v2.41.0

What's Changed

Exciting New Features 🎉

• Enrich Dex logs with real IP and request ID by @nabokihms in #3661
• gRPC Connectors API by @twoojoo in #3245

Important

Connectors API is disabled by default. Set the DEX_API_CONNECTORS_CRUD=true env variable to enable the feature.

Enhancements 🚀

• Prevent double clicking of the submit button on login by @pcorliss in #3554
• Gracefully handle no args being passed to entrypoint by @rgmz in #3589
• New Prometheus metrics build_info by @nlamirault in #3558
• Always retrieve github emails when preferredEmailDomain is set by @thesuperzapper in #3584
• Propagate http.Client to JWT verifier for OIDC connector by @jack-r-warren in #3641
• Fix the broken link to v2 page by @tuladhar in #3648
• Add regex for oidc group matching by @jacksonargo in #3063

Bug Fixes 🐛

• Remove additional features and add a feature flag instead by @nabokihms in #3663

Dependency Updates ⬆️

• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 in /examples by @dependabot in #3582
• build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.3.1 by @dependabot in #3580
• build(deps): bump github/codeql-action from 3.25.7 to 3.25.12 by @dependabot in #3619
• build(deps): bump actions/dependency-review-action from 4.3.2 to 4.3.4 by @dependabot in #3618
• build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 by @dependabot in #3617
• build(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.24.0 by @dependabot in #3615
• build(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /examples in the go_modules group by @dependabot in #3612
• build(deps): bump distroless/static-debian12 from e9ac71e to 8dd8d3c by @dependabot in #3604
• build(deps): bump docker/build-push-action from 5.3.0 to 6.3.0 by @dependabot in #3603
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 in /examples by @dependabot in #3609
• build(deps): bump golang.org/x/net from 0.25.0 to 0.27.0 by @dependabot in #3606
• build(deps): bump golang.org/x/crypto from 0.23.0 to 0.25.0 by @dependabot in #3605
• build(deps): bump alpine from 3.20.0 to 3.20.1 by @dependabot in #3591
• build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 in /examples by @dependabot in #3600
• build(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 by @dependabot in #3567
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.10.0 to 3.11.0 by @dependabot in #3627
• build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #3621
• build(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 by @dependabot in #3625
• build(deps): bump actions/attest-build-provenance from 1.3.1 to 1.3.3 by @dependabot in #3624
• build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @dependabot in #3631
• build(deps): bump anchore/sbom-action from 0.16.0 to 0.17.0 by @dependabot in #3630
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.3 by @dependabot in #3626
• build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #3622
• build(deps): bump docker/build-push-action from 6.3.0 to 6.4.0 by @dependabot in #3623
• build(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by @dependabot in #3629
• build(deps): bump github.com/AppsFlyer/go-sundheit from 0.5.0 to 0.5.1 by @dependabot in #3635
• build(deps): bump docker/build-push-action from 6.4.0 to 6.4.1 by @dependabot in #3633
• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #3634
• Update dependencies before Dex v2.41 by @nabokihms in #3637
• build(deps): bump alpine from 3.20.1 to 3.20.2 by @dependabot in #3647
• build(deps): bump google.golang.org/api from 0.182.0 to 0.189.0 by @dependabot in #3646
• build(deps): bump github/codeql-action from 3.25.12 to 3.25.14 by @dependabot in #3651
• build(deps): bump actions/upload-artifact from 3.1.3 to 4.3.4 by @dependabot in #3607
• build(deps): bump golang from 8c9183f to 0d3653d by @dependabot in #3657
• FIx CVE before Dex v2.41 by @nabokihms in #3653
• Bump gomplate 4.0.1 by @MoeBensu in #3652
• build(deps): bump github.com/AppsFlyer/go-sundheit from 0.5.1 to 0.6.0 by @dependabot in #3655
• build(deps): bump docker/setup-buildx-action from 3.4.0 to 3.6.1 by @dependabot in #3658
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.14 to 3.5.15 by @dependabot in #3639
• build(deps): bump docker/setup-qemu-action from 3.1.0 to 3.2.0 by @dependabot in #3645
• build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in #3656
• build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0 by @dependabot in #3643
• build(deps): bump docker/login-action from 3.2.0 to 3.3.0 by @dependabot in #3644
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.3 to 4.0.4 by @dependabot in #3666
• build(deps): bump google.golang.org/api from 0.189.0 to 0.190.0 by @dependabot in #3667
• build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0 by @dependabot in #3665
• Bump ent v0.14.0 by @nabokihms in #3670
• build(deps): bump github/codeql-action from 3.25.14 to 3.25.15 by @dependabot in #3664

New Contributors

• @pcorliss made their first contribution in #3554
• @rgmz made their first contribution in #3589
• @nlamirault made their first contribution in #3558
• @thesuperzapper made their first contribution in #3584
• @twoojoo made their first contribution in #3245
• @jack-r-warren made their first contribution in #3641
• @tuladhar made their first contribution in #3648
• @MoeBensu made their first contribution in #3652
• @jacksonargo made their first contribution in #3063

Full Changelog: v2.40.0...v2.41.0