feat(container): update image quay.io/oauth2-proxy/oauth2-proxy to v7.9.0

[renovate]

This PR contains the following updates:

Package	Update	Change
quay.io/oauth2-proxy/oauth2-proxy (source)	minor	v7.7.1 -> v7.9.0

---

Release Notes

oauth2-proxy/oauth2-proxy (quay.io/oauth2-proxy/oauth2-proxy)

v7.9.0

Compare Source

v7.8.2

Compare Source

• #​3031 Fixes Refresh Token bug with Entra ID and Workload Identity (#​3027)[https://github.com/oauth2-proxy/oauth2-proxy/issues/3028](https://redirect.github.com/oauth2-proxy/oauth2-proxy/issues/3028)8] by using client assertion when redeeming the token (@​richard87)
• #​3001 Allow to set non-default authorization request response mode (@​stieler-it)
• #​3041 chore(deps): upgrade to latest golang v1.23.x release (@​TheImplementer)
• #​1916 fix: role extraction from access token in keycloak oidc (@​Elektordi / @​tuunit)
• #​3014 feat: ability to parse JWT encoded profile claims (@​ikarius)

v7.8.1

Compare Source

• #​2918 feat: add --bearer-token-login-fallback (@​carillonator)
• #​2927 chore(deps/build): bump golang to 1.23 and use go.mod as single point of truth for all build files (@​tuunit)
• #​2697 Use Max-Age instead of Expires for cookie expiration (@​matpen-wi)
• #​2969 Update golang.org/x/oauth2 to v0.27.0 to address CVE-2025-22868 (@​dsymonds)
• #​2977 Update golang.org/x/net to v0.36.0 to address CVE-2025-22870 (@​dsymonds)
• #​2982 chore(deps): remove go:generate tool from go.mod (@​dolmen)
• #​3011 chore(deps): update golang dependencies and pin to latest golang v1.23.x release (@​tuunit)
• #​2967 Update HashNonce to use crypto/sha256 (@​egibs)

v7.8.0

Compare Source

• #​2887 fix: jwt regex validation error during skip-jwt-bearer-tokens flow
• #​2920 fix: missing oauth2-proxy version for docker builds

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

--- flux/academy/auth-system/oauth2-proxy/app Kustomization: flux-system/oauth2-proxy HelmRelease: auth-system/oauth2-proxy

+++ flux/academy/auth-system/oauth2-proxy/app Kustomization: flux-system/oauth2-proxy HelmRelease: auth-system/oauth2-proxy

@@ -54,13 +54,13 @@

               OAUTH2_PROXY_WHITELIST_DOMAINS: .chancey.dev
             envFrom:
             - secretRef:
                 name: oauth2-proxy-env-secret
             image:
               repository: quay.io/oauth2-proxy/oauth2-proxy
-              tag: v7.7.1@sha256:f6a4aa83a27e316114bf79664302b1ffb2cc8ce697fb479273af4feb3fb16fe3
+              tag: v7.9.0@sha256:37c1570c0427e02fc7c947ef2c04e8995b8347b7abc9fcf1dbb4e376a4b221a7
             probes:
               liveness:
                 custom: true
                 enabled: true
                 spec:
                   failureThreshold: 3