Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 27, 2025

Bumps oidc-client-ts from 2.4.1 to 3.1.0.

Release notes

Sourced from oidc-client-ts's releases.

v3.1.0

oidc-client-ts v3.1.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Fixes:
    • #1666: fix link in docs to issue
    • #1600: updated docs about logger
    • #1589: fix compiler error for target=ES2022
    • #1539: fix small typo in signinCallback doc in UserManager.ts
    • #1504: typo in sample app config
    • #1490: fix the return type of signinCallback
    • #1443: fixes typos in docs
  • Features:
    • #1672: make signoutCallback return signout response if request_type is so:r
    • #1626: add popupSignal property to signinPopup and signoutPop
    • #1580: add dpop docs
    • #1569: add dpop nonce support
    • #1457: add extra headers
    • #1461: add demonstrating proof of possession
    • #1430: add global requestTimeoutInSeconds setting
    • #1405: allow using default scopes from authorization server

thanks to @​klues, @​smujmaiku, @​mftruso, @​peetck, @​dbfr3qs, @​mottykohn, @​noshiro-pf, @​dbfr3qs, @​grjan7 and @​natergj

v3.1.0-rc.1

oidc-client-ts v3.1.0-rc.1 is a bug fix release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Fixes:
    • #1589: fix compiler error for target=ES2022
  • Features:
    • #1580: add dpop docs
    • #1569: add dpop nonce support

thanks to @​dbfr3qs

v3.1.0-rc.0

oidc-client-ts v3.1.0-rc.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Fixes:
    • #1539: fix small typo in signinCallback doc in UserManager.ts
    • #1504: typo in sample app config
    • #1490: fix the return type of signinCallback

... (truncated)

Commits
  • 9ccae8f v3.1.0
  • d815d52 Merge pull request #1683 from authts/dependabot/npm_and_yarn/types/node-22.7.4
  • 841225a build(deps-dev): bump @​types/node from 22.7.3 to 22.7.4
  • d789499 Merge pull request #1680 from authts/dependabot/npm_and_yarn/types/node-22.7.3
  • db345bf build(deps-dev): bump @​types/node from 22.5.5 to 22.7.3
  • ef0d8e7 Merge pull request #1674 from authts/dependabot/npm_and_yarn/jose-5.9.3
  • c975f83 Merge pull request #1673 from authts/dependabot/npm_and_yarn/esbuild-0.24.0
  • cb8190a build(deps-dev): bump jose from 5.9.2 to 5.9.3
  • 06d569a build(deps-dev): bump esbuild from 0.23.1 to 0.24.0
  • e04c828 Merge pull request #1672 from peetck/main
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team as a code owner January 27, 2025 09:23
@dependabot dependabot bot removed the request for review from a team January 27, 2025 09:23
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 27, 2025
@dependabot dependabot bot requested review from snf2ye and fboulnois January 27, 2025 09:23
@snf2ye
Copy link
Contributor

snf2ye commented Jan 31, 2025

@dependabot rebase

Bumps [oidc-client-ts](https://github.com/authts/oidc-client-ts) from 2.4.1 to 3.1.0.
- [Release notes](https://github.com/authts/oidc-client-ts/releases)
- [Commits](authts/oidc-client-ts@v2.4.1...v3.1.0)

---
updated-dependencies:
- dependency-name: oidc-client-ts
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/oidc-client-ts-3.1.0 branch from 85b27df to 081c67b Compare January 31, 2025 14:48
Copy link

sonarqubecloud bot commented Feb 5, 2025

Copy link

cypress bot commented Feb 5, 2025

jade-data-repo-ui    Run #4037

Run Properties:  status check passed Passed #4037  •  git commit 43d78c9def ℹ️: Merge 29190871c4bff0b63549cac1aacb37440717ddaf into e0d0ad50d37c45c518ba13564f07...
Project jade-data-repo-ui
Branch Review dependabot/npm_and_yarn/oidc-client-ts-3.1.0
Run status status check passed Passed #4037
Run duration 02m 51s
Commit git commit 43d78c9def ℹ️: Merge 29190871c4bff0b63549cac1aacb37440717ddaf into e0d0ad50d37c45c518ba13564f07...
Committer dependabot[bot]
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 0
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 17
View all changes introduced in this branch ↗︎

Copy link
Contributor

@snf2ye snf2ye left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Contributor

@fboulnois fboulnois left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you!

@snf2ye snf2ye merged commit 4292456 into develop Feb 6, 2025
9 checks passed
@snf2ye snf2ye deleted the dependabot/npm_and_yarn/oidc-client-ts-3.1.0 branch February 6, 2025 14:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants