chore(deps): update all-minor-updates by renovate[bot] · Pull Request #2 · orange-cloudfoundry/oauth2-proxy-manifests

renovate · 2025-09-17T16:13:55Z

This PR contains the following updates:

Package	Type	Update	Change
python	uses-with	minor	`3.13` → `3.14`
quay.io/oauth2-proxy/oauth2-proxy (source)		minor	`v7.11.0` → `v7.15.3`
redis-ha (source)		minor	`4.34.10` → `4.39.0`

Release Notes

actions/python-versions (python)

`v3.14.7`: 3.14.7

Compare Source

Python 3.14.7

`v3.14.6`: 3.14.6

Compare Source

Python 3.14.6

`v3.14.5`: 3.14.5

Compare Source

Python 3.14.5

`v3.14.4`: 3.14.4

Compare Source

Python 3.14.4

`v3.14.3`: 3.14.3

Compare Source

Python 3.14.3

`v3.14.2`: 3.14.2

Compare Source

Python 3.14.2

`v3.14.1`: 3.14.1

Compare Source

Python 3.14.1

`v3.14.0`: 3.14.0

Compare Source

Python 3.14.0

oauth2-proxy/oauth2-proxy (quay.io/oauth2-proxy/oauth2-proxy)

`v7.15.3`

Compare Source

`v7.15.2`

Compare Source

#3477 chore(dep): bump go to 1.26 and migrate of reverse proxy handling

`v7.15.1`

Compare Source

#3411 chore(deps): update gomod dependencies (@tuunit)
#3333 fix: invalidate session on fatal OAuth2 refresh errors (@frhack)
GHSA-f24x-5g9q-753f fix: clear session cookie at beginning of signinpage handler (@fnoehWM / @bella-WI / @tuunit)
GHSA-5hvv-m4w4-gf6v fix: health check user-agent authentication bypass (@tuunit)
GHSA-7x63-xv5r-3p2x fix: authentication bypass via X-Forwarded-Uri header spoofing (@tuunit)
GHSA-pxq7-h93f-9jrg fix: fragment evaluation as part of the allowed routes (@tuunit)
GHSA-c5c4-8r6x-56w3 fix: email validation bypass via malformed multi-@ email claims (@tuunit)

`v7.15.0`

Compare Source

#3382 chore(deps): update gomod and golangci/golangci-lint to v2.11.4 (@tuunit)
#3374 fix: handle Unix socket RemoteAddr in IP resolution (@H1net)
#3381 fix: do not log error for backend logout 204 (@artificiosus)
#3327 fix: improve logging when session refresh token is missing (@yosri-brh)
#2767 fix: propagate errors during route building (@sybereal)

`v7.14.3`

Compare Source

#3352 fix: backend logout URL call on sign out (#3172)(@vsejpal)
#3332 ci: distribute windows binary with .exe extension (@igitur)
#2685 feat: allow arbitrary claims from the IDToken and IdentityProvider UserInfo endpoint to be added to the session state (@vegetablest)
#3278 feat: possibility to inject id_token in redirect url during sign out (@albanf)
#2851 feat: add support for specifying allowed OIDC JWT signing algorithms (#2753) (@andoks / @tuunit)
#3369 fix: use CSRFExpire instead of Expire for CSRF cookie validation (@Br1an67)
#3365 fix: filter empty strings from allowed groups (@Br1an67)
#3338 feat: add --config-test flag for validating configuration (@MayorFaj)
#3347 feat: add same site option for csrf cookies (@jvnoije)
#3376 feat: allow setting unix socket file mode when declaring listener (@Tristan971 / @tuunit)

`v7.14.2`

Compare Source

#3183 fix: allow URL parameters to configure username, password and max idle connection timeout if the matching configuration is empty.

`v7.14.1`

Compare Source

#3314 revert: fix: skip provider button auth only redirect (#3309) (@StefanMarkmann / @tuunit)
#3315 docs: clarify browser vs API routes for nginx auth_request redirects (@StefanMarkmann)

`v7.14.0`

Compare Source

#3309 fix: Return 302 redirect from AuthOnly endpoint when skip-provider-button is true (@StefanMarkmann)
#3302 fix: static upstreams failing validation due to passHostHeader and proxyWebSockets defaults being set incorrectly (@sourava01 / @tuunit)
#3312 chore(deps): upgrade to go1.25.6 and latest dependencies (@tuunit)

`v7.13.0`

Compare Source

#2628 feat(structured config): revamp of yaml parsing using mapstructure decoder and custom decoders (@tuunit)
#3197 fix: NewRemoteKeySet is not using DefaultHTTPClient (@rsrdesarrollo / @tuunit)
#3292 chore(deps): upgrade gomod and bump to golang v1.25.5 (@tuunit)
#3304 fix: added conditional so default is not always set and env vars are honored fixes 3303 (@pixeldrew)
#3264 fix: more aggressively truncate logged access_token (@MartinNowak / @tuunit)
#3267 fix: Session refresh handling in OIDC provider (@gysel)
#3290 fix: WebSocket proxy to respect PassHostHeader setting (@UnsignedLong)

`v7.12.0`

Compare Source

#3228 fix: use GetSecret() in ticket.go makeCookie to respect cookie-secret-file (@stagswtf)
#3244 chore(deps): upgrade to latest go1.25.3 (@tuunit)
#3238 chore: Replace pkg/clock with narrowly targeted stub clocks (@dsymonds)
#3237 - feat: add option to use organization id for preferred username in Google Provider (@pixeldrew)
GHSA-vjrc-mh2v-45x6 fix: request header smuggling by stripping all normalized header variants (@tuunit)
#1933 fix: validation of refreshed sessions using the access_token in the OIDC provider (@gysel / @tuunit)
#2841 feat: add allowed_* constraint option to proxy endpoint query string (@jacobalberty)

DandyDeveloper/charts (redis-ha)

`v4.39.0`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

feat(redis-ha): add EndpointSlices RBAC support by @DandyDeveloper in #409

Full Changelog: DandyDeveloper/charts@redis-ha-4.38.0...redis-ha-4.39.0

`v4.38.0`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

chore(redis-ha): update chart and image versions to 4.38.0 and 8.8.0 by @DandyDeveloper in #408

Full Changelog: DandyDeveloper/charts@redis-ha-4.37.0...redis-ha-4.38.0

`v4.37.0`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

fix(redis-ha): split-brain script race condition and silent quorum failure by @DandyDeveloper in #404

Full Changelog: DandyDeveloper/charts@redis-ha-4.36.2...redis-ha-4.37.0

`v4.36.2`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

fix(redis-ha): hostPath chown init container must run as root by @DandyDeveloper in #406

Full Changelog: DandyDeveloper/charts@redis-ha-4.36.1...redis-ha-4.36.2

`v4.36.1`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

fix(redis-ha): update HAProxy image to 3.0.18-alpine (CVE-2025-15467) by @DandyDeveloper in #405

Full Changelog: DandyDeveloper/charts@redis-ha-4.36.0...redis-ha-4.36.1

`v4.36.0`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

feat(redis-ha): add headless service and dual-stack support for HAProxy by @DandyDeveloper in #403

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.10...redis-ha-4.36.0

`v4.35.10`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

[stable/redis-ha] Redis 8.2.4 by @fmmatthewzeemann in #385

New Contributors

@fmmatthewzeemann made their first contribution in #385

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.9...redis-ha-4.35.10

`v4.35.9`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

redis-ha Replace invocations of hostname and pidof so Redis minimal images can be used easily by @partytax in #386

New Contributors

@partytax made their first contribution in #386

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.8...redis-ha-4.35.9

`v4.35.8`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

[stable/redis-ha] Bump redis-exporter to v1.80.2 by @emilarnesen in #382

New Contributors

@emilarnesen made their first contribution in #382

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.7...redis-ha-4.35.8

`v4.35.7`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

Support bookworm and alpine image by @dheeg in #379

New Contributors

@dheeg made their first contribution in #379

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.6...redis-ha-4.35.7

`v4.35.6`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

[stable/redis-ha] Add haproxy tunnel timeout setting by @Baune8D in #355

New Contributors

@Baune8D made their first contribution in #355

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.5...redis-ha-4.35.6

`v4.35.5`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

[stable/redis-ha] Add additional ports for haproxy by @TheBigLee in #369

New Contributors

@TheBigLee made their first contribution in #369

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.4...redis-ha-4.35.5

`v4.35.4`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

Add liveness and readiness probes for split brain detection container by @ninjatec in #368

New Contributors

@ninjatec made their first contribution in #368

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.3...redis-ha-4.35.4

`v4.35.3`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

[stable/redis-ha] add sentinel announce-hosts and resolve-hosts by @Alex-Souslik in #356

New Contributors

@Alex-Souslik made their first contribution in #356

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.2...redis-ha-4.35.3

`v4.35.2`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

[charts/redis-ha] Ensure resources on all containers. by @DandyDeveloper in #365

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.1...redis-ha-4.35.2

`v4.35.1`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

[charts/redis-ha] Correctly handle existing secret conditions for auth by @DandyDeveloper in #364

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.0...redis-ha-4.35.1

`v4.35.0`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

[charts/redis-ha] Redis 8.2.2 by @DandyDeveloper in #358

Full Changelog: DandyDeveloper/charts@redis-ha-4.34.13...redis-ha-4.35.0

`v4.34.13`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

[stable/redis-ha] Fix template scope in netpol ingressRules by @tnaumann-wecg in #353

New Contributors

@tnaumann-wecg made their first contribution in #353

Full Changelog: DandyDeveloper/charts@redis-ha-4.34.12...redis-ha-4.34.13

`v4.34.12`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

stable/redis-ha: Helm templates in provided secret names. by @pavel-jancik in #253

New Contributors

@pavel-jancik made their first contribution in #253

Full Changelog: DandyDeveloper/charts@redis-ha-4.34.11...redis-ha-4.34.12

`v4.34.11`

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

[stable/redis-ha] Add tls ports to netpol if defined by @OpenGuidou in #313

Full Changelog: DandyDeveloper/charts@redis-ha-4.34.10...redis-ha-4.34.11

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 5am"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

gberche-orange mentioned this pull request Sep 17, 2025

Lock default image version oauth2-proxy/manifests#353

Closed

renovate Bot force-pushed the renovate/all-minor-updates branch from 8784494 to 306e169 Compare October 9, 2025 02:48

renovate Bot changed the title ~~chore(deps): update quay.io/oauth2-proxy/oauth2-proxy docker tag to v7.12.0~~ chore(deps): update all-minor-updates Oct 9, 2025

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from daee62b to bbf2344 Compare October 15, 2025 23:34

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from 40747c4 to cb95bc4 Compare November 8, 2025 20:05

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from 59d1b54 to 96460e1 Compare November 19, 2025 04:13

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from b28ea1d to ede7ec0 Compare December 10, 2025 07:50

renovate Bot force-pushed the renovate/all-minor-updates branch from ede7ec0 to a5bc8de Compare December 17, 2025 08:13

renovate Bot force-pushed the renovate/all-minor-updates branch from a5bc8de to f7b226e Compare January 1, 2026 03:34

renovate Bot force-pushed the renovate/all-minor-updates branch 3 times, most recently from d480050 to 2e7a6c4 Compare January 24, 2026 07:13

renovate Bot force-pushed the renovate/all-minor-updates branch from 2e7a6c4 to 71747d9 Compare January 27, 2026 04:01

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from 2ebb2cf to a7c8380 Compare February 5, 2026 03:23

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from a105b24 to e025372 Compare February 15, 2026 11:01

renovate Bot force-pushed the renovate/all-minor-updates branch from e025372 to b9be6c4 Compare March 1, 2026 09:20

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from 3050d48 to 9ac43ba Compare March 14, 2026 12:10

renovate Bot force-pushed the renovate/all-minor-updates branch from 9ac43ba to 96248f8 Compare March 31, 2026 11:10

renovate Bot force-pushed the renovate/all-minor-updates branch from 96248f8 to fa9830b Compare April 15, 2026 15:19

renovate Bot force-pushed the renovate/all-minor-updates branch from fa9830b to 4b5281f Compare May 1, 2026 11:05

renovate Bot force-pushed the renovate/all-minor-updates branch 3 times, most recently from 3c43792 to 97e9eed Compare May 16, 2026 12:04

renovate Bot force-pushed the renovate/all-minor-updates branch from 97e9eed to 4aebfc6 Compare May 23, 2026 08:13

renovate Bot force-pushed the renovate/all-minor-updates branch from 4aebfc6 to 3128385 Compare May 30, 2026 15:36

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from 092696c to 35a37b3 Compare June 14, 2026 19:52

renovate Bot force-pushed the renovate/all-minor-updates branch from 35a37b3 to a64f66c Compare June 21, 2026 03:12

renovate Bot force-pushed the renovate/all-minor-updates branch from a64f66c to daba5b2 Compare July 18, 2026 03:42

renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from d97f8f3 to 3a6b2cf Compare August 1, 2026 14:00

renovate Bot force-pushed the renovate/all-minor-updates branch from 3a6b2cf to 185c653 Compare August 6, 2026 03:41

chore(deps): update all-minor-updates

4e72165

renovate Bot force-pushed the renovate/all-minor-updates branch from 185c653 to 4e72165 Compare August 15, 2026 15:44

Navigation Menu

Uh oh!

chore(deps): update all-minor-updates - #2

chore(deps): update all-minor-updates#2
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-updates

renovate Bot commented Sep 17, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Sep 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v3.14.7: 3.14.7

v3.14.6: 3.14.6

v3.14.5: 3.14.5

v3.14.4: 3.14.4

v3.14.3: 3.14.3

v3.14.2: 3.14.2

v3.14.1: 3.14.1

v3.14.0: 3.14.0

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 17, 2025 •

edited

Loading

`v3.14.7`: 3.14.7

`v3.14.6`: 3.14.6

`v3.14.5`: 3.14.5

`v3.14.4`: 3.14.4

`v3.14.3`: 3.14.3

`v3.14.2`: 3.14.2

`v3.14.1`: 3.14.1

`v3.14.0`: 3.14.0