mirror/dex - dex - xhrpb gitea

Commit Graph

Author	SHA1	Message	Date
Doug Goldstein	fbcc76f779	fix: device code pending HTTP response As per RFC8628 section 3.5, https://datatracker.ietf.org/doc/html/rfc8628#section-3.5 the authorization_pending response should extend RFC6749 section 5.2, https://datatracker.ietf.org/doc/html/rfc6749#section-5.2 which specifies that the HTTP response code should be 400, Bad Request. Signed-off-by: Doug Goldstein <cardoe@cardoe.com>	9 months ago
EthanDieterich	7208747072	Add LDAP parent groups search, Active Directory Hierarchy (#4113 ) This commit enables universal nested group search support across a variety of LDAP server implementations. It updates the code to allow recursive group membership discovery during user authentication and provides CI tests to validate the functionality. Based on @paroque’s original https://github.com/dexidp/dex/pull/1058 PR. - Removed `Recursive` boolean flag from config and logic - Made recursion behavior dependant on presence of `RecursionGroupAttr` - Updated log messages to reflect changes and follow `slog` structured format Signed-off-by: Ethan Dieterich <ethandieterich@gmail.com>	9 months ago
dependabot[bot]	56cca05998	build(deps): bump docker/setup-buildx-action from 3.11.0 to 3.11.1 (#4189 ) Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.11.0 to 3.11.1. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](`18ce135bb5...e468171a9d`) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 3.11.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	9 months ago
Márk Sági-Kazár	ac0446537c	Merge pull request #4170 from dexidp/dependabot/go_modules/api/v2/google.golang.org/grpc-1.73.0 build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /api/v2	10 months ago
dependabot[bot]	1a11f66526	build(deps): bump google.golang.org/grpc in /api/v2 Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.72.1 to 1.73.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.72.1...v1.73.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.73.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	10 months ago
Márk Sági-Kazár	f372fdf7e6	Merge pull request #4163 from dexidp/dependabot/docker/alpine-3.22.0 build(deps): bump alpine from 3.21.3 to 3.22.0	10 months ago
Márk Sági-Kazár	2e1aab66f1	Merge pull request #4175 from dexidp/dependabot/go_modules/etcd-02511abee6 build(deps): bump the etcd group with 2 updates	10 months ago
Márk Sági-Kazár	272a2f2881	Merge pull request #4183 from dexidp/dependabot/go_modules/github.com/go-sql-driver/mysql-1.9.3 build(deps): bump github.com/go-sql-driver/mysql from 1.9.2 to 1.9.3	10 months ago
Márk Sági-Kazár	42b242a3d6	Merge pull request #4184 from dexidp/dependabot/github_actions/anchore/sbom-action-0.20.1 build(deps): bump anchore/sbom-action from 0.20.0 to 0.20.1	10 months ago
Márk Sági-Kazár	cc979e0507	Merge pull request #4185 from dexidp/dependabot/github_actions/docker/setup-buildx-action-3.11.0 build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0	10 months ago
Márk Sági-Kazár	d821814164	Merge pull request #4186 from dexidp/dependabot/go_modules/google.golang.org/api-0.238.0 build(deps): bump google.golang.org/api from 0.233.0 to 0.238.0	10 months ago
dependabot[bot]	4da06d1b48	build(deps): bump anchore/sbom-action from 0.20.0 to 0.20.1 Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.20.0 to 0.20.1. - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](`e11c554f70...9246b90769`) --- updated-dependencies: - dependency-name: anchore/sbom-action dependency-version: 0.20.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	10 months ago
dependabot[bot]	52d66cfacc	build(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 (#4187 ) Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.8.2 to 3.9.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](`3454372f43...fb28c2b633`) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-version: 3.9.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	10 months ago
dependabot[bot]	ad6a374b20	build(deps): bump google.golang.org/api from 0.233.0 to 0.238.0 Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.233.0 to 0.238.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.233.0...v0.238.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-version: 0.238.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	10 months ago
dependabot[bot]	69f37df1fe	build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0 Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.10.0 to 3.11.0. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](`b5ca514318...18ce135bb5`) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 3.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	10 months ago
dependabot[bot]	8d71a26481	build(deps): bump the etcd group with 2 updates Bumps the etcd group with 2 updates: [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) and [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd). Updates `go.etcd.io/etcd/client/pkg/v3` from 3.6.0 to 3.6.1 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](https://github.com/etcd-io/etcd/compare/v3.6.0...v3.6.1) Updates `go.etcd.io/etcd/client/v3` from 3.6.0 to 3.6.1 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](https://github.com/etcd-io/etcd/compare/v3.6.0...v3.6.1) --- updated-dependencies: - dependency-name: go.etcd.io/etcd/client/pkg/v3 dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: etcd - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: etcd ... Signed-off-by: dependabot[bot] <support@github.com>	10 months ago
Manoj Vivek	87ec9e077e	Allow server startup with partial connector failures (#4159 ) Signed-off-by: Manoj Vivek <p.manoj.vivek@gmail.com>	10 months ago
dependabot[bot]	5566d77756	build(deps): bump alpine from 3.21.3 to 3.22.0 Bumps alpine from 3.21.3 to 3.22.0. --- updated-dependencies: - dependency-name: alpine dependency-version: 3.22.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	10 months ago
dependabot[bot]	bc87381af0	build(deps): bump distroless/static-debian12 from `188ddfb` to `627d6c5` (#4181 ) Bumps distroless/static-debian12 from `188ddfb` to `627d6c5`. --- updated-dependencies: - dependency-name: distroless/static-debian12 dependency-version: nonroot dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	10 months ago
dependabot[bot]	19fad89236	build(deps): bump docker/build-push-action from 6.17.0 to 6.18.0 (#4155 ) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.17.0 to 6.18.0. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](`1dc7386353...263435318d`) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: 6.18.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	10 months ago
dependabot[bot]	8ba221d179	build(deps): bump github.com/go-sql-driver/mysql from 1.9.2 to 1.9.3 Bumps [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) from 1.9.2 to 1.9.3. - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/v1.9.3/CHANGELOG.md) - [Commits](https://github.com/go-sql-driver/mysql/compare/v1.9.2...v1.9.3) --- updated-dependencies: - dependency-name: github.com/go-sql-driver/mysql dependency-version: 1.9.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	10 months ago
dependabot[bot]	4257990af6	build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#4162 ) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.2. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](`f49aabe0b5...05b42c6244`) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	10 months ago
dependabot[bot]	c6b9c792ef	build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 (#4167 ) Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.30.0 to 0.31.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](`6c175e9c40...76071ef0d7`) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: 0.31.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	10 months ago
dependabot[bot]	d26bbcc07b	build(deps): bump github/codeql-action from 3.28.18 to 3.29.0 (#4179 ) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.18 to 3.29.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`ff0a06e83c...ce28f5bb42`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.29.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	10 months ago
dependabot[bot]	159163327a	build(deps): bump google.golang.org/grpc in /examples (#4174 ) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.72.1 to 1.73.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.72.1...v1.73.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.73.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	10 months ago
dependabot[bot]	b6334605f0	build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 (#4171 ) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.40.0 to 0.41.0. - [Commits](https://github.com/golang/net/compare/v0.40.0...v0.41.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	10 months ago
dependabot[bot]	7012c0c8a0	build(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 (#4180 ) Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 2.3.0 to 2.4.0. - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](`db473fddc0...e8998f9491`) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	10 months ago
Tuomo Tanskanen	d7eae8fe79	remove extra method="get" from device-code template (#4145 ) In device-code template, same form tag has method="post", then followed by method="get".. Chrome can handle that as post just fine, but in headless environments you might be using Lynx, which uses GET: it results in 400 Bad Request from Dex server. Signed-off-by: Tuomo Tanskanen <tuomo.tanskanen@est.tech>	10 months ago
Márk Sági-Kazár	7c9744953f	Merge pull request #4146 from nathanlaceyraft/update-gomplate-cve Resolve CVE by updating gomplate to 4.3.2	10 months ago
Nathan Lacey	07bdd285e6	Resolve CVE by updating gomplate to 4.3.2 Signed-off-by: Nathan Lacey <nlacey@teamraft.com>	10 months ago
Márk Sági-Kazár	8e96058e71	Merge pull request #4141 from dexidp/dependencies chore: update dependencies	11 months ago
Mark Sagi-Kazar	385e63d4d4	chore: update dependencies Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	11 months ago
Márk Sági-Kazár	6dad0fc16f	Merge pull request #4136 from dexidp/dependabot/go_modules/go.etcd.io/etcd/client/v3-3.6.0 build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.21 to 3.6.0	11 months ago
dependabot[bot]	362f2557f7	build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.21 to 3.6.0 Bumps [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) from 3.5.21 to 3.6.0. - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](https://github.com/etcd-io/etcd/compare/v3.5.21...v3.6.0) --- updated-dependencies: - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
Márk Sági-Kazár	183d845758	Merge pull request #4135 from dexidp/dependabot/github_actions/docker/build-push-action-6.17.0 build(deps): bump docker/build-push-action from 6.16.0 to 6.17.0	11 months ago
Mark Sagi-Kazar	e552a8e8ed	chore: group etcd dependency updates Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>	11 months ago
Márk Sági-Kazár	9da4bdb423	Merge pull request #4139 from dexidp/dependabot/github_actions/github/codeql-action-3.28.18 build(deps): bump github/codeql-action from 3.28.17 to 3.28.18	11 months ago
Márk Sági-Kazár	70fb163888	Merge pull request #4140 from dexidp/dependabot/docker/distroless/static-debian12-188ddfb build(deps): bump distroless/static-debian12 from `c0f429e` to `188ddfb`	11 months ago
dependabot[bot]	41f9cc8bfc	build(deps): bump distroless/static-debian12 from `c0f429e` to `188ddfb` Bumps distroless/static-debian12 from `c0f429e` to `188ddfb`. --- updated-dependencies: - dependency-name: distroless/static-debian12 dependency-version: nonroot dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
dependabot[bot]	8f3e94d442	build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.17 to 3.28.18. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`60168efe1c...ff0a06e83c`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.28.18 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
dependabot[bot]	fcab3a6e55	build(deps): bump docker/build-push-action from 6.16.0 to 6.17.0 Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.16.0 to 6.17.0. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](`14487ce63c...1dc7386353`) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: 6.17.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
Márk Sági-Kazár	f58219d99c	Merge pull request #4129 from dexidp/dependabot/go_modules/google.golang.org/api-0.233.0 build(deps): bump google.golang.org/api from 0.232.0 to 0.233.0	11 months ago
dependabot[bot]	f217632bb9	build(deps): bump google.golang.org/api from 0.232.0 to 0.233.0 Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.232.0 to 0.233.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.232.0...v0.233.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-version: 0.233.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
Márk Sági-Kazár	ad0ce6f9e4	Merge pull request #4128 from dexidp/dependabot/github_actions/actions/dependency-review-action-4.7.1 build(deps): bump actions/dependency-review-action from 4.7.0 to 4.7.1	11 months ago
Márk Sági-Kazár	41d3406161	Merge pull request #4130 from dexidp/dependabot/go_modules/cloud.google.com/go/compute/metadata-0.7.0 build(deps): bump cloud.google.com/go/compute/metadata from 0.6.0 to 0.7.0	11 months ago
Márk Sági-Kazár	fdf1dcf90f	Merge pull request #4131 from dexidp/dependabot/go_modules/google.golang.org/grpc-1.72.1 build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1	11 months ago
Márk Sági-Kazár	17833696f5	Merge pull request #4132 from dexidp/dependabot/github_actions/anchore/sbom-action-0.20.0 build(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0	11 months ago
dependabot[bot]	418e1f598b	build(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0 Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.19.0 to 0.20.0. - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](`9f73021414...e11c554f70`) --- updated-dependencies: - dependency-name: anchore/sbom-action dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
dependabot[bot]	fab3da0bbb	build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.72.0 to 1.72.1. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.72.0...v1.72.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.72.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	11 months ago
dependabot[bot]	9228219a35	build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 (#4126 ) Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.4.0 to 5.5.0. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](`0aaccfd150...d35c59abb0`) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: 5.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	11 months ago

1 2 3 4 5 ...

3347 Commits (fbcc76f779310be2f9cbd44d8fcdcfb9303913b1) All Branches Search

3347 Commits (fbcc76f779310be2f9cbd44d8fcdcfb9303913b1)

All Branches