hydra Files

v26.2.0

Bug Fixes

• Always retry curl invocations to surmount transient third-party failures (c28a6c8):

• Broken older down migrations (8ed407d):

• Context passing and limit response size (f33d6a8):

• Context passing in jsonnetsecure (5884774):

• Correctly detect when to use self-signed certificates (6f9af27):

• Correctly scan SQL NULL into go JSON types (163c579):

• Data race in hydra-oss test (262f85b):

• deps: Update dependency prettier to v3.7.4 (106865d):

• Do not cache pairwise subject algorithm (a341867):

• Down migrations in newer MySQL versions (5b0360d):

• Fix benchmark test (d0e0659):

• Flaky tests on hydra-oss tests (ce58946):

• Incorrect default value for page_tokens (f1290da):

• Incorrect usage of database/sql (a8142d0):

• Properly validate policy URI on client creation (44347e7):

• Remove flaky test for unused function (e8c8803):

• Remove WithDumpMigrations option to MigrationBox (6fd8a64):

• Request log config key (11ad1ac):

• Stray debug print (f6b28db):

• Transactions managed by fosite were not working (3ad64db):

• Update CONTRIBUTING.md (0c78aa7):

• Update go modules (845cc4d):

• Update packages to fix GHSA-7h2j-956f-4vf2 (ae75488):

• Upgrade vulnerable dependencies across Go and npm (f28904c):

Co-authored-by: Deepak Prabhakara deepak.prabhakara@ory.sh

• X data race and parallize some tests (d37af61):

Code Generation

• Prepare for OSS release - v26.2.0 (0b84568):

Code Refactoring

• Squash merge old backoffice migration and fix up command (9d96bbd):

Documentation

• Update readmes (8daeebb):

Features

• Add ratelimit buckets to swagger definitions (1819465):

• Add support for NULL and more column types to keysetpagination (6a041ef):

• Automatic transaction retries for postgres (a008e91):

• Collect external latency data and write to logs (46846e9):

• Consider Go migrations DirHash when restoring full schema from backups (5306aaf):

• Forward (some) user request headers to SMS HTTP channel (640eb0b):

• Generate events for SSO and SCIM provider revisions (47a9384):

• Hydra benchmarking tool (f5b4aed):

• Improved tracing (724e425):

• Keto-cli improvements (9f81a29):

• Make SCIM work with MySQL (10ec9bf):

• Move search sidecar to its own docker image (8bd331c):

• Optionally do not store skipped consents (cf77ed6):

• Rename project revision columns (af69132):

• Use keysetpagination planner for keto read queries (5ca4c85):

Reverts

• Simplify consent store (fdca960):

Tests

• Deflake and improve performance (cdf972e):

• Deflake directory watcherx (ea02ce9):

• Faster and more reliable courier tests (a43d8f8):

• Fix multiple data races (4f8ff8e):

• hydra: Add plaintext backups for all DB types (822ea26):

• Minor setup improvements (e65fba7):

Changelog

• [258042] autogen(docs): generate and bump docs
• [5c5103] autogen(sdk): bump to [05ddc4]
• [e76172] autogen(sdk): bump to [0747fa]
• [d93a82] autogen(sdk): bump to [11290d]
• [cb1bfc] autogen(sdk): bump to [17d4d1]
• [d2c58c] autogen(sdk): bump to [453eb0]
• [038301] autogen(sdk): bump to [6d7d1f]
• [82b1e3] autogen(sdk): bump to [870c65]
• [6309f9] autogen(sdk): bump to [9c2abd]
• [1b6e8f] autogen(sdk): bump to [f14994]
• [0b8456] autogen: prepare for OSS release - v26.2.0
• [fc32cb] chore(deps): update actions/cache action to v5
• [2f1044] chore(deps): update actions/checkout action to v6
• [20fd22] chore(deps): update dependency @types/lodash to v4.17.21
• [67b8f2] chore(deps): update dependency golangci/golangci-lint to v2.10.1
• [1435b4] chore(deps): update dependency golangci/golangci-lint to v2.11.0
• [105741] chore(deps): update dependency golangci/golangci-lint to v2.11.1
• [eb9ebf] chore(deps): update docker/setup-buildx-action action to v4
• [e2eb8b] chore(deps): update go modules
• [0866b8] chore(deps): update golangci/golangci-lint-action action to v9
• [57818d] chore(deps): update hydra to v4 (major)
• [ae6510] chore(deps): update jackson (major)
• [55dadd] chore(deps): update mysql docker tag to v9.6
• [11db47] chore(keto): use ory/x router
• [9746c8] chore(kratos): use httprouter from ory/x
• [8d25e4] chore: add cause to context cancels with 'context.WithTimeoutCause' in ./x
• [19e998] chore: add helpers for Kratos OEL to support various databases
• [0c9364] chore: add retries to more curl invocations
• [b8307f] chore: added CLIENT_SECRET_VERIFIER to our deployment
• [10df7e] chore: always use ristretto/v2
• [d774b3] chore: audit and fix npm dependencies
• [3357c2] chore: bump to CRDB v25.4
• [74348b] chore: bump to Go 1.26 massive cleanup in ory/x
• [5a1252] chore: clean up / compress recent migrations to avoid creating and dropping indices unnecessarily
• [9dd924] chore: cleanup package-lock files
• [536414] chore: configure mappers when creating onboarding portal
• [72e374] chore: correct typos
• [c7b53c] chore: delete unused CRDB changefeed watcherx module
• [29ca85] chore: deprecate organization APIs
• [1f4b51] chore: drop flow table defaults
• [011a01] chore: fix for critical CVE - GHSA-p77j-4mvh-x3m3
• [eaa939] chore: fix golangci-lint issues in Hydra
• [db1798] chore: fosite and hydra interface enhancements
• [a52a01] chore: fully implement provider pattern
• [ea7664] chore: improve clidoc generation
• [9023ef] chore: improve error reporting to help diagnose flaky test
• [71e638] chore: improve readability of popx.MigrationBox
• [f9af4a] chore: keysetpagination improvements
• [11c2b0] chore: more npm security updates
• [223ead] chore: remove internal address types
• [b7b297] chore: remove unnecessary check constraint
• [e8586d] chore: remove unused code
• [c72853] chore: remove unused internal AXv2 ACL check API
• [502b8c] chore: remove unused log code
• [6255bf] chore: remove unused x/watcherx/websocket
• [0f1695] chore: rename and simplify some internals
• [10b8b5] chore: run go mod tidy and misc cleanup
• [0ff58d] chore: run npm audit fix
• [6280d3] chore: security updates for glob library
• [a6dda6] chore: simplify HTTP metrics instrumentation
• [028908] chore: simplify consent store
• [2dd6b9] chore: simplify consent store
• [2dc4eb] chore: simplify decoderx usage
• [dacd7f] chore: split SCIM from multi-region & make it work with SQLite
• [37d18a] chore: unify common dependency interfaces
• [bbed48] chore: update @openapitools/openapi-generator-cli
• [c76018] chore: update OSS ory.sh to ory.com
• [1171b8] chore: update go.mod
• [517677] chore: update pop to latest & only run pop.SetNowFunc() inside init()
• [1cdb04] chore: update to dockertest v4
• [b1d203] chore: updated axios
• [48cb16] chore: updated golang.org/x/crypto
• [b7ac88] chore: updated minimatch
• [02c608] chore: use pgx pool in Kratos OEL & fix some OEL commands not using enterprise migrations
• [8d9ac2] ci: add docker driver to cve scan
• [8daeeb] docs: update readmes
• [181946] feat: add ratelimit buckets to swagger definitions
• [6a041e] feat: add support for NULL and more column types to keysetpagination
• [a008e9] feat: automatic transaction retries for postgres
• [46846e] feat: collect external latency data and write to logs
• [5306aa] feat: consider Go migrations DirHash when restoring full schema from backups
• [640eb0] feat: forward (some) user request headers to SMS HTTP channel
• [47a938] feat: generate events for SSO and SCIM provider revisions
• [f5b4ae] feat: hydra benchmarking tool
• [724e42] feat: improved tracing
• [9f81a2] feat: keto-cli improvements
• [10ec9b] feat: make SCIM work with MySQL
• [8bd331] feat: move search sidecar to its own docker image
• [cf77ed] feat: optionally do not store skipped consents
• [af6913] feat: rename project revision columns
• [5ca4c8] feat: use keysetpagination planner for keto read queries
• [106865] fix(deps): update dependency prettier to v3.7.4
• [c28a6c] fix: always retry curl invocations to surmount transient third-party failures
• [8ed407] fix: broken older down migrations
• [f33d6a] fix: context passing and limit response size
• [588477] fix: context passing in jsonnetsecure
• [6f9af2] fix: correctly detect when to use self-signed certificates
• [163c57] fix: correctly scan SQL NULL into go JSON types
• [262f85] fix: data race in hydra-oss test
• [a34186] fix: do not cache pairwise subject algorithm
• [5b0360] fix: down migrations in newer MySQL versions
• [d0e065] fix: fix benchmark test
• [ce5894] fix: flaky tests on hydra-oss tests
• [f1290d] fix: incorrect default value for page_tokens
• [a8142d] fix: incorrect usage of database/sql
• [44347e] fix: properly validate policy URI on client creation
• [6fd8a6] fix: remove WithDumpMigrations option to MigrationBox
• [e8c880] fix: remove flaky test for unused function
• [11ad1a] fix: request log config key
• [f6b28d] fix: stray debug print
• [3ad64d] fix: transactions managed by fosite were not working
• [0c78aa] fix: update CONTRIBUTING.md
• [845cc4] fix: update go modules
• [ae7548] fix: update packages to fix GHSA-7h2j-956f-4vf2
• [f28904] fix: upgrade vulnerable dependencies across Go and npm
• [d37af6] fix: x data race and parallize some tests
• [9d96bb] refactor: squash merge old backoffice migration and fix up command
• [fdca96] revert: simplify consent store
• [822ea2] test(hydra): add plaintext backups for all DB types
• [cdf972] test: deflake and improve performance
• [ea02ce] test: deflake directory watcherx
• [a43d8f] test: faster and more reliable courier tests
• [4f8ff8] test: fix multiple data races
• [e65fba] test: minor setup improvements

Artifacts can be verified with cosign using this public key.