Dex Container Image - New Release

[sergeiwaigant]

Hey guys.

For one my clients I am trying to explore if Dex IDP would be a good fit as replacement for Keycloak as OIDC service.
When procuring the container image through my customers infrastructure, the Cyberflow system complains about the "golan.org/x/crypto" version to have high or critical rated security issues and it should be advised to upgrade to 0.31.0 or above.

I checked the source code of version v2.41.1 from August 2024 and yes, its 0.25.0 that is used there:
https://github.com/dexidp/dex/blob/v2.41.1/go.mod#L36

Since then, no new version has been released, but I see that on master, the version has been bumped already:
https://github.com/dexidp/dex/blob/master/go.mod#L35

Do you have any plans to release a new version soon?

Regards
Sergei

[BenCrinion-IW]

I'd like this too.

[ypoplavs]

We also need a new version of google.golang.org/grpc library from master branch. Any chance to release it in the nearest future?