Tuomo Tanskanen
749bbd5d98
fix unmarshaling of expanded environment variables with special characters ( #3770 )
...
If we expand environment values directly with os.ExpandEnv() over whole
config, we might end up in a situation where the environment variable
has escape characters that break the resulting JSON, and unmarshalling
fails. Instead of expanding the entire config with single call, we
recurse through the config and expand the values in leaves one by one.
Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
1 year ago
Daniël Sonck
e7c0682e45
feat: also allow localhost equivalent IP addresses ( #3778 )
...
Instead of only checking for "localhost", also validate through
net.ParseIP + IsLoopback whether the host is numerically localhost
Signed-off-by: Daniel Sonck <daniel@sonck.nl>
1 year ago
Márk Sági-Kazár
6c7766249f
Merge pull request #3753 from dexidp/dependabot/go_modules/github.com/Masterminds/sprig/v3-3.3.0
...
build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0
2 years ago
Márk Sági-Kazár
7ed5b8aa50
Merge pull request #3746 from dexidp/dependabot/github_actions/anchore/sbom-action-0.17.2
...
build(deps): bump anchore/sbom-action from 0.17.0 to 0.17.2
2 years ago
dependabot[bot]
2daa9fe0d3
build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0
...
Bumps [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig ) from 3.2.3 to 3.3.0.
- [Release notes](https://github.com/Masterminds/sprig/releases )
- [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0 )
---
updated-dependencies:
- dependency-name: github.com/Masterminds/sprig/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Márk Sági-Kazár
361d0202cd
Merge pull request #3754 from dexidp/dependabot/docker/distroless/static-debian12-dcd3f1f
...
build(deps): bump distroless/static-debian12 from `42d15c6` to `dcd3f1f`
2 years ago
Márk Sági-Kazár
a8ae234e35
Merge pull request #3742 from dexidp/dependabot/go_modules/google.golang.org/grpc-1.66.2
...
build(deps): bump google.golang.org/grpc from 1.66.0 to 1.66.2
2 years ago
Márk Sági-Kazár
50cbb5cbbb
Merge pull request #3738 from dexidp/dependabot/go_modules/github.com/mattn/go-sqlite3-1.14.23
...
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.22 to 1.14.23
2 years ago
dependabot[bot]
fc7d1b6107
build(deps): bump anchore/sbom-action from 0.17.0 to 0.17.2
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.17.0 to 0.17.2.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Commits](d94f46e13c...61119d458a )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Márk Sági-Kazár
563085fcb5
Merge pull request #3735 from dexidp/dependabot/github_actions/mheap/github-action-required-labels-5.4.2
...
build(deps): bump mheap/github-action-required-labels from 5.4.1 to 5.4.2
2 years ago
Márk Sági-Kazár
7062f9507a
Merge pull request #3734 from dexidp/dependabot/go_modules/examples/github.com/dexidp/dex/api/v2-2.2.0
...
build(deps): bump github.com/dexidp/dex/api/v2 from 2.1.0 to 2.2.0 in /examples
2 years ago
Márk Sági-Kazár
08bdc8f1aa
Merge pull request #3720 from dexidp/dependabot/github_actions/actions/upload-artifact-4.4.0
...
build(deps): bump actions/upload-artifact from 4.3.4 to 4.4.0
2 years ago
Márk Sági-Kazár
731a09371c
Merge pull request #3685 from dexidp/dependabot/github_actions/sigstore/cosign-installer-3.6.0
...
build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0
2 years ago
dependabot[bot]
4f27eec67e
build(deps): bump distroless/static-debian12 from `42d15c6` to `dcd3f1f`
...
Bumps distroless/static-debian12 from `42d15c6` to `dcd3f1f`.
---
updated-dependencies:
- dependency-name: distroless/static-debian12
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
IvoGoman
1a16aa4889
feat(metrics): add response_size, request_duration histograms ( #3748 )
...
replaces felixge/httpsnoop with prometheus/client_golang instrumentation
adds histograms for response_size_bytes & request_duration_seconds
Signed-off-by: Ivo Gosemann <ivo.gosemann@sap.com>
2 years ago
dependabot[bot]
3cff3032df
build(deps): bump google.golang.org/grpc from 1.66.0 to 1.66.2
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.66.0 to 1.66.2.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.66.0...v1.66.2 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
8333c84e65
build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.23.0 ( #3723 )
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.21.0 to 0.23.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.21.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
56f0e08413
build(deps): bump docker/build-push-action from 6.5.0 to 6.7.0 ( #3696 )
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.5.0 to 6.7.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](5176d81f87...5cd11c3a4c )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
5d89515856
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.22 to 1.14.23
...
Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3 ) from 1.14.22 to 1.14.23.
- [Release notes](https://github.com/mattn/go-sqlite3/releases )
- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.22...v1.14.23 )
---
updated-dependencies:
- dependency-name: github.com/mattn/go-sqlite3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
b58ba78208
build(deps): bump mheap/github-action-required-labels
...
Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels ) from 5.4.1 to 5.4.2.
- [Release notes](https://github.com/mheap/github-action-required-labels/releases )
- [Commits](5847eef682...d25134c992 )
---
updated-dependencies:
- dependency-name: mheap/github-action-required-labels
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
b3eb34ffed
build(deps): bump github.com/dexidp/dex/api/v2 in /examples
...
Bumps [github.com/dexidp/dex/api/v2](https://github.com/dexidp/dex ) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/dexidp/dex/releases )
- [Commits](https://github.com/dexidp/dex/compare/v2.1.0...v2.2.0 )
---
updated-dependencies:
- dependency-name: github.com/dexidp/dex/api/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
20f240c875
build(deps): bump google.golang.org/api from 0.190.0 to 0.196.0 ( #3721 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.190.0 to 0.196.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.190.0...v0.196.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
f52e3b760e
build(deps): bump tonistiigi/xx from 1.4.0 to 1.5.0 ( #3705 )
...
Bumps tonistiigi/xx from 1.4.0 to 1.5.0.
---
updated-dependencies:
- dependency-name: tonistiigi/xx
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
80287371a2
build(deps): bump distroless/static-debian12 from `8dd8d3c` to `42d15c6` ( #3724 )
...
Bumps distroless/static-debian12 from `8dd8d3c` to `42d15c6`.
---
updated-dependencies:
- dependency-name: distroless/static-debian12
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
f8b37a11f5
build(deps): bump google.golang.org/grpc in /examples ( #3731 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.65.0 to 1.66.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.65.0...v1.66.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
f2dcf46e3e
build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.3 ( #3727 )
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 1.4.0 to 1.4.3.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](210c191353...1c608d11d6 )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
81d7dd2722
build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.23.0 in /examples ( #3722 )
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.21.0 to 0.23.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.21.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
95bf7fa0c9
build(deps): bump golang.org/x/net from 0.27.0 to 0.29.0 ( #3726 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.27.0 to 0.29.0.
- [Commits](https://github.com/golang/net/compare/v0.27.0...v0.29.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
1cff80d259
build(deps): bump alpine from 3.20.2 to 3.20.3 ( #3729 )
...
Bumps alpine from 3.20.2 to 3.20.3.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
bcf62dbf21
build(deps): bump golang from 1.22.5-alpine3.20 to 1.23.1-alpine3.20 ( #3728 )
...
Bumps golang from 1.22.5-alpine3.20 to 1.23.1-alpine3.20.
---
updated-dependencies:
- dependency-name: golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
9048cedbfa
build(deps): bump actions/upload-artifact from 4.3.4 to 4.4.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.4 to 4.4.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](0b2256b8c0...50769540e7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Koen de Laat
d0f1777c41
Added Discovery to grpc ( #3598 )
...
Signed-off-by: Koen de Laat <koen.de.laat@philips.com>
2 years ago
Atte Niemi
14d31a75ec
chore: update nix-direnv from 1.5.0 to 3.0.5 ( #3700 )
...
Signed-off-by: Atte Niemi <4998544+hur@users.noreply.github.com>
2 years ago
dependabot[bot]
5d57edfdd7
build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](59acb6260d...4959ce089c )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Maksim Nabokikh
5c66c71864
Change workdir for gomplate ( #3684 )
...
Workaround to run gomplate from a non-root directory in distroless images, because gomplate tries to access CWD on start.
See: https://github.com/hairyhenderson/gomplate/pull/2202
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Maksim Nabokikh
d2928d394b
Fix scheme for DialURL ldap connection ( #3677 )
...
* Use scheme without :// suffix
* Make test ldap server listen on custom ports to avoid stepping into go-ldap defaults
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
dependabot[bot]
257a821cca
build(deps): bump github/codeql-action from 3.25.14 to 3.25.15 ( #3664 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.14 to 3.25.15.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](5cf07d8b70...afb54ba388 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
Maksim Nabokikh
9986b27b76
Bump ent v0.14.0 ( #3670 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
dependabot[bot]
d79e577479
build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0 ( #3665 )
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 1.3.3 to 1.4.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](5e9cb68e95...210c191353 )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
ec68cf6715
build(deps): bump google.golang.org/api from 0.189.0 to 0.190.0 ( #3667 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.189.0 to 0.190.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.189.0...v0.190.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
Maksim Nabokikh
2ca85ca43f
Migrate to docker compose plugin ( #3669 )
...
The docker-compose script was deleted in
https://github.com/actions/runner-images/pull/10368
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Maksim Nabokikh
07a42839a3
Fix logger.Warnf error after merging 3661 ( #3668 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
dependabot[bot]
daf32e528c
build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.3 to 4.0.4 ( #3666 )
...
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.3...v4.0.4 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
Maksim Nabokikh
81af48862b
Remove additional features and add a feature flag instead ( #3663 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Maksim Nabokikh
225660785c
Enrich Dex logs with real IP and request ID ( #3661 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Márk Sági-Kazár <sagikazarmark@users.noreply.github.com>
2 years ago
Márk Sági-Kazár
6ceb26509b
Merge pull request #3063 from jacksonargo/oidc-group-regex
...
add regex for oidc group matching
2 years ago
Puru
36e6e081f1
Update README: Add a link to release process in Development section ( #3650 )
2 years ago
dependabot[bot]
c21ab7ef60
build(deps): bump docker/login-action from 3.2.0 to 3.3.0 ( #3644 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](0d4c9c5ea7...9780b0c442 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
ce4be97dd6
build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0 ( #3643 )
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.4.1 to 6.5.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](1ca370b3a9...5176d81f87 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
c463f0630f
build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 ( #3656 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.3 to 2.4.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](dc50aa9510...62b2cac7ed )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago