| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-10-07 | 41.0 kB | |
| v2.46.0 source code.tar.gz | 2026-10-07 | 1.2 MB | |
| v2.46.0 source code.zip | 2026-10-07 | 1.5 MB | |
| Totals: 3 Items | 2.7 MB | 0 | |
What's Changed
Exciting New Features 🎉
- feat(oauth2): add client credentials flow with opt-in config flag by @matzegebbe in https://github.com/dexidp/dex/pull/4583
- feat(connector): connectors for grants by @nabokihms in https://github.com/dexidp/dex/pull/4619
- feat(client): add allowed connectors field to client configuration by @nabokihms in https://github.com/dexidp/dex/pull/4610
- feat(cel): implement CEL compiler with library by @nabokihms in https://github.com/dexidp/dex/pull/4607
- DEP: Auth Sessions - Introduce by @nabokihms in https://github.com/dexidp/dex/pull/4561
- Two-Factor authentication (TOTP) by @nabokihms in https://github.com/dexidp/dex/pull/3712
- feat: add WebAuthn support by @nabokihms in https://github.com/dexidp/dex/pull/4704
- feat: add SSO sharing policy by @nabokihms in https://github.com/dexidp/dex/pull/4705
- feat: Add Kerberos support by @Jabejixo in https://github.com/dexidp/dex/pull/4640
Enhancements 🚀
- fix: clean up in-memory connector before create by @loafoe in https://github.com/dexidp/dex/pull/4529
- feat: Disallow unknown config fields by @nabokihms in https://github.com/dexidp/dex/pull/4531
- feat: saml support refresh tokens by @Jabejixo in https://github.com/dexidp/dex/pull/4565
- feat(gitlab): implement TokenIdentity method by @nabokihms in https://github.com/dexidp/dex/pull/4606
- feat(tests): add MySQL 8 support in CI and tests by @nabokihms in https://github.com/dexidp/dex/pull/4617
- test: add concurrency tests for storage implementations by @nabokihms in https://github.com/dexidp/dex/pull/4631
- feat: update CSS for improved theming and button styles by @nabokihms in https://github.com/dexidp/dex/pull/4634
- feat: add PKCE configuration to OAuth2 settings by @nabokihms in https://github.com/dexidp/dex/pull/4638
- DEP: CEL integration by @nabokihms in https://github.com/dexidp/dex/pull/4601
- feat: add UserIdentity entity and CRUD operations by @nabokihms in https://github.com/dexidp/dex/pull/4643
- feat(logger): add excludeFields config for PII redaction by @mark-liu in https://github.com/dexidp/dex/pull/4621
- Pin GitHub API version in requests by @utafrali in https://github.com/dexidp/dex/pull/4647
- feat: implement user identity creation and persisting consent by @nabokihms in https://github.com/dexidp/dex/pull/4645
- feat: implement AuthSession CRUD operations by @nabokihms in https://github.com/dexidp/dex/pull/4646
- feat(ldap): allow specifying multiple attributes on username input by @yardenshoham in https://github.com/dexidp/dex/pull/4061
- feat: Create AuthSessions and set cookies by @nabokihms in https://github.com/dexidp/dex/pull/4650
- DEP for Identity Assertion JWT Authorization Grant (ID-JAG) / requested_token_type urn:ietf:params:oauth:token-type:id-jag by @kanywst in https://github.com/dexidp/dex/pull/4600
- feat: Add OIDC conformance testing scripts and configuration by @nabokihms in https://github.com/dexidp/dex/pull/4663
- feat: add auth_time, prompt, and max_age fields by @nabokihms in https://github.com/dexidp/dex/pull/4662
- feat: implement id_token_hint by @nabokihms in https://github.com/dexidp/dex/pull/4670
- feat: Add AuthSession GC by @nabokihms in https://github.com/dexidp/dex/pull/4667
- feat: use protobuf for session cookie by @nabokihms in https://github.com/dexidp/dex/pull/4675
- feat: support ES256 local signer by @space-arens in https://github.com/dexidp/dex/pull/4682
- feat: cookie encryption support by @nabokihms in https://github.com/dexidp/dex/pull/4676
- feat: prompt select_login by @nabokihms in https://github.com/dexidp/dex/pull/4678
- feat: add a jti per default by @bufferoverflow in https://github.com/dexidp/dex/pull/4695
- feat: add home page with user session info by @nabokihms in https://github.com/dexidp/dex/pull/4677
- feat: implement OIDC RP-Initiated logout by @nabokihms in https://github.com/dexidp/dex/pull/4674
- feat(microsoft): map userPrincipalName to preferred_username claim by @matzegebbe in https://github.com/dexidp/dex/pull/4725
- feat(oauth2): populate groups claim in client_credentials tokens by @carlesarnal in https://github.com/dexidp/dex/pull/4691
- feat: disconnect upstream refreshing by @nabokihms in https://github.com/dexidp/dex/pull/4703
- feat(server): log successful token exchange requests by @0x2b3bfa0 in https://github.com/dexidp/dex/pull/4780
- ci: improve behavior for first time forks by @cardoe in https://github.com/dexidp/dex/pull/4790
- feat(gitlab): support inherited group claims by @AntonKulyashov in https://github.com/dexidp/dex/pull/4800
- feat: gRPC API for sessions by @nabokihms in https://github.com/dexidp/dex/pull/4783
- GitHub Connector: Implement support for refresh tokens by @matheuscscp in https://github.com/dexidp/dex/pull/4845
- feat: add logout confirmation page by @nabokihms in https://github.com/dexidp/dex/pull/4734
- feat(server): introduce a token issuer abstraction by @nabokihms in https://github.com/dexidp/dex/pull/4893
- feat(server): own the refresh token lifecycle in the issuer by @nabokihms in https://github.com/dexidp/dex/pull/4895
- refactor(server): split templates, connector cache and tokens into subpackages by @nabokihms in https://github.com/dexidp/dex/pull/4896
- refactor(server): add a handler abstraction and extract discovery by @nabokihms in https://github.com/dexidp/dex/pull/4899
- refactor(server): extract the device authorization endpoints into a package by @nabokihms in https://github.com/dexidp/dex/pull/4906
- connector/oidc: allow overriding userinfo and device auth URLs by @Kunalbehbud in https://github.com/dexidp/dex/pull/4897
- refactor(server): move request codecs into internal and extract home by @nabokihms in https://github.com/dexidp/dex/pull/4908
- refactor(server): decompose the /token endpoint into per-grant handlers by @nabokihms in https://github.com/dexidp/dex/pull/4910
- refactor(server): extract the interactive auth flow into an authflow package by @nabokihms in https://github.com/dexidp/dex/pull/4915
- connector/microsoft: Add client assertion support for federated identity by @dronenb in https://github.com/dexidp/dex/pull/4521
- refactor(server): untangle what the package split left behind by @nabokihms in https://github.com/dexidp/dex/pull/4933
- fix(web): rebuild the home page around the signed-in identity by @nabokihms in https://github.com/dexidp/dex/pull/4935
- feat(server): sid claim, back-channel logout and scoped refresh revocation by @nabokihms in https://github.com/dexidp/dex/pull/4945
- feat(server): let a client tie its refresh tokens to the session by @nabokihms in https://github.com/dexidp/dex/pull/4950
- feat: Microsoft connector; allow pagination when more than 1000 AD groups by @XDanny322 in https://github.com/dexidp/dex/pull/4833
- feat(server): one session per signed-in browser by @nabokihms in https://github.com/dexidp/dex/pull/4951
- feat(api): add groups field to password requests and responses by @CasLubbers in https://github.com/dexidp/dex/pull/4989
- Configure TLS Curve Preferences and Cipher Suites by @akhilnittala in https://github.com/dexidp/dex/pull/4987
- feat(openshift): Dynamically load clientSecret from a file without requiring a restart during secret rotation by @anandf in https://github.com/dexidp/dex/pull/5023
Bug Fixes 🐛
- fix(mysql): quote
groupsreserved word in query replacer by @backkem in https://github.com/dexidp/dex/pull/4580 - fix(connector): update authproxy and oauth to match CallbackConnector by @matzegebbe in https://github.com/dexidp/dex/pull/4589
- feat(connector): add compile-time checks for connector interfaces by @nabokihms in https://github.com/dexidp/dex/pull/4591
- fix: fix typo in grpc listener error message by @kanywst in https://github.com/dexidp/dex/pull/4598
- fix: correct error message for device request expiry by @kanywst in https://github.com/dexidp/dex/pull/4599
- fix(deviceflow): use absolute paths for non-root URLs by @nabokihms in https://github.com/dexidp/dex/pull/4597
- fix(server): handle double-submit on approval endpoint by @mark-liu in https://github.com/dexidp/dex/pull/4620
- test: fix token introspection tests to use consistent timestamps by @nabokihms in https://github.com/dexidp/dex/pull/4639
- fix: increase lock acquisition attempts from 60 to 200 by @nabokihms in https://github.com/dexidp/dex/pull/4644
- fix(localSigner): simplify Algorithm method to always return RSA alg by @nabokihms in https://github.com/dexidp/dex/pull/4655
- fix non-constant format string in call to newRedirectedErr by @taylorsilva in https://github.com/dexidp/dex/pull/4671
- docs: mention LDAP recursionGroupAttr in config.yaml.dist by @space-arens in https://github.com/dexidp/dex/pull/4697
- feat: include prompt=select_account in back link for multiple connectors by @nabokihms in https://github.com/dexidp/dex/pull/4694
- fix: update parseSession callas after merging home page by @nabokihms in https://github.com/dexidp/dex/pull/4701
- fix: migrate Bitbucket Cloud connector to current workspace API by @nicknikolakakis in https://github.com/dexidp/dex/pull/4687
- fix: enforce MFA validation on session login by @jnfrati in https://github.com/dexidp/dex/pull/4726
- fix(refreshhandlers): preserve existing username by @hisamafahri in https://github.com/dexidp/dex/pull/4758
- fix(server): enforce client.AllowedConnectors in handleTokenExchange (GHSA-7qjx-gp9h-65qj) by @matte1782 in https://github.com/dexidp/dex/pull/4784
- fix(gitlab): drop openid scope requirement if there are no groups presented by @space-arens in https://github.com/dexidp/dex/pull/4810
- fix(storage): compare DeviceRequest expiry by instant in conformance test by @arpitjain099 in https://github.com/dexidp/dex/pull/4817
- Update expired OAM test cert by @sagikazarmark in https://github.com/dexidp/dex/pull/4864
- fix(mfa): enforce WebAuthn clone detection, TOTP single-use, and account lockout by @nabokihms in https://github.com/dexidp/dex/pull/4884
- fix(sessions): make SSO sharing non-transitive; drop redirect_uri double-decode by @nabokihms in https://github.com/dexidp/dex/pull/4885
- fix(server): enforce client AllowedConnectors on all token grants by @nabokihms in https://github.com/dexidp/dex/pull/4889
- fix(server): harden several auth-surface security findings by @nabokihms in https://github.com/dexidp/dex/pull/4927
- fix(device): bind device-callback auth code to its request and stop leaking client_secret by @nabokihms in https://github.com/dexidp/dex/pull/4928
- fix(web): keep the connector buttons intact when a connector name is long by @nabokihms in https://github.com/dexidp/dex/pull/4939
- fix(server): return invalid_grant for rejected refresh tokens by @and-win in https://github.com/dexidp/dex/pull/5040
- fix(oidc): keep rootCAs client when providerDiscoveryOverrides is set by @The127 in https://github.com/dexidp/dex/pull/5049
- fix(storage): tolerate concurrent Kubernetes garbage collection by @devantler in https://github.com/dexidp/dex/pull/5059
Dependency Updates ⬆️
- build(deps): bump google.golang.org/api from 0.267.0 to 0.268.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4577
- build(deps): bump google.golang.org/api from 0.268.0 to 0.269.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4582
- build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4584
- build(deps): bump anchore/sbom-action from 0.22.2 to 0.23.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4587
- build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4586
- build(deps): bump actions/attest-build-provenance from 3.2.0 to 4.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4585
- build(deps): bump actions/attest-build-provenance from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4595
- build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4594
- build(deps): bump distroless/static-debian13 from
01e550ftof512d81by @dependabot[bot] in https://github.com/dexidp/dex/pull/4593 - build(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.34.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4602
- build(deps): bump github/codeql-action from 4.32.4 to 4.32.5 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4603
- build(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4605
- build(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4608
- build(deps): bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4609
- build(deps): bump golang from 1.26.0-alpine3.22 to 1.26.1-alpine3.22 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4612
- build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4616
- build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4613
- build(deps): bump docker/metadata-action from 5.10.0 to 6.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4614
- build(deps): bump github/codeql-action from 4.32.5 to 4.32.6 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4615
- build(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4627
- build(deps): bump aquasecurity/trivy-action from 0.34.2 to 0.35.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4622
- build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4623
- build(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4624
- build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4626
- build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 in /api/v2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4625
- build(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4628
- build(deps): bump google.golang.org/api from 0.269.0 to 0.270.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4630
- build(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4629
- build(deps): bump google.golang.org/api from 0.270.0 to 0.271.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4633
- build(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4636
- build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4635
- build(deps): bump mheap/github-action-required-labels from 5.5.1 to 5.5.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4649
- build(deps): bump distroless/static-debian13 from
f512d81toe3f9456by @dependabot[bot] in https://github.com/dexidp/dex/pull/4648 - build(deps): bump github/codeql-action from 4.32.6 to 4.33.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4651
- build(deps): bump google.golang.org/api from 0.271.0 to 0.272.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4652
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.34 to 1.14.37 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4653
- build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4658
- build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.12 to 3.4.13 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4659
- build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4661
- build(deps): bump github.com/russellhaering/goxmldsig from 1.5.0 to 1.6.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4664
- build(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4666
- build(deps): bump actions/cache from 5.0.3 to 5.0.4 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4665
- chore: update Go and gRPC dependencies to 1.79.3 by @nabokihms in https://github.com/dexidp/dex/pull/4673
- build(deps): bump github/codeql-action from 4.33.0 to 4.34.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4679
- build(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4681
- build(deps): bump the etcd group with 2 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/4680
- build(deps): update entgo.io/ent to v0.14.6 and ariga.io/atlas to v0.36.2 by @nabokihms in https://github.com/dexidp/dex/pull/4684
- build(deps): bump google.golang.org/api from 0.272.0 to 0.273.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4689
- build(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4692
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.37 to 1.14.38 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4699
- build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4700
- build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4698
- build(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4702
- build(deps): bump google.golang.org/api from 0.273.0 to 0.273.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4707
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4706
- build(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4710
- build(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4709
- build(deps): bump the etcd group with 2 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/4708
- build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /examples in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/dexidp/dex/pull/4718
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.38 to 1.14.39 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4717
- build(deps): bump github.com/go-webauthn/webauthn from 0.16.1 to 0.16.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4715
- build(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4716
- build(deps): bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4713
- build(deps): bump google.golang.org/api from 0.273.1 to 0.274.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4714
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.39 to 1.14.40 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4722
- build(deps): bump github.com/go-webauthn/webauthn from 0.16.2 to 0.16.3 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4721
- build(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4720
- build(deps): bump oras-project/setup-oras from 1.2.4 to 2.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4723
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.40 to 1.14.41 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4724
- build(deps): bump golang from 1.26.1-alpine3.22 to 1.26.2-alpine3.22 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4727
- build(deps): bump google.golang.org/api from 0.274.0 to 0.275.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4729
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4728
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4730
- build(deps): bump github.com/google/cel-go from 0.27.0 to 0.28.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4733
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.41 to 1.14.42 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4732
- build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4738
- build(deps): bump github.com/go-webauthn/webauthn from 0.16.3 to 0.16.4 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4736
- build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4740
- build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4741
- build(deps): bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4744
- build(deps): bump alpine from 3.23.3 to 3.23.4 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4746
- build(deps): bump google.golang.org/api from 0.275.0 to 0.276.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4745
- build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4747
- build(deps): bump github.com/go-webauthn/webauthn from 0.16.4 to 0.16.5 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4752
- build(deps): bump golang from
c259ff7to18e6f5aby @dependabot[bot] in https://github.com/dexidp/dex/pull/4750 - build(deps): bump golang from
18e6f5ato7ef9411by @dependabot[bot] in https://github.com/dexidp/dex/pull/4753 - build(deps): bump github.com/go-webauthn/webauthn from 0.16.5 to 0.17.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4754
- build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4756
- build(deps): bump github.com/Azure/go-ntlmssp from 0.1.0 to 0.1.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4757
- build(deps): bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4762
- build(deps): bump google.golang.org/api from 0.276.0 to 0.277.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4763
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.42 to 1.14.44 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4764
- build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4779
- build(deps): bump google.golang.org/api from 0.277.0 to 0.278.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4778
- build(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4775
- build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4768
- build(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4772
- build(deps): bump github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4773
- build(deps): bump golang from 1.26.2-alpine3.22 to 1.26.3-alpine3.22 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4781
- build(deps): bump github.com/go-webauthn/webauthn from 0.17.0 to 0.17.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4770
- build(deps): bump the etcd group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/4769
- build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4782
- build(deps): bump golang.org/x/net from 0.53.0 to 0.54.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4789
- build(deps): bump github.com/go-webauthn/webauthn from 0.17.2 to 0.17.3 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4788
- build(deps): bump google.golang.org/api from 0.278.0 to 0.280.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4801
- build(deps): bump github.com/google/cel-go from 0.28.0 to 0.28.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4792
- build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4799
- build(deps): bump distroless/static-debian13 from
e3f9456to963fa6cby @dependabot[bot] in https://github.com/dexidp/dex/pull/4798 - build(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4795
- build(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4787
- build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4803
- build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4809
- build(deps): bump alpine from 3.23.4 to 3.24.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4820
- build(deps): bump the etcd group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/4814
- build(deps): bump github.com/go-webauthn/webauthn from 0.17.3 to 0.17.4 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4808
- build(deps): bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4807
- build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4804
- build(deps): bump google.golang.org/api from 0.280.0 to 0.283.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4816
- build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4806
- build(deps): bump golang from 1.26.3-alpine3.22 to 1.26.4-alpine3.22 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4815
- build(deps): bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4802
- build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4826
- build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4825
- build(deps): bump google.golang.org/api from 0.283.0 to 0.284.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4822
- build(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4819
- build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4805
- build(deps): bump alpine from 3.24.0 to 3.24.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4834
- build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4824
- build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4823
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4838
- build(deps): bump google.golang.org/api from 0.284.0 to 0.286.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4835
- build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4837
- build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4840
- build(deps): bump github.com/openbao/openbao/api/v2 from 2.5.1 to 2.6.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4848
- build(deps): bump actions/cache from 5.0.5 to 6.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4846
- build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4847
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.44 to 1.14.47 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4849
- build(deps): bump the etcd group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/4861
- build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4860
- build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4856
- build(deps): bump actions/cache from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4854
- build(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4853
- build(deps): bump actions/cache/save from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4852
- build(deps): bump google.golang.org/api from 0.286.0 to 0.287.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4855
- build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.0 in /api/v2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4857
- build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4858
- build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 in /examples in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/dexidp/dex/pull/4871
- build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 in /api/v2 in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/dexidp/dex/pull/4870
- build(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4867
- build(deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4873
- build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4872
- build(deps): bump google.golang.org/api from 0.287.0 to 0.287.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4874
- build(deps): bump distroless/static-debian13 from
963fa6ctod29e660by @dependabot[bot] in https://github.com/dexidp/dex/pull/4876 - build(deps): bump github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4883
- build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4878
- build(deps): bump oras-project/setup-oras from 2.0.0 to 2.0.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4888
- build(deps): bump distroless/static-debian13 from
d29e660tof7f8f72by @dependabot[bot] in https://github.com/dexidp/dex/pull/4894 - build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4880
- build(deps): bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4865
- build(deps): bump mheap/github-action-required-labels from 5.5.2 to 5.6.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4875
- build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4900
- build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4904
- build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4924
- build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4925
- build(deps): bump docker/login-action from 4.4.0 to 4.5.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4926
- build(deps): bump docker/login-action from 4.5.0 to 4.5.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4931
- build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4918
- build(deps): bump github.com/mattn/go-sqlite3 from 1.14.47 to 1.14.48 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4902
- build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.13 to 3.4.14 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4901
- build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4868
- Bump Gomplate v5.2.0 by @nabokihms in https://github.com/dexidp/dex/pull/4934
- build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4932
- build(deps): bump github.com/google/cel-go from 0.29.1 to 0.30.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4938
- build(deps): bump github.com/beevik/etree from 1.6.0 to 1.7.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4947
- build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4953
- build(deps): bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4954
- build(deps): bump docker/login-action from 4.5.1 to 4.6.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4946
- build(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4944
- build(deps): bump google.golang.org/api from 0.287.1 to 0.291.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4943
- Upgrade Go to 1.27 by @sagikazarmark in https://github.com/dexidp/dex/pull/5009
- build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/5006
- build(deps): bump helm/kind-action from 1.14.0 to 1.15.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/5002
- build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4958
- build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4969
- build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4977
- build(deps): bump distroless/static-debian13 from
f7f8f72to1c2c046by @dependabot[bot] in https://github.com/dexidp/dex/pull/4980 - build(deps): bump anchore/sbom-action/download-syft from 0.24.0 to 0.24.2 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4992
- build(deps): bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.9 by @dependabot[bot] in https://github.com/dexidp/dex/pull/4995
- build(deps): bump the etcd group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/4877
- build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.2 in /examples by @dependabot[bot] in https://github.com/dexidp/dex/pull/4994
- build(deps): bump the github-actions group with 4 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/5038
- build(deps): bump the docker group with 2 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/5035
- build(deps): bump golang from
cf6fca6toe9bbdf2by @dependabot[bot] in https://github.com/dexidp/dex/pull/5025 - build(deps): bump the go group with 16 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/5037
- build(deps): bump the go group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/5036
- build(deps): bump google.golang.org/grpc from 1.82.0 to 1.83.1 in /api/v2 in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/dexidp/dex/pull/4997
- build(deps): bump the go group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/5034
- build(deps): bump the etcd group with 2 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/5045
- build(deps): bump the go group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/5044
- build(deps): bump golang from
e9bbdf2to8a5910fin the docker group by @dependabot[bot] in https://github.com/dexidp/dex/pull/5041 - build(deps): bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.2 in the github-actions group by @dependabot[bot] in https://github.com/dexidp/dex/pull/5046
- build(deps): bump oras-project/setup-oras from 2.0.1 to 2.0.2 in the github-actions group by @dependabot[bot] in https://github.com/dexidp/dex/pull/5054
- build(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 in the github-actions group by @dependabot[bot] in https://github.com/dexidp/dex/pull/5058
- build(deps): bump the go group with 2 updates by @dependabot[bot] in https://github.com/dexidp/dex/pull/5057
- build(gomplate): copy gomplate from its image so Dependabot tracks it by @JanWelker in https://github.com/dexidp/dex/pull/5047
Other Changes
- feat(server): log the client id on successful login by @MistLiao in https://github.com/dexidp/dex/pull/5001
New Contributors
- @backkem made their first contribution in https://github.com/dexidp/dex/pull/4580
- @loafoe made their first contribution in https://github.com/dexidp/dex/pull/4529
- @matzegebbe made their first contribution in https://github.com/dexidp/dex/pull/4589
- @kanywst made their first contribution in https://github.com/dexidp/dex/pull/4598
- @mark-liu made their first contribution in https://github.com/dexidp/dex/pull/4620
- @utafrali made their first contribution in https://github.com/dexidp/dex/pull/4647
- @yardenshoham made their first contribution in https://github.com/dexidp/dex/pull/4061
- @taylorsilva made their first contribution in https://github.com/dexidp/dex/pull/4671
- @space-arens made their first contribution in https://github.com/dexidp/dex/pull/4682
- @bufferoverflow made their first contribution in https://github.com/dexidp/dex/pull/4695
- @nicknikolakakis made their first contribution in https://github.com/dexidp/dex/pull/4687
- @jnfrati made their first contribution in https://github.com/dexidp/dex/pull/4726
- @carlesarnal made their first contribution in https://github.com/dexidp/dex/pull/4691
- @hisamafahri made their first contribution in https://github.com/dexidp/dex/pull/4758
- @0x2b3bfa0 made their first contribution in https://github.com/dexidp/dex/pull/4780
- @matte1782 made their first contribution in https://github.com/dexidp/dex/pull/4784
- @AntonKulyashov made their first contribution in https://github.com/dexidp/dex/pull/4800
- @arpitjain099 made their first contribution in https://github.com/dexidp/dex/pull/4817
- @matheuscscp made their first contribution in https://github.com/dexidp/dex/pull/4845
- @Kunalbehbud made their first contribution in https://github.com/dexidp/dex/pull/4897
- @dronenb made their first contribution in https://github.com/dexidp/dex/pull/4521
- @XDanny322 made their first contribution in https://github.com/dexidp/dex/pull/4833
- @CasLubbers made their first contribution in https://github.com/dexidp/dex/pull/4989
- @akhilnittala made their first contribution in https://github.com/dexidp/dex/pull/4987
- @and-win made their first contribution in https://github.com/dexidp/dex/pull/5040
- @MistLiao made their first contribution in https://github.com/dexidp/dex/pull/5001
- @JanWelker made their first contribution in https://github.com/dexidp/dex/pull/5047
- @The127 made their first contribution in https://github.com/dexidp/dex/pull/5049
- @devantler made their first contribution in https://github.com/dexidp/dex/pull/5059
- @anandf made their first contribution in https://github.com/dexidp/dex/pull/5023
Full Changelog: https://github.com/dexidp/dex/compare/v2.45.0...v2.46.0