chore(deps): update all-minor-updates

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
python	uses-with	minor	3.13 → 3.14
quay.io/oauth2-proxy/oauth2-proxy (source)		minor	v7.11.0 → v7.15.1
redis-ha (source)		minor	4.34.10 → 4.35.10

---

Release Notes

actions/python-versions (python)

v3.14.3: 3.14.3

Compare Source

Python 3.14.3

v3.14.2: 3.14.2

Compare Source

Python 3.14.2

v3.14.1: 3.14.1

Compare Source

Python 3.14.1

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

oauth2-proxy/oauth2-proxy (quay.io/oauth2-proxy/oauth2-proxy)

v7.15.1

Compare Source

v7.15.0

Compare Source

• #​3382 chore(deps): update gomod and golangci/golangci-lint to v2.11.4 (@​tuunit)
• #​3374 fix: handle Unix socket RemoteAddr in IP resolution (@​H1net)
• #​3381 fix: do not log error for backend logout 204 (@​artificiosus)
• #​3327 fix: improve logging when session refresh token is missing (@​yosri-brh)
• #​2767 fix: propagate errors during route building (@​sybereal)

v7.14.3

Compare Source

• #​3352 fix: backend logout URL call on sign out (#​3172)(@​vsejpal)
• #​3332 ci: distribute windows binary with .exe extension (@​igitur)
• #​2685 feat: allow arbitrary claims from the IDToken and IdentityProvider UserInfo endpoint to be added to the session state (@​vegetablest)
• #​3278 feat: possibility to inject id_token in redirect url during sign out (@​albanf)
• #​2851 feat: add support for specifying allowed OIDC JWT signing algorithms (#​2753) (@​andoks / @​tuunit)
• #​3369 fix: use CSRFExpire instead of Expire for CSRF cookie validation (@​Br1an67)
• #​3365 fix: filter empty strings from allowed groups (@​Br1an67)
• #​3338 feat: add --config-test flag for validating configuration (@​MayorFaj)
• #​3347 feat: add same site option for csrf cookies (@​jvnoije)
• #​3376 feat: allow setting unix socket file mode when declaring listener (@​Tristan971 / @​tuunit)

v7.14.2

Compare Source

• #​3183 fix: allow URL parameters to configure username, password and max idle connection timeout if the matching configuration is empty.

v7.14.1

Compare Source

• #​3314 revert: fix: skip provider button auth only redirect (#​3309) (@​StefanMarkmann / @​tuunit)
• #​3315 docs: clarify browser vs API routes for nginx auth_request redirects (@​StefanMarkmann)

v7.14.0

Compare Source

• #​3309 fix: Return 302 redirect from AuthOnly endpoint when skip-provider-button is true (@​StefanMarkmann)
• #​3302 fix: static upstreams failing validation due to passHostHeader and proxyWebSockets defaults being set incorrectly (@​sourava01 / @​tuunit)
• #​3312 chore(deps): upgrade to go1.25.6 and latest dependencies (@​tuunit)

v7.13.0

Compare Source

• #​2628 feat(structured config): revamp of yaml parsing using mapstructure decoder and custom decoders (@​tuunit)
• #​3197 fix: NewRemoteKeySet is not using DefaultHTTPClient (@​rsrdesarrollo / @​tuunit)
• #​3292 chore(deps): upgrade gomod and bump to golang v1.25.5 (@​tuunit)
• #​3304 fix: added conditional so default is not always set and env vars are honored fixes 3303 (@​pixeldrew)
• #​3264 fix: more aggressively truncate logged access_token (@​MartinNowak / @​tuunit)
• #​3267 fix: Session refresh handling in OIDC provider (@​gysel)
• #​3290 fix: WebSocket proxy to respect PassHostHeader setting (@​UnsignedLong)

v7.12.0

Compare Source

• #​3228 fix: use GetSecret() in ticket.go makeCookie to respect cookie-secret-file (@​stagswtf)
• #​3244 chore(deps): upgrade to latest go1.25.3 (@​tuunit)
• #​3238 chore: Replace pkg/clock with narrowly targeted stub clocks (@​dsymonds)
• #​3237 - feat: add option to use organization id for preferred username in Google Provider (@​pixeldrew)
• GHSA-vjrc-mh2v-45x6 fix: request header smuggling by stripping all normalized header variants (@​tuunit)
• #​1933 fix: validation of refreshed sessions using the access_token in the OIDC provider (@​gysel / @​tuunit)
• #​2841 feat: add allowed_* constraint option to proxy endpoint query string (@​jacobalberty)

DandyDeveloper/charts (redis-ha)

v4.35.10

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• [stable/redis-ha] Redis 8.2.4 by @​fmmatthewzeemann in #​385

New Contributors

• @​fmmatthewzeemann made their first contribution in #​385

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.9...redis-ha-4.35.10

v4.35.9

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• redis-ha Replace invocations of hostname and pidof so Redis minimal images can be used easily by @​partytax in #​386

New Contributors

• @​partytax made their first contribution in #​386

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.8...redis-ha-4.35.9

v4.35.8

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• [stable/redis-ha] Bump redis-exporter to v1.80.2 by @​emilarnesen in #​382

New Contributors

• @​emilarnesen made their first contribution in #​382

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.7...redis-ha-4.35.8

v4.35.7

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• Support bookworm and alpine image by @​dheeg in #​379

New Contributors

• @​dheeg made their first contribution in #​379

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.6...redis-ha-4.35.7

v4.35.6

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• [stable/redis-ha] Add haproxy tunnel timeout setting by @​Baune8D in #​355

New Contributors

• @​Baune8D made their first contribution in #​355

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.5...redis-ha-4.35.6

v4.35.5

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• [stable/redis-ha] Add additional ports for haproxy by @​TheBigLee in #​369

New Contributors

• @​TheBigLee made their first contribution in #​369

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.4...redis-ha-4.35.5

v4.35.4

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• Add liveness and readiness probes for split brain detection container by @​ninjatec in #​368

New Contributors

• @​ninjatec made their first contribution in #​368

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.3...redis-ha-4.35.4

v4.35.3

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• [stable/redis-ha] add sentinel announce-hosts and resolve-hosts by @​Alex-Souslik in #​356

New Contributors

• @​Alex-Souslik made their first contribution in #​356

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.2...redis-ha-4.35.3

v4.35.2

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• [charts/redis-ha] Ensure resources on all containers. by @​DandyDeveloper in #​365

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.1...redis-ha-4.35.2

v4.35.1

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• [charts/redis-ha] Correctly handle existing secret conditions for auth by @​DandyDeveloper in #​364

Full Changelog: DandyDeveloper/charts@redis-ha-4.35.0...redis-ha-4.35.1

v4.35.0

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• [charts/redis-ha] Redis 8.2.2 by @​DandyDeveloper in #​358

Full Changelog: DandyDeveloper/charts@redis-ha-4.34.13...redis-ha-4.35.0

v4.34.13

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• [stable/redis-ha] Fix template scope in netpol ingressRules by @​tnaumann-wecg in #​353

New Contributors

• @​tnaumann-wecg made their first contribution in #​353

Full Changelog: DandyDeveloper/charts@redis-ha-4.34.12...redis-ha-4.34.13

v4.34.12

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• stable/redis-ha: Helm templates in provided secret names. by @​pavel-jancik in #​253

New Contributors

• @​pavel-jancik made their first contribution in #​253

Full Changelog: DandyDeveloper/charts@redis-ha-4.34.11...redis-ha-4.34.12

v4.34.11

Compare Source

This Helm chart provides a highly available Redis implementation with a master/slave configuration and uses Sentinel sidecars for failover management

What's Changed

• [stable/redis-ha] Add tls ports to netpol if defined by @​OpenGuidou in #​313

Full Changelog: DandyDeveloper/charts@redis-ha-4.34.10...redis-ha-4.34.11

---

Configuration

📅 Schedule: Branch creation - "before 5am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.