feat(container): update image quay.io/oauth2-proxy/oauth2-proxy ( v7.12.0 → v7.14.2 )

[renovate]

This PR contains the following updates:

Package	Update	Change
quay.io/oauth2-proxy/oauth2-proxy (source)	minor	v7.12.0 → v7.14.2

---

Release Notes

oauth2-proxy/oauth2-proxy (quay.io/oauth2-proxy/oauth2-proxy)

v7.14.2

Compare Source

v7.14.1

Compare Source

• #​3314 revert: fix: skip provider button auth only redirect (#​3309) (@​StefanMarkmann / @​tuunit)
• #​3315 docs: clarify browser vs API routes for nginx auth_request redirects (@​StefanMarkmann)

v7.14.0

Compare Source

• #​3309 fix: Return 302 redirect from AuthOnly endpoint when skip-provider-button is true (@​StefanMarkmann)
• #​3302 fix: static upstreams failing validation due to passHostHeader and proxyWebSockets defaults being set incorrectly (@​sourava01 / @​tuunit)
• #​3312 chore(deps): upgrade to go1.25.6 and latest dependencies (@​tuunit)

v7.13.0

Compare Source

• #​2628 feat(structured config): revamp of yaml parsing using mapstructure decoder and custom decoders (@​tuunit)
• #​3197 fix: NewRemoteKeySet is not using DefaultHTTPClient (@​rsrdesarrollo / @​tuunit)
• #​3292 chore(deps): upgrade gomod and bump to golang v1.25.5 (@​tuunit)
• #​3304 fix: added conditional so default is not always set and env vars are honored fixes 3303 (@​pixeldrew)
• #​3264 fix: more aggressively truncate logged access_token (@​MartinNowak / @​tuunit)
• #​3267 fix: Session refresh handling in OIDC provider (@​gysel)
• #​3290 fix: WebSocket proxy to respect PassHostHeader setting (@​UnsignedLong)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Path: infrastructure/oauth2-proxy

--- /tmp/tmp.BFnDZrZ1NE	2026-01-18 02:07:57.200179332 +0000
+++ /tmp/tmp.jIx6wBwtQ7	2026-01-18 02:07:57.625175808 +0000
@@ -79,7 +79,7 @@
       automountServiceAccountToken: true
       containers:
         - name: oauth2-proxy
-          image: "quay.io/oauth2-proxy/oauth2-proxy:v7.12.0"
+          image: "quay.io/oauth2-proxy/oauth2-proxy:v7.14.2"
           imagePullPolicy: IfNotPresent
           args:
             - --http-address=0.0.0.0:4180