dex Files

What's Changed

Enhancements 🚀

• Generate access tokens for implicit & hybrid flows only when needed by @mfila in https://github.com/dexidp/dex/pull/3857
• k8s storage: Request only one object to check if API exists by @nabokihms in https://github.com/dexidp/dex/pull/4027
• refactor: simplify tests by using slog.DiscardHandler by @alexandear in https://github.com/dexidp/dex/pull/4058

Bug Fixes 🐛

• Fix Makefile to Support Spaces in Paths by @EthanDieterich in https://github.com/dexidp/dex/pull/4000
• fix: remove version controlled files from dockerignore by @sagikazarmark in https://github.com/dexidp/dex/pull/4087
• fix Incorrect Group Handling in RequestContextHandler logger.go by @alihasan070707 in https://github.com/dexidp/dex/pull/4082

Dependency Updates ⬆️

• build(deps): bump actions/cache from 4.2.0 to 4.2.1 by @dependabot in https://github.com/dexidp/dex/pull/3998
• build(deps): bump docker/build-push-action from 6.13.0 to 6.14.0 by @dependabot in https://github.com/dexidp/dex/pull/3997
• build(deps): bump github.com/dexidp/dex/api/v2 from 2.2.0 to 2.3.0 in /examples by @dependabot in https://github.com/dexidp/dex/pull/3996
• build(deps): bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @dependabot in https://github.com/dexidp/dex/pull/3995
• build(deps): bump google.golang.org/api from 0.221.0 to 0.222.0 by @dependabot in https://github.com/dexidp/dex/pull/3994
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group by @dependabot in https://github.com/dexidp/dex/pull/4008
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 in /examples in the go_modules group by @dependabot in https://github.com/dexidp/dex/pull/4007
• build(deps): bump golang from 1.24.0-alpine3.20 to 1.24.1-alpine3.20 by @dependabot in https://github.com/dexidp/dex/pull/4021
• build(deps): bump sigstore/cosign-installer from 3.8.0 to 3.8.1 by @dependabot in https://github.com/dexidp/dex/pull/4001
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.11 by @dependabot in https://github.com/dexidp/dex/pull/4038
• build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 in the go_modules group by @dependabot in https://github.com/dexidp/dex/pull/4043
• build(deps): bump distroless/static-debian12 from 6ec5aa9 to b35229a by @dependabot in https://github.com/dexidp/dex/pull/4052
• build(deps): bump google.golang.org/api from 0.222.0 to 0.228.0 by @dependabot in https://github.com/dexidp/dex/pull/4059
• build(deps): bump distroless/static-debian12 from b35229a to c0f429e by @dependabot in https://github.com/dexidp/dex/pull/4062
• build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 by @dependabot in https://github.com/dexidp/dex/pull/4060
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.2 by @dependabot in https://github.com/dexidp/dex/pull/4053
• build(deps): bump docker/build-push-action from 6.14.0 to 6.15.0 by @dependabot in https://github.com/dexidp/dex/pull/4039
• build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.1 by @dependabot in https://github.com/dexidp/dex/pull/4064
• build(deps): bump docker/setup-qemu-action from 3.4.0 to 3.6.0 by @dependabot in https://github.com/dexidp/dex/pull/4031
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @dependabot in https://github.com/dexidp/dex/pull/4005
• build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @dependabot in https://github.com/dexidp/dex/pull/4014
• build(deps): bump github.com/prometheus/client_golang from 1.21.0 to 1.22.0 by @dependabot in https://github.com/dexidp/dex/pull/4083
• build(deps): bump github.com/go-sql-driver/mysql from 1.9.0 to 1.9.2 by @dependabot in https://github.com/dexidp/dex/pull/4080
• build(deps): bump golang from 1.24.1-alpine3.20 to 1.24.2-alpine3.20 by @dependabot in https://github.com/dexidp/dex/pull/4079
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.18 to 3.5.21 by @dependabot in https://github.com/dexidp/dex/pull/4074
• build(deps): bump actions/cache from 4.2.1 to 4.2.3 by @dependabot in https://github.com/dexidp/dex/pull/4072
• build(deps): bump actions/attest-build-provenance from 2.2.0 to 2.2.3 by @dependabot in https://github.com/dexidp/dex/pull/4071
• build(deps): bump docker/login-action from 3.3.0 to 3.4.0 by @dependabot in https://github.com/dexidp/dex/pull/4070
• build(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot in https://github.com/dexidp/dex/pull/4069
• build(deps): bump docker/metadata-action from 5.6.1 to 5.7.0 by @dependabot in https://github.com/dexidp/dex/pull/4068
• build(deps): bump github.com/russellhaering/goxmldsig from 1.4.0 to 1.5.0 by @dependabot in https://github.com/dexidp/dex/pull/4073
• build(deps): bump github.com/beevik/etree from 1.5.0 to 1.5.1 by @dependabot in https://github.com/dexidp/dex/pull/4096
• build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @dependabot in https://github.com/dexidp/dex/pull/4095
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.10 to 3.4.11 by @dependabot in https://github.com/dexidp/dex/pull/4093
• build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @dependabot in https://github.com/dexidp/dex/pull/4092
• build(deps): bump github/codeql-action from 3.28.11 to 3.28.15 by @dependabot in https://github.com/dexidp/dex/pull/4091
• build(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 by @dependabot in https://github.com/dexidp/dex/pull/4090
• build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot in https://github.com/dexidp/dex/pull/4094
• build(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by @dependabot in https://github.com/dexidp/dex/pull/4116
• build(deps): bump google.golang.org/api from 0.228.0 to 0.231.0 by @dependabot in https://github.com/dexidp/dex/pull/4114
• build(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @dependabot in https://github.com/dexidp/dex/pull/4111
• build(deps): bump anchore/sbom-action from 0.18.0 to 0.19.0 by @dependabot in https://github.com/dexidp/dex/pull/4109
• build(deps): bump docker/build-push-action from 6.15.0 to 6.16.0 by @dependabot in https://github.com/dexidp/dex/pull/4108
• build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 by @dependabot in https://github.com/dexidp/dex/pull/4101
• build(deps): bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in https://github.com/dexidp/dex/pull/4105
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.14.1 by @dependabot in https://github.com/dexidp/dex/pull/4099
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.0 by @dependabot in https://github.com/dexidp/dex/pull/4100
• build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /api/v2 by @dependabot in https://github.com/dexidp/dex/pull/4057
• build(deps): bump golang from 1.24.2-alpine3.20 to 1.24.3-alpine3.20 by @dependabot in https://github.com/dexidp/dex/pull/4124
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @dependabot in https://github.com/dexidp/dex/pull/4122
• build(deps): bump oras-project/setup-oras from 1.2.2 to 1.2.3 by @dependabot in https://github.com/dexidp/dex/pull/4119
• build(deps): bump google.golang.org/api from 0.231.0 to 0.232.0 by @dependabot in https://github.com/dexidp/dex/pull/4120
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.24 to 1.14.28 by @dependabot in https://github.com/dexidp/dex/pull/4123
• build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in https://github.com/dexidp/dex/pull/4121
• build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.0 by @dependabot in https://github.com/dexidp/dex/pull/4127
• build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in https://github.com/dexidp/dex/pull/4126
• build(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0 by @dependabot in https://github.com/dexidp/dex/pull/4132
• build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot in https://github.com/dexidp/dex/pull/4131
• build(deps): bump cloud.google.com/go/compute/metadata from 0.6.0 to 0.7.0 by @dependabot in https://github.com/dexidp/dex/pull/4130
• build(deps): bump actions/dependency-review-action from 4.7.0 to 4.7.1 by @dependabot in https://github.com/dexidp/dex/pull/4128
• build(deps): bump google.golang.org/api from 0.232.0 to 0.233.0 by @dependabot in https://github.com/dexidp/dex/pull/4129
• build(deps): bump distroless/static-debian12 from c0f429e to 188ddfb by @dependabot in https://github.com/dexidp/dex/pull/4140
• build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot in https://github.com/dexidp/dex/pull/4139
• build(deps): bump docker/build-push-action from 6.16.0 to 6.17.0 by @dependabot in https://github.com/dexidp/dex/pull/4135
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.21 to 3.6.0 by @dependabot in https://github.com/dexidp/dex/pull/4136
• chore: update dependencies by @sagikazarmark in https://github.com/dexidp/dex/pull/4141

New Contributors

• @mfila made their first contribution in https://github.com/dexidp/dex/pull/3857
• @EthanDieterich made their first contribution in https://github.com/dexidp/dex/pull/4000
• @alexandear made their first contribution in https://github.com/dexidp/dex/pull/4058
• @shurup made their first contribution in https://github.com/dexidp/dex/pull/4097
• @alihasan070707 made their first contribution in https://github.com/dexidp/dex/pull/4082

Full Changelog: https://github.com/dexidp/dex/compare/v2.42.0...v2.43.0