Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: Update minor and patch golang dependencies #323

Merged
merged 1 commit into from
Mar 12, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 12, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/MicahParks/jwkset v0.5.14 -> v0.5.15 age adoption passing confidence
github.com/MicahParks/keyfunc/v3 v3.2.8 -> v3.2.9 age adoption passing confidence

Release Notes

MicahParks/jwkset (github.com/MicahParks/jwkset)

v0.5.15: Less strict validation

Compare Source

The purpose of this release is to use less strict validation for JWK. This will allow users to work with non-RFC compliant JWK Sets for small padding mistakes.

Two padding related reasons for this are:

  1. Mandatory leading padding for ECDSA JWK parameters.
  2. A common mistake adding leading padding to RSA JWK parameter "n".

For padding specifically, this project is only comparing integers after they are parsed from Base64 raw URL encoding by default. To turn on strict validation, there will be a new field on jwkset.ValidateOptions named StrictPadding.

An example for 1 would be a bug in this project were mandatory leading padding was absent: https://github.com/MicahParks/jwkset/issues/18

An example for 2 would be a Firebase service that was reported to be incompatible with this project: https://github.com/MicahParks/jwkset/issues/23

Relevant issues:

Relevant pull requests:

MicahParks/keyfunc (github.com/MicahParks/keyfunc/v3)

v3.2.9

Compare Source


Configuration

📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested a review from nieomylnieja as a code owner March 12, 2024 01:56
@renovate renovate bot requested a review from skrolikiewicz as a code owner March 12, 2024 01:56
@renovate renovate bot added the renovate label Mar 12, 2024
@renovate renovate bot requested a review from daniel-zelazny as a code owner March 12, 2024 01:56
@renovate renovate bot enabled auto-merge (squash) March 12, 2024 01:56
@renovate renovate bot merged commit 64067a0 into main Mar 12, 2024
5 checks passed
@renovate renovate bot deleted the renovate_minor-and-patch-golang-dependencies branch March 12, 2024 01:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant