hashbang / gitops

gitops repo for our kubernetes cluster
23 stars 8 forks source link

argocd: update ghcr.io/dexidp/dex Docker tag to v2.37.0 #191

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
ghcr.io/dexidp/dex Kustomization minor v2.36.0-distroless -> v2.37.0-distroless

Release Notes

dexidp/dex (ghcr.io/dexidp/dex) ### [`v2.37.0`](https://togithub.com/dexidp/dex/releases/tag/v2.37.0) [Compare Source](https://togithub.com/dexidp/dex/compare/v2.36.0...v2.37.0) The official container image for this release can be pulled from ghcr.io/dexidp/dex:v2.37.0 #### What's Changed ##### Exciting New Features 🎉 - TLS cert reloader by [@​seankhliao](https://togithub.com/seankhliao) in [https://github.com/dexidp/dex/pull/2964](https://togithub.com/dexidp/dex/pull/2964) ##### Enhancements 🚀 - Add xx to cross-compile binaries in Docker by [@​sagikazarmark](https://togithub.com/sagikazarmark) in [https://github.com/dexidp/dex/pull/2898](https://togithub.com/dexidp/dex/pull/2898) - Spelling by [@​jsoref](https://togithub.com/jsoref) in [https://github.com/dexidp/dex/pull/2919](https://togithub.com/dexidp/dex/pull/2919) - LDAP case-insensitive DN attribute by [@​nabokihms](https://togithub.com/nabokihms) in [https://github.com/dexidp/dex/pull/2829](https://togithub.com/dexidp/dex/pull/2829) - Utilize native git diff --exit-code by [@​marcofranssen](https://togithub.com/marcofranssen) in [https://github.com/dexidp/dex/pull/2981](https://togithub.com/dexidp/dex/pull/2981) - Google: Add Support for Multiple Admin Emails to Retrieve Group Lists by [@​vsychov](https://togithub.com/vsychov) in [https://github.com/dexidp/dex/pull/2911](https://togithub.com/dexidp/dex/pull/2911) ##### Bug Fixes 🐛 - Do not skip approval screen by default by [@​nabokihms](https://togithub.com/nabokihms) in [https://github.com/dexidp/dex/pull/2897](https://togithub.com/dexidp/dex/pull/2897) - Fail if OIDC config contains hosted domains by [@​nabokihms](https://togithub.com/nabokihms) in [https://github.com/dexidp/dex/pull/2937](https://togithub.com/dexidp/dex/pull/2937) ##### Dependency Updates ⬆️ - build(deps): bump alpine from 3.17.2 to 3.17.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2879](https://togithub.com/dexidp/dex/pull/2879) - build(deps): bump mheap/github-action-required-labels from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2881](https://togithub.com/dexidp/dex/pull/2881) - build(deps): bump google.golang.org/grpc from 1.53.0 to 1.54.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2873](https://togithub.com/dexidp/dex/pull/2873) - build(deps): bump golang.org/x/oauth2 from 0.6.0 to 0.7.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2892](https://togithub.com/dexidp/dex/pull/2892) - build(deps): bump golang from 1.20.2-alpine3.16 to 1.20.3-alpine3.16 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2884](https://togithub.com/dexidp/dex/pull/2884) - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2885](https://togithub.com/dexidp/dex/pull/2885) - build(deps): bump aquasecurity/trivy-action from 0.9.2 to 0.10.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2905](https://togithub.com/dexidp/dex/pull/2905) - build(deps): bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2900](https://togithub.com/dexidp/dex/pull/2900) - build(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2891](https://togithub.com/dexidp/dex/pull/2891) - build(deps): bump github.com/russellhaering/goxmldsig from 1.3.0 to 1.4.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2920](https://togithub.com/dexidp/dex/pull/2920) - build(deps): bump golang from 1.20.3-alpine3.16 to 1.20.4-alpine3.16 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2924](https://togithub.com/dexidp/dex/pull/2924) - build(deps): bump github.com/lib/pq from 1.10.7 to 1.10.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2922](https://togithub.com/dexidp/dex/pull/2922) - build(deps): bump golang.org/x/oauth2 from 0.7.0 to 0.8.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2929](https://togithub.com/dexidp/dex/pull/2929) - build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2932](https://togithub.com/dexidp/dex/pull/2932) - build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.7 to 3.5.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2899](https://togithub.com/dexidp/dex/pull/2899) - build(deps): bump github.com/beevik/etree from 1.1.0 to 1.1.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2939](https://togithub.com/dexidp/dex/pull/2939) - build(deps): bump github.com/go-sql-driver/mysql from 1.7.0 to 1.7.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2938](https://togithub.com/dexidp/dex/pull/2938) - build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.8 to 3.5.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2946](https://togithub.com/dexidp/dex/pull/2946) - build(deps): bump github/codeql-action from 2.3.1 to 2.3.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2943](https://togithub.com/dexidp/dex/pull/2943) - build(deps): bump anchore/sbom-action from 0.14.1 to 0.14.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2942](https://togithub.com/dexidp/dex/pull/2942) - build(deps): bump alpine from 3.17.3 to 3.18.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2930](https://togithub.com/dexidp/dex/pull/2930) - build(deps): bump google.golang.org/grpc from 1.53.0 to 1.55.0 in /api/v2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2927](https://togithub.com/dexidp/dex/pull/2927) - build(deps): bump google.golang.org/api from 0.114.0 to 0.122.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2931](https://togithub.com/dexidp/dex/pull/2931) - build(deps): bump entgo.io/ent from 0.11.10 to 0.12.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2923](https://togithub.com/dexidp/dex/pull/2923) - build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.7 to 3.5.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2944](https://togithub.com/dexidp/dex/pull/2944) - build(deps): bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2945](https://togithub.com/dexidp/dex/pull/2945) - build(deps): bump helm/kind-action from 1.5.0 to 1.7.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2956](https://togithub.com/dexidp/dex/pull/2956) - build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2957](https://togithub.com/dexidp/dex/pull/2957) - build(deps): bump actions/setup-go from 4.0.0 to 4.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2949](https://togithub.com/dexidp/dex/pull/2949) - build(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2948](https://togithub.com/dexidp/dex/pull/2948) - build(deps): bump google.golang.org/api from 0.122.0 to 0.123.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2959](https://togithub.com/dexidp/dex/pull/2959) - build(deps): bump github.com/beevik/etree from 1.1.4 to 1.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2947](https://togithub.com/dexidp/dex/pull/2947) - build(deps): bump github/codeql-action from 2.3.3 to 2.3.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2970](https://togithub.com/dexidp/dex/pull/2970) - build(deps): bump google.golang.org/api from 0.123.0 to 0.124.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2968](https://togithub.com/dexidp/dex/pull/2968) - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2958](https://togithub.com/dexidp/dex/pull/2958) - build(deps): bump aquasecurity/trivy-action from 0.10.0 to 0.11.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2984](https://togithub.com/dexidp/dex/pull/2984) - build(deps): bump github/codeql-action from 2.3.5 to 2.3.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2982](https://togithub.com/dexidp/dex/pull/2982) - build(deps): bump actions/dependency-review-action from 3.0.4 to 3.0.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2978](https://togithub.com/dexidp/dex/pull/2978) - build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2983](https://togithub.com/dexidp/dex/pull/2983) - build(deps): bump github.com/mattn/go-sqlite3 from 1.14.16 to 1.14.17 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2979](https://togithub.com/dexidp/dex/pull/2979) - build(deps): bump google.golang.org/api from 0.124.0 to 0.125.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2976](https://togithub.com/dexidp/dex/pull/2976) - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2977](https://togithub.com/dexidp/dex/pull/2977) - build(deps): bump docker/login-action from 2.1.0 to 2.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2987](https://togithub.com/dexidp/dex/pull/2987) - build(deps): bump docker/setup-qemu-action from 2.1.0 to 2.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2985](https://togithub.com/dexidp/dex/pull/2985) - build(deps): bump docker/metadata-action from 4.4.0 to 4.5.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2986](https://togithub.com/dexidp/dex/pull/2986) - build(deps): bump docker/setup-buildx-action from 2.5.0 to 2.6.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2988](https://togithub.com/dexidp/dex/pull/2988) - build(deps): bump mheap/github-action-required-labels from 4 to 5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2990](https://togithub.com/dexidp/dex/pull/2990) - build(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2995](https://togithub.com/dexidp/dex/pull/2995) - build(deps): bump github/codeql-action from 2.3.6 to 2.20.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3002](https://togithub.com/dexidp/dex/pull/3002) - build(deps): bump google.golang.org/api from 0.125.0 to 0.127.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2999](https://togithub.com/dexidp/dex/pull/2999) - build(deps): bump docker/setup-buildx-action from 2.6.0 to 2.7.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3001](https://togithub.com/dexidp/dex/pull/3001) - build(deps): bump docker/build-push-action from 4.0.0 to 4.1.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3003](https://togithub.com/dexidp/dex/pull/3003) - build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2993](https://togithub.com/dexidp/dex/pull/2993) - build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.4 to 3.4.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/2997](https://togithub.com/dexidp/dex/pull/2997) - build(deps): bump golang.org/x/net from 0.10.0 to 0.11.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3004](https://togithub.com/dexidp/dex/pull/3004) - build(deps): bump alpine from 3.18.0 to 3.18.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3008](https://togithub.com/dexidp/dex/pull/3008) - build(deps): bump docker/metadata-action from 4.5.0 to 4.6.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3007](https://togithub.com/dexidp/dex/pull/3007) - build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3005](https://togithub.com/dexidp/dex/pull/3005) - build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3009](https://togithub.com/dexidp/dex/pull/3009) - build(deps): bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3010](https://togithub.com/dexidp/dex/pull/3010) - build(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3016](https://togithub.com/dexidp/dex/pull/3016) - build(deps): bump github/codeql-action from 2.20.0 to 2.20.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3015](https://togithub.com/dexidp/dex/pull/3015) - build(deps): bump anchore/sbom-action from 0.14.2 to 0.14.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3014](https://togithub.com/dexidp/dex/pull/3014) - build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3019](https://togithub.com/dexidp/dex/pull/3019) - build(deps): bump google.golang.org/api from 0.127.0 to 0.129.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3022](https://togithub.com/dexidp/dex/pull/3022) - build(deps): bump docker/setup-buildx-action from 2.7.0 to 2.8.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/dexidp/dex/pull/3023](https://togithub.com/dexidp/dex/pull/3023) #### New Contributors - [@​marcofranssen](https://togithub.com/marcofranssen) made their first contribution in [https://github.com/dexidp/dex/pull/2981](https://togithub.com/dexidp/dex/pull/2981) - [@​vsychov](https://togithub.com/vsychov) made their first contribution in [https://github.com/dexidp/dex/pull/2911](https://togithub.com/dexidp/dex/pull/2911) **Full Changelog**: https://github.com/dexidp/dex/compare/v2.36.0...v2.37.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.