build(deps): bump docker/login-action from 3.1.0 to 3.2.0 (#3551) 

    Bumps [docker/login-action](https://github.com/docker/login-action) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@e92390c...0d4c9c5)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed May 29, 2024
    Configuration menu
    Copy the full SHA
    088c3e5 View commit details
    Browse the repository at this point in the history

  2. Google: Implement groups fetch by default service account from metada… 

    …ta (support for GKE workload identity) (#2989)

Signed-off-by: Viacheslav Sychov <viacheslav.sychov@gmail.com>
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
Co-authored-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
    @vsychov @nabokihms
    vsychov and nabokihms committed May 29, 2024
    Configuration menu
    Copy the full SHA
    b057594 View commit details
    Browse the repository at this point in the history

  3. build(deps): bump golang from ff6ab2b to d1a601b (#3550) 

    Bumps golang from `ff6ab2b` to `d1a601b`.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed May 29, 2024
    Configuration menu
    Copy the full SHA
    bea63b9 View commit details
    Browse the repository at this point in the history

  4. build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 (#3552 

    )

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.20.0 to 0.21.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@b2933f5...fd25fed)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed May 29, 2024
    Configuration menu
    Copy the full SHA
    c8187ab View commit details
    Browse the repository at this point in the history

  5. Fix slight grammar errors. (#3538) 

    Signed-off-by: Andrii Deinega <andrii.deinega@gmail.com>
    @adeinega
    adeinega committed May 29, 2024
    Configuration menu
    Copy the full SHA
    cdfe6f5 View commit details
    Browse the repository at this point in the history

  6. Bump google.golang.org/grpc to v1.64.0 (#3553) 

    Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed May 29, 2024
    Configuration menu
    Copy the full SHA
    caae8a8 View commit details
    Browse the repository at this point in the history

Commits on May 31, 2024

  1. build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.13 to 3.5.14 (… 

    …#3555)

Bumps [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) from 3.5.13 to 3.5.14.
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.13...v3.5.14)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed May 31, 2024
    Configuration menu
    Copy the full SHA
    569e0cc View commit details
    Browse the repository at this point in the history

  2. OIDC connector option to override jwksURI (#3543) 

    Signed-off-by: sohgaura <tiwari.dk1@gmail.com>
Signed-off-by: sohgaura <31881670+sohgaura@users.noreply.github.com>
    @sohgaura
    sohgaura committed May 31, 2024
    Configuration menu
    Copy the full SHA
    064a409 View commit details
    Browse the repository at this point in the history

  3. build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.13 to 3.5.14 (#3556 

    )

Bumps [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) from 3.5.13 to 3.5.14.
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.13...v3.5.14)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed May 31, 2024
    Configuration menu
    Copy the full SHA
    d7d82b6 View commit details
    Browse the repository at this point in the history

  4. Look for secrets before using them (#2918) 

    Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
    @jsoref
    jsoref committed May 31, 2024
    Configuration menu
    Copy the full SHA
    8e59b6d View commit details
    Browse the repository at this point in the history

Commits on Jun 1, 2024

  1. use slog for structured logging (#3502) 

    Signed-off-by: Sean Liao <sean+git@liao.dev>
    @seankhliao
    seankhliao committed Jun 1, 2024
    Configuration menu
    Copy the full SHA
    0b6a783 View commit details
    Browse the repository at this point in the history

Commits on Jun 3, 2024

  1. feat: allow domain names or IDs in keystone connector (#3506) 

    OpenStack Keystone allows a user to authenticate against a domain. That
domain can be specified either as the domain ID or the domain name when
authenticating. The domain ID is a UUID or the special "default" domain
ID so key off of that when deciding what to submit to the keystone API.
Collapsed the code to share the domainKeystone struct by utilizing
omitempty to skip unset fields.

Signed-off-by: Doug Goldstein <cardoe@cardoe.com>
    @cardoe
    cardoe committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    f3ef7d4 View commit details
    Browse the repository at this point in the history

  2. Build containers for branches (#3560) 

    Revert the change introduced in previous PRs. For each PR, we want to build images to check that the build passes successfully.

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    7b37bbb View commit details
    Browse the repository at this point in the history

  3. build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 (#3561) 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.6 to 3.25.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@9fdb3e4...f079b84)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    9769f9b View commit details
    Browse the repository at this point in the history

  4. Fix slog nil pointer error (#3563) 

    The problem caused by the mistake in the newLogger function. The nil value is returned even with the valid log format.

Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    203b084 View commit details
    Browse the repository at this point in the history

  5. Fix trivy scanning job (#3564) 

    container-image -> container-images

Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    369707b View commit details
    Browse the repository at this point in the history

  6. Bump gomplate 3.11.8 (#3565) 

    Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
    @nabokihms
    nabokihms committed Jun 3, 2024
    Configuration menu
    Copy the full SHA
    23efe92 View commit details
    Browse the repository at this point in the history

Commits on Jun 13, 2024

  1. Prevent double clicking of the submit button on login (#3554) 

    Signed-off-by: Philip Corliss <pcorliss@drwholdings.com>
    @pcorliss
    pcorliss committed Jun 13, 2024
    Configuration menu
    Copy the full SHA
    a174846 View commit details
    Browse the repository at this point in the history

Commits on Jun 17, 2024

  1. build(deps): bump github.com/spf13/cobra in /examples (#3582) 

    Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.8.0...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Jun 17, 2024
    Configuration menu
    Copy the full SHA
    50e0892 View commit details
    Browse the repository at this point in the history

  2. build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.3.1 (… 

    …#3580)

Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1.1.2 to 1.3.1.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@173725a...534b352)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] committed Jun 17, 2024
    Configuration menu
    Copy the full SHA
    17a9c1c View commit details
    Browse the repository at this point in the history