Update dexidp/dex Docker tag to v2.38.0

This MR contains the following updates:

Package	Type	Update	Change
dexidp/dex		minor	v2.37.0 -> v2.38.0
dexidp/dex	ironbank-docker	minor	v2.37.0 -> v2.38.0
dexidp/dex	stage	minor	v2.37.0 -> v2.38.0

---

Release Notes

dexidp/dex (dexidp/dex)

v2.38.0

Compare Source

The official container image for this release can be pulled from

ghcr.io/dexidp/dex:v2.38.0

What's Changed

Exciting New Features 🎉

• RFC 8693 OAuth 2.0 Token Exchange by @​seankhliao in https://github.com/dexidp/dex/pull/2806

Enhancements 🚀

• include granttypes in example config by @​seankhliao in https://github.com/dexidp/dex/pull/3027
• Add GetClient grpc service by @​marcofranssen in https://github.com/dexidp/dex/pull/2972
• feat: Update response_types_supported to allow multiple-valued response type combinations by @​Cedric-Magnan in https://github.com/dexidp/dex/pull/2521
• verify access tokens by checking getuserinfo during a token exchange by @​seankhliao in https://github.com/dexidp/dex/pull/3031
• Store offline sessions only if they were requested by the user by @​MM53 in https://github.com/dexidp/dex/pull/3125
• Minimalistic support for group filtering in oidc connector by @​mdpradeep in https://github.com/dexidp/dex/pull/3074
• feat(connector/microsoft): support custom api and graph URLs by @​sagikazarmark in https://github.com/dexidp/dex/pull/3084
• Composite claims in OIDC connector by @​Oded-B in https://github.com/dexidp/dex/pull/3056
• Add support for extra claims to authproxy connector by @​mkjpryor in https://github.com/dexidp/dex/pull/2851
• Add support for linux/s390x by @​lysliu in https://github.com/dexidp/dex/pull/3189
• Override OIDC provider discovered claims by @​nabokihms in https://github.com/dexidp/dex/pull/3267
• Bump gomplate to v3.11.7 by @​nabokihms in https://github.com/dexidp/dex/pull/3293
• Introduce a dedicated pkg for featureflags by @​nabokihms in https://github.com/dexidp/dex/pull/3278
• Sign container images by @​nabokihms in https://github.com/dexidp/dex/pull/3269
• Add context to storage's Create endpoints by @​PumpkinSeed in https://github.com/dexidp/dex/pull/2935
• feat: add TLS versions configuration by @​tuminoid in https://github.com/dexidp/dex/pull/3303

Bug Fixes 🐛

• Fix etcd device requests by @​MM53 in https://github.com/dexidp/dex/pull/3119
• Fix lint errors after merging AllowedHeaders feature by @​nabokihms in https://github.com/dexidp/dex/pull/3247
• Propagate Dex version from build args by @​nabokihms in https://github.com/dexidp/dex/pull/3276

Dependency Updates ⬆️

• build(deps): bump golang.org/x/net from 0.11.0 to 0.12.0 by @​dependabot in https://github.com/dexidp/dex/pull/3036
• build(deps): bump google.golang.org/api from 0.129.0 to 0.130.0 by @​dependabot in https://github.com/dexidp/dex/pull/3034
• build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0 by @​dependabot in https://github.com/dexidp/dex/pull/3035
• build(deps): bump helm/kind-action from 1.7.0 to 1.8.0 by @​dependabot in https://github.com/dexidp/dex/pull/3041
• build(deps): bump google.golang.org/api from 0.130.0 to 0.134.0 by @​dependabot in https://github.com/dexidp/dex/pull/3054
• build(deps): bump docker/setup-buildx-action from 2.8.0 to 2.9.1 by @​dependabot in https://github.com/dexidp/dex/pull/3043
• build(deps): bump github/codeql-action from 2.20.1 to 2.21.2 by @​dependabot in https://github.com/dexidp/dex/pull/3057
• build(deps): bump google.golang.org/grpc from 1.56.1 to 1.57.0 by @​dependabot in https://github.com/dexidp/dex/pull/3055
• build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3021
• build(deps): bump google.golang.org/grpc from 1.55.0 to 1.57.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3053
• build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0 by @​dependabot in https://github.com/dexidp/dex/pull/3060
• build(deps): bump google.golang.org/api from 0.134.0 to 0.138.0 by @​dependabot in https://github.com/dexidp/dex/pull/3079
• build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8 by @​dependabot in https://github.com/dexidp/dex/pull/3078
• build(deps): bump github/codeql-action from 2.21.2 to 2.21.4 by @​dependabot in https://github.com/dexidp/dex/pull/3076
• build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @​dependabot in https://github.com/dexidp/dex/pull/3071
• build(deps): bump alpine from 3.18.2 to 3.18.3 by @​dependabot in https://github.com/dexidp/dex/pull/3069
• build(deps): bump aquasecurity/trivy-action from 0.11.2 to 0.12.0 by @​dependabot in https://github.com/dexidp/dex/pull/3090
• build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @​dependabot in https://github.com/dexidp/dex/pull/3099
• build(deps): bump docker/setup-buildx-action from 2.9.1 to 3.0.0 by @​dependabot in https://github.com/dexidp/dex/pull/3104
• build(deps): bump actions/checkout from 3.5.3 to 4.1.0 by @​dependabot in https://github.com/dexidp/dex/pull/3117
• build(deps): bump alpine from 3.18.3 to 3.18.4 by @​dependabot in https://github.com/dexidp/dex/pull/3130
• build(deps): bump github/codeql-action from 2.21.4 to 2.21.9 by @​dependabot in https://github.com/dexidp/dex/pull/3127
• build(deps): bump google.golang.org/api from 0.138.0 to 0.143.0 by @​dependabot in https://github.com/dexidp/dex/pull/3121
• build(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.2 by @​dependabot in https://github.com/dexidp/dex/pull/3116
• build(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.2 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3115
• build(deps): bump github.com/prometheus/client_golang from 1.16.0 to 1.17.0 by @​dependabot in https://github.com/dexidp/dex/pull/3132
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.5 to 3.4.6 by @​dependabot in https://github.com/dexidp/dex/pull/3133
• build(deps): bump docker/login-action from 2.2.0 to 3.0.0 by @​dependabot in https://github.com/dexidp/dex/pull/3134
• build(deps): bump docker/build-push-action from 4.1.1 to 5.0.0 by @​dependabot in https://github.com/dexidp/dex/pull/3135
• build(deps): bump docker/metadata-action from 4.6.0 to 5.0.0 by @​dependabot in https://github.com/dexidp/dex/pull/3136
• build(deps): bump actions/dependency-review-action from 3.0.8 to 3.1.0 by @​dependabot in https://github.com/dexidp/dex/pull/3137
• build(deps): bump docker/setup-qemu-action from 2.2.0 to 3.0.0 by @​dependabot in https://github.com/dexidp/dex/pull/3138
• build(deps): bump google.golang.org/api from 0.143.0 to 0.147.0 by @​dependabot in https://github.com/dexidp/dex/pull/3152
• build(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 by @​dependabot in https://github.com/dexidp/dex/pull/3155
• build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/3154
• build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 by @​dependabot in https://github.com/dexidp/dex/pull/3153
• build(deps): bump tonistiigi/xx from 1.2.1 to 1.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/3161
• build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @​dependabot in https://github.com/dexidp/dex/pull/3159
• build(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 by @​dependabot in https://github.com/dexidp/dex/pull/3157
• build(deps): bump golang.org/x/net from 0.7.0 to 0.17.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3151
• build(deps): bump google.golang.org/api from 0.147.0 to 0.148.0 by @​dependabot in https://github.com/dexidp/dex/pull/3163
• build(deps): bump golang.org/x/net from 0.12.0 to 0.17.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3150
• Bump Go 1.21 by @​nabokihms in https://github.com/dexidp/dex/pull/3165
• build(deps): bump google.golang.org/grpc from 1.58.2 to 1.59.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3158
• Bump ent (v0.12.4) and example app dependencies by @​nabokihms in https://github.com/dexidp/dex/pull/3166
• build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 by @​dependabot in https://github.com/dexidp/dex/pull/3167
• build(deps): bump github/codeql-action from 2.22.3 to 2.22.4 by @​dependabot in https://github.com/dexidp/dex/pull/3168
• build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 by @​dependabot in https://github.com/dexidp/dex/pull/3169
• build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.9 to 3.5.11 by @​dependabot in https://github.com/dexidp/dex/pull/3216
• build(deps): bump golang from 1.21.3-alpine3.18 to 1.21.5-alpine3.18 by @​dependabot in https://github.com/dexidp/dex/pull/3213
• build(deps): bump github.com/gorilla/handlers from 1.5.1 to 1.5.2 by @​dependabot in https://github.com/dexidp/dex/pull/3181
• build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @​dependabot in https://github.com/dexidp/dex/pull/3182
• build(deps): bump docker/build-push-action from 5.0.0 to 5.1.0 by @​dependabot in https://github.com/dexidp/dex/pull/3198
• build(deps): bump anchore/sbom-action from 0.14.3 to 0.15.1 by @​dependabot in https://github.com/dexidp/dex/pull/3210
• build(deps): bump aquasecurity/trivy-action from 0.12.0 to 0.16.0 by @​dependabot in https://github.com/dexidp/dex/pull/3219
• build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.4 by @​dependabot in https://github.com/dexidp/dex/pull/3206
• Bump golangci-lint 1.55.2 by @​nabokihms in https://github.com/dexidp/dex/pull/3232
• build(deps): bump github.com/mattn/go-sqlite3 from 1.14.17 to 1.14.19 by @​dependabot in https://github.com/dexidp/dex/pull/3226
• build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @​dependabot in https://github.com/dexidp/dex/pull/3228
• build(deps): bump alpine from 3.18.4 to 3.19.0 by @​dependabot in https://github.com/dexidp/dex/pull/3214
• build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by @​dependabot in https://github.com/dexidp/dex/pull/3201
• build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3229
• build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3202
• build(deps): bump github/codeql-action from 2.22.4 to 3.22.12 by @​dependabot in https://github.com/dexidp/dex/pull/3231
• build(deps): bump google.golang.org/api from 0.148.0 to 0.154.0 by @​dependabot in https://github.com/dexidp/dex/pull/3223
• Patch gomplate to v3.11.6 by @​gburton1 in https://github.com/dexidp/dex/pull/3234
• build(deps): bump docker/metadata-action from 5.0.0 to 5.4.0 by @​dependabot in https://github.com/dexidp/dex/pull/3235
• build(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.1 by @​dependabot in https://github.com/dexidp/dex/pull/3241
• build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by @​dependabot in https://github.com/dexidp/dex/pull/3236
• build(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 by @​dependabot in https://github.com/dexidp/dex/pull/3239
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.7.0 to 3.9.0 by @​dependabot in https://github.com/dexidp/dex/pull/3238
• build(deps): bump github.com/prometheus/client_golang from 1.17.0 to 1.18.0 by @​dependabot in https://github.com/dexidp/dex/pull/3246
• Bump dependencies ent v0.12.5, protobuf v1.32.0 by @​nabokihms in https://github.com/dexidp/dex/pull/3249
• build(deps): bump actions/dependency-review-action from 3.1.4 to 3.1.5 by @​dependabot in https://github.com/dexidp/dex/pull/3256
• build(deps): bump google.golang.org/api from 0.154.0 to 0.155.0 by @​dependabot in https://github.com/dexidp/dex/pull/3257
• build(deps): bump anchore/sbom-action from 0.15.1 to 0.15.3 by @​dependabot in https://github.com/dexidp/dex/pull/3265
• build(deps): bump github.com/beevik/etree from 1.2.0 to 1.3.0 by @​dependabot in https://github.com/dexidp/dex/pull/3252
• build(deps): bump aquasecurity/trivy-action from 0.16.0 to 0.16.1 by @​dependabot in https://github.com/dexidp/dex/pull/3253
• build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0 by @​dependabot in https://github.com/dexidp/dex/pull/3262
• build(deps): bump docker/metadata-action from 5.4.0 to 5.5.0 by @​dependabot in https://github.com/dexidp/dex/pull/3259
• build(deps): bump github/codeql-action from 3.22.12 to 3.23.0 by @​dependabot in https://github.com/dexidp/dex/pull/3264
• build(deps): bump golang.org/x/oauth2 from 0.15.0 to 0.16.0 by @​dependabot in https://github.com/dexidp/dex/pull/3263
• build(deps): bump golang from 1.21.5-alpine3.18 to 1.21.6-alpine3.18 by @​dependabot in https://github.com/dexidp/dex/pull/3266
• build(deps): bump google.golang.org/api from 0.155.0 to 0.156.0 by @​dependabot in https://github.com/dexidp/dex/pull/3270
• build(deps): bump github/codeql-action from 3.23.0 to 3.23.1 by @​dependabot in https://github.com/dexidp/dex/pull/3282
• build(deps): bump google.golang.org/api from 0.156.0 to 0.157.0 by @​dependabot in https://github.com/dexidp/dex/pull/3285
• build(deps): bump anchore/sbom-action from 0.15.3 to 0.15.4 by @​dependabot in https://github.com/dexidp/dex/pull/3286
• build(deps): bump actions/dependency-review-action from 3.1.5 to 4.0.0 by @​dependabot in https://github.com/dexidp/dex/pull/3287
• build(deps): bump anchore/sbom-action from 0.15.4 to 0.15.5 by @​dependabot in https://github.com/dexidp/dex/pull/3291
• build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 by @​dependabot in https://github.com/dexidp/dex/pull/3296
• build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 in /api/v2 by @​dependabot in https://github.com/dexidp/dex/pull/3294
• build(deps): bump github.com/coreos/go-oidc/v3 from 3.7.0 to 3.9.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3298
• build(deps): bump google.golang.org/grpc from 1.59.0 to 1.61.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3300
• build(deps): bump golang from 869193e to 3bd4475 by @​dependabot in https://github.com/dexidp/dex/pull/3301
• build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3299
• build(deps): bump golang.org/x/oauth2 from 0.13.0 to 0.16.0 in /examples by @​dependabot in https://github.com/dexidp/dex/pull/3297

Other Changes

• feat: Add configurable CORS Headers by @​josiah-lunit in https://github.com/dexidp/dex/pull/3114

New Contributors

• @​Cedric-Magnan made their first contribution in https://github.com/dexidp/dex/pull/2521
• @​uucloud made their first contribution in https://github.com/dexidp/dex/pull/3087
• @​MM53 made their first contribution in https://github.com/dexidp/dex/pull/3125
• @​mdpradeep made their first contribution in https://github.com/dexidp/dex/pull/3074
• @​Oded-B made their first contribution in https://github.com/dexidp/dex/pull/3056
• @​gburton1 made their first contribution in https://github.com/dexidp/dex/pull/3234
• @​josiah-lunit made their first contribution in https://github.com/dexidp/dex/pull/3114
• @​mkjpryor made their first contribution in https://github.com/dexidp/dex/pull/2851
• @​lysliu made their first contribution in https://github.com/dexidp/dex/pull/3189
• @​PumpkinSeed made their first contribution in https://github.com/dexidp/dex/pull/2935
• @​tuminoid made their first contribution in https://github.com/dexidp/dex/pull/3303

Full Changelog: https://github.com/dexidp/dex/compare/v2.37.0...v2.38.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.