chore(deps): update ghcr.io/dexidp/dex docker tag to v2.44.0

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/dexidp/dex	minor	v2.42.0 -> v2.44.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

dexidp/dex (ghcr.io/dexidp/dex)

v2.44.0

Compare Source

What's Changed

Enhancements 🚀

• Allow server startup with partial connector failures by @​manojVivek in #​4159
• Add recursive LDAP parent group search (AD-style hierarchy across all LDAPs) by @​EthanDieterich in #​4113
• feat: Add ModifyGroupNames claimMutation to oidc connector by @​peschmae in #​4144
• authproxy connector: add support for specifying group header separator by @​a-buck in #​3745
• fix: join issuer URL with discovery path without extra slash after issuer URL by @​vizv in #​4263
• feat: grpc api list clients by @​daemonfire300 in #​4202

Bug Fixes 🐛

• 🐛 remove extra method="get" from device-code template by @​tuminoid in #​4145
• [oidc] pass httpClient to the TokenIdentity context by @​marriva in #​4223
• Resolve CVE by updating gomplate to 4.3.3 by @​philBrown in #​4224
• fix: device code should not require scope by @​cardoe in #​4203
• fix: device code pending HTTP response by @​cardoe in #​4204
• Allow compilation without CGO by @​nabokihms in #​4266

Dependency Updates ⬆️

• Resolve CVE by updating gomplate to 4.3.2 by @​nathanlaceyraft in #​4146
• build(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by @​dependabot[bot] in #​4180
• build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @​dependabot[bot] in #​4171
• build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /examples by @​dependabot[bot] in #​4174
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.0 by @​dependabot[bot] in #​4179
• build(deps): bump aquasecurity/trivy-action from 0.30.0 to 0.31.0 by @​dependabot[bot] in #​4167
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​dependabot[bot] in #​4162
• build(deps): bump docker/build-push-action from 6.17.0 to 6.18.0 by @​dependabot[bot] in #​4155
• build(deps): bump distroless/static-debian12 from 188ddfb to 627d6c5 by @​dependabot[bot] in #​4181
• build(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @​dependabot[bot] in #​4187
• build(deps): bump google.golang.org/api from 0.233.0 to 0.238.0 by @​dependabot[bot] in #​4186
• build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.0 by @​dependabot[bot] in #​4185
• build(deps): bump anchore/sbom-action from 0.20.0 to 0.20.1 by @​dependabot[bot] in #​4184
• build(deps): bump github.com/go-sql-driver/mysql from 1.9.2 to 1.9.3 by @​dependabot[bot] in #​4183
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4175
• build(deps): bump alpine from 3.21.3 to 3.22.0 by @​dependabot[bot] in #​4163
• build(deps): bump google.golang.org/grpc from 1.72.1 to 1.73.0 in /api/v2 by @​dependabot[bot] in #​4170
• build(deps): bump docker/setup-buildx-action from 3.11.0 to 3.11.1 by @​dependabot[bot] in #​4189
• build(deps): bump mheap/github-action-required-labels from 5.5.0 to 5.5.1 by @​dependabot[bot] in #​4190
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.0 in /examples by @​dependabot[bot] in #​4219
• build(deps): bump anchore/sbom-action from 0.20.1 to 0.20.2 by @​dependabot[bot] in #​4205
• build(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.2 by @​dependabot[bot] in #​4225
• build(deps): bump aquasecurity/trivy-action from 0.31.0 to 0.32.0 by @​dependabot[bot] in #​4210
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​4196
• build(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @​dependabot[bot] in #​4214
• build(deps): bump alpine from 3.22.0 to 3.22.1 by @​dependabot[bot] in #​4217
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4213
• build(deps): bump github.com/oklog/run from 1.1.0 to 1.2.0 by @​dependabot[bot] in #​4199
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.28 to 1.14.29 by @​dependabot[bot] in #​4239
• build(deps): bump github/codeql-action from 3.29.0 to 3.29.4 by @​dependabot[bot] in #​4238
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @​dependabot[bot] in #​4235
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4233
• build(deps): bump google.golang.org/grpc from 1.74.0 to 1.74.2 in /examples by @​dependabot[bot] in #​4232
• build(deps): bump anchore/sbom-action from 0.20.2 to 0.20.4 by @​dependabot[bot] in #​4229
• build(deps): bump google.golang.org/api from 0.238.0 to 0.243.0 by @​dependabot[bot] in #​4234
• build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​4227
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.15.0 in /examples by @​dependabot[bot] in #​4246
• build(deps): bump the etcd group with 2 updates by @​dependabot[bot] in #​4243
• build(deps): bump distroless/static-debian12 from 627d6c5 to cdf4daa by @​dependabot[bot] in #​4253
• build(deps): bump docker/metadata-action from 5.7.0 to 5.8.0 by @​dependabot[bot] in #​4252
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.29 to 1.14.30 by @​dependabot[bot] in #​4249
• build(deps): bump github/codeql-action from 3.29.4 to 3.29.5 by @​dependabot[bot] in #​4244
• build(deps): bump google.golang.org/api from 0.243.0 to 0.244.0 by @​dependabot[bot] in #​4247
• build(deps): bump docker/login-action from 3.4.0 to 3.5.0 by @​dependabot[bot] in #​4254
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.2 by @​dependabot[bot] in #​4255
• build(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @​dependabot[bot] in #​4257
• build(deps): bump google.golang.org/api from 0.244.0 to 0.246.0 by @​dependabot[bot] in #​4258
• build(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5 by @​dependabot[bot] in #​4272
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.30 to 1.14.32 by @​dependabot[bot] in #​4271
• build(deps): bump github/codeql-action from 3.29.7 to 3.29.9 by @​dependabot[bot] in #​4269
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​4267
• build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​4262
• build(deps): bump actions/cache from 4.2.3 to 4.2.4 by @​dependabot[bot] in #​4261
• build(deps): bump cloud.google.com/go/compute/metadata from 0.7.0 to 0.8.0 by @​dependabot[bot] in #​4259
• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 by @​dependabot[bot] in #​4275
• build(deps): bump google.golang.org/api from 0.246.0 to 0.247.0 by @​dependabot[bot] in #​4274
• chore: update ent generated code by @​sagikazarmark in #​4276
• feat: update Go to 1.25 by @​sagikazarmark in #​4277
• build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2 in /api/v2 by @​dependabot[bot] in #​4236
• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.7 in /api/v2 by @​dependabot[bot] in #​4260
• build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.2 by @​dependabot[bot] in #​4278
• build(deps): bump distroless/static-debian12 from cdf4daa to a9f88e0 by @​dependabot[bot] in #​4291
• build(deps): bump github.com/beevik/etree from 1.5.1 to 1.6.0 by @​dependabot[bot] in #​4288
• build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @​dependabot[bot] in #​4287
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 in /examples by @​dependabot[bot] in #​4282
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @​dependabot[bot] in #​4281
• build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0 in /api/v2 by @​dependabot[bot] in #​4280
• build(deps): bump google.golang.org/api from 0.247.0 to 0.248.0 by @​dependabot[bot] in #​4283
• build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 by @​dependabot[bot] in #​4285
• build(deps): bump actions/dependency-review-action from 4.7.2 to 4.7.3 by @​dependabot[bot] in #​4290
• build(deps): bump google.golang.org/protobuf from 1.36.7 to 1.36.8 in /api/v2 by @​dependabot[bot] in #​4286
• build(deps): bump actions/attest-build-provenance from 2.4.0 to 3.0.0 by @​dependabot[bot] in #​4296
• build(deps): bump aquasecurity/trivy-action from 0.32.0 to 0.33.0 by @​dependabot[bot] in #​4293
• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @​dependabot[bot] in #​4292

New Contributors

• @​nathanlaceyraft made their first contribution in #​4146
• @​manojVivek made their first contribution in #​4159
• @​marriva made their first contribution in #​4223
• @​peschmae made their first contribution in #​4144
• @​philBrown made their first contribution in #​4224
• @​a-buck made their first contribution in #​3745
• @​vizv made their first contribution in #​4263
• @​daemonfire300 made their first contribution in #​4202

Full Changelog: dexidp/dex@v2.43.0...v2.44.0

v2.43.1

Compare Source

What's Changed

Dependency Updates ⬆️

• Backport #​4146 to 2.43.x by @​sagikazarmark in #​4148

Full Changelog: dexidp/dex@v2.43.0...v2.43.1

v2.43.0

Compare Source

What's Changed

Enhancements 🚀

• Generate access tokens for implicit & hybrid flows only when needed by @​mfila in #​3857
• k8s storage: Request only one object to check if API exists by @​nabokihms in #​4027
• refactor: simplify tests by using slog.DiscardHandler by @​alexandear in #​4058

Bug Fixes 🐛

• Fix Makefile to Support Spaces in Paths by @​EthanDieterich in #​4000
• fix: remove version controlled files from dockerignore by @​sagikazarmark in #​4087
• fix Incorrect Group Handling in RequestContextHandler logger.go by @​alihasan070707 in #​4082

Dependency Updates ⬆️

• build(deps): bump actions/cache from 4.2.0 to 4.2.1 by @​dependabot in #​3998
• build(deps): bump docker/build-push-action from 6.13.0 to 6.14.0 by @​dependabot in #​3997
• build(deps): bump github.com/dexidp/dex/api/v2 from 2.2.0 to 2.3.0 in /examples by @​dependabot in #​3996
• build(deps): bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 by @​dependabot in #​3995
• build(deps): bump google.golang.org/api from 0.221.0 to 0.222.0 by @​dependabot in #​3994
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 in the go_modules group by @​dependabot in #​4008
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 in /examples in the go_modules group by @​dependabot in #​4007
• build(deps): bump golang from 1.24.0-alpine3.20 to 1.24.1-alpine3.20 by @​dependabot in #​4021
• build(deps): bump sigstore/cosign-installer from 3.8.0 to 3.8.1 by @​dependabot in #​4001
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.11 by @​dependabot in #​4038
• build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 in the go_modules group by @​dependabot in #​4043
• build(deps): bump distroless/static-debian12 from 6ec5aa9 to b35229a by @​dependabot in #​4052
• build(deps): bump google.golang.org/api from 0.222.0 to 0.228.0 by @​dependabot in #​4059
• build(deps): bump distroless/static-debian12 from b35229a to c0f429e by @​dependabot in #​4062
• build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 by @​dependabot in #​4060
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.2 by @​dependabot in #​4053
• build(deps): bump docker/build-push-action from 6.14.0 to 6.15.0 by @​dependabot in #​4039
• build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.1 by @​dependabot in #​4064
• build(deps): bump docker/setup-qemu-action from 3.4.0 to 3.6.0 by @​dependabot in #​4031
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @​dependabot in #​4005
• build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0 by @​dependabot in #​4014
• build(deps): bump github.com/prometheus/client_golang from 1.21.0 to 1.22.0 by @​dependabot in #​4083
• build(deps): bump github.com/go-sql-driver/mysql from 1.9.0 to 1.9.2 by @​dependabot in #​4080
• build(deps): bump golang from 1.24.1-alpine3.20 to 1.24.2-alpine3.20 by @​dependabot in #​4079
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.18 to 3.5.21 by @​dependabot in #​4074
• build(deps): bump actions/cache from 4.2.1 to 4.2.3 by @​dependabot in #​4072
• build(deps): bump actions/attest-build-provenance from 2.2.0 to 2.2.3 by @​dependabot in #​4071
• build(deps): bump docker/login-action from 3.3.0 to 3.4.0 by @​dependabot in #​4070
• build(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by @​dependabot in #​4069
• build(deps): bump docker/metadata-action from 5.6.1 to 5.7.0 by @​dependabot in #​4068
• build(deps): bump github.com/russellhaering/goxmldsig from 1.4.0 to 1.5.0 by @​dependabot in #​4073
• build(deps): bump github.com/beevik/etree from 1.5.0 to 1.5.1 by @​dependabot in #​4096
• build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @​dependabot in #​4095
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.10 to 3.4.11 by @​dependabot in #​4093
• build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @​dependabot in #​4092
• build(deps): bump github/codeql-action from 3.28.11 to 3.28.15 by @​dependabot in #​4091
• build(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 by @​dependabot in #​4090
• build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @​dependabot in #​4094
• build(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by @​dependabot in #​4116
• build(deps): bump google.golang.org/api from 0.228.0 to 0.231.0 by @​dependabot in #​4114
• build(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0 by @​dependabot in #​4111
• build(deps): bump anchore/sbom-action from 0.18.0 to 0.19.0 by @​dependabot in #​4109
• build(deps): bump docker/build-push-action from 6.15.0 to 6.16.0 by @​dependabot in #​4108
• build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 by @​dependabot in #​4101
• build(deps): bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @​dependabot in #​4105
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.14.1 by @​dependabot in #​4099
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.0 by @​dependabot in #​4100
• build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /api/v2 by @​dependabot in #​4057
• build(deps): bump golang from 1.24.2-alpine3.20 to 1.24.3-alpine3.20 by @​dependabot in #​4124
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @​dependabot in #​4122
• build(deps): bump oras-project/setup-oras from 1.2.2 to 1.2.3 by @​dependabot in #​4119
• build(deps): bump google.golang.org/api from 0.231.0 to 0.232.0 by @​dependabot in #​4120
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.24 to 1.14.28 by @​dependabot in #​4123
• build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0 by @​dependabot in #​4121
• build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.0 by @​dependabot in #​4127
• build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @​dependabot in #​4126
• build(deps): bump anchore/sbom-action from 0.19.0 to 0.20.0 by @​dependabot in #​4132
• build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @​dependabot in #​4131
• build(deps): bump cloud.google.com/go/compute/metadata from 0.6.0 to 0.7.0 by @​dependabot in #​4130
• build(deps): bump actions/dependency-review-action from 4.7.0 to 4.7.1 by @​dependabot in #​4128
• build(deps): bump google.golang.org/api from 0.232.0 to 0.233.0 by @​dependabot in #​4129
• build(deps): bump distroless/static-debian12 from c0f429e to 188ddfb by @​dependabot in #​4140
• build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @​dependabot in #​4139
• build(deps): bump docker/build-push-action from 6.16.0 to 6.17.0 by @​dependabot in #​4135
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.21 to 3.6.0 by @​dependabot in #​4136
• chore: update dependencies by @​sagikazarmark in #​4141

New Contributors

• @​mfila made their first contribution in #​3857
• @​EthanDieterich made their first contribution in #​4000
• @​alexandear made their first contribution in #​4058
• @​shurup made their first contribution in #​4097
• @​alihasan070707 made their first contribution in #​4082

Full Changelog: dexidp/dex@v2.42.0...v2.43.0

v2.42.1

Compare Source

What's Changed

Bug Fixes 🐛

• fix: remove version controlled files from dockerignore by @​sagikazarmark in #​4089

Full Changelog: dexidp/dex@v2.42.0...v2.42.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.