v7.15.1

semaphoreui/semaphorev7.15.1Mar 23, 2026by github-actions[bot]

AI Summary

Bug fixes and dependency updates that address vulnerabilities and improve logging and error handling in OAuth2 Proxy.

Key Highlights

Updates to Golang and golangci-lint dependencies
Fix for Unix socket RemoteAddr handling
Improved logging for missing session refresh tokens
Fix for backend logout 204 errors
Fix for route building error propagation

New Features

Unix socket IP resolution fix
Logging improvements
Route building error handling

Full Release Notes

## Release Highlights

- 🐛 Squashed some bugs
-  🕵️‍♀️ Vulnerabilities have been addressed
    - [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186)
      OAuth2 Proxy was not impacted by this vulnerability as it isn't in the path of execution

## Important Notes

## Breaking Changes

## Changes since v7.15.0

- [#3382](https://github.com/oauth2-proxy/oauth2-proxy/pull/3382) chore(deps): update gomod and golangci/golangci-lint to v2.11.4 (@tuunit)
- [#3374](https://github.com/oauth2-proxy/oauth2-proxy/pull/3374) fix: handle Unix socket RemoteAddr in IP resolution (@H1net)
- [#3381](https://github.com/oauth2-proxy/oauth2-proxy/pull/3381) fix: do not log error for backend logout 204 (@artificiosus)
- [#3327](https://github.com/oauth2-proxy/oauth2-proxy/pull/3327) fix: improve logging when session refresh token is missing (@yosri-brh)
- [#2767](https://github.com/oauth2-proxy/oauth2-proxy/pull/2767) fix: propagate errors during route building (@sybereal)