dependabot[bot]
b33cebb8a2
build(deps): bump docker/setup-buildx-action from 3.6.1 to 3.7.1 ( #3781 )
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 3.6.1 to 3.7.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](988b5a0280...c47758b77c )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 year ago
dependabot[bot]
df89714fdc
build(deps): bump cloud.google.com/go/compute/metadata ( #3764 )
...
Bumps [cloud.google.com/go/compute/metadata](https://github.com/googleapis/google-cloud-go ) from 0.5.0 to 0.5.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/v0.5.0...auth/v0.5.2 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/compute/metadata
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 year ago
dependabot[bot]
c5c1052219
build(deps): bump distroless/static-debian12 from `dcd3f1f` to `26f9b99` ( #3766 )
...
Bumps distroless/static-debian12 from `dcd3f1f` to `26f9b99`.
---
updated-dependencies:
- dependency-name: distroless/static-debian12
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 year ago
dependabot[bot]
7b687e32b6
build(deps): bump golang from 1.23.1-alpine3.20 to 1.23.2-alpine3.20 ( #3775 )
...
Bumps golang from 1.23.1-alpine3.20 to 1.23.2-alpine3.20.
---
updated-dependencies:
- dependency-name: golang
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 year ago
dependabot[bot]
4f628bcdbb
build(deps): bump github/codeql-action from 3.25.15 to 3.26.13 ( #3795 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.15 to 3.26.13.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](afb54ba388...f779452ac5 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 year ago
dependabot[bot]
93637fb214
build(deps): bump aquasecurity/trivy-action from 0.24.0 to 0.28.0 ( #3797 )
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.24.0 to 0.28.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](6e7b7d1fd3...915b19bbe7 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 year ago
Maksim Nabokikh
f46adb9536
Support base64 encoded and PEM encoded certs ( #3751 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
1 year ago
Maksim Nabokikh
4bb97c73a9
Handle root path better (than nothing) ( #3747 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail,com>
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
1 year ago
Emmanuel Ferdman
c6e15b5442
fix: update enhancement proposal link ( #3755 )
...
Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>
1 year ago
siarhei-haurylau
fe08a08923
saml connector: fix nil pointer on validate saml ( #3793 )
...
Signed-off-by: Siarhei Haurylau <siarhei.haurylau@point-devel.com>
1 year ago
Tuomo Tanskanen
749bbd5d98
fix unmarshaling of expanded environment variables with special characters ( #3770 )
...
If we expand environment values directly with os.ExpandEnv() over whole
config, we might end up in a situation where the environment variable
has escape characters that break the resulting JSON, and unmarshalling
fails. Instead of expanding the entire config with single call, we
recurse through the config and expand the values in leaves one by one.
Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>
1 year ago
Daniël Sonck
e7c0682e45
feat: also allow localhost equivalent IP addresses ( #3778 )
...
Instead of only checking for "localhost", also validate through
net.ParseIP + IsLoopback whether the host is numerically localhost
Signed-off-by: Daniel Sonck <daniel@sonck.nl>
1 year ago
Márk Sági-Kazár
6c7766249f
Merge pull request #3753 from dexidp/dependabot/go_modules/github.com/Masterminds/sprig/v3-3.3.0
...
build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0
2 years ago
Márk Sági-Kazár
7ed5b8aa50
Merge pull request #3746 from dexidp/dependabot/github_actions/anchore/sbom-action-0.17.2
...
build(deps): bump anchore/sbom-action from 0.17.0 to 0.17.2
2 years ago
dependabot[bot]
2daa9fe0d3
build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0
...
Bumps [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig ) from 3.2.3 to 3.3.0.
- [Release notes](https://github.com/Masterminds/sprig/releases )
- [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0 )
---
updated-dependencies:
- dependency-name: github.com/Masterminds/sprig/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Márk Sági-Kazár
361d0202cd
Merge pull request #3754 from dexidp/dependabot/docker/distroless/static-debian12-dcd3f1f
...
build(deps): bump distroless/static-debian12 from `42d15c6` to `dcd3f1f`
2 years ago
Márk Sági-Kazár
a8ae234e35
Merge pull request #3742 from dexidp/dependabot/go_modules/google.golang.org/grpc-1.66.2
...
build(deps): bump google.golang.org/grpc from 1.66.0 to 1.66.2
2 years ago
Márk Sági-Kazár
50cbb5cbbb
Merge pull request #3738 from dexidp/dependabot/go_modules/github.com/mattn/go-sqlite3-1.14.23
...
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.22 to 1.14.23
2 years ago
dependabot[bot]
fc7d1b6107
build(deps): bump anchore/sbom-action from 0.17.0 to 0.17.2
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.17.0 to 0.17.2.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Commits](d94f46e13c...61119d458a )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Márk Sági-Kazár
563085fcb5
Merge pull request #3735 from dexidp/dependabot/github_actions/mheap/github-action-required-labels-5.4.2
...
build(deps): bump mheap/github-action-required-labels from 5.4.1 to 5.4.2
2 years ago
Márk Sági-Kazár
7062f9507a
Merge pull request #3734 from dexidp/dependabot/go_modules/examples/github.com/dexidp/dex/api/v2-2.2.0
...
build(deps): bump github.com/dexidp/dex/api/v2 from 2.1.0 to 2.2.0 in /examples
2 years ago
Márk Sági-Kazár
08bdc8f1aa
Merge pull request #3720 from dexidp/dependabot/github_actions/actions/upload-artifact-4.4.0
...
build(deps): bump actions/upload-artifact from 4.3.4 to 4.4.0
2 years ago
Márk Sági-Kazár
731a09371c
Merge pull request #3685 from dexidp/dependabot/github_actions/sigstore/cosign-installer-3.6.0
...
build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0
2 years ago
dependabot[bot]
4f27eec67e
build(deps): bump distroless/static-debian12 from `42d15c6` to `dcd3f1f`
...
Bumps distroless/static-debian12 from `42d15c6` to `dcd3f1f`.
---
updated-dependencies:
- dependency-name: distroless/static-debian12
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
IvoGoman
1a16aa4889
feat(metrics): add response_size, request_duration histograms ( #3748 )
...
replaces felixge/httpsnoop with prometheus/client_golang instrumentation
adds histograms for response_size_bytes & request_duration_seconds
Signed-off-by: Ivo Gosemann <ivo.gosemann@sap.com>
2 years ago
dependabot[bot]
3cff3032df
build(deps): bump google.golang.org/grpc from 1.66.0 to 1.66.2
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.66.0 to 1.66.2.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.66.0...v1.66.2 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
8333c84e65
build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.23.0 ( #3723 )
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.21.0 to 0.23.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.21.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
56f0e08413
build(deps): bump docker/build-push-action from 6.5.0 to 6.7.0 ( #3696 )
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.5.0 to 6.7.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](5176d81f87...5cd11c3a4c )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
5d89515856
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.22 to 1.14.23
...
Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3 ) from 1.14.22 to 1.14.23.
- [Release notes](https://github.com/mattn/go-sqlite3/releases )
- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.22...v1.14.23 )
---
updated-dependencies:
- dependency-name: github.com/mattn/go-sqlite3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
b58ba78208
build(deps): bump mheap/github-action-required-labels
...
Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels ) from 5.4.1 to 5.4.2.
- [Release notes](https://github.com/mheap/github-action-required-labels/releases )
- [Commits](5847eef682...d25134c992 )
---
updated-dependencies:
- dependency-name: mheap/github-action-required-labels
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
b3eb34ffed
build(deps): bump github.com/dexidp/dex/api/v2 in /examples
...
Bumps [github.com/dexidp/dex/api/v2](https://github.com/dexidp/dex ) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/dexidp/dex/releases )
- [Commits](https://github.com/dexidp/dex/compare/v2.1.0...v2.2.0 )
---
updated-dependencies:
- dependency-name: github.com/dexidp/dex/api/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot]
20f240c875
build(deps): bump google.golang.org/api from 0.190.0 to 0.196.0 ( #3721 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.190.0 to 0.196.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.190.0...v0.196.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
f52e3b760e
build(deps): bump tonistiigi/xx from 1.4.0 to 1.5.0 ( #3705 )
...
Bumps tonistiigi/xx from 1.4.0 to 1.5.0.
---
updated-dependencies:
- dependency-name: tonistiigi/xx
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
80287371a2
build(deps): bump distroless/static-debian12 from `8dd8d3c` to `42d15c6` ( #3724 )
...
Bumps distroless/static-debian12 from `8dd8d3c` to `42d15c6`.
---
updated-dependencies:
- dependency-name: distroless/static-debian12
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
f8b37a11f5
build(deps): bump google.golang.org/grpc in /examples ( #3731 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.65.0 to 1.66.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.65.0...v1.66.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
f2dcf46e3e
build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.3 ( #3727 )
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 1.4.0 to 1.4.3.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](210c191353...1c608d11d6 )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
81d7dd2722
build(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.23.0 in /examples ( #3722 )
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.21.0 to 0.23.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.21.0...v0.23.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
95bf7fa0c9
build(deps): bump golang.org/x/net from 0.27.0 to 0.29.0 ( #3726 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.27.0 to 0.29.0.
- [Commits](https://github.com/golang/net/compare/v0.27.0...v0.29.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
1cff80d259
build(deps): bump alpine from 3.20.2 to 3.20.3 ( #3729 )
...
Bumps alpine from 3.20.2 to 3.20.3.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
bcf62dbf21
build(deps): bump golang from 1.22.5-alpine3.20 to 1.23.1-alpine3.20 ( #3728 )
...
Bumps golang from 1.22.5-alpine3.20 to 1.23.1-alpine3.20.
---
updated-dependencies:
- dependency-name: golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
9048cedbfa
build(deps): bump actions/upload-artifact from 4.3.4 to 4.4.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.4 to 4.4.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](0b2256b8c0...50769540e7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Koen de Laat
d0f1777c41
Added Discovery to grpc ( #3598 )
...
Signed-off-by: Koen de Laat <koen.de.laat@philips.com>
2 years ago
Atte Niemi
14d31a75ec
chore: update nix-direnv from 1.5.0 to 3.0.5 ( #3700 )
...
Signed-off-by: Atte Niemi <4998544+hur@users.noreply.github.com>
2 years ago
dependabot[bot]
5d57edfdd7
build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](59acb6260d...4959ce089c )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Maksim Nabokikh
5c66c71864
Change workdir for gomplate ( #3684 )
...
Workaround to run gomplate from a non-root directory in distroless images, because gomplate tries to access CWD on start.
See: https://github.com/hairyhenderson/gomplate/pull/2202
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
Maksim Nabokikh
d2928d394b
Fix scheme for DialURL ldap connection ( #3677 )
...
* Use scheme without :// suffix
* Make test ldap server listen on custom ports to avoid stepping into go-ldap defaults
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
dependabot[bot]
257a821cca
build(deps): bump github/codeql-action from 3.25.14 to 3.25.15 ( #3664 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.14 to 3.25.15.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](5cf07d8b70...afb54ba388 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
Maksim Nabokikh
9986b27b76
Bump ent v0.14.0 ( #3670 )
...
Signed-off-by: m.nabokikh <maksim.nabokikh@flant.com>
2 years ago
dependabot[bot]
d79e577479
build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0 ( #3665 )
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 1.3.3 to 1.4.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](5e9cb68e95...210c191353 )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
dependabot[bot]
ec68cf6715
build(deps): bump google.golang.org/api from 0.189.0 to 0.190.0 ( #3667 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.189.0 to 0.190.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.189.0...v0.190.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago