What flipt-io/flipt shipped
Generated by FoxPlug from public activity — not affiliated with Flipt.
Week of September 14, 2026
What shipped
- Released v2.13.0 with per-service health readiness for gRPC management and evaluation, custom OIDC discovery URLs, claims mapping for non-standard ID tokens, and validation fixes. Release
- Added gRPC health services for management and evaluation that track snapshot readiness, starting at UNKNOWN and moving to SERVING when environments are ready. Pull request #6559
- Added support for custom discovery URLs in OIDC provider configuration for providers whose discovery documents are at non-standard paths. Pull request #6525
- Added claims_mapping configuration to map non-standard OIDC provider claims to Flipt's expected session fields like email, name, picture, and sub. Pull request #6519
- Restored validation for versionless legacy feature files by retrying validation with an explicit version 1.5 when the original document lacks a version field. Pull request #6547
- Hardened offline license validation with deterministic test fixtures covering valid and invalid scenarios including file-key pairing, signature, TTL, and expiry checks. Pull request #6539
- Fixed boolean flag evaluation to return FLAG_DISABLED for disabled flags with no rollouts instead of DEFAULT_EVALUATION_REASON. Pull request #6515
- Fixed segment picker in flag rollouts to search by display name in addition to key when filtering options. Pull request #6550
- Restored deep links after OIDC login instead of always redirecting to the dashboard. Pull request #6518
- Configured Dependabot to skip vulnerability checks in examples and _tools directories to reduce noise. Pull request #6548
Why it matters
v2.13.0 brings enterprise authentication improvements for non-standard OIDC setups, health readiness tracking for service orchestration, and fixes for flag evaluation consistency. These changes address real operational needs in production deployments and improve reliability for teams using feature flags across distributed systems.
Changelog entry
- feat(grpc): per-service health readiness for management and evaluation Release
- fix(build): repair the go:modernize task Release
- fix(evaluation): return FLAG_DISABLED for disabled boolean flag with no rollouts Release
- feat(authn/oidc): support custom discovery URL for OIDC providers Pull request #6525
- feat(authn/oidc): add claims_mapping for non-standard ID token claims Pull request #6519
- fix: preserve validation of versionless legacy feature files Pull request #6547
- fix(license): enforce expiry consistently and harden offline license validation Pull request #6539
- fix(ui): match Combobox options by display name, not only key Pull request #6550
- fix(ui): restore deep link after OIDC login instead of landing on dashboard Pull request #6518
- ci: exclude examples and _tools from dependabot vulnerabilities checks Pull request #6548
Flipt v2.13.0 ships with custom OIDC discovery URLs, claims mapping for non-standard ID tokens, gRPC health readiness tracking, and fixes for flag evaluation and legacy file validation.
We released Flipt v2.13.0 today. This version adds support for custom OIDC discovery URLs and claims mapping to handle non-standard ID token claims from enterprise identity providers. We also shipped per-service gRPC health readiness tracking for management and evaluation services, hardened offline license validation, and fixed evaluation consistency for disabled flags. These improvements help teams integrate with diverse authentication systems and deploy Flipt reliably in orchestrated environments.