v2.36.0

[sagikazarmark]

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.36.0

What's Changed

Enhancements 🚀

• TLS configure for OIDC connector by @xtremerui in TLS configure for OIDC connector #1632
• Add icon for gitea by @pinpox in Add icon for gitea #2733
• fix: Do not use connector data from the refresh token field by @nabokihms in fix: Do not use connector data from the refresh token field #2729
• Add preferredEmailDomain config option for GitHub connector by @nobuyo in Add preferredEmailDomain config option for GitHub connector #2740
• Move unique functionality into getGroups to reduce calls to google by @snuggie12 in Move unique functionality into getGroups to reduce calls to google #2628
• fix: prevent server-side request forgery using Kubernetes storage by @nabokihms in fix: prevent server-side request forgery using Kubernetes storage #2479
• fix: return 401 if password is invalid by @nabokihms in fix: return 401 if password is invalid #2796
• feat: Add default robots.txt by @nabokihms in feat: Add default robots.txt #2834
• Skip redirection to approval when it is not required (Skip redirection to approval when it's not required #2686) by @nobuyo in Skip redirection to approval when it is not required (#2686) #2805
• feat: Bump dependencies and Makefile refactoring by @nabokihms in feat: Bump dependencies and Makefile refactoring #2844

Bug Fixes 🐛

• Make admin email optional when no service account path is configured by @sagikazarmark in Make admin email optional when no service account path is configured #2695
• Only initialize google admin service if necessary by @sagikazarmark in Only initialize google admin service if necessary #2700

Dependency Updates ⬆️

• build(deps): bump golang from 1.19.1-alpine3.16 to 1.19.2-alpine3.16 by @dependabot in build(deps): bump golang from 1.19.1-alpine3.16 to 1.19.2-alpine3.16 #2697
• fix: Update gomplate version to 3.11.3 fix CVE-2022-27665 by @nabokihms in fix: Update gomplate version to 3.11.3 fix CVE-2022-27665 #2705
• build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by @dependabot in build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 #2708
• build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 by @dependabot in build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 #2715
• build(deps): bump google.golang.org/api from 0.98.0 to 0.101.0 by @dependabot in build(deps): bump google.golang.org/api from 0.98.0 to 0.101.0 #2720
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.15 to 1.14.16 by @dependabot in build(deps): bump github.com/mattn/go-sqlite3 from 1.14.15 to 1.14.16 #2721
• build(deps): bump aquasecurity/trivy-action from 0.7.1 to 0.8.0 by @dependabot in build(deps): bump aquasecurity/trivy-action from 0.7.1 to 0.8.0 #2723
• build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 by @dependabot in build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 #2718
• build(deps): bump golang from 1.19.2-alpine3.16 to 1.19.3-alpine3.16 by @dependabot in build(deps): bump golang from 1.19.2-alpine3.16 to 1.19.3-alpine3.16 #2724
• build(deps): bump alpine from 3.16.2 to 3.17.0 by @dependabot in build(deps): bump alpine from 3.16.2 to 3.17.0 #2746
• build(deps): bump github.com/prometheus/client_golang from 1.13.0 to 1.14.0 by @dependabot in build(deps): bump github.com/prometheus/client_golang from 1.13.0 to 1.14.0 #2735
• build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.5 to 3.5.6 by @dependabot in build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.5 to 3.5.6 #2744
• build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.2 to 3.2.3 by @dependabot in build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.2 to 3.2.3 #2751
• build(deps): bump golang from 1.19.3-alpine3.16 to 1.19.4-alpine3.16 by @dependabot in build(deps): bump golang from 1.19.3-alpine3.16 to 1.19.4-alpine3.16 #2750
• build(deps): bump golang.org/x/crypto from 0.3.0 to 0.4.0 by @dependabot in build(deps): bump golang.org/x/crypto from 0.3.0 to 0.4.0 #2755
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.5 to 3.5.6 by @dependabot in build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.5 to 3.5.6 #2743
• build(deps): bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.0 by @dependabot in build(deps): bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.0 #2754
• build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 by @dependabot in build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 #2758
• build(deps): bump google.golang.org/grpc from 1.50.1 to 1.51.0 by @dependabot in build(deps): bump google.golang.org/grpc from 1.50.1 to 1.51.0 #2741
• build(deps): bump google.golang.org/api from 0.101.0 to 0.104.0 by @dependabot in build(deps): bump google.golang.org/api from 0.101.0 to 0.104.0 #2753
• build(deps): bump google.golang.org/grpc from 1.49.0 to 1.51.0 in /api/v2 by @dependabot in build(deps): bump google.golang.org/grpc from 1.49.0 to 1.51.0 in /api/v2 #2742
• build(deps): bump golang.org/x/net from 0.3.0 to 0.4.0 by @dependabot in build(deps): bump golang.org/x/net from 0.3.0 to 0.4.0 #2761
• build(deps): bump entgo.io/ent from 0.11.3 to 0.11.4 by @dependabot in build(deps): bump entgo.io/ent from 0.11.3 to 0.11.4 #2725
• build(deps): bump google.golang.org/api from 0.104.0 to 0.105.0 by @dependabot in build(deps): bump google.golang.org/api from 0.104.0 to 0.105.0 #2760
• build(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 by @dependabot in build(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 #2774
• build(deps): bump google.golang.org/api from 0.105.0 to 0.106.0 by @dependabot in build(deps): bump google.golang.org/api from 0.105.0 to 0.106.0 #2772
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.4.0 to 3.5.0 by @dependabot in build(deps): bump github.com/coreos/go-oidc/v3 from 3.4.0 to 3.5.0 #2770
• build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0 by @dependabot in build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0 #2773
• build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 by @dependabot in build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 #2777
• build(deps): bump entgo.io/ent from 0.11.4 to 0.11.5 by @dependabot in build(deps): bump entgo.io/ent from 0.11.4 to 0.11.5 #2779
• build(deps): bump alpine from 3.17.0 to 3.17.1 by @dependabot in build(deps): bump alpine from 3.17.0 to 3.17.1 #2780
• build(deps): bump mheap/github-action-required-labels from 2 to 3 by @dependabot in build(deps): bump mheap/github-action-required-labels from 2 to 3 #2769
• build(deps): bump google.golang.org/api from 0.106.0 to 0.107.0 by @dependabot in build(deps): bump google.golang.org/api from 0.106.0 to 0.107.0 #2788
• build(deps): bump golang from 1.19.4-alpine3.16 to 1.19.5-alpine3.16 by @dependabot in build(deps): bump golang from 1.19.4-alpine3.16 to 1.19.5-alpine3.16 #2782
• build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 by @dependabot in build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 #2783
• build(deps): bump google.golang.org/api from 0.107.0 to 0.108.0 by @dependabot in build(deps): bump google.golang.org/api from 0.107.0 to 0.108.0 #2793
• build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 in /api/v2 by @dependabot in build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 in /api/v2 #2784
• chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 by @dlipovetsky in chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 #2790
• ci: Use go 1.19 by @dlipovetsky in ci: Use go 1.19 #2791
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.6 to 3.5.7 by @dependabot in build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.6 to 3.5.7 #2798
• build(deps): bump docker/build-push-action from 3 to 4 by @dependabot in build(deps): bump docker/build-push-action from 3 to 4 #2807
• build(deps): bump golang from 1.19.5-alpine3.16 to 1.20.0-alpine3.16 by @dependabot in build(deps): bump golang from 1.19.5-alpine3.16 to 1.20.0-alpine3.16 #2811
• build(deps): bump aquasecurity/trivy-action from 0.8.0 to 0.9.0 by @dependabot in build(deps): bump aquasecurity/trivy-action from 0.8.0 to 0.9.0 #2810
• build(deps): bump alpine from 3.17.1 to 3.17.2 by @dependabot in build(deps): bump alpine from 3.17.1 to 3.17.2 #2821
• build(deps): bump aquasecurity/trivy-action from 0.9.0 to 0.9.1 by @dependabot in build(deps): bump aquasecurity/trivy-action from 0.9.0 to 0.9.1 #2822
• build(deps): bump entgo.io/ent from 0.11.5 to 0.11.8 by @dependabot in build(deps): bump entgo.io/ent from 0.11.5 to 0.11.8 #2823
• build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 by @dependabot in build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 #2818
• build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0 by @dependabot in build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0 #2828
• build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 in /api/v2 by @dependabot in build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 in /api/v2 #2832
• build(deps): bump golang.org/x/sys from 0.0.0-20220114195835-da31bd327af9 to 0.1.0 in /examples by @dependabot in build(deps): bump golang.org/x/sys from 0.0.0-20220114195835-da31bd327af9 to 0.1.0 in /examples #2837
• build(deps): bump golang.org/x/net from 0.0.0-20220114011407-0dd24b26b47d to 0.7.0 in /examples by @dependabot in build(deps): bump golang.org/x/net from 0.0.0-20220114011407-0dd24b26b47d to 0.7.0 in /examples #2846
• build(deps): bump golang from 1.20.0-alpine3.16 to 1.20.1-alpine3.16 by @dependabot in build(deps): bump golang from 1.20.0-alpine3.16 to 1.20.1-alpine3.16 #2827
• build(deps): bump aquasecurity/trivy-action from 0.9.1 to 0.9.2 by @dependabot in build(deps): bump aquasecurity/trivy-action from 0.9.1 to 0.9.2 #2850
• build(deps): bump golang from 1.20.1-alpine3.16 to 1.20.2-alpine3.16 by @dependabot in build(deps): bump golang from 1.20.1-alpine3.16 to 1.20.2-alpine3.16 #2849
• feat: Bump gomplate 3.11.4 by @nabokihms in feat: Bump gomplate 3.11.4 #2840
• build(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0 by @dependabot in build(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0 #2856
• build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.6.0 by @dependabot in build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.6.0 #2847
• build(deps): bump google.golang.org/api from 0.108.0 to 0.112.0 by @dependabot in build(deps): bump google.golang.org/api from 0.108.0 to 0.112.0 #2853
• build(deps): bump google.golang.org/api from 0.112.0 to 0.114.0 by @dependabot in build(deps): bump google.golang.org/api from 0.112.0 to 0.114.0 #2869
• build(deps): bump actions/setup-go from 3 to 4 by @dependabot in build(deps): bump actions/setup-go from 3 to 4 #2863
• build(deps): bump github.com/russellhaering/goxmldsig from 1.2.0 to 1.3.0 by @dependabot in build(deps): bump github.com/russellhaering/goxmldsig from 1.2.0 to 1.3.0 #2862
• build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 by @dependabot in build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 #2866
• build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 in /api/v2 by @dependabot in build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 in /api/v2 #2867
• build(deps): bump golang.org/x/crypto from 0.0.0-20220112180741-5e0467b6c7ce to 0.1.0 in /examples by @dependabot in build(deps): bump golang.org/x/crypto from 0.0.0-20220112180741-5e0467b6c7ce to 0.1.0 in /examples #2845
• build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 in /api/v2 by @dependabot in build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 in /api/v2 #2816
• chore: upgrade tools by @sagikazarmark in chore: upgrade tools #2870

Other Changes

• Bump image in examples/k8s/dex.yaml to v2.32.0 by @stealthybox in Bump image in examples/k8s/dex.yaml to v2.32.0 #2569

New Contributors

• @pinpox made their first contribution in Add icon for gitea #2733
• @nobuyo made their first contribution in Add preferredEmailDomain config option for GitHub connector #2740
• @dlipovetsky made their first contribution in chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 #2790
• @seankhliao made their first contribution in DEP for RFC 8693 OAuth 2 Token Exchange #2812
• @stealthybox made their first contribution in Bump image in examples/k8s/dex.yaml to v2.32.0 #2569

Full Changelog: v2.35.0...v2.36.0

---

This discussion was created from the release v2.36.0.

[thiDucTran]

from #2569 , why not bumping to v2.36.0 ?