Márk Sági-Kazár
e35542e57a
Merge pull request #4352 from dexidp/dependabot/go_modules/api/v2/google.golang.org/protobuf-1.36.10
...
build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.10 in /api/v2
4 months ago
Dmitry Shurupov
1d3b2b5499
Add Terrakube to Adopters ( #4316 )
...
Signed-off-by: Dmitry Shurupov <dmitry.shurupov@palark.com>
4 months ago
Márk Sági-Kazár
788bc19296
Merge pull request #4375 from dexidp/dependabot/go_modules/golang.org/x/oauth2-0.32.0
...
build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0
4 months ago
Márk Sági-Kazár
e551db9a5e
Merge pull request #4300 from dexidp/dependabot/go_modules/examples/github.com/spf13/cobra-1.10.1
...
build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in /examples
4 months ago
Rene Dekker
9355759813
fix(storage/kubernetes): Only wrap IPv6 addresses in brackets ( #4388 )
...
The Kubernetes client code was wrapping all IP addresses (both IPv4 and
IPv6) in square brackets when constructing the API server URL. This was
based on an incorrect assumption that IPv4 addresses in brackets are valid
in a URL.
Recent versions of Go (1.25.2 and later) have stricter URL parsing
that conforms to RFC 3986. This causes a failure when running Dex in a
Kubernetes environment where the KUBERNETES_SERVICE_HOST is an IPv4
address, leading to the error "invalid IPv6 host".
This commit changes the logic to only wrap IPv6 addresses in square
brackets. It uses `ip.To4() == nil` to reliably detect if an IP address
is IPv6 before wrapping it. This ensures that URLs are correctly
formatted for both IPv4 and IPv6 addresses, fixing the incompatibility
with newer Go versions.
Signed-off-by: Rene Dekker <rene@tigera.io>
4 months ago
dependabot[bot]
4206407169
build(deps): bump google.golang.org/protobuf in /api/v2
...
Bumps google.golang.org/protobuf from 1.36.8 to 1.36.10.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-version: 1.36.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
a4985114d2
build(deps): bump github.com/spf13/cobra in /examples
...
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra ) from 1.9.1 to 1.10.1.
- [Release notes](https://github.com/spf13/cobra/releases )
- [Commits](https://github.com/spf13/cobra/compare/v1.9.1...v1.10.1 )
---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
dependency-version: 1.10.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
a51cceaa6d
build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.31.0 to 0.32.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.31.0...v0.32.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-version: 0.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
Márk Sági-Kazár
f9d257adf3
Merge pull request #4371 from dexidp/dependabot/docker/golang-aee43c3
...
build(deps): bump golang from `20ee0b6` to `aee43c3`
4 months ago
Márk Sági-Kazár
b0a321ec23
Merge pull request #4373 from dexidp/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.1.3
...
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3
4 months ago
Márk Sági-Kazár
b652b55299
Merge pull request #4374 from dexidp/dependabot/go_modules/golang.org/x/net-0.46.0
...
build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0
4 months ago
Márk Sági-Kazár
9d3c17d482
Merge pull request #4380 from dexidp/dependabot/github_actions/sigstore/cosign-installer-4.0.0
...
build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0
4 months ago
Márk Sági-Kazár
7360083c6f
Merge pull request #4356 from dexidp/dependabot/go_modules/api/v2/google.golang.org/grpc-1.76.0
...
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 in /api/v2
4 months ago
dependabot[bot]
b2d9028fad
build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.44.0 to 0.46.0.
- [Commits](https://github.com/golang/net/compare/v0.44.0...v0.46.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.46.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
Márk Sági-Kazár
7b43080ae2
Merge pull request #4376 from dexidp/dependabot/go_modules/golang.org/x/crypto-0.43.0
...
build(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0
4 months ago
dependabot[bot]
523a2ff4b3
build(deps): bump golang from `20ee0b6` to `aee43c3`
...
Bumps golang from `20ee0b6` to `aee43c3`.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.3-alpine3.22
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
9a27a4af44
build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.10.0 to 4.0.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](d7543c93d8...faadad0cce )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 4.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
Márk Sági-Kazár
fead09d9a3
Merge pull request #4386 from dexidp/dependabot/docker/tonistiigi/xx-1.8.0
...
build(deps): bump tonistiigi/xx from 1.7.0 to 1.8.0
4 months ago
Márk Sági-Kazár
e7fcced7e6
Merge pull request #4393 from dexidp/dependabot/github_actions/anchore/sbom-action-0.20.9
...
build(deps): bump anchore/sbom-action from 0.20.6 to 0.20.9
4 months ago
Márk Sági-Kazár
451d281aa5
Merge pull request #4395 from dexidp/dependabot/github_actions/actions/upload-artifact-5.0.0
...
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0
4 months ago
Márk Sági-Kazár
ce6ace56de
Merge pull request #4398 from dexidp/dependabot/github_actions/github/codeql-action-4.31.2
...
build(deps): bump github/codeql-action from 4.30.8 to 4.31.2
4 months ago
dependabot[bot]
74a66cb653
build(deps): bump github/codeql-action from 4.30.8 to 4.31.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.30.8 to 4.31.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](f443b600d9...0499de31b9 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
86466446d3
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.2 to 5.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](ea165f8d65...330a01c490 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
3273c3be19
build(deps): bump anchore/sbom-action from 0.20.6 to 0.20.9
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.20.6 to 0.20.9.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](f8bdd1d8ac...8e94d75ddd )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.20.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
Maksim Nabokikh
7e2225c0e6
Do not wrap Kubernetes Address in brackets ( #4363 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
5 months ago
dependabot[bot]
73c37c9540
build(deps): bump tonistiigi/xx from 1.7.0 to 1.8.0
...
Bumps tonistiigi/xx from 1.7.0 to 1.8.0.
---
updated-dependencies:
- dependency-name: tonistiigi/xx
dependency-version: 1.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
a3962409b2
build(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.42.0 to 0.43.0.
- [Commits](https://github.com/golang/crypto/compare/v0.42.0...v0.43.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.43.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
53bbcce33e
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.2 to 4.1.3
...
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ) from 4.1.2 to 4.1.3.
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.2...v4.1.3 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
dependency-version: 4.1.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
72cffab69d
build(deps): bump google.golang.org/grpc in /api/v2
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.75.0 to 1.76.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.75.0...v1.76.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.76.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
Márk Sági-Kazár
9207486fac
Merge pull request #4362 from dexidp/dependabot/go_modules/examples/golang.org/x/oauth2-0.32.0
...
build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 in /examples
5 months ago
Márk Sági-Kazár
4a4e97030d
Merge pull request #4355 from dexidp/dependabot/go_modules/google.golang.org/grpc-1.76.0
...
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0
5 months ago
dependabot[bot]
5426f176b3
build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 in /examples
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.31.0 to 0.32.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.31.0...v0.32.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-version: 0.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
Márk Sági-Kazár
93fbd90244
Merge pull request #4354 from dexidp/dependabot/go_modules/examples/github.com/coreos/go-oidc/v3-3.16.0
...
build(deps): bump github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0 in /examples
5 months ago
dependabot[bot]
c56c12a3b0
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.75.0 to 1.76.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.75.0...v1.76.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.76.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
Márk Sági-Kazár
59abb28212
Merge pull request #4361 from dexidp/dependabot/docker/alpine-3.22.2
...
build(deps): bump alpine from 3.22.1 to 3.22.2
5 months ago
Márk Sági-Kazár
7c80f49cc3
Merge pull request #4333 from dexidp/dependabot/go_modules/etcd-0a9fed3439
...
build(deps): bump the etcd group with 2 updates
5 months ago
Márk Sági-Kazár
592bdf8af7
Merge pull request #4338 from dexidp/dependabot/github_actions/actions/cache-4.3.0
...
build(deps): bump actions/cache from 4.2.4 to 4.3.0
5 months ago
Márk Sági-Kazár
001447c9ae
Merge pull request #4348 from dexidp/dependabot/github_actions/docker/login-action-3.6.0
...
build(deps): bump docker/login-action from 3.5.0 to 3.6.0
5 months ago
Márk Sági-Kazár
6cfddabdad
Merge pull request #4350 from dexidp/dependabot/github_actions/ossf/scorecard-action-2.4.3
...
build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3
5 months ago
dependabot[bot]
2b428f57d4
build(deps): bump github.com/coreos/go-oidc/v3 in /examples
...
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc ) from 3.15.0 to 3.16.0.
- [Release notes](https://github.com/coreos/go-oidc/releases )
- [Commits](https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0 )
---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
dependency-version: 3.16.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
Márk Sági-Kazár
1818fb8320
Merge pull request #4357 from dexidp/dependabot/go_modules/examples/google.golang.org/grpc-1.76.0
...
build(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0 in /examples
5 months ago
Márk Sági-Kazár
6fd11e49d0
Merge pull request #4360 from dexidp/dependabot/go_modules/google.golang.org/api-0.252.0
...
build(deps): bump google.golang.org/api from 0.248.0 to 0.252.0
5 months ago
Márk Sági-Kazár
d4fd87c290
Merge pull request #4365 from dexidp/dependabot/github_actions/github/codeql-action-4.30.8
...
build(deps): bump github/codeql-action from 3.30.4 to 4.30.8
5 months ago
dependabot[bot]
5a2d773929
build(deps): bump alpine from 3.22.1 to 3.22.2
...
Bumps alpine from 3.22.1 to 3.22.2.
---
updated-dependencies:
- dependency-name: alpine
dependency-version: 3.22.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
Márk Sági-Kazár
087d91e570
Merge pull request #4366 from dexidp/dependabot/github_actions/actions/dependency-review-action-4.8.1
...
build(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.1
5 months ago
Márk Sági-Kazár
fdb70c912f
Merge pull request #4368 from dexidp/dependabot/docker/golang-1.25.3-alpine3.22
...
build(deps): bump golang from 1.25.1-alpine3.22 to 1.25.3-alpine3.22
5 months ago
dependabot[bot]
41ef064e8f
build(deps): bump golang from 1.25.1-alpine3.22 to 1.25.3-alpine3.22
...
Bumps golang from 1.25.1-alpine3.22 to 1.25.3-alpine3.22.
---
updated-dependencies:
- dependency-name: golang
dependency-version: 1.25.3-alpine3.22
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
79a5ea4764
build(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.1
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.7.3 to 4.8.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](595b5aeba7...40c09b7dc9 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-version: 4.8.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
e4c4289d12
build(deps): bump github/codeql-action from 3.30.4 to 4.30.8
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.30.4 to 4.30.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](303c0aef88...f443b600d9 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.30.8
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
9ab8d9641a
build(deps): bump google.golang.org/api from 0.248.0 to 0.252.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.248.0 to 0.252.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.248.0...v0.252.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.252.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago