Skip to content
This repository was archived by the owner on Apr 11, 2025. It is now read-only.

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 26, 2024

Bumps authlib from 1.3.1 to 1.3.2.

Changelog

Sourced from authlib's changelog.

Version 1.3.2

  • Prevent ever-growing session size for OAuth clients.
  • Revert quote client id and secret.
  • unquote basic auth header for authorization server.
Commits
  • d7db2c3 chore: release 1.3.2
  • 01f1243 Revert "fix encode_client_secret_basic to match rfc6749"
  • 63c9fb6 fix(oauth2): unquote username and password for basic auth
  • 66d5b19 docs: Update index.rst (#670)
  • 11f13e4 fix: Fix list of scopes in app integrations (#631)
  • 4da41da Merge pull request #661 from Presence-AI/master
  • 01583a3 fix: use unique variable name when clearing old state data to avoid setting s...
  • 0ad753c Merge pull request #644 from Wauplin/622-fix-ever-growing-session-cookie
  • 174248e Merge pull request #656 from borislaviv/master
  • 341ce0e Extract load_key construction to separate method
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [authlib](https://github.com/lepture/authlib) from 1.3.1 to 1.3.2. - [Release notes](https://github.com/lepture/authlib/releases) - [Changelog](https://github.com/lepture/authlib/blob/master/docs/changelog.rst) - [Commits](authlib/authlib@v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: authlib dependency-type: indirect update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 26, 2024
@bosd
Copy link
Collaborator

bosd commented Aug 27, 2024

@dependabot merge

@dependabot dependabot bot merged commit a56f96c into main Aug 27, 2024
@dependabot dependabot bot deleted the dependabot/pip/authlib-1.3.2 branch August 27, 2024 09:30
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

2 participants