@@ -2,10 +2,22 @@
22
33## Release Highlights
44
5+## Important Notes
6+
7+## Breaking Changes
8+
9+## Changes since v7.3.0
10+
11+# V7.3.0
12+
13+## Release Highlights
14+
515- [#1361](https://github.com/oauth2-proxy/oauth2-proxy/pull/1541) PKCE Code Challenge Support - RFC-7636 (@braunsonm)
616 - At this time the `--code-challenge-method` flag can be used to enable it with the method of your choice.
717- Parital support for OAuth2 Authorization Server Metadata for detecting code challenge methods (@braunsonm)
818 - A warning will be displayed when your provider advertises support for PKCE but you have not enabled it.
19+- Support for the ARMv8 and ppc64le architectures
20+- Configurable upstream request timeouts
921
1022## Important Notes
1123
@@ -13,9 +25,12 @@
1325If you are using an architecture specific tag (ex: v7.2.1-arm64) you should move to the generic tag instead (ex: v7.2.1 )
1426- [#1478](https://github.com/oauth2-proxy/oauth2-proxy/pull/1478) Changes the UID and GID of the runtime user to `65532`.
1527 Which also is known as `nonroot` user in [distroless images](https://github.com/GoogleContainerTools/distroless).
28+- This release includes fixes for a number of CVEs, we recomend to upgrade as soon as possible.
1629
1730## Breaking Changes
1831
32+N/A
33+
1934## Changes since v7.2.1
2035
2136- [#1662](https://github.com/oauth2-proxy/oauth2-proxy/pull/1662) Discover signature algorithms from OIDC provider (@JoelSpeed)