Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump tough-cookie and simple-oauth2 #4

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jul 8, 2023

Removes tough-cookie. It's no longer used after updating ancestor dependency simple-oauth2. These dependencies need to be updated together.

Removes tough-cookie

Updates simple-oauth2 from 1.6.0 to 5.0.0

Changelog

Sourced from simple-oauth2's changelog.

5.0.0

New features

  • #332 Preserve query params on authorizePath on authorizeURL method

Maintainance

  • #341 Rewrite integration tests
  • #382 Update eslint parser dependencies
  • #390 Add Node 16 to test matrix
  • #404 Update ava to v4.x
  • #405 Update @hapi/hoek to v10.0.0
  • #406 Update @hapi/wreck to v18.0.0
  • #407 Update @hapi/boom to v10.0.0
  • #407 Update doctoc to v2.x
  • #408 Add Node 18 to test matrix

Documentation

  • #403 Add LinkedIn example

Breaking changes

  • 340 Accept only options available per grant type
  • #403 Drop support for Node 12. Require at least Node 14
  • #406 Disable redirects by default

4.3.0

New features

  • #387 Add support to configure refreshPath

Maintainance

  • #386 Update eslint v8
  • #379 Use c8 to collect code coverage
  • #356 Update development dependencies
  • #355 Add package support info

Documentation

  • #385 Documentation update
  • #380 Deprecate simple-oauth2 v3
  • #373 Documentation update

4.2.0

Improvements

  • #354 Add support for custom http options to access token refresh and revoke operations

Maintainance

  • #329 Documentation updates for persistent access token refresh
  • #330 Upgrade module to use eslint v7
  • #331 Internal module reorganization
  • #333 Add template for issues

... (truncated)

Commits
  • 1d0b278 Merge branch 'release/5.0.0'
  • f93eb2b Release simple-oauth2 v5.0.0
  • 352867a Add Node 18 to test matrix (#408)
  • 2e22adb Update all development dependencies (#407)
  • 71f70ee Update to @​hapi/wreck 18.x. Disable redirections by default (#406)
  • e4efdf8 Update @​hapi/hoek to v10.0.0 (#405)
  • 6177000 Update ava test runner to v4 (#404)
  • 5fa5d5c Drop support for Node 12. Require Node 14 or later (#403)
  • a4f0496 Restore changes to disallow authorizeHost and authorizePath as valid options
  • 2f7eea3 Restore CHANGELOG info
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by jonathansamines, a new releaser for simple-oauth2 since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [tough-cookie](https://github.com/salesforce/tough-cookie). It's no longer used after updating ancestor dependency [simple-oauth2](https://github.com/lelylan/simple-oauth2). These dependencies need to be updated together.


Removes `tough-cookie`

Updates `simple-oauth2` from 1.6.0 to 5.0.0
- [Changelog](https://github.com/lelylan/simple-oauth2/blob/master/CHANGELOG.md)
- [Commits](lelylan/simple-oauth2@1.6.0...5.0.0)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: simple-oauth2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@vercel
Copy link

vercel bot commented Jul 8, 2023

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
netlify-cms-github-oauth-provider-nowsh ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jul 8, 2023 9:34am

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants