What's Changed
Exciting New Features 🎉
- feat(oauth2): add client credentials flow with opt-in config flag by @matzegebbe in #4583
- feat(connector): connectors for grants by @nabokihms in #4619
- feat(client): add allowed connectors field to client configuration by @nabokihms in #4610
- feat(cel): implement CEL compiler with library by @nabokihms in #4607
- DEP: Auth Sessions - Introduce by @nabokihms in #4561
- Two-Factor authentication (TOTP) by @nabokihms in #3712
- feat: add WebAuthn support by @nabokihms in #4704
- feat: add SSO sharing policy by @nabokihms in #4705
- feat: Add Kerberos support by @Jabejixo in #4640
Enhancements 🚀
- fix: clean up in-memory connector before create by @loafoe in #4529
- feat: Disallow unknown config fields by @nabokihms in #4531
- feat: saml support refresh tokens by @Jabejixo in #4565
- feat(gitlab): implement TokenIdentity method by @nabokihms in #4606
- feat(tests): add MySQL 8 support in CI and tests by @nabokihms in #4617
- test: add concurrency tests for storage implementations by @nabokihms in #4631
- feat: update CSS for improved theming and button styles by @nabokihms in #4634
- feat: add PKCE configuration to OAuth2 settings by @nabokihms in #4638
- DEP: CEL integration by @nabokihms in #4601
- feat: add UserIdentity entity and CRUD operations by @nabokihms in #4643
- feat(logger): add excludeFields config for PII redaction by @mark-liu in #4621
- Pin GitHub API version in requests by @utafrali in #4647
- feat: implement user identity creation and persisting consent by @nabokihms in #4645
- feat: implement AuthSession CRUD operations by @nabokihms in #4646
- feat(ldap): allow specifying multiple attributes on username input by @yardenshoham in #4061
- feat: Create AuthSessions and set cookies by @nabokihms in #4650
- DEP for Identity Assertion JWT Authorization Grant (ID-JAG) / requested_token_type urn:ietf:params:oauth:token-type:id-jag by @kanywst in #4600
- feat: Add OIDC conformance testing scripts and configuration by @nabokihms in #4663
- feat: add auth_time, prompt, and max_age fields by @nabokihms in #4662
- feat: implement id_token_hint by @nabokihms in #4670
- feat: Add AuthSession GC by @nabokihms in #4667
- feat: use protobuf for session cookie by @nabokihms in #4675
- feat: support ES256 local signer by @space-arens in #4682
- feat: cookie encryption support by @nabokihms in #4676
- feat: prompt select_login by @nabokihms in #4678
- feat: add a jti per default by @bufferoverflow in #4695
- feat: add home page with user session info by @nabokihms in #4677
- feat: implement OIDC RP-Initiated logout by @nabokihms in #4674
- feat(microsoft): map userPrincipalName to preferred_username claim by @matzegebbe in #4725
- feat(oauth2): populate groups claim in client_credentials tokens by @carlesarnal in #4691
- feat: disconnect upstream refreshing by @nabokihms in #4703
- feat(server): log successful token exchange requests by @0x2b3bfa0 in #4780
- ci: improve behavior for first time forks by @cardoe in #4790
- feat(gitlab): support inherited group claims by @AntonKulyashov in #4800
- feat: gRPC API for sessions by @nabokihms in #4783
- GitHub Connector: Implement support for refresh tokens by @matheuscscp in #4845
- feat: add logout confirmation page by @nabokihms in #4734
- feat(server): introduce a token issuer abstraction by @nabokihms in #4893
- feat(server): own the refresh token lifecycle in the issuer by @nabokihms in #4895
- refactor(server): split templates, connector cache and tokens into subpackages by @nabokihms in #4896
- refactor(server): add a handler abstraction and extract discovery by @nabokihms in #4899
- refactor(server): extract the device authorization endpoints into a package by @nabokihms in #4906
- connector/oidc: allow overriding userinfo and device auth URLs by @Kunalbehbud in #4897
- refactor(server): move request codecs into internal and extract home by @nabokihms in #4908
- refactor(server): decompose the /token endpoint into per-grant handlers by @nabokihms in #4910
- refactor(server): extract the interactive auth flow into an authflow package by @nabokihms in #4915
- connector/microsoft: Add client assertion support for federated identity by @dronenb in #4521
- refactor(server): untangle what the package split left behind by @nabokihms in #4933
- fix(web): rebuild the home page around the signed-in identity by @nabokihms in #4935
- feat(server): sid claim, back-channel logout and scoped refresh revocation by @nabokihms in #4945
- feat(server): let a client tie its refresh tokens to the session by @nabokihms in #4950
- feat: Microsoft connector; allow pagination when more than 1000 AD groups by @XDanny322 in #4833
- feat(server): one session per signed-in browser by @nabokihms in #4951
- feat(api): add groups field to password requests and responses by @CasLubbers in #4989
- Configure TLS Curve Preferences and Cipher Suites by @akhilnittala in #4987
- feat(openshift): Dynamically load clientSecret from a file without requiring a restart during secret rotation by @anandf in #5023
Bug Fixes 🐛
- fix(mysql): quote
groupsreserved word in query replacer by @backkem in #4580 - fix(connector): update authproxy and oauth to match CallbackConnector by @matzegebbe in #4589
- feat(connector): add compile-time checks for connector interfaces by @nabokihms in #4591
- fix: fix typo in grpc listener error message by @kanywst in #4598
- fix: correct error message for device request expiry by @kanywst in #4599
- fix(deviceflow): use absolute paths for non-root URLs by @nabokihms in #4597
- fix(server): handle double-submit on approval endpoint by @mark-liu in #4620
- test: fix token introspection tests to use consistent timestamps by @nabokihms in #4639
- fix: increase lock acquisition attempts from 60 to 200 by @nabokihms in #4644
- fix(localSigner): simplify Algorithm method to always return RSA alg by @nabokihms in #4655
- fix non-constant format string in call to newRedirectedErr by @taylorsilva in #4671
- docs: mention LDAP recursionGroupAttr in config.yaml.dist by @space-arens in #4697
- feat: include prompt=select_account in back link for multiple connectors by @nabokihms in #4694
- fix: update parseSession callas after merging home page by @nabokihms in #4701
- fix: migrate Bitbucket Cloud connector to current workspace API by @nicknikolakakis in #4687
- fix: enforce MFA validation on session login by @jnfrati in #4726
- fix(refreshhandlers): preserve existing username by @hisamafahri in #4758
- fix(server): enforce client.AllowedConnectors in handleTokenExchange (GHSA-7qjx-gp9h-65qj) by @matte1782 in #4784
- fix(gitlab): drop openid scope requirement if there are no groups presented by @space-arens in #4810
- fix(storage): compare DeviceRequest expiry by instant in conformance test by @arpitjain099 in #4817
- Update expired OAM test cert by @sagikazarmark in #4864
- fix(mfa): enforce WebAuthn clone detection, TOTP single-use, and account lockout by @nabokihms in #4884
- fix(sessions): make SSO sharing non-transitive; drop redirect_uri double-decode by @nabokihms in #4885
- fix(server): enforce client AllowedConnectors on all token grants by @nabokihms in #4889
- fix(server): harden several auth-surface security findings by @nabokihms in #4927
- fix(device): bind device-callback auth code to its request and stop leaking client_secret by @nabokihms in #4928
- fix(web): keep the connector buttons intact when a connector name is long by @nabokihms in #4939
- fix(server): return invalid_grant for rejected refresh tokens by @and-win in #5040
- fix(oidc): keep rootCAs client when providerDiscoveryOverrides is set by @The127 in #5049
- fix(storage): tolerate concurrent Kubernetes garbage collection by @devantler in #5059
Dependency Updates ⬆️
- build(deps): bump google.golang.org/api from 0.267.0 to 0.268.0 by @dependabot[bot] in #4577
- build(deps): bump google.golang.org/api from 0.268.0 to 0.269.0 by @dependabot[bot] in #4582
- build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #4584
- build(deps): bump anchore/sbom-action from 0.22.2 to 0.23.0 by @dependabot[bot] in #4587
- build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 by @dependabot[bot] in #4586
- build(deps): bump actions/attest-build-provenance from 3.2.0 to 4.0.0 by @dependabot[bot] in #4585
- build(deps): bump actions/attest-build-provenance from 4.0.0 to 4.1.0 by @dependabot[bot] in #4595
- build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #4594
- build(deps): bump distroless/static-debian13 from
01e550ftof512d81by @dependabot[bot] in #4593 - build(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.34.2 by @dependabot[bot] in #4602
- build(deps): bump github/codeql-action from 4.32.4 to 4.32.5 by @dependabot[bot] in #4603
- build(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in #4605
- build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #4608
- build(deps): bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #4609
- build(deps): bump golang from 1.26.0-alpine3.22 to 1.26.1-alpine3.22 by @dependabot[bot] in #4612
- build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #4616
- build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #4613
- build(deps): bump docker/metadata-action from 5.10.0 to 6.0.0 by @dependabot[bot] in #4614
- build(deps): bump github/codeql-action from 4.32.5 to 4.32.6 by @dependabot[bot] in #4615
- build(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 in /examples by @dependabot[bot] in #4627
- build(deps): bump aquasecurity/trivy-action from 0.34.2 to 0.35.0 by @dependabot[bot] in #4622
- build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 by @dependabot[bot] in #4623
- build(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 by @dependabot[bot] in #4624
- build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 in /examples by @dependabot[bot] in #4626
- build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 in /api/v2 by @dependabot[bot] in #4625
- build(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by @dependabot[bot] in #4628
- build(deps): bump google.golang.org/api from 0.269.0 to 0.270.0 by @dependabot[bot] in #4630
- build(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by @dependabot[bot] in #4629
- build(deps): bump google.golang.org/api from 0.270.0 to 0.271.0 by @dependabot[bot] in #4633
- build(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 by @dependabot[bot] in #4636
- build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 by @dependabot[bot] in #4635
- build(deps): bump mheap/github-action-required-labels from 5.5.1 to 5.5.2 by @dependabot[bot] in #4649
- build(deps): bump distroless/static-debian13 from
f512d81toe3f9456by @dependabot[bot] in #4648 - build(deps): bump github/codeql-action from 4.32.6 to 4.33.0 by @dependabot[bot] in #4651
- build(deps): bump google.golang.org/api from 0.271.0 to 0.272.0 by @dependabot[bot] in #4652
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.34 to 1.14.37 by @dependabot[bot] in #4653
- build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #4658
- build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.12 to 3.4.13 by @dependabot[bot] in #4659
- build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /examples by @dependabot[bot] in #4661
- build(deps): bump github.com/russellhaering/goxmldsig from 1.5.0 to 1.6.0 by @dependabot[bot] in #4664
- build(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0 by @dependabot[bot] in #4666
- build(deps): bump actions/cache from 5.0.3 to 5.0.4 by @dependabot[bot] in #4665
- chore: update Go and gRPC dependencies to 1.79.3 by @nabokihms in #4673
- build(deps): bump github/codeql-action from 4.33.0 to 4.34.1 by @dependabot[bot] in #4679
- build(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 by @dependabot[bot] in #4681
- build(deps): bump the etcd group with 2 updates by @dependabot[bot] in #4680
- build(deps): update entgo.io/ent to v0.14.6 and ariga.io/atlas to v0.36.2 by @nabokihms in #4684
- build(deps): bump google.golang.org/api from 0.272.0 to 0.273.0 by @dependabot[bot] in #4689
- build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @dependabot[bot] in #4692
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.37 to 1.14.38 by @dependabot[bot] in #4699
- build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #4700
- build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #4698
- build(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1 by @dependabot[bot] in #4702
- build(deps): bump google.golang.org/api from 0.273.0 to 0.273.1 by @dependabot[bot] in #4707
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #4706
- build(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0 in /examples by @dependabot[bot] in #4710
- build(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @dependabot[bot] in #4709
- build(deps): bump the etcd group with 2 updates by @dependabot[bot] in #4708
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /examples in the go_modules group across 1 directory by @dependabot[bot] in #4718
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.38 to 1.14.39 by @dependabot[bot] in #4717
- build(deps): bump github.com/go-webauthn/webauthn from 0.16.1 to 0.16.2 by @dependabot[bot] in #4715
- build(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2 by @dependabot[bot] in #4716
- build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #4713
- build(deps): bump google.golang.org/api from 0.273.1 to 0.274.0 by @dependabot[bot] in #4714
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.39 to 1.14.40 by @dependabot[bot] in #4722
- build(deps): bump github.com/go-webauthn/webauthn from 0.16.2 to 0.16.3 by @dependabot[bot] in #4721
- build(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3 by @dependabot[bot] in #4720
- build(deps): bump oras-project/setup-oras from 1.2.4 to 2.0.0 by @dependabot[bot] in #4723
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.40 to 1.14.41 by @dependabot[bot] in #4724
- build(deps): bump golang from 1.26.1-alpine3.22 to 1.26.2-alpine3.22 by @dependabot[bot] in #4727
- build(deps): bump google.golang.org/api from 0.274.0 to 0.275.0 by @dependabot[bot] in #4729
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 by @dependabot[bot] in #4728
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 in /examples by @dependabot[bot] in #4730
- build(deps): bump github.com/google/cel-go from 0.27.0 to 0.28.0 by @dependabot[bot] in #4733
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.41 to 1.14.42 by @dependabot[bot] in #4732
- build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 by @dependabot[bot] in #4738
- build(deps): bump github.com/go-webauthn/webauthn from 0.16.3 to 0.16.4 by @dependabot[bot] in #4736
- build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #4740
- build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #4741
- build(deps): bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #4744
- build(deps): bump alpine from 3.23.3 to 3.23.4 by @dependabot[bot] in #4746
- build(deps): bump google.golang.org/api from 0.275.0 to 0.276.0 by @dependabot[bot] in #4745
- build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #4747
- build(deps): bump github.com/go-webauthn/webauthn from 0.16.4 to 0.16.5 by @dependabot[bot] in #4752
- build(deps): bump golang from
c259ff7to18e6f5aby @dependabot[bot] in #4750 - build(deps): bump golang from
18e6f5ato7ef9411by @dependabot[bot] in #4753 - build(deps): bump github.com/go-webauthn/webauthn from 0.16.5 to 0.17.0 by @dependabot[bot] in #4754
- build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in #4756
- build(deps): bump github.com/Azure/go-ntlmssp from 0.1.0 to 0.1.1 by @dependabot[bot] in #4757
- build(deps): bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 by @dependabot[bot] in #4762
- build(deps): bump google.golang.org/api from 0.276.0 to 0.277.0 by @dependabot[bot] in #4763
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.42 to 1.14.44 by @dependabot[bot] in #4764
- build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @dependabot[bot] in #4779
- build(deps): bump google.golang.org/api from 0.277.0 to 0.278.0 by @dependabot[bot] in #4778
- build(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 in /examples by @dependabot[bot] in #4775
- build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #4768
- build(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @dependabot[bot] in #4772
- build(deps): bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 by @dependabot[bot] in #4773
- build(deps): bump golang from 1.26.2-alpine3.22 to 1.26.3-alpine3.22 by @dependabot[bot] in #4781
- build(deps): bump github.com/go-webauthn/webauthn from 0.17.0 to 0.17.2 by @dependabot[bot] in #4770
- build(deps): bump the etcd group across 1 directory with 2 updates by @dependabot[bot] in #4769
- build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 by @dependabot[bot] in #4782
- build(deps): bump golang.org/x/net from 0.53.0 to 0.54.0 by @dependabot[bot] in #4789
- build(deps): bump github.com/go-webauthn/webauthn from 0.17.2 to 0.17.3 by @dependabot[bot] in #4788
- build(deps): bump google.golang.org/api from 0.278.0 to 0.280.0 by @dependabot[bot] in #4801
- build(deps): bump github.com/google/cel-go from 0.28.0 to 0.28.1 by @dependabot[bot] in #4792
- build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 by @dependabot[bot] in #4799
- build(deps): bump distroless/static-debian13 from
e3f9456to963fa6cby @dependabot[bot] in #4798 - build(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 in /examples by @dependabot[bot] in #4795
- build(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 by @dependabot[bot] in #4787
- build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #4803
- build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 by @dependabot[bot] in #4809
- build(deps): bump alpine from 3.23.4 to 3.24.0 by @dependabot[bot] in #4820
- build(deps): bump the etcd group across 1 directory with 2 updates by @dependabot[bot] in #4814
- build(deps): bump github.com/go-webauthn/webauthn from 0.17.3 to 0.17.4 by @dependabot[bot] in #4808
- build(deps): bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #4807
- build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by @dependabot[bot] in #4804
- build(deps): bump google.golang.org/api from 0.280.0 to 0.283.0 by @dependabot[bot] in #4816
- build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in #4806
- build(deps): bump golang from 1.26.3-alpine3.22 to 1.26.4-alpine3.22 by @dependabot[bot] in #4815
- build(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #4802
- build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #4826
- build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #4825
- build(deps): bump google.golang.org/api from 0.283.0 to 0.284.0 by @dependabot[bot] in #4822
- build(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in #4819
- build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #4805
- build(deps): bump alpine from 3.24.0 to 3.24.1 by @dependabot[bot] in #4834
- build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in #4824
- build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in #4823
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 in /examples by @dependabot[bot] in #4838
- build(deps): bump google.golang.org/api from 0.284.0 to 0.286.0 by @dependabot[bot] in #4835
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 by @dependabot[bot] in #4837
- build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #4840
- build(deps): bump github.com/openbao/openbao/api/v2 from 2.5.1 to 2.6.0 by @dependabot[bot] in #4848
- build(deps): bump actions/cache from 5.0.5 to 6.0.0 by @dependabot[bot] in #4846
- build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #4847
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.44 to 1.14.47 by @dependabot[bot] in #4849
- build(deps): bump the etcd group across 1 directory with 2 updates by @dependabot[bot] in #4861
- build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #4860
- build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #4856
- build(deps): bump actions/cache from 6.0.0 to 6.1.0 by @dependabot[bot] in #4854
- build(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 by @dependabot[bot] in #4853
- build(deps): bump actions/cache/save from 6.0.0 to 6.1.0 by @dependabot[bot] in #4852
- build(deps): bump google.golang.org/api from 0.286.0 to 0.287.0 by @dependabot[bot] in #4855
- build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.0 in /api/v2 by @dependabot[bot] in #4857
- build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /examples by @dependabot[bot] in #4858
- build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 in /examples in the go_modules group across 1 directory by @dependabot[bot] in #4871
- build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 in /api/v2 in the go_modules group across 1 directory by @dependabot[bot] in #4870
- build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 by @dependabot[bot] in #4867
- build(deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #4873
- build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.1 by @dependabot[bot] in #4872
- build(deps): bump google.golang.org/api from 0.287.0 to 0.287.1 by @dependabot[bot] in #4874
- build(deps): bump distroless/static-debian13 from
963fa6ctod29e660by @dependabot[bot] in #4876 - build(deps): bump github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0 in /examples by @dependabot[bot] in #4883
- build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by @dependabot[bot] in #4878
- build(deps): bump oras-project/setup-oras from 2.0.0 to 2.0.1 by @dependabot[bot] in #4888
- build(deps): bump distroless/static-debian13 from
d29e660tof7f8f72by @dependabot[bot] in #4894 - build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in #4880
- build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #4865
- build(deps): bump mheap/github-action-required-labels from 5.5.2 to 5.6.0 by @dependabot[bot] in #4875
- build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #4900
- build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in /examples by @dependabot[bot] in #4904
- build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 by @dependabot[bot] in #4924
- build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in #4925
- build(deps): bump docker/login-action from 4.4.0 to 4.5.0 by @dependabot[bot] in #4926
- build(deps): bump docker/login-action from 4.5.0 to 4.5.1 by @dependabot[bot] in #4931
- build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #4918
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.47 to 1.14.48 by @dependabot[bot] in #4902
- build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.13 to 3.4.14 by @dependabot[bot] in #4901
- build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #4868
- Bump Gomplate v5.2.0 by @nabokihms in #4934
- build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in #4932
- build(deps): bump github.com/google/cel-go from 0.29.1 to 0.30.0 by @dependabot[bot] in #4938
- build(deps): bump github.com/beevik/etree from 1.6.0 to 1.7.0 by @dependabot[bot] in #4947
- build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 in /examples by @dependabot[bot] in #4953
- build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4 by @dependabot[bot] in #4954
- build(deps): bump docker/login-action from 4.5.1 to 4.6.0 by @dependabot[bot] in #4946
- build(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 by @dependabot[bot] in #4944
- build(deps): bump google.golang.org/api from 0.287.1 to 0.291.0 by @dependabot[bot] in #4943
- Upgrade Go to 1.27 by @sagikazarmark in #5009
- build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 by @dependabot[bot] in #5006
- build(deps): bump helm/kind-action from 1.14.0 to 1.15.0 by @dependabot[bot] in #5002
- build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 by @dependabot[bot] in #4958
- build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by @dependabot[bot] in #4969
- build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #4977
- build(deps): bump distroless/static-debian13 from
f7f8f72to1c2c046by @dependabot[bot] in #4980 - build(deps): bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2 by @dependabot[bot] in #4992
- build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.9 by @dependabot[bot] in #4995
- build(deps): bump the etcd group across 1 directory with 2 updates by @dependabot[bot] in #4877
- build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.2 in /examples by @dependabot[bot] in #4994
- build(deps): bump the github-actions group with 4 updates by @dependabot[bot] in #5038
- build(deps): bump the docker group with 2 updates by @dependabot[bot] in #5035
- build(deps): bump golang from
cf6fca6toe9bbdf2by @dependabot[bot] in #5025 - build(deps): bump the go group with 16 updates by @dependabot[bot] in #5037
- build(deps): bump the go group across 1 directory with 4 updates by @dependabot[bot] in #5036
- build(deps): bump google.golang.org/grpc from 1.82.0 to 1.83.1 in /api/v2 in the go_modules group across 1 directory by @dependabot[bot] in #4997
- build(deps): bump the go group across 1 directory with 2 updates by @dependabot[bot] in #5034
- build(deps): bump the etcd group with 2 updates by @dependabot[bot] in #5045
- build(deps): bump the go group across 1 directory with 3 updates by @dependabot[bot] in #5044
- build(deps): bump golang from
e9bbdf2to8a5910fin the docker group by @dependabot[bot] in #5041 - build(deps): bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2 in the github-actions group by @dependabot[bot] in #5046
- build(deps): bump oras-project/setup-oras from 2.0.1 to 2.0.2 in the github-actions group by @dependabot[bot] in #5054
- build(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 in the github-actions group by @dependabot[bot] in #5058
- build(deps): bump the go group with 2 updates by @dependabot[bot] in #5057
- build(gomplate): copy gomplate from its image so Dependabot tracks it by @JanWelker in #5047
Other Changes
New Contributors
- @backkem made their first contribution in #4580
- @loafoe made their first contribution in #4529
- @matzegebbe made their first contribution in #4589
- @kanywst made their first contribution in #4598
- @mark-liu made their first contribution in #4620
- @utafrali made their first contribution in #4647
- @yardenshoham made their first contribution in #4061
- @taylorsilva made their first contribution in #4671
- @space-arens made their first contribution in #4682
- @bufferoverflow made their first contribution in #4695
- @nicknikolakakis made their first contribution in #4687
- @jnfrati made their first contribution in #4726
- @carlesarnal made their first contribution in #4691
- @hisamafahri made their first contribution in #4758
- @0x2b3bfa0 made their first contribution in #4780
- @matte1782 made their first contribution in #4784
- @AntonKulyashov made their first contribution in #4800
- @arpitjain099 made their first contribution in #4817
- @matheuscscp made their first contribution in #4845
- @Kunalbehbud made their first contribution in #4897
- @dronenb made their first contribution in #4521
- @XDanny322 made their first contribution in #4833
- @CasLubbers made their first contribution in #4989
- @akhilnittala made their first contribution in #4987
- @and-win made their first contribution in #5040
- @MistLiao made their first contribution in #5001
- @JanWelker made their first contribution in #5047
- @The127 made their first contribution in #5049
- @devantler made their first contribution in #5059
- @anandf made their first contribution in #5023
Full Changelog: v2.45.0...v2.46.0