solrbot opened a new pull request, #4852: URL: https://github.com/apache/solr/pull/4852
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [no.nav.security:mock-oauth2-server](https://redirect.github.com/navikt/mock-oauth2-server) | dependencies | major | `5.0.1` → `6.0.2` | --- ### Release Notes <details> <summary>navikt/mock-oauth2-server (no.nav.security:mock-oauth2-server)</summary> ### [`v6.0.2`](https://redirect.github.com/navikt/mock-oauth2-server/releases/tag/6.0.2) [Compare Source](https://redirect.github.com/navikt/mock-oauth2-server/compare/6.0.1...6.0.2) #### What's Changed - fix: raise published kotlin-stdlib floor to 2.2.21 ([#​1011](https://redirect.github.com/navikt/mock-oauth2-server/issues/1011)) [@​tronghn](https://redirect.github.com/tronghn) #### ⬆️ Dependency upgrades - chore(deps): bump nettyVersion from 4.2.16.Final to 4.2.17.Final ([#​1010](https://redirect.github.com/navikt/mock-oauth2-server/issues/1010)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump JamesIves/github-pages-deploy-action from 4.8.0 to 4.9.0 in the github-actions group ([#​1008](https://redirect.github.com/navikt/mock-oauth2-server/issues/1008)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) ### [`v6.0.1`](https://redirect.github.com/navikt/mock-oauth2-server/releases/tag/6.0.1) [Compare Source](https://redirect.github.com/navikt/mock-oauth2-server/compare/6.0.0...6.0.1) #### What's Changed - fix(userinfo): serialize timestamp claims as NumericDate ([#​1007](https://redirect.github.com/navikt/mock-oauth2-server/issues/1007)) [@​tronghn](https://redirect.github.com/tronghn) #### ⬆️ Dependency upgrades - chore(deps): bump the github-actions group with 3 updates ([#​1005](https://redirect.github.com/navikt/mock-oauth2-server/issues/1005)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) ### [`v6.0.0`](https://redirect.github.com/navikt/mock-oauth2-server/releases/tag/6.0.0) [Compare Source](https://redirect.github.com/navikt/mock-oauth2-server/compare/5.0.2...6.0.0) #### What's Changed #### ⚠️ Breaking Changes - mock-oauth2-server no longer bundles `ch.qos.logback:logback-classic` nor `kotlinx-serialization-json` in its library. - If your test logs went quiet, add `testRuntimeOnly("ch.qos.logback:logback-classic:<version>")`. `slf4j-api` still comes transitively. - The debugger UI (`/<issuer>/debugger` and `/<issuer>/debugger/callback`) can no longer target an external identity provider. - `DebuggerRequestHandler` now takes an `OAuth2HttpServer` instead of an `Ssl?`. - With ([#​1002](https://redirect.github.com/navikt/mock-oauth2-server/issues/1002)), the library now uses Jackson 3 (`tools.jackson.*`) instead of Jackson 2 (`com.fasterxml.jackson.*`). - Consumers on Jackson 2 are unaffected. Jackson 3 uses a different group ID and package, and still depends on `jackson-annotations` 2.x. - `no.nav.security.mock.oauth2.http.objectMapper` and the deserializers nested in `OAuth2Config` are now `internal`. Construct your own mapper if you used `objectMapper`. - `NettyWrapper` rejects request bodies above 1 MiB with `413`. This affects the standalone server and Docker image; `MockWebServerWrapper` is unaffected. See also the [migration guide](https://redirect.github.com/navikt/mock-oauth2-server/blob/6.0.0/MIGRATION.md#migrating-to-600). #### 🐛 Bug Fixes - fix: support subject request mappings for password grant ([#​983](https://redirect.github.com/navikt/mock-oauth2-server/issues/983)) [@​ybelMekk](https://redirect.github.com/ybelMekk) - fix: restrict the debugger to this server's own endpoints ([#​1000](https://redirect.github.com/navikt/mock-oauth2-server/issues/1000)) [@​tronghn](https://redirect.github.com/tronghn) - fix: cap Netty request body aggregation at 1 MiB ([#​1001](https://redirect.github.com/navikt/mock-oauth2-server/issues/1001)) [@​tronghn](https://redirect.github.com/tronghn) #### 🧰 Maintenance - test: stabilize standalone and server tests ([#​974](https://redirect.github.com/navikt/mock-oauth2-server/issues/974)) [@​ybelMekk](https://redirect.github.com/ybelMekk) - build: keep logback-classic out of the published artifact ([#​998](https://redirect.github.com/navikt/mock-oauth2-server/issues/998)) [@​tronghn](https://redirect.github.com/tronghn) - build: move kotlinx-serialization-json to testImplementation ([#​997](https://redirect.github.com/navikt/mock-oauth2-server/issues/997)) [@​pcmoen](https://redirect.github.com/pcmoen) #### ⬆️ Dependency upgrades - chore(deps): bump the github-actions group with 3 updates ([#​1003](https://redirect.github.com/navikt/mock-oauth2-server/issues/1003)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump the github-actions group across 1 directory with 3 updates ([#​999](https://redirect.github.com/navikt/mock-oauth2-server/issues/999)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump kotlinToolchain from 2.4.0 to 2.4.10 ([#​993](https://redirect.github.com/navikt/mock-oauth2-server/issues/993)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump com.nimbusds:oauth2-oidc-sdk from 11.38.1 to 11.38.2 ([#​994](https://redirect.github.com/navikt/mock-oauth2-server/issues/994)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump org.bouncycastle:bcpkix-jdk18on from 1.84 to 1.85 ([#​995](https://redirect.github.com/navikt/mock-oauth2-server/issues/995)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0 ([#​996](https://redirect.github.com/navikt/mock-oauth2-server/issues/996)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump kotestVersion from 6.2.1 to 6.2.3 ([#​991](https://redirect.github.com/navikt/mock-oauth2-server/issues/991)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump nettyVersion from 4.2.15.Final to 4.2.16.Final ([#​985](https://redirect.github.com/navikt/mock-oauth2-server/issues/985)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 ([#​986](https://redirect.github.com/navikt/mock-oauth2-server/issues/986)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump jacksonVersion from 2.22.0 to 2.22.1 ([#​988](https://redirect.github.com/navikt/mock-oauth2-server/issues/988)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump junitJupiterVersion from 6.1.1 to 6.1.2 ([#​984](https://redirect.github.com/navikt/mock-oauth2-server/issues/984)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump com.nimbusds:oauth2-oidc-sdk from 11.37.2 to 11.38.1 ([#​989](https://redirect.github.com/navikt/mock-oauth2-server/issues/989)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump the github-actions group across 1 directory with 3 updates ([#​990](https://redirect.github.com/navikt/mock-oauth2-server/issues/990)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump gradle-wrapper from 8.14.4 to 9.6.1 ([#​982](https://redirect.github.com/navikt/mock-oauth2-server/issues/982)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump org.jmailen.kotlinter from 5.4.2 to 5.6.0 ([#​978](https://redirect.github.com/navikt/mock-oauth2-server/issues/978)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump com.squareup.okhttp3:mockwebserver from 5.2.1 to 5.4.0 ([#​981](https://redirect.github.com/navikt/mock-oauth2-server/issues/981)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump com.nimbusds:oauth2-oidc-sdk from 11.37.1 to 11.37.2 ([#​980](https://redirect.github.com/navikt/mock-oauth2-server/issues/980)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump the github-actions group with 2 updates ([#​979](https://redirect.github.com/navikt/mock-oauth2-server/issues/979)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.37 ([#​977](https://redirect.github.com/navikt/mock-oauth2-server/issues/977)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) #### New Contributors - [@​pcmoen](https://redirect.github.com/pcmoen) made their first contribution in [#​997](https://redirect.github.com/navikt/mock-oauth2-server/pull/997) **Full Changelog**: <https://github.com/navikt/mock-oauth2-server/compare/5.0.2...5.0.3> ### [`v5.0.2`](https://redirect.github.com/navikt/mock-oauth2-server/releases/tag/5.0.2) [Compare Source](https://redirect.github.com/navikt/mock-oauth2-server/compare/5.0.1...5.0.2) #### What's Changed #### 🐛 Bug Fixes - fix: apply CORS headers to error responses ([#​975](https://redirect.github.com/navikt/mock-oauth2-server/issues/975)) [@​ybelMekk](https://redirect.github.com/ybelMekk) - fix: return empty body from revoke response ([#​976](https://redirect.github.com/navikt/mock-oauth2-server/issues/976)) [@​ybelMekk](https://redirect.github.com/ybelMekk) #### ⬆️ Dependency upgrades - chore(deps): bump com.vanniktech.maven.publish from 0.36.0 to 0.37.0 ([#​970](https://redirect.github.com/navikt/mock-oauth2-server/issues/970)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump ktorVersion from 3.5.0 to 3.5.1 ([#​969](https://redirect.github.com/navikt/mock-oauth2-server/issues/969)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump jacksonVersion from 2.21.3 to 2.22.0 ([#​972](https://redirect.github.com/navikt/mock-oauth2-server/issues/972)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump kotestVersion from 6.1.11 to 6.2.1 ([#​971](https://redirect.github.com/navikt/mock-oauth2-server/issues/971)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump the github-actions group with 2 updates ([#​968](https://redirect.github.com/navikt/mock-oauth2-server/issues/968)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump junitJupiterVersion from 6.0.3 to 6.1.1 ([#​967](https://redirect.github.com/navikt/mock-oauth2-server/issues/967)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) - chore(deps): bump io.projectreactor:reactor-test from 3.7.18 to 3.8.6 ([#​966](https://redirect.github.com/navikt/mock-oauth2-server/issues/966)) @​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 9am on the first day of the month" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/solrbot/renovate-github-action) <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNzAuMTgiLCJ1cGRhdGVkSW5WZXIiOiI0My4xNzAuMTgiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImV4ZW1wdC1zdGFsZSJdfQ==--> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
