public_git
/
oauth2-proxy
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

doc: release note v7.14.3 

Signed-off-by: Jan Larwig <jan@larwig.com>
This commit is contained in:
Jan Larwig 2026-02-26 14:54:40 +01:00
parent 184f4c006f
commit 2d53000e6d
No known key found for this signature in database
GPG Key ID: C2172BFA220A037A
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
CHANGELOG.md
View File

@ -12,8 +12,16 @@
## Release Highlights
- 🔵 Go1.25.7 and upgrade of dependencies to latest versions
- Fixes [CVE-2025-68121](https://nvd.nist.gov/vuln/detail/cve-2025-68121)
- 🐛 Bug fixes
- Allow Redis URL parameters to configure username, password and max idle connection timeout if the matching configuration is empty.
## Important Notes
We improved our supply chain security by added additional checks to prevent potential command injection in the publish release workflow and to ensure that it can only be triggered from branches originating in the local repository. This potential issue was reported by automated systems as well as a couple of security researchers, and we want to thank everyone for their diligence in looking out for the security of the project. Especially Aastha Aggarwal for her detailed report and follow-up. @Aastha2602
## Breaking Changes
## Changes since v7.14.2