upstream dex release: v2.37.0

The official container image for this release can be pulled from
```
ghcr.io/dexidp/dex:v2.37.0
```
<!-- Release notes generated using configuration in .github/release.yml at v2.37.x -->

## What's Changed
### Exciting New Features 🎉
* TLS cert reloader by @seankhliao in dexidp#2964
### Enhancements 🚀
* Add xx to cross-compile binaries in Docker by @sagikazarmark in dexidp#2898
* Spelling by @jsoref in dexidp#2919
* LDAP case-insensitive DN attribute by @nabokihms in dexidp#2829
* Utilize native git diff --exit-code by @marcofranssen in dexidp#2981
* Google: Add Support for Multiple Admin Emails to Retrieve Group Lists by @vsychov in dexidp#2911
### Bug Fixes 🐛
* Do not skip approval screen by default by @nabokihms in dexidp#2897
* Fail if OIDC config contains hosted domains by @nabokihms in dexidp#2937
### Dependency Updates ⬆️
* build(deps): bump alpine from 3.17.2 to 3.17.3 by @dependabot in dexidp#2879
* build(deps): bump mheap/github-action-required-labels from 3 to 4 by @dependabot in dexidp#2881
* build(deps): bump google.golang.org/grpc from 1.53.0 to 1.54.0 by @dependabot in dexidp#2873
* build(deps): bump golang.org/x/oauth2 from 0.6.0 to 0.7.0 by @dependabot in dexidp#2892
* build(deps): bump golang from 1.20.2-alpine3.16 to 1.20.3-alpine3.16 by @dependabot in dexidp#2884
* build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in dexidp#2885
* build(deps): bump aquasecurity/trivy-action from 0.9.2 to 0.10.0 by @dependabot in dexidp#2905
* build(deps): bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0 by @dependabot in dexidp#2900
* build(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0 by @dependabot in dexidp#2891
* build(deps): bump github.com/russellhaering/goxmldsig from 1.3.0 to 1.4.0 by @dependabot in dexidp#2920
* build(deps): bump golang from 1.20.3-alpine3.16 to 1.20.4-alpine3.16 by @dependabot in dexidp#2924
* build(deps): bump github.com/lib/pq from 1.10.7 to 1.10.9 by @dependabot in dexidp#2922
* build(deps): bump golang.org/x/oauth2 from 0.7.0 to 0.8.0 by @dependabot in dexidp#2929
* build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 by @dependabot in dexidp#2932
* build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.7 to 3.5.8 by @dependabot in dexidp#2899
* build(deps): bump github.com/beevik/etree from 1.1.0 to 1.1.4 by @dependabot in dexidp#2939
* build(deps): bump github.com/go-sql-driver/mysql from 1.7.0 to 1.7.1 by @dependabot in dexidp#2938
* build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.8 to 3.5.9 by @dependabot in dexidp#2946
* build(deps): bump github/codeql-action from 2.3.1 to 2.3.3 by @dependabot in dexidp#2943
* build(deps): bump anchore/sbom-action from 0.14.1 to 0.14.2 by @dependabot in dexidp#2942
* build(deps): bump alpine from 3.17.3 to 3.18.0 by @dependabot in dexidp#2930
* build(deps): bump google.golang.org/grpc from 1.53.0 to 1.55.0 in /api/v2 by @dependabot in dexidp#2927
* build(deps): bump google.golang.org/api from 0.114.0 to 0.122.0 by @dependabot in dexidp#2931
* build(deps): bump entgo.io/ent from 0.11.10 to 0.12.3 by @dependabot in dexidp#2923
* build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.7 to 3.5.9 by @dependabot in dexidp#2944
* build(deps): bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1 by @dependabot in dexidp#2945
* build(deps): bump helm/kind-action from 1.5.0 to 1.7.0 by @dependabot in dexidp#2956
* build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by @dependabot in dexidp#2957
* build(deps): bump actions/setup-go from 4.0.0 to 4.0.1 by @dependabot in dexidp#2949
* build(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0 by @dependabot in dexidp#2948
* build(deps): bump google.golang.org/api from 0.122.0 to 0.123.0 by @dependabot in dexidp#2959
* build(deps): bump github.com/beevik/etree from 1.1.4 to 1.2.0 by @dependabot in dexidp#2947
* build(deps): bump github/codeql-action from 2.3.3 to 2.3.5 by @dependabot in dexidp#2970
* build(deps): bump google.golang.org/api from 0.123.0 to 0.124.0 by @dependabot in dexidp#2968
* build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @dependabot in dexidp#2958
* build(deps): bump aquasecurity/trivy-action from 0.10.0 to 0.11.0 by @dependabot in dexidp#2984
* build(deps): bump github/codeql-action from 2.3.5 to 2.3.6 by @dependabot in dexidp#2982
* build(deps): bump actions/dependency-review-action from 3.0.4 to 3.0.6 by @dependabot in dexidp#2978
* build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 by @dependabot in dexidp#2983
* build(deps): bump github.com/mattn/go-sqlite3 from 1.14.16 to 1.14.17 by @dependabot in dexidp#2979
* build(deps): bump google.golang.org/api from 0.124.0 to 0.125.0 by @dependabot in dexidp#2976
* build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by @dependabot in dexidp#2977
* build(deps): bump docker/login-action from 2.1.0 to 2.2.0 by @dependabot in dexidp#2987
* build(deps): bump docker/setup-qemu-action from 2.1.0 to 2.2.0 by @dependabot in dexidp#2985
* build(deps): bump docker/metadata-action from 4.4.0 to 4.5.0 by @dependabot in dexidp#2986
* build(deps): bump docker/setup-buildx-action from 2.5.0 to 2.6.0 by @dependabot in dexidp#2988
* build(deps): bump mheap/github-action-required-labels from 4 to 5 by @dependabot in dexidp#2990
* build(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2 by @dependabot in dexidp#2995
* build(deps): bump github/codeql-action from 2.3.6 to 2.20.0 by @dependabot in dexidp#3002
* build(deps): bump google.golang.org/api from 0.125.0 to 0.127.0 by @dependabot in dexidp#2999
* build(deps): bump docker/setup-buildx-action from 2.6.0 to 2.7.0 by @dependabot in dexidp#3001
* build(deps): bump docker/build-push-action from 4.0.0 to 4.1.1 by @dependabot in dexidp#3003
* build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in dexidp#2993
* build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.4 to 3.4.5 by @dependabot in dexidp#2997
* build(deps): bump golang.org/x/net from 0.10.0 to 0.11.0 by @dependabot in dexidp#3004
* build(deps): bump alpine from 3.18.0 to 3.18.2 by @dependabot in dexidp#3008
* build(deps): bump docker/metadata-action from 4.5.0 to 4.6.0 by @dependabot in dexidp#3007
* build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 by @dependabot in dexidp#3005
* build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 by @dependabot in dexidp#3009
* build(deps): bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0 by @dependabot in dexidp#3010
* build(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 by @dependabot in dexidp#3016
* build(deps): bump github/codeql-action from 2.20.0 to 2.20.1 by @dependabot in dexidp#3015
* build(deps): bump anchore/sbom-action from 0.14.2 to 0.14.3 by @dependabot in dexidp#3014
* build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in dexidp#3019
* build(deps): bump google.golang.org/api from 0.127.0 to 0.129.0 by @dependabot in dexidp#3022
* build(deps): bump docker/setup-buildx-action from 2.7.0 to 2.8.0 by @dependabot in dexidp#3023

## New Contributors
* @marcofranssen made their first contribution in dexidp#2981
* @vsychov made their first contribution in dexidp#2911

**Full Changelog**: dexidp/dex@v2.36.0...v2.37.0

upstream dex release: v2.36.0

The official container image for this release can be pulled from
```
ghcr.io/dexidp/dex:v2.36.0
```

<!-- Release notes generated using configuration in .github/release.yml at v2.36.0 -->

## What's Changed
### Enhancements 🚀
* TLS configure for OIDC connector by @xtremerui in dexidp#1632
* Add icon for gitea by @pinpox in dexidp#2733
* fix: Do not use connector data from the refresh token field by @nabokihms in dexidp#2729
* Add preferredEmailDomain config option for GitHub connector by @nobuyo in dexidp#2740
* Move unique functionality into getGroups to reduce calls to google by @snuggie12 in dexidp#2628
* fix: prevent server-side request forgery using Kubernetes storage by @nabokihms in dexidp#2479
* fix: return 401 if password is invalid by @nabokihms in dexidp#2796
* feat: Add default robots.txt by @nabokihms in dexidp#2834
* Skip redirection to approval when it is not required (dexidp#2686) by @nobuyo in dexidp#2805
* feat: Bump dependencies and Makefile refactoring by @nabokihms in dexidp#2844
### Bug Fixes 🐛
* Make admin email optional when no service account path is configured by @sagikazarmark in dexidp#2695
* Only initialize google admin service if necessary by @sagikazarmark in dexidp#2700
### Dependency Updates ⬆️
* build(deps): bump golang from 1.19.1-alpine3.16 to 1.19.2-alpine3.16 by @dependabot in dexidp#2697
* fix: Update gomplate version to 3.11.3 fix CVE-2022-27665 by @nabokihms in dexidp#2705
* build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by @dependabot in dexidp#2708
* build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 by @dependabot in dexidp#2715
* build(deps): bump google.golang.org/api from 0.98.0 to 0.101.0 by @dependabot in dexidp#2720
* build(deps): bump github.com/mattn/go-sqlite3 from 1.14.15 to 1.14.16 by @dependabot in dexidp#2721
* build(deps): bump aquasecurity/trivy-action from 0.7.1 to 0.8.0 by @dependabot in dexidp#2723
* build(deps): bump github.com/spf13/cobra from 1.6.0 to 1.6.1 by @dependabot in dexidp#2718
* build(deps): bump golang from 1.19.2-alpine3.16 to 1.19.3-alpine3.16 by @dependabot in dexidp#2724
* build(deps): bump alpine from 3.16.2 to 3.17.0 by @dependabot in dexidp#2746
* build(deps): bump github.com/prometheus/client_golang from 1.13.0 to 1.14.0 by @dependabot in dexidp#2735
* build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.5.5 to 3.5.6 by @dependabot in dexidp#2744
* build(deps): bump github.com/Masterminds/sprig/v3 from 3.2.2 to 3.2.3 by @dependabot in dexidp#2751
* build(deps): bump golang from 1.19.3-alpine3.16 to 1.19.4-alpine3.16 by @dependabot in dexidp#2750
* build(deps): bump golang.org/x/crypto from 0.3.0 to 0.4.0 by @dependabot in dexidp#2755
* build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.5 to 3.5.6 by @dependabot in dexidp#2743
* build(deps): bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.0 by @dependabot in dexidp#2754
* build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 by @dependabot in dexidp#2758
* build(deps): bump google.golang.org/grpc from 1.50.1 to 1.51.0 by @dependabot in dexidp#2741
* build(deps): bump google.golang.org/api from 0.101.0 to 0.104.0 by @dependabot in dexidp#2753
* build(deps): bump google.golang.org/grpc from 1.49.0 to 1.51.0 in /api/v2 by @dependabot in dexidp#2742
* build(deps): bump golang.org/x/net from 0.3.0 to 0.4.0 by @dependabot in dexidp#2761
* build(deps): bump entgo.io/ent from 0.11.3 to 0.11.4 by @dependabot in dexidp#2725
* build(deps): bump google.golang.org/api from 0.104.0 to 0.105.0 by @dependabot in dexidp#2760
* build(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 by @dependabot in dexidp#2774
* build(deps): bump google.golang.org/api from 0.105.0 to 0.106.0 by @dependabot in dexidp#2772
* build(deps): bump github.com/coreos/go-oidc/v3 from 3.4.0 to 3.5.0 by @dependabot in dexidp#2770
* build(deps): bump golang.org/x/crypto from 0.4.0 to 0.5.0 by @dependabot in dexidp#2773
* build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 by @dependabot in dexidp#2777
* build(deps): bump entgo.io/ent from 0.11.4 to 0.11.5 by @dependabot in dexidp#2779
* build(deps): bump alpine from 3.17.0 to 3.17.1 by @dependabot in dexidp#2780
* build(deps): bump mheap/github-action-required-labels from 2 to 3 by @dependabot in dexidp#2769
* build(deps): bump google.golang.org/api from 0.106.0 to 0.107.0 by @dependabot in dexidp#2788
* build(deps): bump golang from 1.19.4-alpine3.16 to 1.19.5-alpine3.16 by @dependabot in dexidp#2782
* build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 by @dependabot in dexidp#2783
* build(deps): bump google.golang.org/api from 0.107.0 to 0.108.0 by @dependabot in dexidp#2793
* build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 in /api/v2 by @dependabot in dexidp#2784
* chore: Upgrade golangci-lint to v1.50.1 from v1.46.0 by @dlipovetsky in dexidp#2790
* ci: Use go 1.19 by @dlipovetsky in dexidp#2791
* build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.6 to 3.5.7 by @dependabot in dexidp#2798
* build(deps): bump docker/build-push-action from 3 to 4 by @dependabot in dexidp#2807
* build(deps): bump golang from 1.19.5-alpine3.16 to 1.20.0-alpine3.16 by @dependabot in dexidp#2811
* build(deps): bump aquasecurity/trivy-action from 0.8.0 to 0.9.0 by @dependabot in dexidp#2810
* build(deps): bump alpine from 3.17.1 to 3.17.2 by @dependabot in dexidp#2821
* build(deps): bump aquasecurity/trivy-action from 0.9.0 to 0.9.1 by @dependabot in dexidp#2822
* build(deps): bump entgo.io/ent from 0.11.5 to 0.11.8 by @dependabot in dexidp#2823
* build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 by @dependabot in dexidp#2818
* build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0 by @dependabot in dexidp#2828
* build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 in /api/v2 by @dependabot in dexidp#2832
* build(deps): bump golang.org/x/sys from 0.0.0-20220114195835-da31bd327af9 to 0.1.0 in /examples by @dependabot in dexidp#2837
* build(deps): bump golang.org/x/net from 0.0.0-20220114011407-0dd24b26b47d to 0.7.0 in /examples by @dependabot in dexidp#2846
* build(deps): bump golang from 1.20.0-alpine3.16 to 1.20.1-alpine3.16 by @dependabot in dexidp#2827
* build(deps): bump aquasecurity/trivy-action from 0.9.1 to 0.9.2 by @dependabot in dexidp#2850
* build(deps): bump golang from 1.20.1-alpine3.16 to 1.20.2-alpine3.16 by @dependabot in dexidp#2849
* feat: Bump gomplate 3.11.4 by @nabokihms in dexidp#2840
* build(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0 by @dependabot in dexidp#2856
* build(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.6.0 by @dependabot in dexidp#2847
* build(deps): bump google.golang.org/api from 0.108.0 to 0.112.0 by @dependabot in dexidp#2853
* build(deps): bump google.golang.org/api from 0.112.0 to 0.114.0 by @dependabot in dexidp#2869
* build(deps): bump actions/setup-go from 3 to 4 by @dependabot in dexidp#2863
* build(deps): bump github.com/russellhaering/goxmldsig from 1.2.0 to 1.3.0 by @dependabot in dexidp#2862
* build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 by @dependabot in dexidp#2866
* build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 in /api/v2 by @dependabot in dexidp#2867
* build(deps): bump golang.org/x/crypto from 0.0.0-20220112180741-5e0467b6c7ce to 0.1.0 in /examples by @dependabot in dexidp#2845
* build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 in /api/v2 by @dependabot in dexidp#2816
* chore: upgrade tools by @sagikazarmark in dexidp#2870
### Other Changes
* Bump image in examples/k8s/dex.yaml to v2.32.0 by @stealthybox in dexidp#2569

## New Contributors
* @pinpox made their first contribution in dexidp#2733
* @nobuyo made their first contribution in dexidp#2740
* @dlipovetsky made their first contribution in dexidp#2790
* @seankhliao made their first contribution in dexidp#2812
* @stealthybox made their first contribution in dexidp#2569

**Full Changelog**: dexidp/dex@v2.35.3...v2.36.0

upstream dex release: v2.35.3

The official container image for this release can be pulled from
```
ghcr.io/dexidp/dex:v2.35.3
```

<!-- Release notes generated using configuration in .github/release.yml at v2.35.3 -->

## What's Changed
### Dependency Updates ⬆️
* Backport dexidp#2705 to v2.35.x by @nabokihms in dexidp#2706

**Full Changelog**: dexidp/dex@v2.35.2...v2.35.3

upstream dex release: v2.35.1

The official container image for this release can be pulled from
```
ghcr.io/dexidp/dex:v2.35.1
```

<!-- Release notes generated using configuration in .github/release.yml at v2.35.1 -->

## What's Changed
### Bug Fixes 🐛
* Backport dexidp#2694 to v2.35.x by @sagikazarmark in dexidp#2696

**Full Changelog**: dexidp/dex@v2.35.0...v2.35.1

upstream dex release: v2.35.0

**⚠️ This release fixes a [major vulnerability](GHSA-vh7g-p26c-j2cw) in Dex. We advise everyone to upgrade as soon as possible! ⚠️**

The official container image for this release can be pulled from
```
ghcr.io/dexidp/dex:v2.35.0
```

<!-- Release notes generated using configuration in .github/release.yml at v2.35.0 -->

## What's Changed
### Enhancements 🚀
* Reduce HTTP client creations in the Keystone connector by @erwinvaneyk in dexidp#2659
### Bug Fixes 🐛
* fix for issue 2670; check for no serviceAccountFilePath and no email by @bobcallaway in dexidp#2679
* supply HMACKey in test case by @bobcallaway in dexidp#2683
* fix: refresh token only once for all concurrent requests by @nabokihms in dexidp#2692
### Dependency Updates ⬆️
* build(deps): bump google.golang.org/api from 0.95.0 to 0.97.0 by @dependabot in dexidp#2677
* build(deps): bump go.etcd.io/etcd/client/v3 from 3.5.4 to 3.5.5 by @dependabot in dexidp#2666
* build(deps): bump google.golang.org/api from 0.97.0 to 0.98.0 by @dependabot in dexidp#2682
* build(deps): bump helm/kind-action from 1.3.0 to 1.4.0 by @dependabot in dexidp#2681
* build(deps): bump entgo.io/ent from 0.11.2 to 0.11.3 by @dependabot in dexidp#2684
* Update golang.org/x packages by @sagikazarmark in dexidp#2688

## New Contributors
* @jannfis made their first contribution in dexidp#2691

**Full Changelog**: dexidp/dex@v2.34.0...v2.35.0

upstream dex release: v2.34.0

<!-- Release notes generated using configuration in .github/release.yml at master -->
The official container image for this release can be pulled from
```
ghcr.io/dexidp/dex:v2.34.0
```
## What's Changed
### Exciting New Features 🎉
* updated gomplate version and added ppc64le support by @mayurwaghmode in dexidp#2620
### Enhancements 🚀
* fix: Fallback when group claim is a string instead of an array of strings by @JoooostB in dexidp#2639
* feat(connector/authproxy): support multiple groups by @mclavel in dexidp#2643
* Implement Application Default Credentials for the google connector by @ichbinfrog in dexidp#2530
* build: bump Go version to 1.19 in Nix by @sagikazarmark in dexidp#2648
### Dependency Updates ⬆️
* build(deps): bump alpine from 3.16.1 to 3.16.2 by @dependabot in dexidp#2624
* build(deps): bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 by @dependabot in dexidp#2623
* build(deps): bump aquasecurity/trivy-action from 0.6.1 to 0.7.0 by @dependabot in dexidp#2632
* build(deps): bump github.com/mattn/go-sqlite3 from 1.14.11 to 1.14.15 by @dependabot in dexidp#2634
* build(deps): bump aquasecurity/trivy-action from 0.7.0 to 0.7.1 by @dependabot in dexidp#2635
* build(deps): bump google.golang.org/api from 0.89.0 to 0.93.0 by @dependabot in dexidp#2633
* build(deps): bump google.golang.org/api from 0.93.0 to 0.94.0 by @dependabot in dexidp#2637
* chore: Bump ent to 0.11.2 by @nabokihms in dexidp#2640
* chore: Bump Go to 1.19 by @nabokihms in dexidp#2641
* build(deps): bump github.com/coreos/go-oidc/v3 from 3.2.0 to 3.3.0 by @dependabot in dexidp#2646
* build(deps): bump google.golang.org/grpc from 1.47.0 to 1.49.0 by @dependabot in dexidp#2636
* build(deps): bump google.golang.org/protobuf from 1.28.0 to 1.28.1 in /api/v2 by @dependabot in dexidp#2611
* build(deps): bump golang from 1.19.0-alpine3.15 to 1.19.1-alpine3.15 by @dependabot in dexidp#2650
* chore: update alpine version in Go image by @sagikazarmark in dexidp#2656
* build(deps): bump github.com/lib/pq from 1.10.5 to 1.10.7 by @dependabot in dexidp#2651
* build(deps): bump google.golang.org/api from 0.94.0 to 0.95.0 by @dependabot in dexidp#2652
* build(deps): bump google.golang.org/grpc from 1.47.0 to 1.49.0 in /api/v2 by @dependabot in dexidp#2638
* build(deps): bump github.com/coreos/go-oidc/v3 from 3.3.0 to 3.4.0 by @dependabot in dexidp#2658

## New Contributors
* @mayurwaghmode made their first contribution in dexidp#2620
* @JoooostB made their first contribution in dexidp#2639
* @mclavel made their first contribution in dexidp#2643
* @ichbinfrog made their first contribution in dexidp#2530

**Full Changelog**: dexidp/dex@v2.33.0...v2.34.0

upstream dex release: v2.33.1

<!-- Release notes generated using configuration in .github/release.yml at v2.33.1 -->

## What's Changed
### Enhancements 🚀
* chore: upgrade alpine to 3.16.2 by @sagikazarmark in dexidp#2655

**Full Changelog**: dexidp/dex@v2.33.0...v2.33.1

upstream dex release: v2.33.0

<!-- Release notes generated using configuration in .github/release.yml at v2.33.x -->

## What's Changed
### Exciting New Features 🎉
* add PKCE support to device code flow by @bobcallaway in dexidp#2575
### Enhancements 🚀
* Limit the amount of objects we attempt to GC on each cycle by @kellyma2 in dexidp#2524
* Use GitLab's refresh_token during Refresh. by @dhaus67 in dexidp#2352
* Add domainHint parameter to Microsoft Connector by @josephtknight in dexidp#2586
* add config to explicitly set scopes for microsoft connector by @bobcallaway in dexidp#2582
### Bug Fixes 🐛
* fix: prevent cross-site scripting for the device flow by @nabokihms in dexidp#2468
* grpc-client: Do not crash on empty response by @bbusse in dexidp#2584
### Dependency Updates ⬆️
* build(deps): bump helm/kind-action from 1.2.0 to 1.3.0 by @dependabot in dexidp#2555
* build(deps): bump aquasecurity/trivy-action from 0.3.0 to 0.4.0 by @dependabot in dexidp#2557
* build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.8.0 by @dependabot in dexidp#2577
* build(deps): bump aquasecurity/trivy-action from 0.4.0 to 0.5.1 by @dependabot in dexidp#2576
* build(deps): bump mheap/github-action-required-labels from 1 to 2 by @dependabot in dexidp#2565
* build(deps): bump google.golang.org/api from 0.82.0 to 0.86.0 by @dependabot in dexidp#2574
* build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 by @dependabot in dexidp#2560
* build(deps): bump aquasecurity/trivy-action from 0.5.1 to 0.6.0 by @dependabot in dexidp#2602
* build(deps): bump alpine from 3.16.0 to 3.16.1 by @dependabot in dexidp#2598
* build(deps): bump golang from 1.18.3-alpine3.15 to 1.18.4-alpine3.15 by @dependabot in dexidp#2592
* build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 by @dependabot in dexidp#2599
* build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.2 to 3.4.4 by @dependabot in dexidp#2606
* build(deps): bump google.golang.org/api from 0.86.0 to 0.89.0 by @dependabot in dexidp#2605
* build(deps): bump aquasecurity/trivy-action from 0.6.0 to 0.6.1 by @dependabot in dexidp#2604

## New Contributors
* @kellyma2 made their first contribution in dexidp#2524
* @josephtknight made their first contribution in dexidp#2586
* @bbusse made their first contribution in dexidp#2584

**Full Changelog**: dexidp/dex@v2.32.0...v2.33.0

upstream dex release: v2.31.2

## What's Changed
* Update go to 1.17.10 by @sagikazarmark in dexidp#2536

**Full Changelog**: dexidp/dex@v2.31.1...v2.31.2

upstream dex release: v2.31.1

This is a maintenance release upgrading Go to apply some security patches.

## What's Changed
* Update golang image by @sagikazarmark in dexidp#2447

**Full Changelog**: dexidp/dex@v2.31.0...v2.31.1