Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): Bump the production-dependencies group across 1 directory with 2 updates #889

Merged
merged 1 commit into from
Jan 16, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 15, 2025

Bumps the production-dependencies group with 2 updates in the / directory: ash_postgres and assent.

Updates ash_postgres from 2.4.17 to 2.4.21

Changelog

Sourced from ash_postgres's changelog.

v2.4.21 (2025-01-06)

Bug Fixes:

  • filter query by source record ids when lateral joining

  • don't use symlinked app dir for migration's path

v2.4.20 (2024-12-26)

Bug Fixes:

  • use passed in version of postgres when modifying existing repo

v2.4.19 (2024-12-26)

Bug Fixes:

  • ensure there is always at least one upsert field so filter is run

Improvements:

  • better min_pg_version when modifying a repo

  • automatically set min_pg_version where possible

  • use a notice to suggest configuring min_pg_version

v2.4.18 (2024-12-20)

Bug Fixes:

  • handle double select issue

Improvements:

  • make igniter optional

... (truncated)

Commits
  • 5f26d69 chore: release version v2.4.21
  • 96dc292 chore: add changelog to package links (#455)
  • 1c4ae7b fix: filter query by source record ids when lateral joining
  • a5f6de7 fix: don't use symlinked app dir for migration's path
  • 304a896 chore(deps-dev): bump credo in the dev-dependencies group (#454)
  • 9701d83 chore(deps): bump the production-dependencies group with 2 updates (#453)
  • ab7f9b0 docs: Fix old code in Getting Started guide (#451)
  • 2dadf5b chore: release version v2.4.20
  • 80ccc19 fix: use passed in version of postgres when modifying existing repo
  • a3edddd chore: release version v2.4.19
  • Additional commits viewable in compare view

Updates assent from 0.2.13 to 0.3.0

Release notes

Sourced from assent's releases.

v0.3.0

This release consists of breaking changes.

Userinfo is now cast to the correct type per https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.5.1 (thanks @​robinvdvleuten). When upgrading you must ensure that you do not depend on a specific type in the returned userinfo for any of the strategies listed below.

Breaking changes

  • Assent.Strategy.Auth0.authorize_url/2 no longer accepts :domain config, use :base_url instead #178
  • Assent.Strategy.Basecamp.callback/2 now encodes sub as a binary() instead of an integer() #167
  • Assent.Strategy.Github.callback/2 now encodes sub as a binary() instead of an integer() #167
  • Assent.Strategy.Google now encodes email_verified as a boolean() instead of a binary() #167
  • Assent.Strategy.Google now return hd instead of google_hd #169
  • Assent.Strategy.Strava.callback/2 now encodes sub as a binary() instead of an integer() #167
  • Assent.Strategy.Telegram.callback/2 now encodes sub as a binary() instead of an integer() #167
  • Assent.Strategy.Twitter.callback/2 now encodes sub as a binary() instead of an integer() #167
  • Assent.Strategy.VK.callback/2 now encodes sub as a binary() instead of an integer() #167
  • :site configuration option removed, use :base_url instead #174
  • Assent.Strategy.OAuth2.authorize_url/2 no longer allows :state in :authorization_params #174
  • Assent.Strategy.decode_response/2removed, use Assent.HTTPAdapter.decode_response/2 instead #174
  • Assent.Strategy.request/5 removed, use Assent.Strategy.http_request/5 instead #174
  • Assent.Strategy.prune/1 removed #167
  • Assent.MissingParamError no longer accepts :expected_key, use :key instead #174
  • Assent.HTTPAdapter.Mint removed #174
  • Assent.Config removed #174

Changes

  • Assent.Strategy.Auth0 now uses OIDC instead of OAuth 2.0 base strategy #178
  • Assent.Strategy.Gitlab now uses OIDC instead of OAuth 2.0 base strategy #179
  • Assent.Strategy.Google now uses OIDC instead of OAuth 2.0 base strategy #169
  • Assent.Strategy.normalize_userinfo/2 now casts the user claims per OpenID specification #167
Changelog

Sourced from assent's changelog.

v0.3.0 (2025-01-06)

This release consists of breaking changes.

Userinfo is now cast to the correct type per https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.5.1. When upgrading you must ensure that you do not depend on a specific type in the returned userinfo for any of the strategies listed below.

Breaking changes

  • Assent.Strategy.Auth0.authorize_url/2 no longer accepts :domain config, use :base_url instead
  • Assent.Strategy.Basecamp.callback/2 now encodes sub as a binary() instead of an integer()
  • Assent.Strategy.Github.callback/2 now encodes sub as a binary() instead of an integer()
  • Assent.Strategy.Google now encodes email_verified as a boolean() instead of a binary()
  • Assent.Strategy.Google now return hd instead of google_hd
  • Assent.Strategy.Strava.callback/2 now encodes sub as a binary() instead of an integer()
  • Assent.Strategy.Telegram.callback/2 now encodes sub as a binary() instead of an integer()
  • Assent.Strategy.Twitter.callback/2 now encodes sub as a binary() instead of an integer()
  • Assent.Strategy.VK.callback/2 now encodes sub as a binary() instead of an integer()
  • :site configuration option removed, use :base_url instead
  • Assent.Strategy.OAuth2.authorize_url/2 no longer allows :state in :authorization_params
  • Assent.Strategy.decode_response/2removed, use Assent.HTTPAdapter.decode_response/2 instead
  • Assent.Strategy.request/5 removed, use Assent.Strategy.http_request/5 instead
  • Assent.Strategy.prune/1 removed
  • Assent.MissingParamError no longer accepts :expected_key, use :key instead
  • Assent.HTTPAdapter.Mint removed
  • Assent.Config removed

Changes

  • Assent.Strategy.Auth0 now uses OIDC instead of OAuth 2.0 base strategy
  • Assent.Strategy.Gitlab now uses OIDC instead of OAuth 2.0 base strategy
  • Assent.Strategy.Google now uses OIDC instead of OAuth 2.0 base strategy
  • Assent.Strategy.normalize_userinfo/2 now casts the user claims per OpenID specification

v0.2

The CHANGELOG for v0.2 releases can be found in the v0.2 branch.

Commits
  • 8d36b27 Roll version
  • 2fd666c Merge pull request #167 from pow-auth/cast-user-claims-values
  • d453a8f Cast user claim values
  • f694eff Merge pull request #179 from pow-auth/gitlab-oidc
  • 773a986 Switch to OIDC for Gitlab strategy
  • b4f708a Merge pull request #178 from pow-auth/auth0-oidc
  • b4ecb4e Use OIDC for Auth0
  • 2676c79 Merge pull request #177 from pow-auth/deprecate-auth0-domain-config
  • 0647b8c Merge pull request #169 from pow-auth/google-oidc
  • e175d03 Switch to Google OIDC
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code labels Jan 15, 2025
…y with 2 updates

Bumps the production-dependencies group with 2 updates in the / directory: [ash_postgres](https://github.com/ash-project/ash_postgres) and [assent](https://github.com/pow-auth/assent).


Updates `ash_postgres` from 2.4.17 to 2.4.21
- [Changelog](https://github.com/ash-project/ash_postgres/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash_postgres@v2.4.17...v2.4.21)

Updates `assent` from 0.2.13 to 0.3.0
- [Release notes](https://github.com/pow-auth/assent/releases)
- [Changelog](https://github.com/pow-auth/assent/blob/main/CHANGELOG.md)
- [Commits](pow-auth/assent@v0.2.13...v0.3.0)

---
updated-dependencies:
- dependency-name: ash_postgres
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: assent
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/hex/production-dependencies-4f8ae88d06 branch from f925a1c to 2880ae6 Compare January 16, 2025 16:20
@zachdaniel zachdaniel merged commit abe1a75 into main Jan 16, 2025
14 of 17 checks passed
@dependabot dependabot bot deleted the dependabot/hex/production-dependencies-4f8ae88d06 branch January 16, 2025 18:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant