Skip to content

build(deps): bump oauth2-proxy/oauth2-proxy from v7.15.0-alpine to v7.15.1-alpine in /oauth2-proxy#733

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/docker/oauth2-proxy/main/oauth2-proxy/oauth2-proxy-v7.15.1-alpine
Open

build(deps): bump oauth2-proxy/oauth2-proxy from v7.15.0-alpine to v7.15.1-alpine in /oauth2-proxy#733
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/docker/oauth2-proxy/main/oauth2-proxy/oauth2-proxy-v7.15.1-alpine

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 24, 2026

Bumps oauth2-proxy/oauth2-proxy from v7.15.0-alpine to v7.15.1-alpine.

Release notes

Sourced from oauth2-proxy/oauth2-proxy's releases.

v7.15.1

Release Highlights

  • 🐛 Squashed some bugs
  • 🕵️‍♀️ Vulnerabilities have been addressed
    • CVE-2026-33186 OAuth2 Proxy was not impacted by this vulnerability as it isn't in the path of execution

Important Notes

Breaking Changes

Changes since v7.15.0

Changelog

Sourced from oauth2-proxy/oauth2-proxy's changelog.

Vx.x.x (Pre-release)

Release Highlights

Important Notes

Breaking Changes

Changes since v7.15.1

V7.15.1

Release Highlights

  • 🐛 Squashed some bugs
  • 🕵️‍♀️ Vulnerabilities have been addressed
    • CVE-2026-33186 OAuth2 Proxy was not impacted by this vulnerability as it isn't in the path of execution

Important Notes

Breaking Changes

Changes since v7.15.0

V7.15.0

Release Highlights

  • 🔒 OIDC JWT signing algorithms can now be configured
  • 🍪 CSRF cookie improvements (SameSite option, proper expiration validation)
  • 🧪 Configuration validation flag: --config-test
  • 🔌 Unix socket file mode support
  • 👤 Session state can now be extend with arbitrary claims from ID Token and upstream IDP user profiles endpoint
    • This opens the door for multiple features like:
    • Additional arbitrary header values for any claims your IDP provides
    • Extended OAuth2 Proxy UserInfo endpoint with all additional claims
    • Read the docs here

Important Notes

CSRF cookie validation now correctly uses CSRFExpire instead of Expire. If you relied on the previous behavior, review your session timeout configuration. Check the [documentation(https://oauth2-proxy.github.io/oauth2-proxy/configuration/overview#cookie-options) for cookie-csrf-expire.

... (truncated)

Commits
  • 848ec8b release v7.15.1 (#3384)
  • 46be69c fix: propagate errors during route building (#3383)
  • e2682f7 fix: improve logging when session refresh token is missing (#3327)
  • 5ca3012 doc: update PR template with additional checklist items
  • 44236f0 fix: do not log error for backend logout 204 (#3381)
  • a4d8903 fix: handle Unix socket RemoteAddr in IP resolution (#3374)
  • 9f09d54 chore(deps): update actions/upload-artifact action to v7 (#3358)
  • 0ecc35e chore(deps): update gomod and golangci/golangci-lint to v2.11.4 (#3382)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [oauth2-proxy/oauth2-proxy](https://github.com/oauth2-proxy/oauth2-proxy) from v7.15.0-alpine to v7.15.1-alpine.
- [Release notes](https://github.com/oauth2-proxy/oauth2-proxy/releases)
- [Changelog](https://github.com/oauth2-proxy/oauth2-proxy/blob/master/CHANGELOG.md)
- [Commits](oauth2-proxy/oauth2-proxy@v7.15.0...v7.15.1)

---
updated-dependencies:
- dependency-name: oauth2-proxy/oauth2-proxy
  dependency-version: v7.15.1-alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner March 24, 2026 07:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

0 participants