github.com/openpubkey/openpubkey

Releases

1. v0.28.1-0.20260824013743-bbd0a40ae78324 Aug 2026pre-release

   Nothing published for this version

2. v0.28.017 Aug 2026
   Release notes

   Changes

   • Default StandardOp to be refreshable @EthanHeilman (#396)
   • Add optional AudClaimPrefix for aud-commitment PK Tokens @kipz (#393)

   Open source →
3. v0.27.1-0.20260810013415-d0a1a4d0ccdb10 Aug 2026pre-release

   Nothing published for this version

4. v0.27.029 Jul 2026
   Release notes

   This release changes some of the output behavior. In the past the client would write to stdout to tell the user what URI they should open their browser to. Writing to stdout in this way is unexpected for a library. We replace this behavior with the OutOrErrWriter that defaults to dropping output, but can be configured to use stdout.

   Changes

   • Default OutOrErrWriter to nop @EthanHeilman (#390)
   • refactor: remove direct logrus usage @sukujgrg (#377)

   🚀 Features

   • feat: Support for Key binding with authentik @EthanHeilman (#368)

   🐛 Bug Fixes

   • feat(providers): add Forgejo Actions OpenID Provider @Blacks-Army (#386)
   • fix(client): bind cosigner callback to loopback @EthanHeilman (#391)
   • fix: bridge OpenPubkeyBrowserURL into PowerShell via WSLENV on WSL @sukujgrg (#387)

   Open source →
5. v0.26.1-0.20260729205543-27a4b196daa829 Jul 2026pre-release

   Nothing published for this version

6. v0.26.1-0.20260723013851-7020763ebda523 Jul 2026pre-release

   Nothing published for this version

7. v0.26.1-0.20260721023309-d5f4b5497cda21 Jul 2026pre-release

   Nothing published for this version

8. v0.26.016 Jul 2026
   Release notes

   Now uses go 1.25.0

   Changes

   • Bump golang.org/x/crypto from 0.52.0 to 0.54.0 @EthanHeilman (#384)
   • [tests] Improves regression tests on GQ signature over GQ protected headers @EthanHeilman (#381)
   • Bump golang.org/x/crypto from 0.45.0 to 0.52.0 @dependabot[bot] (#376)

   🐛 Bug Fixes

   • providers: bind OIDC callback to the redirect URI host, not hardcoded localhost @sukujgrg (#375)
   • Fixes type conversation panics, adds regression tests @EthanHeilman (#385)
   • Fixes action perms for go.yml @EthanHeilman (#383)
   • Updates go to 1.25.0, linter to 2.12.2, fixes new linter complaints @EthanHeilman (#378)

   Open source →
9. v0.25.014 Jul 2026
   Release notes

   This release fixes a serious security issue in GQ-commitment PK Tokens. This only has a security impact for GitLab-CI GQ-commitment PK Tokens. GitHub only uses GQ signatures for replay protection and binds the users public key to the ID Token via the audience (aud) claim. #379

   This is a non-backwards compatible change to GQ signature verification:

   Signatures produced by code prior to this change will not verify on code after this change.
   Signatures produced by code after this change will not verify on code prior to this change.

   Changes

   🐛 Bug Fixes

   • [fix] Changes GQ signature to cover GQ protected header @kipz (#379)
   • fix: avoid panic on array aud in GQCommitment verification @kanywst (#373)
   • Fixes browser launching on WSL @sukujgrg (#374)

   Open source →
10. v0.24.1-0.20260714134250-a400022b109014 Jul 2026pre-release

    Nothing published for this version

11. v0.24.018 Jun 2026
    Release notes

    Changes

    • Accept at+JWT token type as OIDC in PKToken @kipz (#370)
    • Add PS256 (RSASSA-PSS) algorithm support in publicKeyRecordFromJWK @kipz (#369)
    • fix: support RSA exponents other than 65537 for GQ signatures @kipz (#371)
    • Update to most recent key-binding spec @EthanHeilman (#367)
    • Bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.4 @dependabot[bot] (#365)

    🚀 Features

    • feat: add GitHub Actions example, integration workflow, and harden CI @fdcastel (#361)

    🐛 Bug Fixes

    • fix: remove duplicate JWKS fetch, propagate context, fix status code check @fdcastel (#362)

    Open source →
12. v0.23.1-0.20260506185257-0f419126f7626 May 2026pre-release

    Nothing published for this version

13. v0.23.1-0.20260409171129-d5b65c645acf9 Apr 2026pre-release

    Nothing published for this version

14. v0.23.022 Mar 2026
    Release notes

    Changes

    🚀 Features

    • feat: Add key bound refresh token support @EthanHeilman (#354)
    • feat: device flow (update) @EthanHeilman (#355)
    • feat: Add configurable callback message for OIDC flow @sukujgrg (#358)

    🧰 Maintenance

    • Change: renames c_hash to c_s256 @EthanHeilman (#359)
    • chore: migrate from jwx/v2 to jwx/v3 @datosh (#349)

    Open source →
15. v0.22.1-0.20260206213104-f39a9910feab6 Feb 2026pre-release

    Nothing published for this version

16. v0.22.021 Jan 2026
    Release notes

    Changes

    🚀 Features

    • Remote Redirect URIs Support @EthanHeilman (#356)

    Open source →
17. v0.21.09 Dec 2025
    Release notes

    Changes

    • docs: Create JWKS zoo, add AWS Cognito example to ID Token Zoo @EthanHeilman (#352)

    🧰 Maintenance

    • Upgrade GQ library from bigmod 0.0.3 to 0.1.0 @EthanHeilman (#353)

    Open source →
18. v0.20.1-0.20251205231009-841aa93950345 Dec 2025pre-release

    Nothing published for this version

19. v0.20.03 Dec 2025
    Release notes

    Changes

    • Use CosignerVerifier interface instead of concrete type @kipz (#351)

    🚀 Features

    • Add OP EdDSA signature algorithm support @kipz (#350)
    • feat: Support for OpenID Connect Key Binding @EthanHeilman (#341)

    Open source →
20. v0.19.1-0.20251202223731-c38e24fc4bde2 Dec 2025pre-release

    Nothing published for this version

21. v0.19.025 Nov 2025
    Release notes

    Changes

    🚀 Features

    • Create a fake provider for doing end-to-end tests @EthanHeilman (#343)
    • Add configurable GQ audience prefix @kipz (#348)

    🧰 Maintenance

    • Bump golang.org/x/crypto from 0.36.0 to 0.45.0 @dependabot[bot] (#347)

    Open source →
22. v0.18.1-0.20251125131011-79dc57f9ce2825 Nov 2025pre-release

    Nothing published for this version

23. v0.18.07 Aug 2025

    Nothing published for this version

24. v0.17.1-0.20250701195612-f834b39692e51 Jul 2025pre-release

    Nothing published for this version

25. v0.17.023 Jun 2025

    Nothing published for this version

26. v0.16.1-0.20250623163936-e05477a5823423 Jun 2025pre-release

    Nothing published for this version

27. v0.16.025 May 2025

    Nothing published for this version

28. v0.15.011 May 2025

    Nothing published for this version

29. v0.14.08 May 2025

    Nothing published for this version

30. v0.13.128 Apr 2025

    Nothing published for this version

31. v0.13.021 Apr 2025

    Nothing published for this version

32. v0.12.017 Apr 2025

    Nothing published for this version

33. v0.11.016 Apr 2025

    Nothing published for this version

34. v0.10.016 Apr 2025

    Nothing published for this version

35. v0.9.1-0.20250416002626-f1d8d242805316 Apr 2025pre-release

    Nothing published for this version

36. v0.9.014 Apr 2025

    Nothing published for this version

37. v0.8.031 Mar 2025

    Nothing published for this version

38. v0.7.322 Mar 2025

    Nothing published for this version

39. v0.7.222 Mar 2025

    Nothing published for this version

40. v0.7.117 Mar 2025

    Nothing published for this version

41. v0.7.016 Mar 2025

    Nothing published for this version

42. v0.6.014 Mar 2025

    Nothing published for this version

43. v0.5.225 Feb 2025

    Nothing published for this version

44. v0.5.125 Feb 2025

    Nothing published for this version

45. v0.5.025 Feb 2025

    Nothing published for this version

46. v0.4.1-0.20250211212619-7579e9e502f011 Feb 2025pre-release

    Nothing published for this version

47. v0.4.1-0.20250206155716-d8cce63d238d6 Feb 2025pre-release

    Nothing published for this version

48. v0.4.1-0.20250122200702-178adc9b28f822 Jan 2025pre-release

    Nothing published for this version

49. v0.4.1-0.20240906152617-72250bd6b7ea6 Sept 2024pre-release

    Nothing published for this version

50. v0.4.08 Aug 2024

    Nothing published for this version

51. v0.3.117 Apr 2024

    Nothing published for this version

52. v0.3.1-0.20240808031608-1da7b9347f768 Aug 2024pre-release

    Nothing published for this version

53. v0.3.1-0.20240609005634-cbc0eb2f89899 Jun 2024pre-release

    Nothing published for this version

54. v0.3.1-0.20240523174159-cee58ffa437623 May 2024pre-release

    Nothing published for this version

55. v0.3.1-0.20240516181438-b6394755056c16 May 2024pre-release

    Nothing published for this version

56. v0.3.1-0.20240511120348-024d958d6c2611 May 2024pre-release

    Nothing published for this version

57. v0.3.1-0.20240423205954-b38dc8dd734c23 Apr 2024pre-release

    Nothing published for this version

58. v0.3.1-0.20240411015247-03c27ef1449211 Apr 2024pre-release

    Nothing published for this version

59. v0.3.06 Apr 2024

    Nothing published for this version

60. v0.2.2-0.20240327135714-9186246288f427 Mar 2024pre-release

    Nothing published for this version