Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): bump requests-oauthlib from 1.0.0 to 1.3.1 in /resources #25

Closed
wants to merge 3 commits into from
Closed

chore(deps): bump requests-oauthlib from 1.0.0 to 1.3.1 in /resources #25

wants to merge 3 commits into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 31, 2023 •
edited

Bumps requests-oauthlib from 1.0.0 to 1.3.1.

Release notes

Sourced from requests-oauthlib's releases.

v1.3.1

What's Changed

New Contributors

Full Changelog: requests/requests-oauthlib@v1.3.0...v1.3.1

v1.3.0

  • Instagram compliance fix
  • Added force_querystring argument to fetch_token() method on OAuth2Session

v1.2.0

  • This project now depends on OAuthlib 3.0.0 and above. It does not support versions of OAuthlib before 3.0.0.
  • Updated oauth2 tests to use 'sess' for an OAuth2Session instance instead of auth because OAuth2Session objects and methods acceept an auth paramether which is typically an instance of requests.auth.HTTPBasicAuth
  • OAuth2Session.fetch_token previously tried to guess how and where to provide "client" and "user" credentials incorrectly. This was incompatible with some OAuth servers and incompatible with breaking changes in oauthlib that seek to correctly provide the client_id. The older implementation also did not raise the correct exceptions when username and password are not present on Legacy clients.
  • Avoid automatic netrc authentication for OAuth2Session.

... (truncated)

Changelog

Sourced from requests-oauthlib's changelog.

v1.3.1 (21 January 2022) ++++++++++++++++++++++++

  • Add initial support for OAuth Mutual TLS (draft-ietf-oauth-mtls)
  • Removed outdated LinkedIn Compliance Fixes
  • Add eBay compliance fix
  • Add Spotify OAuth 2 Tutorial
  • Add support for python 3.8, 3.9
  • Fixed LinkedIn Compliance Fixes
  • Fixed ReadTheDocs Documentation and sphinx errors
  • Moved pipeline to GitHub Actions

v1.3.0 (6 November 2019) ++++++++++++++++++++++++

  • Instagram compliance fix
  • Added force_querystring argument to fetch_token() method on OAuth2Session

v1.2.0 (14 January 2019) ++++++++++++++++++++++++

  • This project now depends on OAuthlib 3.0.0 and above. It does not support versions of OAuthlib before 3.0.0.
  • Updated oauth2 tests to use 'sess' for an OAuth2Session instance instead of auth because OAuth2Session objects and methods acceept an auth paramether which is typically an instance of requests.auth.HTTPBasicAuth
  • OAuth2Session.fetch_token previously tried to guess how and where to provide "client" and "user" credentials incorrectly. This was incompatible with some OAuth servers and incompatible with breaking changes in oauthlib that seek to correctly provide the client_id. The older implementation also did not raise the correct exceptions when username and password are not present on Legacy clients.
  • Avoid automatic netrc authentication for OAuth2Session.

v1.1.0 (9 January 2019) +++++++++++++++++++++++

  • Adjusted version specifier for oauthlib dependency: this project is not yet compatible with oauthlib 3.0.0.
  • Dropped dependency on nose.
  • Minor changes to clean up the code and make it more readable/maintainable.
Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot
chore(deps): bump requests-oauthlib from 1.0.0 to 1.3.1 in /resources
4d60f9f 
Bumps [requests-oauthlib](https://github.com/requests/requests-oauthlib) from 1.0.0 to 1.3.1.
- [Release notes](https://github.com/requests/requests-oauthlib/releases)
- [Changelog](https://github.com/requests/requests-oauthlib/blob/master/HISTORY.rst)
- [Commits](requests/requests-oauthlib@v1.0.0...v1.3.1)

---
updated-dependencies:
- dependency-name: requests-oauthlib
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 31, 2023
@sonarcloud
Copy link

sonarcloud bot commented May 31, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@pifou25 pifou25 self-assigned this Sep 2, 2023
@pifou25 pifou25 changed the base branch from master to dev September 5, 2023 13:23
@pifou25 pifou25 changed the base branch from dev to master September 5, 2023 13:23
@sonarcloud
Copy link

sonarcloud bot commented Sep 9, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@pifou25 pifou25 closed this Sep 9, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 9, 2023

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/pip/resources/requests-oauthlib-1.3.1 branch September 9, 2023 07:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@pifou25 pifou25

Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
1 participant
@pifou25