All pull requests

Pull requests

• fix(serve): treat SIGTERM/SIGINT as a clean shutdown again

  #5063·kaliatech opened Oct 9, 2026·

  ·

• build(deps): bump helm/kind-action from 1.15.0 to 1.15.1 in the github-actions group

  area/dependencies
  #5062·dependabot[bot] opened Oct 9, 2026Bot·

  ·

• feat(server): allow starting without connectors when the connectors API is enabled

  #5061·ABGEO opened Oct 8, 2026·

  ·

• feat: add OIDC picture claim for user avatars

  #5056·sylr opened Oct 4, 2026·

  ·

• fix(oidc): answer token exchange with 503 when the issuer's keys can't be fetched

  #5055·The127 opened Oct 2, 2026Contributor·

  ·

• fix: reload server TLS after Kubernetes Secret updates

  #5053·CBEPX opened Oct 1, 2026·

  ·

• fix: reload server certificates for clients without SNI

  #5052·CBEPX opened Oct 1, 2026·

  ·

• fix: keep the last valid TLS configuration on reload errors

  #5051·CBEPX opened Oct 1, 2026·

  ·

• fix(oidc): bound the fetch of the issuer's signing keys

  kind/bug
  #5050·The127 opened Sep 30, 2026Contributor·

  ·

• build(deps): let Dependabot track the docker-compose images

  #5048·JanWelker opened Sep 29, 2026Contributor·

  ·

• feat: added the amr claim to JWTs

  #5043·ston1th opened Sep 26, 2026·

  ·

• fix(httpclient): reload file-backed root CAs before requests

  #5033·CBEPX opened Sep 22, 2026·

  ·

• server: prefill the password login form from the OIDC login_hint

  #5019·okigan opened Sep 14, 2026·

  ·

• feat(storage/kubernetes): add crdHandling skip mode to disable CRD creation

  #5018·Retr0-XD opened Sep 13, 2026·

  ·
  1

  1

• Add configurable ID token subject claim format and order

  #5008·aduewel opened Sep 9, 2026·

  ·
  1

• fix(apiserver): refuse an identity purge that cannot finish

  #5000·rasty94 opened Sep 3, 2026·

  ·

• fix(server deadlock): resolve refresh connector data outside the rotation transaction

  #4991·laoshanxi opened Aug 28, 2026·

  ·
  1

  5

• fix(storage): support pagination in Kubernetes storage GC (#4979)

  #4990·Retr0-XD opened Aug 28, 2026·

  ·
  1

• feat(server): add OAuth 2.0 dynamic registration (RFC 7591)

  #4988·cardoe opened Aug 27, 2026Contributor·

  ·
  1

• test(oidc): publish a real signing alg in the test JWKS

  #4986·rasty94 opened Aug 26, 2026·

  ·

• fix(health): bound health checks that perform I/O

  #4985·kimsondrup opened Aug 26, 2026·

  ·

• docs: add client_credentials grant enhancement doc and config example

  #4984·bisbeb opened Aug 25, 2026·

  ·
  1

• feature(ldap): Adds objectSid and objectUUID formatting when using Active Directory

  #4978·SeanHood opened Aug 20, 2026·

  ·
  2

• expose TOTP setup key during enrollment

  #4976·slashmili opened Aug 17, 2026·

  ·

• feat(saml): support IdP metadata discovery for certificate rotation

  #4967·dennismdejong opened Aug 9, 2026·

  ·
  1