Skip to content

core: bump requests-oauthlib from 1.3.1 to 1.4.0#8866

Merged
BeryJu merged 1 commit intomainfrom
dependabot/pip/requests-oauthlib-1.4.0
Mar 11, 2024
Merged

core: bump requests-oauthlib from 1.3.1 to 1.4.0#8866
BeryJu merged 1 commit intomainfrom
dependabot/pip/requests-oauthlib-1.4.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 11, 2024

Bumps requests-oauthlib from 1.3.1 to 1.4.0.

Changelog

Sourced from requests-oauthlib's changelog.

v1.4.0 (27 Feb 2024) ++++++++++++++++++++++++

Full set of changes are in github.

Additions & changes:

  • OAuth2Session now correctly uses the self.verify value if verify is not overridden in fetch_token and refresh_token. Fixes [#404](https://github.com/requests/requests-oauthlib/issues/404) <https://github.com/requests/requests-oauthlib/issues/404>_.
  • OAuth2Session constructor now uses its client.scope when a client is provided and scope is not overridden. Fixes [#408](https://github.com/requests/requests-oauthlib/issues/408) <https://github.com/requests/requests-oauthlib/issues/408>_
  • Add refresh_token_request and access_token_request compliance hooks
  • Add PKCE support and Auth0 example
  • Add support for Python 3.8-3.12
  • Remove support of Python 2.x, <3.7
  • Migrated to Github Action
  • Updated dependencies
  • Cleanup some docs and examples
Commits
  • eee74a2 Merge pull request #529 from dosisod/drop-python2-support
  • ed578f1 Merge pull request #530 from requests/autotest
  • 6cdf982 Automated tests for examples in docs
  • 416d738 Remove old __future__ imports
  • 0e4400d Remove old import compatibility checks:
  • ff44fbe Remove unicode references
  • 7fb40e5 Remove to_unicode() calls since all strings are Unicode
  • f045f46 1.4.0 preparation
  • 39fe529 Merge pull request #497 from requests/pkce
  • 596beb5 Added include_client_id into Auth0 example i/o changing default behavior
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [requests-oauthlib](https://github.com/requests/requests-oauthlib) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/requests/requests-oauthlib/releases)
- [Changelog](https://github.com/requests/requests-oauthlib/blob/master/HISTORY.rst)
- [Commits](requests/requests-oauthlib@v1.3.1...v1.4.0)

---
updated-dependencies:
- dependency-name: requests-oauthlib
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner March 11, 2024 04:56
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 11, 2024
@netlify
Copy link

netlify bot commented Mar 11, 2024

Deploy Preview for authentik-docs canceled.

Name Link
🔨 Latest commit bf7befb
🔍 Latest deploy log https://app.netlify.com/sites/authentik-docs/deploys/65ee8eeced623e00089b47ea

@netlify
Copy link

netlify bot commented Mar 11, 2024

Deploy Preview for authentik-storybook canceled.

Name Link
🔨 Latest commit bf7befb
🔍 Latest deploy log https://app.netlify.com/sites/authentik-storybook/deploys/65ee8eec5259c50008552f99

@github-actions
Copy link
Contributor

authentik PR Installation instructions

Instructions for docker-compose

Add the following block to your .env file:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-ghcr.io/goauthentik/dev-server:gh-bf7befbb8df7d4ebbd0bd72b1f00830839b79cd0
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

For arm64, use these values:

AUTHENTIK_IMAGE=ghcr.io/goauthentik/dev-server
AUTHENTIK_TAG=gh-ghcr.io/goauthentik/dev-server:gh-bf7befbb8df7d4ebbd0bd72b1f00830839b79cd0-arm64
AUTHENTIK_OUTPOSTS__CONTAINER_IMAGE_BASE=ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s

Afterwards, run the upgrade commands from the latest release notes.

Instructions for Kubernetes

Add the following block to your values.yml file:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
image:
    repository: ghcr.io/goauthentik/dev-server
    tag: gh-ghcr.io/goauthentik/dev-server:gh-bf7befbb8df7d4ebbd0bd72b1f00830839b79cd0

For arm64, use these values:

authentik:
    outposts:
        container_image_base: ghcr.io/goauthentik/dev-%(type)s:gh-%(build_hash)s
image:
    repository: ghcr.io/goauthentik/dev-server
    tag: gh-ghcr.io/goauthentik/dev-server:gh-bf7befbb8df7d4ebbd0bd72b1f00830839b79cd0-arm64

Afterwards, run the upgrade commands from the latest release notes.

@BeryJu BeryJu merged commit 743ee53 into main Mar 11, 2024
@BeryJu BeryJu deleted the dependabot/pip/requests-oauthlib-1.4.0 branch March 11, 2024 13:01
kensternberg-authentik added a commit that referenced this pull request Mar 11, 2024
* main:
  web: fix esbuild issue with style sheets (#8856)
  tenants: really ensure default tenant cannot be deleted (#8875)
  core: bump github.com/go-openapi/runtime from 0.27.2 to 0.28.0 (#8867)
  core: bump pytest from 8.0.2 to 8.1.1 (#8868)
  core: bump github.com/go-openapi/strfmt from 0.22.2 to 0.23.0 (#8869)
  core: bump bandit from 1.7.7 to 1.7.8 (#8870)
  core: bump packaging from 23.2 to 24.0 (#8871)
  core: bump ruff from 0.3.1 to 0.3.2 (#8873)
  web: bump the wdio group in /tests/wdio with 3 updates (#8865)
  core: bump requests-oauthlib from 1.3.1 to 1.4.0 (#8866)
  core: bump uvicorn from 0.27.1 to 0.28.0 (#8872)
  core: bump django-filter from 23.5 to 24.1 (#8874)
kensternberg-authentik added a commit that referenced this pull request Mar 12, 2024
* main:
  tenants: really ensure default tenant cannot be deleted (#8875)
  core: bump github.com/go-openapi/runtime from 0.27.2 to 0.28.0 (#8867)
  core: bump pytest from 8.0.2 to 8.1.1 (#8868)
  core: bump github.com/go-openapi/strfmt from 0.22.2 to 0.23.0 (#8869)
  core: bump bandit from 1.7.7 to 1.7.8 (#8870)
  core: bump packaging from 23.2 to 24.0 (#8871)
  core: bump ruff from 0.3.1 to 0.3.2 (#8873)
  web: bump the wdio group in /tests/wdio with 3 updates (#8865)
  core: bump requests-oauthlib from 1.3.1 to 1.4.0 (#8866)
  core: bump uvicorn from 0.27.1 to 0.28.0 (#8872)
  core: bump django-filter from 23.5 to 24.1 (#8874)
kensternberg-authentik added a commit that referenced this pull request Mar 12, 2024
…ize-style-declaration

* main: (50 commits)
  Update _envoy_istio.md (#8888)
  website/docs: new landing page for Providers (#8879)
  web: bump the sentry group in /web with 1 update (#8881)
  web: bump chromedriver from 122.0.4 to 122.0.5 in /tests/wdio (#8884)
  web: bump the eslint group in /tests/wdio with 2 updates (#8883)
  web: bump the eslint group in /web with 2 updates (#8885)
  website: bump @types/react from 18.2.64 to 18.2.65 in /website (#8886)
  web: upgrade to lit 3 (#8781)
  web: fix esbuild issue with style sheets (#8856)
  tenants: really ensure default tenant cannot be deleted (#8875)
  core: bump github.com/go-openapi/runtime from 0.27.2 to 0.28.0 (#8867)
  core: bump pytest from 8.0.2 to 8.1.1 (#8868)
  core: bump github.com/go-openapi/strfmt from 0.22.2 to 0.23.0 (#8869)
  core: bump bandit from 1.7.7 to 1.7.8 (#8870)
  core: bump packaging from 23.2 to 24.0 (#8871)
  core: bump ruff from 0.3.1 to 0.3.2 (#8873)
  web: bump the wdio group in /tests/wdio with 3 updates (#8865)
  core: bump requests-oauthlib from 1.3.1 to 1.4.0 (#8866)
  core: bump uvicorn from 0.27.1 to 0.28.0 (#8872)
  core: bump django-filter from 23.5 to 24.1 (#8874)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant