What's Changed

• chore: update CHANGELOG for 0.12.0 by @johanbrandhorst in #175
• [IND-4227] [COMPLIANCE] Update Copyright Headers (Batch 1 of 1) by @oss-core-libraries-dashboard[bot] in #174
• fix unbounded split by @Ayomi-gh in #177
• [VAULT-43467] saml: resolve CVE-2026-33487, GHSA-hwqm-qvj9-4jr2, and GHSA-pcgw-qcv5-h8ch by @ryancragun in #180
• chore: update go-jose to address CVE-2026-34986 by @irenarindos in #185
• JWT: add optional KeySetSearcher callback to Validator by @suraj-simha in #187
• chore: update CHANGELOG for 0.13.0 by @jimlambrt in #189

New Contributors

• @oss-core-libraries-dashboard[bot] made their first contribution in #174
• @Ayomi-gh made their first contribution in #177
• @ryancragun made their first contribution in #180
• @irenarindos made their first contribution in #185
• @suraj-simha made their first contribution in #187

Full Changelog: v0.12.0...v0.13.0

Contributors

• @ryancragun
• @irenarindos
• @johanbrandhorst
• @jimlambrt
• @Ayomi-gh
• @suraj-simha

What's Changed

• Bump golang.org/x/crypto from 0.36.0 to 0.45.0 in /ldap/examples/cli by @dependabot[bot] in #170
• Bump golang.org/x/crypto from 0.36.0 to 0.45.0 by @dependabot[bot] in #171
• fix: fprintf usage in ldap CLI example by @jimlambrt in #173
• Expose OIDC provider server metadata in Provider by @allisonlarson in #172

Full Changelog: v0.11.0...v0.12.0

Contributors

• @allisonlarson
• @jimlambrt
• @dependabot

What's Changed

• fix (ldap): fix slice append to be concurrent safe by @jimlambrt in #167
• chore: update changelog for v0.11.0 by @jimlambrt in #168

Full Changelog: v0.10.0...v0.11.0

Contributors

• @jimlambrt

What's Changed

• Bump dependencies and update CI by @dependabot[bot] in #158
• Bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot[bot] in #160
• dep: Pin action/cache to a contianer sha by @louisruch in #161
• [Compliance] - PR Template Changes Required by @compliance-pr-automation-bot[bot] in #163
• Bump golang.org/x/oauth2 from 0.21.0 to 0.27.0 by @dependabot[bot] in #164
• fix: use constant time comparison when comparing token hashes. by @jimlambrt in #165
• doc: changelog entries for 0.10.0 release by @jimlambrt in #166

New Contributors

• @compliance-pr-automation-bot[bot] made their first contribution in #163

Full Changelog: v0.9.0...v0.10.0

Contributors

• @louisruch
• @jimlambrt
• @dependabot

What's Changed

• ldap getUserDN handle multiple users by @helenfufu in #151
• Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 by @dependabot in #152
• Bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /ldap/examples/cli by @dependabot in #153
• Bump golang.org/x/net from 0.27.0 to 0.33.0 by @dependabot in #154
• OIDC private key JWT / client assertion by @gulducat in #155
• Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 by @dependabot in #156
• Fix formatting and prepare for release by @johanbrandhorst in #157

New Contributors

• @helenfufu made their first contribution in #151
• @gulducat made their first contribution in #155
• @johanbrandhorst made their first contribution in #157

Full Changelog: v0.8.0...v0.9.0

Contributors

• @johanbrandhorst
• @gulducat
• @helenfufu
• @dependabot

What's Changed

• feat (oidc): add WithVerifier by @jimlambrt in #141
• Update CODEOWNERS by @lursu in #142
• Bump golang.org/x/crypto from 0.17.0 to 0.31.0 in /saml by @dependabot in #147
• Bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /ldap by @dependabot in #148
• Adds an option to enable sAMAccountname logins when upndomain is set by @kwagga in #146
• Bump golang.org/x/crypto from 0.25.0 to 0.31.0 by @dependabot in #149
• Enhancing signature validation in SAML Response #144 by @himran92 in #145
• Update CODEOWNERS by @lursu in #143
• chore: update CHANGELOG.md by @jimlambrt in #150

New Contributors

• @lursu made their first contribution in #142
• @kwagga made their first contribution in #146
• @himran92 made their first contribution in #145

Full Changelog: v0.7.0...v0.8.0

Contributors

• @kwagga
• @lursu
• @jimlambrt
• @dependabot
• @himran92

What's Changed

• Add ability to the SAML test provider to create signed SAML responses by @hcjulz in #135
• Bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #136
• feat (config): add support for a http.RoundTripper by @jimlambrt in #137
• chore: update deps by @jimlambrt in #138

Full Changelog: v0.6.0...v0.7.0

Contributors

• @jimlambrt
• @dependabot
• @hcjulz

What's Changed

• Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 by @dependabot in #130
• Add case insensitive user attribute keys configs for LDAP by @jasonodonnell in #132
• chore (oidc, jwt, ldap): update deps by @jimlambrt in #133
• Add empty anonymous group search configs by @jasonodonnell in #134

New Contributors

• @jasonodonnell made their first contribution in #132

Full Changelog: v0.5.0...v0.6.0

Contributors

• @jasonodonnell
• @jimlambrt
• @dependabot

Improvements

• JWT
  • Adds ability to specify more than one KeySet used for token validation (#128)

Bug Fixes

• SAML: Truncate issue instant to microseconds to support Microsoft Entra ID enterprise applications #126