v2.44.0

Compare Source

What's Changed

Enhancements 🚀

• Allow server startup with partial connector failures by @​manojVivek in #​4159
• Add recursive LDAP parent group search (AD-style hierarchy across all LDAPs) by @​EthanDieterich in #​4113
• feat: Add ModifyGroupNames claimMutation to oidc connector by @​peschmae in #​4144
• authproxy connector: add support for specifying group header separator by @​a-buck in #​3745
• fix: join issuer URL with discovery path without extra slash after issuer URL by @​vizv in #​4263
• feat: grpc api list clients by @​daemonfire300 in #​4202

Bug Fixes 🐛

• 🐛 remove extra method="get" from device-code template by @​tuminoid in #​4145
• [oidc] pass httpClient to the TokenIdentity context by @​marriva in #​4223
• Resolve CVE by updating gomplate to 4.3.3 by @​philBrown in #​4224
• fix: device code should not require scope by @​cardoe in #​4203
• fix: device code pending HTTP response by @​cardoe in #​4204
• Allow compilation without CGO by @​nabokihms in #​4266

Dependency Updates ⬆️

• Resolve CVE by updating gomplate to 4.3.2 by @​nathanlaceyraft in #​4146
• build(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by @​dependabot[bot] in #​4180
• build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @​dependabot[bot] in #​4171
• build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /examples by @​dependabot[bot] in #​4174
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.0 by @​dependabot[bot] in #​4179
• build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 by @​dependabot[bot] in #​4167
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​dependabot[bot] in #​4162
• build(deps): bump docker/build-push-action from 6.17.0 to 6.18.0 by @​dependabot[bot] in #​4155
• build(deps): bump distroless/static-debian12 from 188ddfb to 627d6c5 by @​dependabot[bot] in #​4181
• build(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @​dependabot[bot] in #​4187
• build(deps): bump google.golang.org/api from 0.233.0 to 0.238.0 by @​dependabot[bot] in #​4186
• build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0 by @​dependabot[bot] in #​4185
• build(deps): bump anchore/sbom-action from 0.20.0 to 0.20.1 by @​dependabot[bot] in #​4184
• build(deps): bump github.com/go-sql-driver/mysql from 1.9.2 to 1.9.3 by @​dependabot[bot] in #​4183
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4175
• build(deps): bump alpine from 3.21.3 to 3.22.0 by @​dependabot[bot] in #​4163
• build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /api/v2 by @​dependabot[bot] in #​4170
• build(deps): bump docker/setup-buildx-action from 3.11.0 to 3.11.1 by @​dependabot[bot] in #​4189
• build(deps): bump mheap/github-action-required-labels from 5.5.0 to 5.5.1 by @​dependabot[bot] in #​4190
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.0 in /examples by @​dependabot[bot] in #​4219
• build(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 by @​dependabot[bot] in #​4205
• build(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.2 by @​dependabot[bot] in #​4225
• build(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @​dependabot[bot] in #​4210
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​4196
• build(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @​dependabot[bot] in #​4214
• build(deps): bump alpine from 3.22.0 to 3.22.1 by @​dependabot[bot] in #​4217
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4213
• build(deps): bump github.com/oklog/run from 1.1.0 to 1.2.0 by @​dependabot[bot] in #​4199
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.29 by @​dependabot[bot] in #​4239
• build(deps): bump github/codeql-action from 3.29.0 to 3.29.4 by @​dependabot[bot] in #​4238
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @​dependabot[bot] in #​4235
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4233
• build(deps): bump google.golang.org/grpc from 1.74.0 to 1.74.2 in /examples by @​dependabot[bot] in #​4232
• build(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 by @​dependabot[bot] in #​4229
• build(deps): bump google.golang.org/api from 0.238.0 to 0.243.0 by @​dependabot[bot] in #​4234
• build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​4227
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.15.0 in /examples by @​dependabot[bot] in #​4246
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4243
• build(deps): bump distroless/static-debian12 from 627d6c5 to cdf4daa by @​dependabot[bot] in #​4253
• build(deps): bump docker/metadata-action from 5.7.0 to 5.8.0 by @​dependabot[bot] in #​4252
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.29 to 1.14.30 by @​dependabot[bot] in #​4249
• build(deps): bump github/codeql-action from 3.29.4 to 3.29.5 by @​dependabot[bot] in #​4244
• build(deps): bump google.golang.org/api from 0.243.0 to 0.244.0 by @​dependabot[bot] in #​4247
• build(deps): bump docker/login-action from 3.4.0 to 3.5.0 by @​dependabot[bot] in #​4254
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​4255
• build(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @​dependabot[bot] in #​4257
• build(deps): bump google.golang.org/api from 0.244.0 to 0.246.0 by @​dependabot[bot] in #​4258
• build(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 by @​dependabot[bot] in #​4272
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.30 to 1.14.32 by @​dependabot[bot] in #​4271
• build(deps): bump github/codeql-action from 3.29.7 to 3.29.9 by @​dependabot[bot] in #​4269
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​4267
• build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​4262
• build(deps): bump actions/cache from 4.2.3 to 4.2.4 by @​dependabot[bot] in #​4261
• build(deps): bump cloud.google.com/go/compute/metadata from 0.7.0 to 0.8.0 by @​dependabot[bot] in #​4259
• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @​dependabot[bot] in #​4275
• build(deps): bump google.golang.org/api from 0.246.0 to 0.247.0 by @​dependabot[bot] in #​4274
• chore: update ent generated code by @​sagikazarmark in #​4276
• feat: update Go to 1.25 by @​sagikazarmark in #​4277
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 in /api/v2 by @​dependabot[bot] in #​4236
• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 in /api/v2 by @​dependabot[bot] in #​4260
• build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.2 by @​dependabot[bot] in #​4278
• build(deps): bump distroless/static-debian12 from cdf4daa to a9f88e0 by @​dependabot[bot] in #​4291
• build(deps): bump github.com/beevik/etree from 1.5.1 to 1.6.0 by @​dependabot[bot] in #​4288
• build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @​dependabot[bot] in #​4287
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 in /examples by @​dependabot[bot] in #​4282
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @​dependabot[bot] in #​4281
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 in /api/v2 by @​dependabot[bot] in #​4280
• build(deps): bump google.golang.org/api from 0.247.0 to 0.248.0 by @​dependabot[bot] in #​4283
• build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 by @​dependabot[bot] in #​4285
• build(deps): bump actions/dependency-review-action from 4.7.2 to 4.7.3 by @​dependabot[bot] in #​4290
• build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 in /api/v2 by @​dependabot[bot] in #​4286
• build(deps): bump actions/attest-build-provenance from 2.4.0 to 3.0.0 by @​dependabot[bot] in #​4296
• build(deps): bump aquasecurity/trivy-action from 0.32.0 to 0.33.0 by @​dependabot[bot] in #​4293
• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @​dependabot[bot] in #​4292

New Contributors

• @​nathanlaceyraft made their first contribution in #​4146
• @​manojVivek made their first contribution in #​4159
• @​marriva made their first contribution in #​4223
• @​peschmae made their first contribution in #​4144
• @​philBrown made their first contribution in #​4224
• @​a-buck made their first contribution in #​3745
• @​vizv made their first contribution in #​4263
• @​daemonfire300 made their first contribution in #​4202

Full Changelog: dexidp/dex@v2.43.0...v2.44.0

v1.24.6

Compare Source

• SECURITY
  • Upgrade xz to v0.5.15 (#​35385)
• BUGFIXES
  • Fix a compare page 404 bug when the pull request disabled (#​35441) (#​35453)
  • Fix bug when issue disabled, pull request number in the commit message cannot be redirected (#​35420) (#​35442)
  • Add author.name field to Swift Package Registry API response (#​35410) (#​35431)
  • Remove usernames when empty in discord webhook (#​35412) (#​35417)
  • Allow foreachref parser to grow its buffer (#​35365) (#​35376)
  • Allow deleting comment with content via API like web did (#​35346) (#​35354)
  • Fix atom/rss mixed error (#​35345) (#​35347)
  • Fix review request webhook bug (#​35339)
  • Remove duplicate html IDs (#​35210) (#​35325)
  • Fix LFS range size header response (#​35277) (#​35293)
  • Fix GitHub release assets URL validation (#​35287) (#​35290)
  • Fix token lifetime, closes #​35230 (#​35271) (#​35281)
  • Fix push commits comments when changing the pull request target branch (#​35386) (#​35443)

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v2.11.29

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.25.2 (#​11983 by ldez)
• [docker] Bump github.com/docker/docker to v28.3.3 (#​12007 by kevinpollet)

Documentation:

• Fix invalid links in documentation (#​11960 by mloiseleur)
• Update releases docs for v3.5 (#​11949 by jnoordsij)

v2.11.29

Compare Source

All Commits

Bug fixes:

• [acme] Bump github.com/go-acme/lego/v4 to v4.25.2 (#​11983 by ldez)
• [docker] Bump github.com/docker/docker to v28.3.3 (#​12007 by kevinpollet)

Documentation:

• Fix invalid links in documentation (#​11960 by mloiseleur)
• Update releases docs for v3.5 (#​11949 by jnoordsij)