What's Changed
Exciting New Features 🎉
- Enrich Dex logs with real IP and request ID by @nabokihms in #3661
- gRPC Connectors API by @twoojoo in #3245
Important
Connectors API is disabled by default. Set the DEX_API_CONNECTORS_CRUD=true
env variable to enable the feature.
Enhancements 🚀
- Prevent double clicking of the submit button on login by @pcorliss in #3554
- Gracefully handle no args being passed to entrypoint by @rgmz in #3589
- New Prometheus metrics build_info by @nlamirault in #3558
- Always retrieve github emails when
preferredEmailDomain
is set by @thesuperzapper in #3584 - Propagate http.Client to JWT verifier for OIDC connector by @jack-r-warren in #3641
- Fix the broken link to v2 page by @tuladhar in #3648
- Add regex for oidc group matching by @jacksonargo in #3063
Bug Fixes 🐛
- Remove additional features and add a feature flag instead by @nabokihms in #3663
Dependency Updates ⬆️
- build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 in /examples by @dependabot in #3582
- build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.3.1 by @dependabot in #3580
- build(deps): bump github/codeql-action from 3.25.7 to 3.25.12 by @dependabot in #3619
- build(deps): bump actions/dependency-review-action from 4.3.2 to 4.3.4 by @dependabot in #3618
- build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 by @dependabot in #3617
- build(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.24.0 by @dependabot in #3615
- build(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /examples in the go_modules group by @dependabot in #3612
- build(deps): bump distroless/static-debian12 from
e9ac71e
to8dd8d3c
by @dependabot in #3604 - build(deps): bump docker/build-push-action from 5.3.0 to 6.3.0 by @dependabot in #3603
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /examples by @dependabot in #3609
- build(deps): bump golang.org/x/net from 0.25.0 to 0.27.0 by @dependabot in #3606
- build(deps): bump golang.org/x/crypto from 0.23.0 to 0.25.0 by @dependabot in #3605
- build(deps): bump alpine from 3.20.0 to 3.20.1 by @dependabot in #3591
- build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 in /examples by @dependabot in #3600
- build(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 by @dependabot in #3567
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 by @dependabot in #3627
- build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #3621
- build(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 by @dependabot in #3625
- build(deps): bump actions/attest-build-provenance from 1.3.1 to 1.3.3 by @dependabot in #3624
- build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @dependabot in #3631
- build(deps): bump anchore/sbom-action from 0.16.0 to 0.17.0 by @dependabot in #3630
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.3 by @dependabot in #3626
- build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #3622
- build(deps): bump docker/build-push-action from 6.3.0 to 6.4.0 by @dependabot in #3623
- build(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by @dependabot in #3629
- build(deps): bump github.com/AppsFlyer/go-sundheit from 0.5.0 to 0.5.1 by @dependabot in #3635
- build(deps): bump docker/build-push-action from 6.4.0 to 6.4.1 by @dependabot in #3633
- build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #3634
- Update dependencies before Dex v2.41 by @nabokihms in #3637
- build(deps): bump alpine from 3.20.1 to 3.20.2 by @dependabot in #3647
- build(deps): bump google.golang.org/api from 0.182.0 to 0.189.0 by @dependabot in #3646
- build(deps): bump github/codeql-action from 3.25.12 to 3.25.14 by @dependabot in #3651
- build(deps): bump actions/upload-artifact from 3.1.3 to 4.3.4 by @dependabot in #3607
- build(deps): bump golang from
8c9183f
to0d3653d
by @dependabot in #3657 - FIx CVE before Dex v2.41 by @nabokihms in #3653
- Bump gomplate 4.0.1 by @MoeBensu in #3652
- build(deps): bump github.com/AppsFlyer/go-sundheit from 0.5.1 to 0.6.0 by @dependabot in #3655
- build(deps): bump docker/setup-buildx-action from 3.4.0 to 3.6.1 by @dependabot in #3658
- build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.14 to 3.5.15 by @dependabot in #3639
- build(deps): bump docker/setup-qemu-action from 3.1.0 to 3.2.0 by @dependabot in #3645
- build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in #3656
- build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0 by @dependabot in #3643
- build(deps): bump docker/login-action from 3.2.0 to 3.3.0 by @dependabot in #3644
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.3 to 4.0.4 by @dependabot in #3666
- build(deps): bump google.golang.org/api from 0.189.0 to 0.190.0 by @dependabot in #3667
- build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0 by @dependabot in #3665
- Bump ent v0.14.0 by @nabokihms in #3670
- build(deps): bump github/codeql-action from 3.25.14 to 3.25.15 by @dependabot in #3664
New Contributors
- @pcorliss made their first contribution in #3554
- @rgmz made their first contribution in #3589
- @nlamirault made their first contribution in #3558
- @thesuperzapper made their first contribution in #3584
- @twoojoo made their first contribution in #3245
- @jack-r-warren made their first contribution in #3641
- @tuladhar made their first contribution in #3648
- @MoeBensu made their first contribution in #3652
- @jacksonargo made their first contribution in #3063
Full Changelog: v2.40.0...v2.41.0