From 47eb53cac2cea7540901703a8b618e76aeed04c7 Mon Sep 17 00:00:00 2001
From: tannevaled <tannevaled@users.noreply.github.com>
Date: Fri, 29 May 2026 11:11:16 +0200
Subject: [PATCH 1/3] =?UTF-8?q?new(dexidp.io):=20Dex=20=E2=80=94=20federat?=
 =?UTF-8?q?ed=20OpenID=20Connect=20provider=20(from=20source)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

OIDC/OAuth2 IdP that federates to upstream identity providers
(LDAP, GitHub, Google, SAML, etc.). Drives authentication for
Kubernetes-native tooling like argocd and kubectl-oidc.

Pure Go binary — `go build -o bin/dex ./cmd/dex` with version
injected via -ldflags. From source, no vendored binaries.
---
 projects/dexidp.io/package.yml | 52 ++++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)
 create mode 100644 projects/dexidp.io/package.yml

diff --git a/projects/dexidp.io/package.yml b/projects/dexidp.io/package.yml
new file mode 100644
index 0000000000..5d9114939f
--- /dev/null
+++ b/projects/dexidp.io/package.yml
@@ -0,0 +1,52 @@
+# Dex — federated OpenID Connect provider.
+#
+# OIDC/OAuth2 identity provider that drives authentication for many
+# Kubernetes-native systems (argocd, kubectl-oidc, etc.) by federating
+# to upstream IdPs (LDAP, GitHub, Google, SAML, etc.).
+#
+# Pure Go binary — `go install ./cmd/dex` produces bin/dex.
+
+distributable:
+  url: https://github.com/dexidp/dex/archive/refs/tags/v{{ version.raw }}.tar.gz
+  strip-components: 1
+
+versions:
+  github: dexidp/dex
+
+platforms:
+  - linux/x86-64
+  - linux/aarch64
+  - darwin/x86-64
+  - darwin/aarch64
+
+build:
+  dependencies:
+    go.dev: '*'
+    gnu.org/make: '*'
+    gnu.org/coreutils: '*'   # install(1)
+
+  script:
+    # Upstream's Makefile `bin/dex` rule does `go install` which
+    # writes to GOBIN. We build directly with `go build -o` so we
+    # control the output path.
+    - run: |
+        # LDFLAGS injects version + commit. Upstream's Makefile
+        # would compute these from git; here we use the version
+        # template and a stub commit for hermeticity.
+        LDFLAGS="-X main.version=v{{ version.raw }}"
+        go build -trimpath -ldflags "$LDFLAGS" -o bin/dex ./cmd/dex
+
+    - install -Dm755 bin/dex "{{prefix}}/bin/dex"
+
+test:
+  script:
+    - run: |
+        out=$(dex version 2>&1)
+        echo "dex version: $out"
+        case "$out" in
+          *"{{version}}"*) echo "version PASS" ;;
+          *) echo "FAIL: expected {{version}}, got: $out"; exit 1 ;;
+        esac
+
+provides:
+  - bin/dex

From 3f462f1698171116c5acd314532c738f53a9bfe9 Mon Sep 17 00:00:00 2001
From: tannevaled <tannevaled@users.noreply.github.com>
Date: Fri, 29 May 2026 14:16:39 +0200
Subject: [PATCH 2/3] ci: retrigger


From cd3a968d9238f0bb5f36b6d0de9321ae2855cb92 Mon Sep 17 00:00:00 2001
From: tannevaled <tannevaled@users.noreply.github.com>
Date: Fri, 29 May 2026 23:35:51 +0200
Subject: [PATCH 3/3] ci: retrigger checks

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>