The official docker release for this release can be pulled from

```
quay.io/dexidp/dex:v2.15.0
```
Notes:
* **Minimum TLS version bumped to v1.2**: if you are using Dex to serve on TLS directly, please make sure clients support TLS v1.2 before upgrading.

Features:
* Added Active Directory and Kubelogin integration sample (dexidp#1390, @okamototk)
* Added option to use GitHub login as id (dexidp#1396, @jtnord)

Bug fixes, misc changes:
* Dockerfile Go version bumped to v1.11.5 (dexidp#1389, @ericchiang)
* Minimum TLS version bumped to TLSv1.2 (dexidp#1392, @stevendanna)
* Added @JoelSpeed as maintainer (dexidp#1394, @srenatus)
* Added tests for LDAP filtering (dexidp#1249, @srenatus)
* Print Access token in example app (dexidp#1395, @hainesc)
* Add periodic storage health checking (dexidp#1397, @ericchiang)

The official docker release for this release can be pulled from

    quay.io/dexidp/dex:v2.14.0

Notes:

* **Users of the Gitlab connector need to pay attention**: The connector now uses a less powerful
  scope. This is a good enhancement in terms of securiting your bases, but it may need special care
  when upgrading!

Features:

* There's a brand new Keystone connector! (dexidp#1374, @knangia, @joannanosek, and @kbalka)
* Github connector now returns a full group list when no org is specified, and you have
  opted-in to that behaviour (dexidp#1340, dexidp#1349, @alexmt)
* Github connector allows for a 'both' option to use team name AND slug in TeamNameField (dexidp#1345, @vito)
* Gitlab connector no longer requires to API scope (dexidp#1351, @gypsydiver)
* Postgres storage backeng now works with UNIX sockets (dexidp#1346, dexidp#1352, @vito)
* Postgres storage backend now exposes some tunables (dexidp#1357, @sr)
* gRPC API: Add UpdateClient (dexidp#1275, @ccojocar)
* Make expiry of auth requests configurable (dexidp#1372, @mxey)
* LDAP connector - add emailSuffix config option (dexidp#1380, @dkess)

Bug fixes, misc changes:

* Render error message provided by connector if user authentication failed (dexidp#1339, @alexmt)
* Fix bogus conformance failure due to time zones (dexidp#1344, @vito)
* Improved LDAP errors from upgrading go-ldap (dexidp#1338, @sr)
* Removed incomplete, unmaintained storage adapters for CockroachDB and MySQL (dexidp#1343, @vito)
* Removed unused startup scripts, adapted docs (dexidp#1350, @sr)
* LDAP connector: Document that 'DN' must be in capitals (dexidp#1359, @OwenTuz)
* Kubernetes docs: clarify steps around use/creation of TLS assets (dexidp#1358, @OwenTuz)
* Bumped github.com/lib/pq (dexidp#1367, @vito)
* Migrate to go modules (dexidp#1365, dexidp#1369, @josdotso)
* Makefile: cleanups for newer versions of Go (dexidp#1368, @ericchiang)
* Dockerfile: update to Go 1.11.3 (dexidp#1373, @ericchiang)
* Replace "GET", "POST" to http.MethodGet and http.MethodPost (dexidp#1377, @hainesc)

Merge pull request dexidp#1334 from tmatias/patch-1

point users to storage/RBAC docs

release v2.12.0

The official docker release for this release is at

    quay.io/dexidp/dex:v2.12.0

Features:

- New connector: Bitbucket Cloud (dexidp#1307, @edtan)
- Allow using the GitHub team slug instead of name (dexidp#1297, @tburko)
- Allow using a client TLS cert in the LDAP connector (dexidp#1278, @veily)

Bug fixes:

- Any non-cert (or accidentally invalid) data following a valid cert
  in the SAML connector configuration will now error out (dexidp#1305, @srenatus)

....and fixes to docs, as well as an upgrade of a dependency library
(go-jose v2.1.8, @fajran).

Thank you very much, all old and new contributors!

release v2.11.0

This is the first new release after moving dex from github.com/coreos to
github.com/dexidp. In the process, a new Quay repository was created, so
you can find the official docker image for this release at:

    quay.io/dexidp/dex:v2.11.0

Note that every merge to master now results in a docker image built in
that repository, making it easier to consume recent code changes, and
allowing for a more automated release process.

Features:

- Updates go to 1.10.2 to support SHA-512 for ldaps (@kpschuck, dexidp#1233)
- Fix timeout bug for etcd3 client connect (byxorna, dexidp#1266)
- Fix default baseURL for GitLab connector (@AnianZ, dexidp#1279)
- Connectors/ldap: treat 'constraint violation' on bind as bad
  credentials (@srenatus, dexidp#1285)

...and many fixes to the documentation and examples. Thank you, everyone
involved in helping out here.