Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jun 8, 2025

This PR contains the following updates:

Package Update Change
gitea/gitea minor 1.23.8 -> 1.24.2
nginx minor 1.28 -> 1.29
traefik patch v2.11.24 -> v2.11.27

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

go-gitea/gitea (gitea/gitea)

v1.24.2

Compare Source

This is a quick release to resolve docker images push bug

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.24.1

Compare Source

Instances on Gitea Cloud will be automatically upgraded to this version during the specified maintenance window.

v1.24.0

Compare Source

  • BREAKING

    • Make Gitea always use its internal config, ignore /etc/gitconfig (#​33076)
    • Improve log format (#​33814)
    • Fix markdown render behaviors (#​34122)
    • Add package version api endpoints (#​34173)
  • FEATURES

    • Enforce two-factor auth (2FA: TOTP or WebAuthn) (#​34187)
    • Add fullscreen mode as a more efficient operation way to view projects (#​34081)
    • Add anonymous access support for private/unlisted repositories (#​34051)
    • Support public code/issue access for private repositories (#​33127)
    • Add middleware for request prioritization (#​33951)
    • Add cli flags LDAP group configuration (#​33933)
    • Add file tree to file view page (#​32721)
    • Add material icons for file list (#​33837)
    • Artifacts download api for artifact actions v4 (#​33510)
    • Support choose email when creating a commit via web UI (#​33432)
    • Add basic auth support to rss/atom feeds (#​33371)
    • Add sorting by exclusive labels (issue priority) (#​33206)
    • Add sub issue list support (#​32940)
    • Private README.md for organization (#​32872)
    • Email option to embed images as base64 instead of link (#​32061)
    • Option to delay conflict checking of old pull requests until page view (#​27779)
    • Worktime tracking for the organization level (#​19808)
  • PERFORMANCE

    • Add cache for common package queries (#​22491)
    • Move issue pin to an standalone table for querying performance (#​33452)
    • Improve commits list performance to reduce unnecessary database queries (#​33528)
    • Optimize total count of feed when loading activities in user dashboard. (#​33841)
    • Optimize heatmap query (#​33853)
    • Only use prev and next buttons for pagination on user dashboard (#​33981)
    • Improve pull request list API performance (#​34052)
    • Cache GPG keys, emails and users when list commits (#​34086)
    • Refactor Git Attribute & performance optimization (#​34154)
    • Performance optimization for tags synchronization (#​34355) #​34522
  • ENHANCEMENTS

    • Code

      • Display when a release attachment was uploaded (#​34261)
      • Support creating relative link to raw path in markdown (#​34105)
      • Improve code block readability and isolate copy button (#​34009)
      • Improve repository commit view (#​33877)
      • Full-file syntax highlighting for diff pages (#​33766)
      • Clone repository with Tea CLI (#​33725)
      • Improve sync fork behavior (#​33319)
      • Make git clone URL could use current signed-in user (#​33091)
      • Add submodule diff links (#​33097)
      • Link to tree views of submodules if possible (#​33424)
      • Only keep popular licenses (#​33832)
      • De-emphasize signed commits (#​31160)
    • Actions

      • Add flat-square action badge style (#​34062)
      • Update action status badge layout (#​34018)
      • Download actions job logs from API (#​33858)
      • Always show the "rerun" button for action jobs (#​33692)
      • Add auto-expanding running actions step (#​30058)
      • Update status check for all supported on.pull_request.types in Gitea (#​33117)
      • Workflow_dispatch use workflow from trigger branch (#​33098)
      • Add action auto-scroll (#​30057)
      • Add workflow_job webhook (#​33694)
      • Add a button editing action secret (#​34462)
    • Pull Request

      • Auto expand "New PR" form (#​33971)
      • Mark parent directory as viewed when all files are viewed (#​33958)
      • Show info about maintainers are allowed to edit a PR (#​33738)
      • Automerge supports deleting branch automatically after merging (#​32343)
      • Add additional command hints for PowerShell & CMD (#​33548)
    • Issues

      • Allow filtering issues by any assignee (#​33343)
      • Show warning on navigation if currently editing comment or title (#​32920)
      • Make tracked time representation display as hours (#​33315)
      • Add No Results Prompt Message on Issue List Page (#​33699)
      • Add sort option recentclose for issues and pulls (#​34525) #​34539
    • Packages

    • Administration

      • Improve navbar: add "admin" tip, add "active" style (#​32927)
      • Add a option "--user-type bot" to admin user create, improve role display (#​27885)
      • Improve admin user view page (#​33735)
      • Support performance trace (#​32973)
      • Change pprof labels to be prometheus compatible (#​32865)
      • Allow admins and org owners to change org member public status (#​28294)
      • Optimize the installation page (#​32994)
      • Make public URL generation configurable (#​34250)
      • Add a --fullname arg to gitea admin user create. (#​34241)
    • Others

      • Improve oauth2 error handling (#​33969)
      • Fail mirroring more gracefully (#​34002)
      • Align User Details Page Header Layout with Design Specifications (#​34192)
      • Webhook add X-Gitea-Hook-Installation-Target-Type Header (#​33752)
      • Optimize the dashboard (#​32990)
      • Improve button layout on small screens (#​33633)
      • Add cropping support when modifying the user/org/repo avatar (#​33498)
      • Make ROOT_URL support using request Host header (#​32564)
      • Add show more organizations icon in user's profile (#​32986)
      • Introduce --page-space-bottom at 64px (#​30692)
      • Improve theme display (#​30671)
      • Add alphabetical project sorting (#​33504)
      • Add global lock for migrations to make upgrade more safe with multiple replications (#​33706)
      • Add descriptions for private repo public access settings and improve the UI (#​34057)
  • API

    • Actions Runner rest api (#​33873)
    • Inclusion of rename organization api (#​33303)
    • Add API to support link package to repository and unlink it (#​33481)
    • Add API endpoint to request contents of multiple files simultaniously (#​34139)
    • Actions artifacts API list/download check status upload confirmed (#​34273)
    • Add API routes to lock and unlock issues (#​34165)
    • Fix some user name usages (#​33689)
    • Allow filtering /repos/{owner}/{repo}/pulls by target base branch queryparam (#​33684)
    • Improve swagger generation (#​33664)
    • Support Ephemeral action runners (#​33570)
    • Support workflow event dispatch via API (#​33545)
    • Support workflow event dispatch via API (#​32059)
    • Added Description Field for Secrets and Variables (#​33526)
    • Reject star-related requests if stars are disabled (#​33208)
    • Let API create and edit system webhooks, attempt 2 (#​33180)
    • Use Project-URL metadata field to get a PyPI package's homepage URL (#​33089)
    • Add last_committer_date and last_author_date for file contents API (#​32921)
  • REFACTORS

    • Remove context from git struct (#​33793)
    • Refactor admin/common.ts (#​33788)
    • Refactor repo-settings.ts (#​33785)
    • Refactor repo-issue.ts (#​33784)
    • Small refactor to reduce unnecessary database queries and remove duplicated functions (#​33779)
    • Refactor initRepoBranchTagSelector to use new init framework (#​33776)
    • Refactor buttons to use new init framework (#​33774)
    • Refactor markup and pdf-viewer to use new init framework (#​33772)
    • Refactor error system (#​33771)
    • Refactor mail code (#​33768)
    • Update TypeScript types (#​33799)
    • Refactor older tests to use testify (#​33140)
    • Move notifywatch to service layer (#​33825)
    • Decouple context from repository related structs (#​33823)
    • Remove context from mail struct (#​33811)
    • Refactor dropdown ellipsis (#​34123)
    • Refactor functions to reduce repopath expose (#​33892)
    • Refactor repo-diff.ts (#​33746)
    • Refactor web route handler (#​33488)
    • Refactor user & avatar (#​33433)
    • Refactor user package (#​33423)
    • Refactor decouple context from migration structs (#​33399)
    • Refactor context flash msg and global variables (#​33375)
    • Refactor response writer & access logger (#​33323)
    • Refactor ref type (#​33242)
    • Refactor context repository (#​33202)
    • Refactor legacy JS (#​33115)
    • Refactor legacy line-number and scroll code (#​33094)
    • Refactor env var related code (#​33075)
    • Move SetMerged to service layer (#​33045)
    • Merge updatecommentattachment functions (#​33044)
    • Refactor pull-request compare&create page (#​33071)
    • Refactor repo-new.ts (#​33070)
    • Refactor pagination (#​33037)
    • Refactor tests (#​33021)
    • Refactor markup render to fix various path problems (#​34114)
    • Refactor Branch struct in package modules/git (#​33980)
    • Don't create duplicated functions for code repositories and wiki repositories (#​33924)
    • Move git references checking to gitrepo packages to reduce expose of repository path (#​33891)
    • Refactor cache-control (#​33861)
    • Decouple diff stats query from actual diffing (#​33810)
    • Move part of updating protected branch logic to service layer (#​33742)
    • Decouple Batch from git.Repository to simplify usage without requiring the creation of a Repository struct. (#​34001)
    • Refactor tmpl and blob_excerpt (#​32967)
    • Refactor template & test related code (#​32938)
    • Refactor db package and remove unnecessary DumpTables (#​32930)
    • Refactor pprof labels and process desc (#​32909)
    • Refactor repo-projects.ts (#​32892)
    • Refactor getpatch/getdiff functions and remove unnecessary fallback (#​32817)
    • Uniform all temporary directories and allow customizing temp path (#​32352)
    • Remove context from retry downloader (#​33871)
    • Refactor global init code and add more comments (#​33755)
    • Remove some unnecessary template helpers (#​33069)
    • Move and rename UpdateRepository (#​34136)
    • Move hooks function to gitrepo and reduce expose repopath (#​33890)
    • Add abstraction layer to delete repository from disk (#​33879)
    • Add abstraction layer to check if the repository exists on disk (#​33874)
    • Move ParseCommitWithSSHSignature to service layer (#​34087)
    • Move duplicated functions (#​33977)
    • Extract code to their own functions for push update (#​33944)
    • Move gitgraph from modules to services layer (#​33527)
    • Move commits signature and verify functions to service layers (#​33605)
    • Use CloseIssue and ReopenIssue instead of ChangeStatus (#​32467)
    • Refactor arch route handlers (#​32993)
    • Refactor "string truncate" (#​32984)
    • Refactor arch route handlers (#​32972)
    • Clarify path param naming (#​32969)
    • Refactor request context (#​32956)
    • Move some errors to their own sub packages (#​32880)
    • Move RepoTransfer from models to models/repo sub package (#​32506)
    • Move delete deploy keys into service layer (#​32201)
    • Refactor webhook events (#​33337)
    • Move some Actions related functions from routers to services (#​33280)
    • Refactor RefName (#​33234)
    • Refactor context RefName and RepoAssignment (#​33226)
    • Refactor repository transfer (#​33211)
    • Refactor error system (#​33626)
    • Refactor error system (#​33610)
    • Refactor package (routes and error handling, npm peer dependency) (#​33111)
    • Use test context in tests and new loop system in benchmarks (#​33648)
    • Some small refactors (#​33144)
    • Simplify context ref name (#​33267)
  • BUGFIXES

    • Fix some dropdown problems on the issue sidebar (#​34308) #​34327
    • Do not return archive download URLs in API if downloads are disabled (#​34324) #​34338
    • Fix LFS files being editable in web UI (#​34356) #​34362
    • Fix only text/* being viewable in web UI (#​34374) #​34378
    • Fix LFS file not stored in LFS when uploaded/edited via API or web UI (#​34367)
    • Grey out expired artifact on Artifacts list (#​34314) #​34404
    • Fix incorrect divergence cache after switching default branch (#​34370) #​34406
    • Refactor commit message rendering and fix bugs (#​34412) #​34414
    • Merge and tweak markup editor expander CSS (#​34409) #​34415
    • Fix GetUsersByEmails (#​34423) #​34425
    • Only git operations should update last changed of a repository (#​34388) #​34427
    • Fix comment textarea scroll issue in Firefox (#​34438) #​34446
    • Fix repo broken check (#​34444) #​34452
    • Fix remove org user failure on mssql (#​34449) #​34453
    • Fix Workflow run Not Found page (#​34459) #​34466
    • When updating comment, if the content is the same, just return and not update the database (#​34422) #​34464
    • Fix project board view (#​34470) #​34475
    • Fix get / delete runner to use consistent http 404 and 500 status (#​34480) #​34488
    • Fix url validation in webhook add/edit API (#​34492) #​34496
    • Fix edithook api can not update package, status and workflow_job events (#​34495) #​34499
    • Fix ephemeral runner deletion (#​34447) #​34513
    • Don't display error log when .git-blame-ignore-revs doesn't exist (#​34457)
    • Only allow admins to rename default/protected branches (#​33276)
    • Improve "lock conversation" UI (#​34207)
    • Fix incorrect file links (#​34189)
    • Optimize Overflow Menu (#​34183)
    • Check user/org repo limit instead of doer (#​34147)
    • Make markdown render match GitHub's behavior (#​34129)
    • Fix team permission (#​34128)
    • Correctly handle submodule view and avoid throwing 500 error (#​34121)
    • Fix users being able bypass limits with repo transfers (#​34031)
    • Avoid creating unnecessary temporary cat file sub process (#​33942)
    • Refactor organization menu (#​33928)
    • Fix various Fomantic UI and htmx problems (#​33851)
    • Fix 500 error when error occurred in migration page (#​33256)
    • Validate that the tag doesn't exist when creating a tag via the web (#​33241)
    • Add missed transaction on setmerged (#​33079)
    • Rework create/fork/adopt/generate repository to make sure resources will be cleanup once failed (#​31035)
    • Valid email address should only start with alphanumeric (#​28174)
    • Fix webhook url (#​34186)
    • Fix "toAbsoluteLocaleDate" test when system locale is not en-US (#​33939)
    • Fix file name could not be searched if the file was not a text file when using the Bleve indexer (#​33959)
    • Fix cannot delete runners via the modal dialog (#​33895)
    • Fix unpin hint on the pinned pull requests (#​33207)
    • Fix parentCommit invalid memory address or nil pointer dereference. (#​33204)
    • Fix comment header padding (#​33377)
    • Fix some migration and repo name problems (#​33986)
    • Fix various trivial frontend problems (#​34263)
    • Fix Set Email Preference dropdown and button placement (#​34255)
    • Fix quoted replies incorrectly render user input as part of the quote (#​34216)
    • Fix button alignments and remove unnecessary styles (#​34206)
    • Restore form inputs on organization create error (#​34201)
    • Try to fix ACME (3rd) (#​33807)
    • Fix incorrect ref "blob" (#​33240)
    • Fix dynamic content loading init problem (#​33748)
    • Fix git empty check and HEAD request (#​33690)
    • Fix Untranslated Text on Actions Page (#​33635)
    • Fix issue label delete incorrect labels webhook payload (#​34575)
    • Fix incorrect page navigation with up and down arrow on last item of dashboard repos (#​34570)
    • Fix/improve avatar sync from LDAP (#​34573)
    • Fix some trivial problems (#​34579)
    • Retain issue sort type when a keyword search is introduced (#​34559)
    • Always use an empty line to separate the commit message and trailer (#​34512)
    • Fix line-button issue after file selection in file tree (#​34574)
    • Fix doctor deleting orphaned issues attachments (#​34142)
    • Add webhook assigning test and fix possible bug (#​34420)
    • Fix possible nil description of pull request when migrating from CodeCommit (#​34541)
    • Refactor commit reader (#​34542)
    • Fix possible pull request broken when leave the page immediately after clicking the update button #​34509
    • Ignore "Close" error when uploading container blob (#​34620)
    • Fix missed merge commit sha and time when migrating from codecommit (#​34645)
    • Fix GetUsersByEmails (#​34643)
    • Misc CSS fixes (#​34638)
    • Add codecommit to supported services in api docs (#​34626)
    • Validate hex colors when creating/editing labels (#​34623)
    • Fix possible pull request broken when leave the page immediately after clicking the update button (#​34509)
    • Fix margin issue in markup paragraph rendering (#​34599)
    • Fix migration pull request title too long (#​34577)
    • Fix footnote jump behavior on the issue page. (#​34621)
    • Fix "oras" OCI client compatibility (#​34666)
    • Fix last admin check when syncing users (#​34649)
    • Fix skip paths check on tag push events in workflows (#​34602) #​34670
  • MISC

    • Bump to alpine 3.22 (#​34613)
    • Make pull request and issue history more compact (#​34588)
    • Run integration tests against postgres 14 (#​34514) #​34536
    • Enable addtional linters (#​34085)
    • Enable testifylint rules (#​34075)
    • Enable staticcheck QFxxxx rules (#​34064)
    • Improve Actions test (#​32883)
    • Drop fomantic build (#​33845)
    • Go1.24 (#​33562)
    • Run yamllint with strict mode, fix issue (#​33551)
    • Disable cron task to update license (#​33486)
    • Optimize makefile help information generation (#​33390)
    • Convert github.com/xanzy/go-gitlab into gitlab.com/gitlab-org/api/client-go (#​33126)
    • Add missed changelogs (#​33649)
    • Update .changelog file to add performance label group (#​33472)
    • Add missing POPULATE_SQUASH_COMMENT_WITH_COMMIT_MESSAGES in app.example.ini (#​33363)
    • Update README screenshots (#​33347)
    • Update unrs-resolver (#​34279)
    • Update go&js dependencies (#​34262)
    • Optimize the calling code of queryElems (#​34235)
    • Update protected_branch.tmpl (#​34193)
    • Feat/optimize span svg layout (#​34185)
    • Set MERMAID_MAX_SOURCE_CHARACTERS to 50000 (#​34152)
    • Update JS and PY deps (#​34143)
    • Add Chinese translations for README files (#​34132)
    • Use overflow-wrap: anywhere to replace word-break: break-all (#​34126)
    • Clarify ownership in password change error messages (#​34092)
    • Add toggleClass function in dom.ts (#​34063)
    • Update to golangci-lint v2 (#​34054)
    • Update Makefile test comments (#​34013)
    • Update go mod dependencies (#​33988)
    • Use filepath.Join instead of path.Join for file system file operations (#​33978)
    • Prepare common tmpl functions in a middleware (#​33957)
    • Remove unused or abused styles (#​33918)
    • Update JS and PY deps, misc tweaks (#​33903)
    • Try to figure out attribute checker problem (#​33901)
    • Add lock for a repository pull mirror (#​33876)
    • Fine tune push mirror UI (#​33866)
    • Improve issue & code search (#​33860)
    • Use pullrequestlist instead of []*pullrequest (#​33765)
    • Upgrade act to 0.261.4 and actions-proto-go to v0.4.1 (#​33760)
    • Align sidebar gears to the right (#​33721)
    • Update Go dependencies (skip blevesearch, meilisearch) (#​33655)
    • Add migrations and doctor fixes (#​33556)
    • Remove "class-name" from svg icon (#​33540)
    • Update MAINTAINERS (#​33529)
    • Add "No data available" display when list is empty (#​33517)
    • Use git diff-tree for DiffFileTree on diff pages (#​33514)
    • Give organisation members access to organisation feeds (#​33508)
    • Update feishu icon (#​33470)
    • Hide/disable unusable UI elements when a repository is archived (#​33459)
    • Update @github/text-expander-element to 2.9.0 (#​33435)
    • Do not access GitRepo when a repo is being created (#​33380)
    • Fix incorrect ref usages (#​33301)
    • Prepare for support performance trace (#​33286)
    • Enable Typescript noImplicitThis (#​33250)
    • Remove unused CSS styles and move some styles to proper files (#​33217)
    • Add .run to gitignore (#​33175)
    • Fix typo in gitea downloader test and add missing codebase in ToGitServiceType (#​33146)
    • Remove extended glob pattern from branch protection UI (#​33125)
    • Clean up legacy form CSS styles (#​33081)
    • Unset XDG_HOME_CONFIG as gitea manages configuration locations (#​33067)
    • Add IntelliJ Gateway's .uuid to gitignore (#​33052)
    • User facing messages for AGit errors (#​33012)
    • Always show assignees on right (#​33006)
    • Fix eslint (#​33002)
    • Update JS dependencies (#​32914)
    • Bump x/net (#​32896) (#​32900)
    • Only activity tab needs heatmap data loading (#​34652)
containous/traefik (traefik)

v2.11.27

Compare Source

All Commits

Bug fixes:

v2.11.27

Compare Source

All Commits

Bug fixes:

v2.11.26

Compare Source

All Commits

Bug fixes:

v2.11.26

Compare Source

All Commits

Bug fixes:

v2.11.25

Compare Source

All Commits

Bug fixes:

Documentation:

v2.11.25

Compare Source

All Commits

Bug fixes:

Documentation:


Configuration

📅 Schedule: Branch creation - "after 8am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner June 8, 2025 14:33
@renovate renovate bot force-pushed the renovate/docker-compose branch from 94277c6 to c327be2 Compare June 10, 2025 08:45
@renovate renovate bot force-pushed the renovate/docker-compose branch 3 times, most recently from a27179c to 957502e Compare June 25, 2025 03:32
@renovate renovate bot force-pushed the renovate/docker-compose branch from 957502e to 392104e Compare June 26, 2025 23:37
@renovate renovate bot force-pushed the renovate/docker-compose branch 3 times, most recently from 104104a to bda64f5 Compare July 12, 2025 02:49
@renovate renovate bot force-pushed the renovate/docker-compose branch from bda64f5 to 9279417 Compare July 13, 2025 20:01
@tuunit tuunit merged commit 40f3ef1 into master Jul 13, 2025
10 of 11 checks passed
@tuunit tuunit deleted the renovate/docker-compose branch July 13, 2025 20:04
sourava01 pushed a commit to sourava01/oauth2-proxy that referenced this pull request Jul 21, 2025
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
salmanazmat666 pushed a commit to sensysllc/oauth2-proxy that referenced this pull request Nov 6, 2025
* deps: remove tools/reference-gen from go.mod

Remove github.com/oauth2-proxy/tools/reference-gen from dependencies.
Instead we are now running it with "go run" with a version suffix.

Long version:
- github.com/oauth2-proxy/tools/reference-gen is removed from
  tools/tool/go
- in pkg/apis/options/doc.go we now run reference-run with a version
  suffix (go run package@version) with the version comming from go.mod.
- the "//go:generate" line is split in 2 lines (using the -command
  flag) for readability
- "go mod tidy" for cleaning dependencies from go.mod, go.sum

Note: we are not upgrading reference-gen here. That will be a further
separate change.

* chore(deps): update dependency @easyops-cn/docusaurus-search-local to ^0.49.0

* chore(deps): update gomod (oauth2-proxy#2952)

* chore(deps): update gomod

Co-authored-by: Jan Larwig <jan@larwig.com>

* chore(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.2 [security] (oauth2-proxy#3003)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update golang dependencies and pin to latest golang v1.23.x release (oauth2-proxy#3011)

Signed-off-by: Jan Larwig <jan@larwig.com>

* release v7.8.2 (oauth2-proxy#3012)

* update to release version v7.8.2

* docs: release letter

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* chore(deps): update dependency golangci/golangci-lint to v1.64.8 (oauth2-proxy#3004)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* feat: update HashNonce to use crypto/sha256 (oauth2-proxy#2967)

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>

* chore(deps): update docker-compose (oauth2-proxy#3005)

* docs: fix gitlab docs url for oauth2 integration (oauth2-proxy#3002)

* Update gitlab.md with correct url for creating an application

* docs: fix gitlab docs url for oauth2 integration

---------

Co-authored-by: Jan Larwig <jan@larwig.com>

* feat: allow to set non-default authorization request response mode (oauth2-proxy#3001)

* Update Go version in devcontainer

* Add option to change response mode in authorization request

* Fix option name

* Update docs and changelog

* Rename config value to underscore

* Add unit tests for added parameter

* Move change to upcoming release

* Generate alpha config

---------

Co-authored-by: Michael Cornel <michael@stieler.it>

* chore(deps): update docker-compose

* chore(deps): update gitea/gitea docker tag to v1.23.7 (oauth2-proxy#3030)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Add --bearer-token-login-fallback option (oauth2-proxy#2924)

* add --deny-invalid-bearer-tokens

* update changelog

* PR feedback, update api-routes description

* update --api-routes description

* revert load_test fix that I needed locally

---------

Co-authored-by: Justin Ryan <j.ryan@mwam.com>

* chore(deps): update module golang.org/x/net to v0.38.0 [security] (oauth2-proxy#3035)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): upgrade to latest golang v1.23.x release (oauth2-proxy#3041)

* chore(deps): update docker-compose (oauth2-proxy#3038)

* fix(entra-id): use federated credentials for refresh token (oauth2-proxy#3031)

* fix: use federated credentials to refresh token in entra id

* fix: add some error handling

* chore: update changelog

* chore: update comments

* chore: update comments

* doc: reference entra id docs and clearer phrasing of comments

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* chore(deps): update ghcr.io/dexidp/dex docker tag to v2.42.1 (oauth2-proxy#3044)

* doc(entra-id): correct toml field in sample (oauth2-proxy#2946)


---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* chore(build): refactoring makefile for better usability and introducing a default help target (oauth2-proxy#2930)

* fix: role extraction from access token in keycloak oidc  (oauth2-proxy#1916)

* Fix wrong token used in Keycloak OIDC provider

* Update CHANGELOG for PR oauth2-proxy#1916

* Update tests

* fix: keycloak oidc role extraction

---------

Co-authored-by: Jan Larwig <jan@larwig.com>

* feat: ability to parse JWT encoded profile claims (oauth2-proxy#3014)

* fix: parse JWT profile claims

* Comment with OIDC specs reference

* fix: formatting

* Updated changelog

---------

Co-authored-by: Jan Larwig <jan@larwig.com>

* release: v7.9.0 (oauth2-proxy#3047)

* add new docs version 7.9.x

* update to release version v7.9.0

* doc: add changelog summary

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* docs: clear up multiple-providers is unimplemented (oauth2-proxy#3046)

* docs: clear up multiple-providers is unimplemented

Currently this configuration option is held up by oauth2-proxy#926. So users don't
assume this solution will work for them, and later find the feature is
not yet implemented -- own the shortcoming clearly.

* doc: add note about missing multi provider implementation to versioned docs

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* docs: add note about version obfuscation to footer option (oauth2-proxy#3051)

Signed-off-by: Jan Larwig <jan@larwig.com>

* chore(deps): update docker-compose (oauth2-proxy#3074)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): drop golang.org/x/exp/{slices,maps} (oauth2-proxy#3065)

Use Go 1.23 stdlib instead: slices, maps.

* chore(lint): fix staticcheck issues (oauth2-proxy#3061)

* chores: fix staticcheck QF1012

Fix use of fmt.Sprintf when writing to a writer.
https://staticcheck.dev/docs/checks/#QF1012
oauth2-proxy#3060

* chores: fix staticcheck QF1003

Use switch instead of multiple if/else.
https://staticcheck.dev/docs/checks/#QF1003
oauth2-proxy#3060

* chores: exclude staticcheck QF1008 for now

We aim to migrate golangci-lint to v2
Let's disable QF1008 (Omit embedded fields from selector expression)
for now.
https://staticcheck.dev/docs/checks/#QF1008

* chores: fix golangci config: run.deadline -> timeout

Rename config option to match v1 documentation: deadline -> timeout.
https://golangci.github.io/legacy-v1-doc/usage/configuration/#run-configuration

This error has been spotted by golangci-lint v2 migration tool.

* chores: fix staticcheck QF1012

* chores: major upgrade of golangci-lint from v1.64.8 to v2.1.6 (oauth2-proxy#3062)

.golangci.yml migrated with "golangci-lint migrated" and then tweaked to add comments back.

* feat: support for multiple github orgs (oauth2-proxy#3072)

* fix for github teams

* Update github.go

* added errorhandling

* Update github.md

* refactored GitHub provider

refactored hasOrg, hasOrgAndTeams and hasTeam into hasAccess to stay within function limit

* reverted Refactoring

* refactored github.go

- joined hasOrgAndTeamAccess into checkRestrictions

* refactored github.go

- reduced number of returns of function checkRestrictions to 4

* updated GitHub provider to accept legacy team ids

* GoFmt and golangci-lint

Formatted with GoFmt and followed recommendations of GoLint

* added Tests

added Tests for checkRestrictions.

* refactored in maintainer feedback

* Removed code, documentation and tests for legacy ids

* add changelog and update docs

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* Create FUNDING.yml

* feat: bump to go1.24.5 and full dependency update (oauth2-proxy#3116)

* upgrade to go1.24.5

dependency updates

lint fixes

chore(deps): upgrade github.com/spf13/viper to v1.20.1

Note that this upgrade also implied to upgrade github.com/mitchellh/mapstructure
(nowadays unmaintained: https://gist.github.com/mitchellh/90029601268e59a29e64e55bab1c5bdc)
to github.com/go-viper/mapstructure/v2.

fix: adapt tests to match mapstructure v2 error messages

pkg/apis/options/load_test.go: skip tests on Go 1.23

Add a compile guard for Go < 1.24 for the pkg/apis/options/load_test.go
because the LoadYAML test depends on error messages produced by
encoding/json that changed slightly (names of embedded structs are now
reported). As we updated the test for go1.24, the test now fails on
1.23, but just for a slight difference, so we disable the test there.

fix: adapt tests to match mapstructure v2 error messages

remove pre 1.24 disclaimer

add changelog entry

Signed-off-by: Jan Larwig <jan@larwig.com>

Co-Authored-By: Olivier Mengué <dolmen@cpan.org>

* add exclusion for 'avoid meaningless package names' in .golangci.yml

* chore(dep): upgrade all dependencies

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Olivier Mengué <dolmen@cpan.org>
Co-authored-by: Jan Larwig <jan@larwig.com>

* chore(deps): update dependency golangci/golangci-lint to v2.2.2 (oauth2-proxy#3111)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update dependency @easyops-cn/docusaurus-search-local to ^0.51.0 (oauth2-proxy#3098)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update example docker-compose files (oauth2-proxy#3096)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update helm examples (oauth2-proxy#2951)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update alpine base image to v3.22.0 (oauth2-proxy#3097)

* chore(deps): update alpine docker tag to v3.22.0

* add changelog entry

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* fix: return error for empty Redis URL list (oauth2-proxy#3101)

* fix: return error for empty Redis URL list

* add changelog entry

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* add new docs version 7.10.x

* update to release version v7.10.0

* add changelog entry

Signed-off-by: Jan Larwig <jan@larwig.com>

* chore(deps): update dependency @easyops-cn/docusaurus-search-local to ^0.52.0 (oauth2-proxy#3131)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update gomod (oauth2-proxy#3132)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update helm release oauth2-proxy to v7.14.1 (oauth2-proxy#3133)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update docker-compose (oauth2-proxy#3130)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update alpine docker tag to v3.22.1 (oauth2-proxy#3129)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* feat(cookie) csrf per request limit (oauth2-proxy#3134)

* Allow setting maximum number of csrf cookies, deleting the oldest if necessary

* Add a test for multiple CSRF cookies to remove the old cookie

* Add docs/changelog

* If limit is <=0 do not clear

Signed-off-by: test <bert@transtrend.com>

* Better docs

Co-authored-by: Jan Larwig <jan@larwig.com>

* direct check of option value

Co-authored-by: Jan Larwig <jan@larwig.com>

* direct use of option value

Co-authored-by: Jan Larwig <jan@larwig.com>

* sort based on clock compare vs time compare

Co-authored-by: Jan Larwig <jan@larwig.com>

* clock.Clock does not implement Compare, fix csrf cookie extraction after rename

Signed-off-by: Bert Helderman <bert@transtrend.com>

* Linter fix

* add method signature documentation and slight formatting

Signed-off-by: Jan Larwig <jan@larwig.com>

* fix: test case for csrf cookie limit and flag

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Bert Helderman <bert@transtrend.com>
Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: test <bert@transtrend.com>
Co-authored-by: bh-tt <71650427+bh-tt@users.noreply.github.com>

* fix: show login page on broken session cookie (oauth2-proxy#2605)

* fix: redirect on invalid cookie

* docs: update changelog

* chore: remove duplicated code

* fix: status code handling if wrong http method is used

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* Fix local-environment ports (oauth2-proxy#3136)

* Change Dex port in local-environment from 4190 to 5556

Port 4190 is blocked by standards-compliant browsers (e.g. Firefox), as per https://fetch.spec.whatwg.org/#port-blocking.
Port 5556 is used by Dex in its example config files: https://github.com/dexidp/dex/blob/745e1114f341e849f3b0edde45b39c14017deaf8/examples/config-dev.yaml#L50

* Fix upstream in local-environment/oauth2-proxy.cfg

http://httpbin.localtest.me:8080 is only exposed to the host, not to httpbin Docker network.
Causes Bad Gateway before.

* Do not expose unauthenticated httpbin service in local-environment

This defeats the point of having oauth2-proxy.
It has already been misleading by causing the bug fixed in cafc6af.
It serves as a bad example: users might accidentally expose the service they're trying to protect in the first place.

* Remove unnecessary httpbin.localtest.me alias from local-environment

* feat: allow use more possible google admin-sdk api scopes (oauth2-proxy#2743)

* feat: Allow use more possible google admin-sdk api scopes.

* reduce cognitive complexity

Signed-off-by: Bob Du <i@bobdu.cc>

* remove unnecessary else block / indentation

Signed-off-by: Jan Larwig <jan@larwig.com>

* add changelog entry

Signed-off-by: Jan Larwig <jan@larwig.com>

* slight formatting and error message rephrasing

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Bob Du <i@bobdu.cc>
Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* feat: add SourceHut (sr.ht) provider (oauth2-proxy#2359)

* Add SourceHut (sr.ht) provider

* fix changelog entry

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* fix: regex substitution for $ signs in upstream path handling before running envsubst (oauth2-proxy#2524)

* Perform a regex replace of $NUM to $$NUM before running envsubst

* Perform a regex replace of $NUM to $$NUM before running envsubst

* add test case; fix linter warnings; add method documentation

Signed-off-by: Jan Larwig <jan@larwig.com>

* add changelog entry

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* feat(cookie): add feature support for cookie-secret-file (oauth2-proxy#3104)

* feat: add feature support for cookie-secret-file

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-Authored-By: Sandy Chen <Yuxuan.Chen@morganstanley.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* feat: use non-default authorization request response mode in OIDC providers (oauth2-proxy#3055)

* fix: OIDC sets response mode

* Update CHANGELOG

* feat: make google-groups argument optional (oauth2-proxy#3138)

add test cases

update documentation

refactor code and some cleanup

update changelog

Signed-off-by: Jan Larwig <jan@larwig.com>

* feat: differentiate between "no available key" and error for redis sessions (oauth2-proxy#3093)

* add some better error handling

* add changelog entry

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* Merge commit from fork

Signed-off-by: Jan Larwig <jan@larwig.com>

* release v7.11.0 (oauth2-proxy#3145)

* add new docs version 7.11.x

* update to release version v7.11.0

* add changelog entry for v7.11.0

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* fix: port for local-environment (oauth2-proxy#3148)

* feat(e2e): add workflow to trigger e2e test suite through PR comments (oauth2-proxy#3153)

* feat(e2e): add workflow to trigger e2e test suite through PR comments

* add empty line

* feat: add Cidaas provider (oauth2-proxy#2273)

* Add sensible logging flag to default setup for logger

* Fix default value flag for sensitive logging

* Remove sensitive logging changes

* Add Cidaas provider

* Update CHANGELOG.md

* Add required groups scope to defaults

* Fix tests

* Remove if block with protected resource

* Fix linting

* Adjust provider sorting, fixes

* Directly handle error return

Co-authored-by: Jan Larwig <jan@larwig.com>

* Use less deep nesting

Co-authored-by: Jan Larwig <jan@larwig.com>

* Directly handle returned error

Co-authored-by: Jan Larwig <jan@larwig.com>

* Pass provider options to Cidaas provider

Co-authored-by: Jan Larwig <jan@larwig.com>

* Add import for provider options

* Fix tests

* Fix linting

* Add Cidaas doc page

* Add Cidaas provider doc page to overview

* Fix link in docs

* Fix link in docs

* Add link to Cidaas

* fix provider order in docs and changelog position

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Teko012 <112829523+Teko012@users.noreply.github.com>
Co-authored-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Kevin Kreitner <kevinkreitner@gmail.com>

* chore(dep): upgrade to latest golang 1.24.6 (oauth2-proxy#3166)

Signed-off-by: Jan Larwig <jan@larwig.com>

* chore(deps): update actions/checkout action to v5 (oauth2-proxy#3164)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update dependency golangci/golangci-lint to v2.4.0 (oauth2-proxy#3161)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update docker-compose (oauth2-proxy#3160)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* feat: allow disable-keep-alives configuration in upstream (oauth2-proxy#3156)

Signed-off-by: Jan Larwig <jan@larwig.com>

* fix: Gitea team membership (oauth2-proxy#3150)

* bugfix: Gitaa team membership

Gitea doesn't properly fill in all the fields like GitHub,
so implement a series of fallbacks.

Signed-off-by: magic_rb <magic_rb@redalder.org>

* add changelog, documentation and fix groups list

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: magic_rb <magic_rb@redalder.org>
Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

* add new docs version 7.12.x

Signed-off-by: Jan Larwig <jan@larwig.com>

* update to release version v7.12.0

* add changelog entry for v7.12.0

Signed-off-by: Jan Larwig <jan@larwig.com>

* doc: SourceHut documentation fixes (oauth2-proxy#3170)

* fix: SourceHut documentation

- Add it to sidebar and provider index
- Fix broken link

This fixes an oversight in oauth2-proxy#2359, where I had not fully understood how
the documentation works.

Signed-off-by: Conrad Hoffmann <ch@bitfehler.net>

* fix: doc build instructions in docs/README.md

---------

Signed-off-by: Conrad Hoffmann <ch@bitfehler.net>

* chore(deps): update actions/upload-pages-artifact action to v4 (oauth2-proxy#3194)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* doc: update contribution guide to avoid a specific mention of the version of Go being used. (oauth2-proxy#3157)

* fix(deps): revert actions/upload-pages-artifact action to v3 (oauth2-proxy#3211)

Signed-off-by: Richard Ahlquist <richard.jimmy.johansson@gmail.com>

* chore(deps): update alpine docker tag to v3.22.2 (oauth2-proxy#3241)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update actions/setup-node action to v6 (oauth2-proxy#3242)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update actions/stale action to v10 (oauth2-proxy#3193)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update actions/setup-go action to v6 (oauth2-proxy#3191)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update actions/labeler action to v6 (oauth2-proxy#3190)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update helmv3 (oauth2-proxy#3189)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update docker-compose (oauth2-proxy#3188)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update dependency golangci/golangci-lint to v2.5.0 (oauth2-proxy#3212)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore: CI-1455 remove comments

* chore: CI-1455 update docs/configs/alpha-configs.yaml after generate

* fix: CI-1455 lint

---------

Signed-off-by: Jan Larwig <jan@larwig.com>
Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>
Signed-off-by: Bert Helderman <bert@transtrend.com>
Signed-off-by: Bob Du <i@bobdu.cc>
Signed-off-by: magic_rb <magic_rb@redalder.org>
Signed-off-by: Conrad Hoffmann <ch@bitfehler.net>
Signed-off-by: Richard Ahlquist <richard.jimmy.johansson@gmail.com>
Co-authored-by: Olivier Mengué <dolmen@cpan.org>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Jan Larwig <jan@larwig.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Evan Gibler <20933572+egibs@users.noreply.github.com>
Co-authored-by: Copolycube <kaourintin+github@gmail.com>
Co-authored-by: Michael Cornel <michael@stieler.it>
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
Co-authored-by: Justin Ryan <jryan@verticalresponse.com>
Co-authored-by: Justin Ryan <j.ryan@mwam.com>
Co-authored-by: Enrico <enrico.pelizzon@gmail.com>
Co-authored-by: Richard Hagen <richard.hagen@gmail.com>
Co-authored-by: Michael Niksa <miniksa@microsoft.com>
Co-authored-by: Guillaume "Elektordi" Genty <github@elektordi.net>
Co-authored-by: ikarius <fred@ikarius.com>
Co-authored-by: Evan Carroll <me@evancarroll.com>
Co-authored-by: Daniel Mersch <94058351+daniel-mersch@users.noreply.github.com>
Co-authored-by: Edward Viaene <ward.viaene@gmail.com>
Co-authored-by: Daniel Givens <1581675+dgivens@users.noreply.github.com>
Co-authored-by: test <bert@transtrend.com>
Co-authored-by: bh-tt <71650427+bh-tt@users.noreply.github.com>
Co-authored-by: Johann <76482511+Primexz@users.noreply.github.com>
Co-authored-by: Simmo Saan <simmo.saan@gmail.com>
Co-authored-by: Bob Du <i@bobdu.cc>
Co-authored-by: Conrad Hoffmann <1226676+bitfehler@users.noreply.github.com>
Co-authored-by: Ashkan Daie <1415513+dashkan@users.noreply.github.com>
Co-authored-by: Sandy Chen <sandy19890604@gmail.com>
Co-authored-by: Sandy Chen <Yuxuan.Chen@morganstanley.com>
Co-authored-by: Sourav Agrawal <146818014+sourava01@users.noreply.github.com>
Co-authored-by: nobletrout <nobletrout@gmail.com>
Co-authored-by: Theron Boerner <hunterboerner@gmail.com>
Co-authored-by: Kevin Kreitner <kevin.kreitner@real-digital.de>
Co-authored-by: Teko012 <112829523+Teko012@users.noreply.github.com>
Co-authored-by: Kevin Kreitner <kevinkreitner@gmail.com>
Co-authored-by: jet <71936688+jet-go@users.noreply.github.com>
Co-authored-by: Richard Brežák <richard@brezak.sk>
Co-authored-by: David Symonds <dsymonds@gmail.com>
Co-authored-by: Richard Ahlquist <richard.jimmy.johansson@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants