v1.3.1-pre.0
Pre-release
alnr
Arne Luenser
Pause/resume event streams. Automatically expire temporary API keys. Support for Kratos ExternalID.
-----BEGIN SSH SIGNATURE-----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-----END SSH SIGNATURE-----
Bug Fixes
-
Data races in tests (#440) (e4dd7c4):
- fix: data races in tests
- chore: delete obsolete subcommands
- chore: bump dependencies to clear CVEs flagged by grype
- golang.org/x/crypto v0.51.0 -> v0.53.0 (fixes multiple critical CVEs incl. GO-2026-5006, 5017, 5019, 5020, 5021, 5023, 5005)
- golang.org/x/net v0.54.0 -> v0.55.0 (fixes GO-2026-5026 critical)
- github.com/gomarkdown/markdown -> 20260417 (fixes GHSA-77fj-vx54-gvh7 high)
Regenerates the newsletter render snapshot to absorb a one-blank-line
cosmetic change in gomarkdown's HTML output.- chore: bump ory deps to drop transitive github.com/docker/docker
Newer master commits of ory/x (and the ory/kratos / ory/hydra / ory/keto
that consume it) no longer pull github.com/docker/docker through the
x/sqlcon/dockertest chain, removing GO-2026-4883 (which has no fix
version available upstream).- fix: drain playwright Route handlers before page.Close
Calling page.Close() while a BrowserContext.onRoute handler is still
in flight is a data race inside playwright-go. Call UnrouteAll with
UnrouteBehaviorWait first so registered handlers complete before the
page is closed.Also fixes a pre-existing guard bug in
dev ci github env: an empty
SWAGGER_SPEC_IGNORE_PKGS would print "-x " because strings.Split("", ",")
returns [""] rather than nil. Check the raw env var first.
Code Generation
- Pin v1.3.1-pre.0 release commit (889226d)
Features
-
Configurable expiry for temporary proxy/tunnel API keys (#443) (b73c06e):
The Ory Proxy and Tunnel create a temporary project API key to configure
your project. These keys were created without expiry, so if the cleanup
on shutdown failed (e.g. the process was killed) the key would linger
indefinitely.Add an --api-key-expiry flag to both commands that sets a server-side
expiry on the temporary key, ensuring it is removed automatically even
when local cleanup does not run. Defaults to 12h; set to 0 to disable. -
Update install command in README.md (1e51407)
Changelog
- 3a978a3 autogen(docs): generate and bump docs
- 889226d autogen: pin v1.3.1-pre.0 release commit
- d2c5a3e chore: deflake tests (#425)
- 3ef403b chore: upgrade and prune dependencies (#439)
- b73c06e feat: configurable expiry for temporary proxy/tunnel API keys (#443)
- a0c7075 feat: ory.com (#441)
- 52eb734 feat: pause/resume event streams (#442)
- afd84ac feat: support external_id in identity commands (#444)
- 1e51407 feat: update install command in README.md
- e4dd7c4 fix: data races in tests (#440)
Artifacts can be verified with cosign using this public key.