All pull requests

Pull requests

• build(deps): bump google.golang.org/api from 0.298.0 to 0.299.0 in the go group

  area/dependencies
  #5042·dependabot[bot] opened Sep 25, 2026Bot·

  ·

• build(deps): bump golang from e9bbdf2 to 8a5910f in the docker group

  area/dependencies
  #5041·dependabot[bot] opened Sep 25, 2026Bot·

  ·

• fix(server): return invalid_grant for rejected refresh tokens

  #5040·and-win opened Sep 24, 2026·

  ·
  1

• fix(httpclient): reload file-backed root CAs before requests

  #5033·CBEPX opened Sep 22, 2026·

  ·

• feat(openshift): Dynamically load clientSecret from a file without requiring a restart during secret rotation

  kind/enhancement
  #5023·anandf opened Sep 14, 2026·

  ·
  14

• server: prefill the password login form from the OIDC login_hint

  #5019·okigan opened Sep 14, 2026·

  ·

• feat(storage/kubernetes): add crdHandling skip mode to disable CRD creation

  #5018·Retr0-XD opened Sep 13, 2026·

  ·
  1

• Add configurable ID token subject claim format and order

  #5008·aduewel opened Sep 9, 2026·

  ·
  1

• feat(server): log the client id on successful login

  #5001·MistLiao opened Sep 3, 2026·

  ·

• fix(apiserver): refuse an identity purge that cannot finish

  #5000·rasty94 opened Sep 3, 2026·

  ·

• fix(server deadlock): resolve refresh connector data outside the rotation transaction

  #4991·laoshanxi opened Aug 28, 2026·

  ·
  1

  5

• fix(storage): support pagination in Kubernetes storage GC (#4979)

  #4990·Retr0-XD opened Aug 28, 2026·

  ·
  1

• feat(server): add OAuth 2.0 dynamic registration (RFC 7591)

  #4988·cardoe opened Aug 27, 2026Contributor·

  ·

• Configure TLS Curve Preferences and Cipher Suites

  kind/enhancement
  #4987·akhilnittala opened Aug 27, 2026·

  ·
  1

  22

• test(oidc): publish a real signing alg in the test JWKS

  #4986·rasty94 opened Aug 26, 2026·

  ·

• fix(health): bound health checks that perform I/O

  #4985·kimsondrup opened Aug 26, 2026·

  ·

• docs: add client_credentials grant enhancement doc and config example

  #4984·bisbeb opened Aug 25, 2026·

  ·
  1

• feature(ldap): Adds objectSid and objectUUID formatting when using Active Directory

  #4978·SeanHood opened Aug 20, 2026·

  ·
  2

• expose TOTP setup key during enrollment

  #4976·slashmili opened Aug 17, 2026·

  ·

• feat(saml): support IdP metadata discovery for certificate rotation

  #4967·dennismdejong opened Aug 9, 2026·

  ·
  1

• fix(server): clarify the error when a login request is double-submitted

  #4966·pujitha24 opened Aug 9, 2026·

  ·
  1

  1

• fix(build): use netgo DNS resolver for release binaries

  #4965·dennismdejong opened Aug 9, 2026·

  ·
  1

• feat(google): implement TokenIdentity for RFC 8693 token exchange

  #4964·pujitha24 opened Aug 9, 2026·

  ·
  1

  1

• fix(server): introspect session-bound refresh tokens against their session

  release-note/bug-fix
  #4963·SashaMIT opened Aug 7, 2026·

  ·
  4

• fix(authflow): evaluate max_age from per-session auth time, not global LastLogin

  release-note/bug-fix
  #4962·SashaMIT opened Aug 7, 2026·

  ·
  6