chore(deps): update ghcr.io/zitadel/zitadel docker tag to v4 by renovate[bot] · Pull Request #37 · datum-cloud/auth-provider-zitadel

renovate · 2025-08-10T05:53:45Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
ghcr.io/zitadel/zitadel	major	`v3.3.0` → `v4.13.1`

Release Notes

zitadel/zitadel (ghcr.io/zitadel/zitadel)

`v4.13.1`

Compare Source

Bug Fixes

do not send init mails for admins on instance setup (#11744) (60a4f3b)
make recovery code active on add (#11734) (9ac2518)
revert feature key for configs back to ConsoleUseV2UserApi (#11928) (7ead851), closes #11390 #11706
use preparation filter for org existence check during setup (#11932) (3ef1593), closes #11677

`v4.13.0`

Compare Source

Bug Fixes

check whether org exists before creating user (#11647) (ac046ee), closes #11532
console: manager removal #11543 (#11627) (853a253)
console: organization column display in grants #10822 (#11742) (7374804)
console: role assignment manipulation #10517 (#11756) (88a3c23)
console: switch to webkeys v2 (from v2beta) (#11807) (d1230ce), closes #10773
login: disable auto-capitalization, auto-correct and spell checking for usernames (#11129) (46ae504), closes #11124
login: http 2 memory leak's (#11830) (1cc08f3), closes #10562
login: prettier setup (#11798) (50dcc7b)
login: remove loginSettings.allowRegister check for IDPs (#11731) (1741b8e), closes #11138
login: seperate OpenTelemetry initialization for different runtimes (#11785) (bdbeef9)
login: update LDAP flow (#11788) (25301de), closes #11096
Separate Example Applications and SDKs/Integrations more clearly (#11569) (a75ab41)
tar, rollup vulnerabilities (#11889) (e53373f)
telemetry: count IDP template data (#11720) (a8746fb), closes #9979
ui_locales being ignored in v2 login ui (#11617) (43f9898)
ui/auth: display correct Apple sign-in callback URL (#11439) (9f13308), closes #11438
update OpenAPI generation to use workspace root and improve temp… (#11822) (4700641)
use configured service name for OTEL resources (#11818) (3fd6ffa), closes #11455

Features

add DSN/URL connection string support for PostgreSQL and Redis (#11729) (5dd46ea)
delete metadata on SetOrganizationMetadata api (#11790) (6334084), closes #11776
delete metadata on SetUserMetadata api (#11776) (7da57c3)
login: add readiness probe endpoint (#11828) (c018bea)
login: added support for otel push-based logs, metrics, and traces (#11429) (04c1438)
login: Support private key file with env (#10575) (adc1551)
login: update to nextjs 16, improve caching, change default colors (#11629) (63b6a4c)
set metadata at the user level in CreateUser request (#11719) (40a7570)
set metadata field in UpdateUser endpoint (#11747) (b14eb60)
supporting metadata updates in actions v2 via RetrieveIdentityProviderIntent API (#11810) (3de441c)
telemetry: unify request details (#11509) (dbce9d0)

`v4.12.3`

Compare Source

Bug Fixes

enforce organization scopes (d902859), closes #11160
prevent possible nil pointer panics (#11728) (3fd8631)

`v4.12.2`

Compare Source

Bug Fixes

api: permission checks for some management API endpoints (da227a4)
handle encoded paths in auth middleware (fdf676e)
webauthn: expire invite code by creation date (dd4bc2f)

`v4.12.1`

Compare Source

Bug Fixes

recover from request panics (#11713) (0163987)
register: prevent server rendered page invokations, secure server actions (b4efc80)

`v4.12.0`

Compare Source

Bug Fixes

added login_hint to the idp intent (#11552) (273863f), closes #11392
allow creating new invite code before previous is invalid (#11649) (ec7f8da), closes #9962 #9962
benchmark: set proper audience to introspect token (#11586) (8cfb4b5), closes #11585
console: generic oidc help button opens Google config page (#11605) (6ce189e), closes #11505
correctly send links to login v2 in email notifications (#10711) (edfcaab), closes #10643
i18n: instance error translations in API (#11708) (d9a0fd4), closes #11351 #11351
list all frameworks (#11716) (f360bc5)
login: check for primary auth methods on user discovery (#11689) (a5ca50c)
login: CSP img-src resolved at build time instead of runtime (#11603) (d989677), closes #11088 #11602
login: update login logic to correctly handle email and phone re… (#11618) (8a819c9), closes #11518
revert renaming of (management) console feature flag (#11706) (f00eefa), closes #11390 #11390
session termination after user deletion/deactivation (#11644) (f8b0ff0)
set refresh token in the RetrieveIdentityIntentResponse (#11613) (624e730)
test: resolve nil-pointer panic in TestCommandSide_ChangeUserHuman (#11695) (b0e0f41), closes #11696 #10752

Features

add current password field to password reset (#11534) (8509cc9), closes #11533
allow adding trusted domains in instance setup (#11169) (4722a8d), closes #11153
api: allow specifying access token type for user of type machine (#11599) (1fc65e8), closes #10850
login: add autoFocus to input components (#11566) (1d9c28b), closes #11565
login: add LOGIN_SERVICE_KEY_FILE authentication support (#11572) (d437fd2)
login: add optional TLS termination support (#11663) (f094a1e), closes #11473
login: dynamically configure languages based on settings (#11372) (6617aef), closes #11199
login: redirect configuration options in multi-domain setups (#11527) (f2d451a)
login: use OpenSSL CA store for TLS certificate validation (#11562) (34c1ead)

`v4.11.1`

Compare Source

Bug Fixes

actions: add denylist for target URLs (d9df998)
api: check permission based on provided data on user update (288f064)
log: correct log stream in setup (#11623) (e6b4b53)
slog: masking of grouped attributes (#11606) (8409646), closes #11435

`v4.11.0`

Compare Source

Bug Fixes

api: honor request-provided IDs for OIDC apps (#11506) (32a0bce)
api: make auth not required for testing smtp (#11514) (8c03ab1)
console: fix self-management without explicit roles (#11583) (f10ac3b), closes #11567
login, console: replace allowUsernamePassword with allowLocalAuthentication in login, change translation in console (#11413) (60f7ac9)
login: button dark disabled contrast increase to 1.69 (#11517) (f1e1385)
login: refactor SAML Post Flow to bypass cookie limits, fix SAML SP post (#11170) (ff09791), closes #10816 #10759
login: respect password complexity settings in UI (#11528) (bfc8a69), closes #11511
return auth none when no auth is configured for smtp + scopes in grpc response (#11554) (1d3ff35)
setup: ensure PostgreSQL 18 compatibility (#11484) (ba1e9c2)
setup: ensure step 69 runs without issues (#11503) (6500728)
token-v2: compare subject to user id (d2a6af8)

Features

added xoauth for smtp (#11239) (8e878b2), closes #8042
api: return allowed_languages (#11553) (6940802)
console: manage OIDC back-channel logout uri (#11446) (b1690bb), closes #8469
enable cross-app distributed tracing for v2 APIs (#11453) (ee95d58)
integrate console changes (#11433) (27d637e)
logging: add streams (#11435) (a35b8bb), closes #11333 #11331 #11330
logging: gcp error reporting (#11355) (5902697), closes #11329
login: add support for disabling automatic email verification (#11515) (f5efa48), closes #11406
oauth/oidc: move token exchange from beta to GA (#11475) (806dabb), closes #11114
oidc: move back-channel logout from beta to GA (#11493) (eb2bf24), closes #11277
oidc: use worker queue for OIDC Back-Channel Logout notifications (#11441) (b083788)
SMTP xoauth2 in console (#11545) (072d248), closes #11451 #11239
telemetry: improved instrumentation for observability (#11159) (56c5b8c)

⚠️ There was an issue in the build pipeline and the "SMS country code selector to SMS OTP (LoginV1)" was not correctly built.
Please use v4.10.1 if you rely on the new feature.

Bug Fixes

api: correctly handle organization_id on creation (#11396) (2f909ff), closes #11269
login v1: only check password expiry for local users with password (#11344) (7eb3bd5)
login: passkey reauth (#11365) (11630c5)
login: prevent eventual consistency issues on /password/change, missing permissions (#11371) (56bd6d9), closes #11345
login: use constructUrl for implicit IdP success/failure URLs (#11389) (d3321c8), closes #11386

Features

Add SMS country code selector to SMS OTP (LoginV1) (#11373) (8968dbe), closes #8891
api: allow filtering apps by client id and entity id (#11385) (b4cecc8), closes #11340
cmd: skip privileged database commands during initialization if objects already present (#11021) (0d8c8d2), closes #10730
i18n: add Arabic language support (#11161) (4ff4526), closes #11146

`v4.9.2`

Compare Source

Bug Fixes

features: increment version to deal with removed event types (#11402) (c5b0339)

`v4.9.1`

Compare Source

Bug Fixes

allow for the smtp-config to have no password set. (#11193) (6ff1211), closes #11084
api: implement missing filters on ListAdministrators endpoint (#11319) (e680bde)
cmd/build: populate date variable when not set through ldflags (#11316) (4ed8bc1)
login v1: handle automatic re-auth using id_token_hint properly (#11326) (4746c22)
login: correctly redirect to /password when ignoreUnknownUsername is set (#11130) (c300d4c), closes #11006
login: generalize error message on code verifications (b85ab69)
login: use onChange instead of onBlur with react-hook-form (#11354) (3af3953)

`v4.9.0`

Compare Source

Bug Fixes

action: execute without features set (#11271) (fa203cc)
i18n: fix typos in MustBeMemoryOfOrg strings (#11085) (3edb3ef)
id token had no lifetime for client credentials (#11204) (0553937), closes #11060
inconsistent user creation v2 radio buttons #11092 (#11208) (3763ca5)
login: cleanup server logs (#11195) (b58ba71), closes #11184
login: delete custom request headers when their value is empty (#11263) (fdb8687)
login: enable explicit IDP linking using existing session id (#11225) (776ccb6), closes #11191
typo in setting LoginPolicy.IgnoreUnknownUsernames config (#11243) (0aa1e1e)

Features

Add recovery code MFA support (#9954) (eeae2c6), closes #6898
i18n: add Ukrainian language support (#10696) (bb38045)
languages: add French localization (#11050) (3943619)
login: Add Dutch (nl) locale (#11139) (84ea6d2)

`v4.8.1`

Compare Source

Bug Fixes

email: accept SMTPUTF8 addresses (#11115) (10a24db)

`v4.8.0`

Compare Source

Features

action v2: add JWT and JWE payload type options (#11196) (91b95bb), closes #11061

`v4.7.6`

Compare Source

Bug Fixes

login v1: update password verification handling (#11202) (6d6e96c)
update pnpm, react, react-dom (#11197) (de16094), closes #11192

`v4.7.5`

Compare Source

Bug Fixes

[CVE-2025-55182] [CVE-2025-66478] Quick update react and Nextjs for #11140 (#11143) (bf8eb70)
login: CVE-2025-55184 and CVE-2025-55183, update next (#11179) (1b8476a)

`v4.7.4`

Compare Source

Bug Fixes

setup: member role synchronization execution check (#11180) (b582928)

`v4.7.3`

Compare Source

Bug Fixes

fields: sync membership roles from projections (#11178) (2e09eff)

`v4.7.2`

Compare Source

~~⚠️ We're currently investigating issues were some users cannot list users after the upgrade to this version.~~
✅ Solved in v4.7.4

Bug Fixes

api: add tracing interceptor on connectRPC services (#11147) (4aa2534)
Force v2 permission checks on user listing (0e17d00)
login: fix back button on 2fa screen to allow username change (#11125) (1c3b447)

`v4.7.1`

Compare Source

Bug Fixes

actionsV2: executing request/response type for 'all' condition (#11071) (95eb51f), closes #10895
login: Centralize host header resolution and forward headers to APIs (4c879b4)

`v4.7.0`

Compare Source

Bug Fixes

deps: update saml and all other dependencies (#11067) (1a08cca)
login: Organization Discovery for Login Without Org Context (#10996) (6c58c0b)

Features

api: move organization api (#11045) (6b407ab), closes #10772

`v4.6.6`

Compare Source

Bug Fixes

validate IDP linking conditions (a20dbc4)

`v4.6.5`

Compare Source

Bug Fixes

add additional binding for url with type (#11032) (4154372), closes #8710
authz: ignore unready auth methods for mfa requirement check (#11056) (8d4f608)
comment in feature flags so that they can be used in env variables (#11030) (d93bc88), closes #10913
console: add config for missing frameworks in app creation (#11057) (02e6190), closes #11052
user: Updating user info when authenticating with external IDP (#11046) (2162f86), closes #10838

`v4.6.4`

Compare Source

Bug Fixes

actions v1: return org metadata again (#11040) (9c50087)

`v4.6.3`

Compare Source

Bug Fixes

api: correct permission check in organization v2beta service (8dcfff9)
login: Add default organization fallback for IDP user creation #11025 (#11026) (b4a1bea)

`v4.6.2`

Compare Source

Bug Fixes

projection: locking behavior based on configuration (#11014) (9c5ad4e)

`v4.6.1`

Compare Source

Bug Fixes

login: idp success url (#10997) (dd64977)

`v4.6.0`

Compare Source

Bug Fixes

check for 2fa even if not enforced (f7309f8)
login: generate code for passkey (#10966) (22b55b4)
login: improve duration undefined check (#10949) (9cedcbc), closes #10865
login: Improve Passkey Authentication Error Handling & Testing (#10971) (6661e3d)
login: Prevent double execution of IDP callback token and improve architecture (#10948) (c126001), closes #10828
login: Return promise from passkey authentication to fix automatic prompt (#10991) (385226f), closes #10971
metrics: incorrect mapping of grpc status codes in the grpc_server_grpc_status_code_total metric (#10989) (c164ba8), closes #10884
respect lockout policy on password change (with old password) and add tar pit for checks (d3713df)
sanitize host headers before use (7520450)
user: auth option while listing user metadata (#10968) (ad9cc03), closes /github.com/zitadel/zitadel/blob/main/internal/query/user_metadata.go#L173 #10925

Features

api: integrates drupal7 hash verifier from passwap (#10918) (2535f43)
api: move authorization service to v2 (#10914) (999e81b), closes #10746
api: move instance service to v2 (#10919) (35ad7fd)
api: move project service v2beta to GA (and deprecate v2beta) (#10844) (c3a3766), closes #10772
i18n: add Turkish translation file (#10922) (2b2ed20), closes #10851

`v4.5.0`

Compare Source

Bug Fixes

add CommonName to SAML SP certificate (#10700) (43b4fc1), closes #9048
api: add missing InIDsFilter (bfec4cb)
api: deprecate settings v2beta endpoints (#10909) (372f5d4)
api: deprecate v2beta endpoints of existing v2 services (#10841) (53f51fc), closes #10772
assets-api: Add error handling for missing file paths (#10938) (4c82d72)
auth: allow LDAP sign-in with special characters (#10798) (#10857) (70800c5)
console: create login policy before adding a factor (#10202) (db64354), closes #9047
login v1: handle old sessions in logout (#10926) (2272a60)
login: Add Organization Scoping to IDP Auto-Linking (#10931) (b94c784)
login: fallback for idp login (#10876) (11a35f4), closes #10671
login: provide a postError redirect url for idp flows (#10883) (266d533)
login: send invite codes only for users with unverified email (#10943) (d4fec7e)
oidc: accept localhost redirect URIs without path nor port (#10836) (aa8c02b)

Features

api: move application service v2beta to GA (and deprecate v2beta) (#10846) (bd995b0)
api: move internal permission service to GA (and deprecate v2beta) (#10898) (366fe3f)
login: add Japanese localization for login frontend app (#10811) (76a18d4)

`v4.4.0`

Compare Source

Bug Fixes

correct mapping of custom texts (#10725) (45c7354), closes #10155
login: serve UI on both IPv4 and IPv6 (#10554) (d45d19f)
login: use default titles for password pages (#10904) (84da6f9)
query: distinct count in user list (#10840) (cd059dc)
zitadel: LDAP binding error with non-ASCII characters in DN (#10578) (6b007ad), closes #9970

Features

await initial database connection (#10869) ([4f31309](https://redirect.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

joggrbot · 2025-08-15T12:16:56Z

📝 Documentation Analysis

All docs are up to date! 🎉

✅ Latest commit analyzed: 19067be | Powered by Joggr

cla-assistant · 2026-03-08T07:06:38Z

All committers have signed the CLA.

cla-assistant · 2026-03-08T07:06:38Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from 15ab58b to b6f9cb9 Compare August 15, 2025 12:16

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch 2 times, most recently from 19067be to 336c0c5 Compare August 23, 2025 07:22

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch 3 times, most recently from 8cabefe to fcdd33a Compare September 6, 2025 00:09

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch 3 times, most recently from d9f5f20 to dd21179 Compare September 16, 2025 20:04

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from dd21179 to 5d33f3b Compare September 19, 2025 07:41

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch 2 times, most recently from 03c80cb to 4a0214b Compare October 6, 2025 16:58

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch 3 times, most recently from 733f99e to 4054464 Compare October 13, 2025 07:36

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from 4054464 to dee6aea Compare October 16, 2025 12:03

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch 2 times, most recently from 7174582 to 0492caa Compare November 2, 2025 11:40

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch 2 times, most recently from c06e5b9 to 74a7b76 Compare November 15, 2025 08:10

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch 3 times, most recently from 68418d4 to 876e25e Compare December 13, 2025 19:13

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from 876e25e to a43e1da Compare December 18, 2025 11:56

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch 3 times, most recently from 7144f4c to d2407c9 Compare January 6, 2026 19:24

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from d2407c9 to 53f9297 Compare January 16, 2026 19:43

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from 53f9297 to b7c03b7 Compare January 24, 2026 03:36

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from b7c03b7 to 8b97a7d Compare January 30, 2026 07:55

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from 8b97a7d to 558ea28 Compare February 16, 2026 23:59

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from 558ea28 to 82a552f Compare February 27, 2026 04:21

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from 82a552f to 2dce2b2 Compare March 8, 2026 07:06

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch 2 times, most recently from 8c867de to 4e643a1 Compare March 18, 2026 20:11

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from 4e643a1 to 5590ccb Compare March 24, 2026 10:15

chore(deps): update ghcr.io/zitadel/zitadel docker tag to v4

5c932f7

renovate bot force-pushed the renovate/ghcr.io-zitadel-zitadel-4.x branch from 5590ccb to 5c932f7 Compare April 2, 2026 14:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update ghcr.io/zitadel/zitadel docker tag to v4#37

chore(deps): update ghcr.io/zitadel/zitadel docker tag to v4#37
renovate[bot] wants to merge 1 commit intomainfrom
renovate/ghcr.io-zitadel-zitadel-4.x

renovate bot commented Aug 10, 2025 •

edited

Loading

Uh oh!

joggrbot bot commented Aug 15, 2025 •

edited

Loading

Uh oh!

cla-assistant bot commented Mar 8, 2026 •

edited

Loading

Uh oh!

cla-assistant bot commented Mar 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Aug 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Features

Configuration

Uh oh!

joggrbot bot commented Aug 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📝 Documentation Analysis

Uh oh!

cla-assistant bot commented Mar 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cla-assistant bot commented Mar 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Aug 10, 2025 •

edited

Loading

joggrbot bot commented Aug 15, 2025 •

edited

Loading

cla-assistant bot commented Mar 8, 2026 •

edited

Loading