Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump react-oidc-context from 2.3.1 to 3.1.0 #518

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 15, 2024

Bumps react-oidc-context from 2.3.1 to 3.1.0.

Release notes

Sourced from react-oidc-context's releases.

v3.1.0

react-oidc-context 3.1.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Features:
    • #1119 add sign-out callback support
  • #1119 add SSR unit-test
  • #1119 update to required node 18.x in CI
  • #1121 avoid unit-test warnings about move function into act()

v3.0.0

react-oidc-context 3.0.0 is a major release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

  • Breaking changes:
    • #704: depend on oidc-client-ts v3.x (requires node >=18)
    • #527: drop deprecated code
  • Fixes
    • #528: AuthProviderUserManagerProps must not contain anything from UserManagerSettings
    • #1070: use npm distribution tags for upcoming releases
    • #1063: remove now useless useCallback on signoutSilent
    • #1051: fix typo in automatic sign-in section of README.md
    • #1087: handle USER_SIGNED_OUT (session monitoring event) event the same like USER_UNLOADED
  • Features:
    • #1060: add withAuthenticationRequired
    • #1061: insert yarn installation step inside README.md

thanks to @​trollepierre, @​DennerAC and @​PSanetra

v3.0.0-rc.1

react-oidc-context 3.0.0-rc.1 is a major pre release.

No longer using crypto-js package, but built-in browser crypto/subtle module.

Changelog:

  • Fixes:
    • #1087: handle USER_SIGNED_OUT (session monitoring event) event the same like USER_UNLOADED

thanks to @​PSanetra

v3.0.0-rc.0

react-oidc-context 3.0.0-rc.0 is a major pre release.

No longer using crypto-js package, but built-in browser crypto/subtle module.

Changelog:

... (truncated)

Commits
  • 39bad74 v3.1.0
  • 1d1646f Merge pull request #1204 from authts/dependabot/npm_and_yarn/types/react-18.2.79
  • 9e7b5f5 build(deps-dev): bump @​types/react from 18.2.78 to 18.2.79
  • 4683429 Merge pull request #1203 from authts/dependabot/npm_and_yarn/types/react-18.2.78
  • 8ef9859 Merge pull request #1196 from authts/dependabot/npm_and_yarn/types/react-dom-...
  • 2664048 build(deps-dev): bump @​types/react from 18.2.75 to 18.2.78
  • 4a14564 build(deps-dev): bump @​types/react-dom from 18.2.24 to 18.2.25
  • b9f8d47 Merge pull request #1194 from authts/dependabot/npm_and_yarn/microsoft/api-ex...
  • f1454c2 build(deps-dev): bump @​microsoft/api-extractor from 7.43.0 to 7.43.1
  • 3b6bca9 Merge pull request #1190 from authts/dependabot/npm_and_yarn/types/react-18.2.75
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 15, 2024
@dependabot dependabot bot requested a review from shindigira as a code owner May 15, 2024 19:40
@dependabot dependabot bot added the javascript Pull requests that update Javascript code label May 15, 2024
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/react-oidc-context-3.1.0 branch from fad3c20 to 2871236 Compare May 21, 2024 05:38
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/react-oidc-context-3.1.0 branch 3 times, most recently from 01be1f2 to e1ac1f3 Compare June 1, 2024 00:42
Bumps [react-oidc-context](https://github.com/authts/react-oidc-context) from 2.3.1 to 3.1.0.
- [Release notes](https://github.com/authts/react-oidc-context/releases)
- [Commits](authts/react-oidc-context@v2.3.1...v3.1.0)

---
updated-dependencies:
- dependency-name: react-oidc-context
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/react-oidc-context-3.1.0 branch from e1ac1f3 to 82b8f08 Compare June 9, 2024 11:31
@billhimmelsbach
Copy link
Contributor

Closing since it's not a security vulnerability only a version bump. We'll allow these smaller changes when this issue is resolved.

Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 2, 2024

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/react-oidc-context-3.1.0 branch August 2, 2024 20:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant