All pull requests

Pull requests

• build(deps): bump the github-actions group with 2 updates

  area/dependencies
  #5109·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• build(deps): bump the etcd group with 2 updates

  area/dependencies
  #5108·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• build(deps): bump the docker group across 1 directory with 3 updates

  area/dependencies
  #5107·dependabot[bot] opened Oct 26, 2026Bot·

  ·

• docs: add Wordfully to adopters

  #5106·vlbaluk opened Oct 25, 2026·

  ·

• fix(kubernetes): add the missing v2.46.0 CRD manifests and a drift guard

  #5105·choksi2212 opened Oct 23, 2026·

  ·
  1

  1

• build(deps): bump google.golang.org/api from 0.304.0 to 0.305.0 in the go group

  area/dependencies
  #5104·dependabot[bot] opened Oct 23, 2026Bot·

  ·

• feat(oidc): add userInfoRequestMethod to choose GET or POST for userinfo

  #5102·cvas22 opened Oct 23, 2026·

  ·
  1

• fix(connector/github): return UserNotInRequiredGroupsError when user lacks org or team access

  #5100·Jojoussef opened Oct 22, 2026·

  ·
  1

• fix(connector/google): pass domain to groups.list when not impersonating an admin

  #5098·keramblock opened Oct 22, 2026·

  ·

• fix(device): authenticate the client at /device/code

  #5096·tlq5l opened Oct 21, 2026·

  ·
  1

• fix(storage): store an unset auth_time on MySQL

  #5089·basitalisandhu opened Oct 19, 2026·

  ·
  1

• fix(server/grants): set Cache-Control and Pragma headers on device-grant token responses

  #5085·AdamMagued opened Oct 18, 2026·

  ·
  1

• fix(storage/ent): permit empty optional fields for AuthCode and Client

  #5084·AdamMagued opened Oct 18, 2026·

  ·
  1

• feat: add jwt connector for upstream JWT bearer tokens

  #5083·FireDrunk opened Oct 16, 2026·

  ·

• fix(tokens): don't panic when a refresh token is revoked during rotation

  #5082·pujitha24 opened Oct 16, 2026·

  ·
  1

  1

• build: fix lint and ent code generation with Go 1.27.2

  #5070·space-arens opened Oct 13, 2026Contributor·

  ·

• fix(storage/kubernetes): implement ListClients

  #5069·space-arens opened Oct 12, 2026Contributor·

  ·

• fix(gitlab): render a required groups denial as 403

  #5068·space-arens opened Oct 12, 2026Contributor·

  ·

• fix(server): do not log connector data on refresh

  #5067·space-arens opened Oct 12, 2026Contributor·

  ·

• fix(authflow): accept the device callback under the issuer path for public clients

  #5064·jayhemnani9910 opened Oct 11, 2026·

  ·
  1

• fix(serve): treat SIGTERM/SIGINT as a clean shutdown again

  #5063·kaliatech opened Oct 9, 2026·

  ·

• feat(server): allow starting without connectors when the connectors API is enabled

  #5061·ABGEO opened Oct 8, 2026·

  ·

• feat: add OIDC picture claim for user avatars

  #5056·sylr opened Oct 4, 2026Contributor·

  ·

• fix(oidc): answer token exchange with 503 when the issuer's keys can't be fetched

  #5055·The127 opened Oct 2, 2026Contributor·

  ·

• fix: reload server TLS after Kubernetes Secret updates

  #5053·CBEPX opened Oct 1, 2026·

  ·