chore: Updates from the last patch release

.github/workflows/scorecard.yml

@@ -33,12 +33,12 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
         with:
           egress-policy: audit
 
       - name: "Checkout code"
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           persist-credentials: false
 
@@ -65,14 +65,14 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+        uses: github/codeql-action/upload-sarif@5cf07d8b700b67e235fbb65cbc84f69c0cf10464 # v3.25.14
         with:
           sarif_file: results.sarif

.github/workflows/security.yaml

@@ -1,7 +1,7 @@
 name: "Security Scan"
 
 env:
-  GO_VERSION: "1.22.4"
+  GO_VERSION: "1.22.5"
 
 on:
   push:
@@ -24,14 +24,14 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
         with:
           egress-policy: audit
 
       - name: Checkout repository
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # master
+        uses: aquasecurity/trivy-action@d9cd5b1c23aaf8cb31bb09141028215828364bbb # master
         with:
           scan-type: 'fs'
           ignore-unfixed: true
@@ -40,7 +40,7 @@ jobs:
           severity: 'CRITICAL,HIGH'
           skip-dirs: 'docs/content/docs,docs/build'
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+        uses: github/codeql-action/upload-sarif@5cf07d8b700b67e235fbb65cbc84f69c0cf10464 # v3.25.14
         with:
           sarif_file: 'trivy-results.sarif'
 
@@ -52,23 +52,23 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
         with:
           egress-policy: audit
 
       - name: Checkout repository
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Set up Go
-        uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
+        uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           go-version: "${{ env.GO_VERSION }}"
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+        uses: github/codeql-action/init@5cf07d8b700b67e235fbb65cbc84f69c0cf10464 # v3.25.14
         with:
           languages: go
           queries: security-and-quality
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
+        uses: github/codeql-action/analyze@5cf07d8b700b67e235fbb65cbc84f69c0cf10464 # v3.25.14
         with:
           category: "/language:go"
 

CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog
 
+## [0.14.4-alpha](https://github.com/dadrus/heimdall/compare/v0.14.3-alpha...v0.14.4-alpha) (2024-07-25)
+
+
+### Bug Fixes
+
+* OAuth2 `iss` claim verification in JWT/OIDC authenticators when used with `metadata_endpoint` ([#1660](https://github.com/dadrus/heimdall/issues/1660)) by [@martin31821](https://github.com/martin31821) ([a9947f2](https://github.com/dadrus/heimdall/commit/a9947f20f412ca4133202ee7bc1e7b58f2903766))
+* Trailing useless bytes ignored while parsing PEM content ([#1564](https://github.com/dadrus/heimdall/issues/1564)) ([0c52bd3](https://github.com/dadrus/heimdall/commit/0c52bd30d308dbd8985f3223ba36180dbb808a24))
+
+
+### Dependencies
+
+* update golang to v1.22.5 ([#1592](https://github.com/dadrus/heimdall/issues/1592)) ([1d4de85](https://github.com/dadrus/heimdall/commit/1d4de852f26bb39584e312a4d4cf2201c4606f83))
+* update golang.org/x/exp digest to 8a7402a ([#1644](https://github.com/dadrus/heimdall/issues/1644)) ([6fbbf15](https://github.com/dadrus/heimdall/commit/6fbbf154f67664f8690a76dc05c1addd5628c907))
+* update google.golang.org/genproto/googleapis/rpc digest to e6d459c ([#1654](https://github.com/dadrus/heimdall/issues/1654)) ([103c1ac](https://github.com/dadrus/heimdall/commit/103c1ac0a5c909d8bbc619e7d4bd7aa74a081485))
+* update kubernetes packages to v0.30.2 ([#1540](https://github.com/dadrus/heimdall/issues/1540)) ([70fdd62](https://github.com/dadrus/heimdall/commit/70fdd62de11790b9f4310282a2eb55ee2f8f94d4))
+* update module github.com/dlclark/regexp2 to v1.11.2 ([#1630](https://github.com/dadrus/heimdall/issues/1630)) ([afd7c92](https://github.com/dadrus/heimdall/commit/afd7c92ef2520e9319437a178ad2c4e293b103b7))
+* update module github.com/go-co-op/gocron/v2 to v2.11.0 ([#1645](https://github.com/dadrus/heimdall/issues/1645)) ([42688aa](https://github.com/dadrus/heimdall/commit/42688aaeb5ab18fd80a7cabe15f41a1cda075d29))
+* update module github.com/go-jose/go-jose/v4 to v4.0.3 ([#1625](https://github.com/dadrus/heimdall/issues/1625)) ([59caff8](https://github.com/dadrus/heimdall/commit/59caff8418eb1190c0320761d797fc2faceaf2ce))
+* update module github.com/go-playground/validator/v10 to v10.22.0 ([#1537](https://github.com/dadrus/heimdall/issues/1537)) ([1f6eeaa](https://github.com/dadrus/heimdall/commit/1f6eeaa1425749007a9aa6f19f2ce8cc3413aa62))
+* update module github.com/redis/rueidis to v1.0.41 ([#1617](https://github.com/dadrus/heimdall/issues/1617)) ([3919aaf](https://github.com/dadrus/heimdall/commit/3919aafd286b315530fa7cb2cfa4bb6692d4d364))
+* update module github.com/redis/rueidis/rueidisotel to v1.0.41 ([#1619](https://github.com/dadrus/heimdall/issues/1619)) ([69bc2aa](https://github.com/dadrus/heimdall/commit/69bc2aa29615f968eb2a23d1bb3111495597d2e5))
+* update module github.com/spf13/cobra to v1.8.1 ([#1551](https://github.com/dadrus/heimdall/issues/1551)) ([871ee91](https://github.com/dadrus/heimdall/commit/871ee915648bd7d1070414bcf4f0ee46665de216))
+* update module github.com/tonglil/opentelemetry-go-datadog-propagator to v0.1.3 ([#1579](https://github.com/dadrus/heimdall/issues/1579)) ([27c1026](https://github.com/dadrus/heimdall/commit/27c10260d18647ad1dbb7624b3148fd4c4f36d3a))
+* update module github.com/wi2l/jsondiff to v0.6.0 ([#1558](https://github.com/dadrus/heimdall/issues/1558)) ([c4cfd07](https://github.com/dadrus/heimdall/commit/c4cfd078bd5811395d3728a27aae6ddefe628c6a))
+* update module go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.53.0 ([#1600](https://github.com/dadrus/heimdall/issues/1600)) ([84b330f](https://github.com/dadrus/heimdall/commit/84b330f76ca67391f6b27fa1b1d00943145cc056))
+* update module go.opentelemetry.io/contrib/instrumentation/host to v0.53.0 ([#1601](https://github.com/dadrus/heimdall/issues/1601)) ([31834e0](https://github.com/dadrus/heimdall/commit/31834e0b21504c78ead506acea9af19a221bed55))
+* update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.53.0 ([#1602](https://github.com/dadrus/heimdall/issues/1602)) ([d3d2328](https://github.com/dadrus/heimdall/commit/d3d2328c4a23d2aca6dc959386e5f3c865b42691))
+* update module go.opentelemetry.io/contrib/instrumentation/runtime to v0.53.0 ([#1603](https://github.com/dadrus/heimdall/issues/1603)) ([b23bc0b](https://github.com/dadrus/heimdall/commit/b23bc0be499ffebfc19d4fdd500f605b7d4b1346))
+* update module go.opentelemetry.io/contrib/propagators/autoprop to v0.53.0 ([#1604](https://github.com/dadrus/heimdall/issues/1604)) ([f8679e9](https://github.com/dadrus/heimdall/commit/f8679e948308976be620817e954f365073e71c20))
+* update module go.uber.org/fx to v1.22.1 ([#1577](https://github.com/dadrus/heimdall/issues/1577)) ([49ab1c2](https://github.com/dadrus/heimdall/commit/49ab1c2336e31a01dbf04516ac505a1b7e48c174))
+* update module google.golang.org/grpc to v1.65.0 ([#1589](https://github.com/dadrus/heimdall/issues/1589)) ([dad8e53](https://github.com/dadrus/heimdall/commit/dad8e531511b79ab2cd085b49214a1b45ba8254a))
+* update module google.golang.org/protobuf to v1.34.2 ([#1535](https://github.com/dadrus/heimdall/issues/1535)) ([12aa205](https://github.com/dadrus/heimdall/commit/12aa205e8c7f2c61f2ce0540fb5fa9be718a8cbb))
+* update module k8s.io/api to v0.30.3 ([#1640](https://github.com/dadrus/heimdall/issues/1640)) ([9b2e072](https://github.com/dadrus/heimdall/commit/9b2e0727ef6e7b15cc03fc9417ef2c7744099ccc))
+* update module k8s.io/client-go to v0.30.3 ([#1641](https://github.com/dadrus/heimdall/issues/1641)) ([333c81f](https://github.com/dadrus/heimdall/commit/333c81f877dcf07993e6dbe319487a221015da4d))
+* update module k8s.io/klog/v2 to v2.130.1 ([#1567](https://github.com/dadrus/heimdall/issues/1567)) ([d16ecbe](https://github.com/dadrus/heimdall/commit/d16ecbeb7b1f360196d1c02ee77dad148c5fc9a4))
+* update opentelemetry-go monorepo to v1.28.0 ([#1591](https://github.com/dadrus/heimdall/issues/1591)) ([a33f586](https://github.com/dadrus/heimdall/commit/a33f586cd0f3760c900fa946c435ed34ad4414e5))
+
 ## [0.14.3-alpha](https://github.com/dadrus/heimdall/compare/v0.14.2-alpha...v0.14.3-alpha) (2024-06-09)
 
 

docker/Dockerfile

@@ -2,7 +2,7 @@
 # Builder image to build the app
 ARG USER=heimdall
 
-FROM --platform=$BUILDPLATFORM golang:1.22.4-bookworm@sha256:aec47843e52fee4436bdd3ce931417fa980e9055658b5142140925eea3044bea as builder
+FROM --platform=$BUILDPLATFORM golang:1.22.5-bookworm@sha256:af9b40f2b1851be993763b85288f8434af87b5678af04355b1e33ff530b5765f as builder
 ARG USER
 ARG TARGETARCH
 ARG VERSION="unknown"

docker/debug.Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.22.4-bookworm@sha256:aec47843e52fee4436bdd3ce931417fa980e9055658b5142140925eea3044bea
+FROM golang:1.22.5-bookworm@sha256:af9b40f2b1851be993763b85288f8434af87b5678af04355b1e33ff530b5765f
 ENV CGO_ENABLED 1
 
 RUN apt-get update && apt-get install -y --no-install-recommends inotify-tools=3.14-7 psmisc=23.2-1+deb10u1 \

docker/docs.Dockerfile

@@ -1,4 +1,4 @@
-FROM uwebarthel/asciidoctor:1.72.0@sha256:da50f09a76897bf35da07d29b4d78bee6835e2a02a0702a01afb06b9d439045b
+FROM uwebarthel/asciidoctor:1.74.1@sha256:1bfab98a2a857124fce5b31ee5a1fa006c91acad872d50ab539ded336e8aae11
 LABEL [email protected]
 
 # hadolint ignore=DL3028

docs/versions/data.json

@@ -94,5 +94,9 @@
   {
     "version": "v0.14.3-alpha",
     "path": "/heimdall/v0.14.3-alpha"
+  },
+  {
+    "version": "v0.14.4-alpha",
+    "path": "/heimdall/v0.14.4-alpha"
   }
 ]