v7.15.1

9001/copypartyv7.15.1Mar 23, 2026by github-actions[bot]

AI Summary

A maintenance release focusing on bug fixes for session handling, Unix socket support, and dependency updates for OAuth2 Proxy.

Key Highlights

Fix for Unix socket RemoteAddr handling in IP resolution
Improved logging for session refresh token errors
Updates to golangci-lint and Go dependencies

New Features

Fix for Unix socket RemoteAddr in IP resolution
Fix for backend logout 204 logging errors
Improved logging when session refresh token is missing

Full Release Notes

## Release Highlights

- 🐛 Squashed some bugs
-  🕵️‍♀️ Vulnerabilities have been addressed
    - [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186)
      OAuth2 Proxy was not impacted by this vulnerability as it isn't in the path of execution

## Important Notes

## Breaking Changes

## Changes since v7.15.0

- [#3382](https://github.com/oauth2-proxy/oauth2-proxy/pull/3382) chore(deps): update gomod and golangci/golangci-lint to v2.11.4 (@tuunit)
- [#3374](https://github.com/oauth2-proxy/oauth2-proxy/pull/3374) fix: handle Unix socket RemoteAddr in IP resolution (@H1net)
- [#3381](https://github.com/oauth2-proxy/oauth2-proxy/pull/3381) fix: do not log error for backend logout 204 (@artificiosus)
- [#3327](https://github.com/oauth2-proxy/oauth2-proxy/pull/3327) fix: improve logging when session refresh token is missing (@yosri-brh)
- [#2767](https://github.com/oauth2-proxy/oauth2-proxy/pull/2767) fix: propagate errors during route building (@sybereal)