Maksim Nabokikh
cf17fc68c8
test: update HandleCallback after merging OIDC PKCE ( #4572 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
3 weeks ago
Aljoscha Bollmann
83697b06a6
fix(server): respond with forbidden if failed to authenticate ( #4200 )
...
Signed-off-by: Aljoscha Bollmann <aljoscha.bollmann@proton.me>
3 weeks ago
Giovanni Vella
25591eeaf4
Add support to PKCE in OIDC connector ( #3777 )
...
Signed-off-by: johnvan7 <giovanni.vella98@gmail.com>
Signed-off-by: Giovanni Vella <giovanni.vella98@gmail.com>
3 weeks ago
Maksim Nabokikh
5d27abc117
feat: refactor example-app with a new config ( #4569 )
...
This is a preparation for KubeCon 2026:
1. Restyle the app
2. Refactor advanced configuration options
3. Move embedded templates and css to separate files
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
3 weeks ago
Maksim Nabokikh
08079303c9
feat: add debug step to check image metadata in workflow ( #4566 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
4 weeks ago
dependabot[bot]
49c8228d30
build(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 ( #4563 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.8.2 to 4.8.3.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](3c4e3dcb1a...05fe457637 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-version: 4.8.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 weeks ago
Maksim Nabokikh
0108be9e9f
feat: add skopeo copy command to transfer image from OCI layout ( #4564 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
4 weeks ago
dependabot[bot]
548b0f54e8
build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 ( #4562 )
4 weeks ago
Maksim Nabokikh
29c7b6f4e3
feat: validate redirect URIs and safely append parameters ( #4559 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
4 weeks ago
dependabot[bot]
69f9b7eef9
build(deps): bump google.golang.org/api from 0.266.0 to 0.267.0 ( #4558 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.266.0 to 0.267.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.266.0...v0.267.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.267.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 weeks ago
dependabot[bot]
be13b1f4d2
build(deps): bump helm/kind-action from 1.13.0 to 1.14.0 ( #4557 )
...
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.13.0 to 1.14.0.
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](92086f6be0...ef37e7f390 )
---
updated-dependencies:
- dependency-name: helm/kind-action
dependency-version: 1.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 weeks ago
Maksim Nabokikh
dce46384d9
build(deps): update gRPC to v1.79.1 and other dependencies ( #4554 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
4 weeks ago
Maksim Nabokikh
955142bae2
feat: enhance git-version script to generate pseudo-versions with timestamp ( #4553 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
4 weeks ago
Maksim Nabokikh
adec8b481a
Add steps to fetch and extract OCI image tarball ( #4552 )
...
Added steps to fetch and extract OCI image tarball.
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
4 weeks ago
Maksim Nabokikh
eb9f04b468
Debug trivy scans ( #4545 )
...
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
4 weeks ago
dependabot[bot]
5593fb7fcf
build(deps): bump github/codeql-action from 4.32.2 to 4.32.3 ( #4547 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.2 to 4.32.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](45cbd0c69e...9e907b5e64 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 weeks ago
dependabot[bot]
c331bb9608
build(deps): bump the etcd group with 2 updates ( #4548 )
...
Bumps the etcd group with 2 updates: [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd ) and [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd ).
Updates `go.etcd.io/etcd/client/pkg/v3` from 3.6.7 to 3.6.8
- [Release notes](https://github.com/etcd-io/etcd/releases )
- [Commits](https://github.com/etcd-io/etcd/compare/v3.6.7...v3.6.8 )
Updates `go.etcd.io/etcd/client/v3` from 3.6.7 to 3.6.8
- [Release notes](https://github.com/etcd-io/etcd/releases )
- [Commits](https://github.com/etcd-io/etcd/compare/v3.6.7...v3.6.8 )
---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/client/pkg/v3
dependency-version: 3.6.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: etcd
- dependency-name: go.etcd.io/etcd/client/v3
dependency-version: 3.6.8
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: etcd
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 weeks ago
dependabot[bot]
e640a40a47
build(deps): bump google.golang.org/grpc from 1.79.0 to 1.79.1 ( #4549 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.79.0 to 1.79.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.0...v1.79.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 weeks ago
dependabot[bot]
2976b2363a
build(deps): bump google.golang.org/grpc in /examples ( #4551 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.79.0 to 1.79.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.79.0...v1.79.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 weeks ago
dependabot[bot]
7c74dd8ad8
build(deps): bump distroless/static-debian13 from `f9f84bd` to `01e550f` ( #4546 )
...
Bumps distroless/static-debian13 from `f9f84bd` to `01e550f`.
---
updated-dependencies:
- dependency-name: distroless/static-debian13
dependency-version: nonroot
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
4 weeks ago
Maksim Nabokikh
a5f49565a1
Add permissions section to trivydb-cache workflow ( #4544 )
...
Signed-off-by: Maksim Nabokikh <maksim.nabokikh@flant.com>
4 weeks ago
Maksim Nabokikh
9bee809252
feat(crd): add CRD handling behavior and configuration options ( #4543 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
4 weeks ago
Maksim Nabokikh
ad3a83ebcf
build(gomplate): update gomplate version to v5.0.0 and add update script ( #4542 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
4 weeks ago
Maksim Nabokikh
785033767c
feat: refactor signer configuration with local and vault options ( #4532 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
4 weeks ago
Logan
d90827cc30
fix: use correct id value for label ( #4541 )
...
Signed-off-by: Logan <31484824+loganripplinger@users.noreply.github.com>
4 weeks ago
Maksim Nabokikh
489e37d07a
fix: suppress deprecation warning for userAttr when not set ( #4539 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
1 month ago
dependabot[bot]
76d7ed49ed
build(deps): bump aquasecurity/trivy-action from 0.33.1 to 0.34.0 ( #4533 )
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.33.1 to 0.34.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](b6643a29fe...c1824fd6ed )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-version: 0.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
4955d43d45
build(deps): bump docker/build-push-action from 6.19.1 to 6.19.2 ( #4535 )
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.19.1 to 6.19.2.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](601a80b39c...10e90e3645 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 6.19.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
f2c2526e95
build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.0 ( #4534 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.78.0 to 1.79.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
9bee0b0bc6
build(deps): bump google.golang.org/grpc in /examples ( #4537 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.78.0 to 1.79.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
1855a9aca7
build(deps): bump github.com/lib/pq from 1.11.1 to 1.11.2 ( #4525 )
...
Bumps [github.com/lib/pq](https://github.com/lib/pq ) from 1.11.1 to 1.11.2.
- [Release notes](https://github.com/lib/pq/releases )
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lib/pq/compare/v1.11.1...v1.11.2 )
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-version: 1.11.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
5c32fad345
build(deps): bump github.com/mattn/go-sqlite3 from 1.14.33 to 1.14.34 ( #4524 )
...
Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3 ) from 1.14.33 to 1.14.34.
- [Release notes](https://github.com/mattn/go-sqlite3/releases )
- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.33...v1.14.34 )
---
updated-dependencies:
- dependency-name: github.com/mattn/go-sqlite3
dependency-version: 1.14.34
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
52c243f56a
build(deps): bump golang from 1.25.7-alpine3.22 to 1.26.0-alpine3.22 ( #4522 )
...
Bumps golang from 1.25.7-alpine3.22 to 1.26.0-alpine3.22.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.26.0-alpine3.22
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
27b5f2937c
build(deps): bump docker/build-push-action from 6.18.0 to 6.19.1 ( #4530 )
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 6.18.0 to 6.19.1.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](263435318d...601a80b39c )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-version: 6.19.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
Ivan Zviagintsev
9e377718dc
feat: add name and emailVerified fields for static passwords ( #4526 )
...
Signed-off-by: Ivan Zvyagintsev <ivan.zvyagintsev@flant.com>
1 month ago
dependabot[bot]
c016300db9
build(deps): bump google.golang.org/api from 0.265.0 to 0.266.0 ( #4523 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.265.0 to 0.266.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.265.0...v0.266.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.266.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
Maksim Nabokikh
2f6a185711
test: Add conformance tests for Vault signer integration ( #4520 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Alwx <alwxsin@gmail.com>
1 month ago
Maksim Nabokikh
56958b1ad2
feat: Add Vault signer for JWT ( #4512 )
...
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
1 month ago
dependabot[bot]
79e28f5040
build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 ( #4519 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.49.0 to 0.50.0.
- [Commits](https://github.com/golang/net/compare/v0.49.0...v0.50.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.50.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
b09a9e73a0
build(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0 ( #4518 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.47.0 to 0.48.0.
- [Commits](https://github.com/golang/crypto/compare/v0.47.0...v0.48.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.48.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
4c94d8a140
build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 in /examples ( #4516 )
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.34.0 to 0.35.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.34.0...v0.35.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-version: 0.35.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
246124ebbd
build(deps): bump anchore/sbom-action from 0.22.1 to 0.22.2 ( #4510 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.22.1 to 0.22.2.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](deef08a0db...28d71544de )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.22.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
cee32d6936
build(deps): bump github/codeql-action from 4.32.0 to 4.32.2 ( #4509 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.0 to 4.32.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b20883b0cd...45cbd0c69e )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
894af721a7
build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 ( #4515 )
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.34.0 to 0.35.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.34.0...v0.35.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-version: 0.35.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
e0268e2895
build(deps): bump golang from 1.25.6-alpine3.22 to 1.25.7-alpine3.22 ( #4514 )
...
Bumps golang from 1.25.6-alpine3.22 to 1.25.7-alpine3.22.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.7-alpine3.22
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
Maksim Nabokikh
be791c0397
feat: add unprivileged user setup in Dockerfile ( #4517 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
1 month ago
Doug Goldstein
4bdb4f2c5a
chore: extend example configs for idEnv and public ( #4443 )
...
Add a few more examples in the configs for staticClient configuration
using idEnv and public flags.
Signed-off-by: Doug Goldstein <cardoe@cardoe.com>
1 month ago
Manoj Vivek
ec564f2420
Enable ContinueOnConnectorFailure feature flag ( #4495 )
...
Signed-off-by: Manoj Vivek <p.manoj.vivek@gmail.com>
1 month ago
Márk Sági-Kazár
167ea52474
Merge pull request #4503 from dexidp/dependabot/github_actions/docker/login-action-3.7.0
...
build(deps): bump docker/login-action from 3.6.0 to 3.7.0
1 month ago
dependabot[bot]
1997f6322d
build(deps): bump docker/login-action from 3.6.0 to 3.7.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](5e57cd1181...c94ce9fb46 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 3.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
1 month ago