Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade project Go dependencies #1353

Merged
merged 3 commits into from
Dec 15, 2022
Merged

Upgrade project Go dependencies #1353

merged 3 commits into from
Dec 15, 2022

Conversation

cfryanr
Copy link
Member

@cfryanr cfryanr commented Dec 14, 2022

Upgrade several project Go dependencies. This PR will replace several Dependabot PRs.

Most of the changes in this PR are because of these fosite PRs which changed behavior and/or APIs in fosite:

Note that due to the changes in ory/fosite#688, we need to bump our storage version for anything which stores the DefaultSession struct as JSON. This will cause end user sessions to be invalid after upgrading to a version of the Supervisor which includes this PR. Users will be prompted to log in again.

Release note:

Bump several Go dependencies.

@codecov
Copy link

codecov bot commented Dec 14, 2022

Codecov Report

Merging #1353 (51e4e24) into main (d35306a) will decrease coverage by 0.12%.
The diff coverage is 61.36%.

❗ Current head 51e4e24 differs from pull request most recent head 9760351. Consider uploading reports for the commit 9760351 to get more accurate results

@@            Coverage Diff             @@
##             main    #1353      +/-   ##
==========================================
- Coverage   76.89%   76.77%   -0.13%     
==========================================
  Files         165      166       +1     
  Lines       14526    14581      +55     
==========================================
+ Hits        11170    11194      +24     
- Misses       3069     3096      +27     
- Partials      287      291       +4     
Impacted Files Coverage Δ
internal/fositestorage/accesstoken/accesstoken.go 95.38% <ø> (ø)
...sitestorage/authorizationcode/authorizationcode.go 90.69% <ø> (ø)
...ernal/fositestorage/openidconnect/openidconnect.go 85.48% <ø> (ø)
internal/fositestorage/pkce/pkce.go 93.02% <ø> (ø)
...nternal/fositestorage/refreshtoken/refreshtoken.go 95.58% <ø> (ø)
internal/oidc/oidc.go 0.00% <0.00%> (ø)
internal/oidc/token_exchange.go 0.00% <0.00%> (ø)
...oidcclientsecretstorage/oidcclientsecretstorage.go 91.42% <ø> (ø)
internal/oidc/dynamic_oauth2_hmac_strategy.go 76.19% <64.28%> (-13.61%) ⬇️
internal/oidc/dynamic_global_secret_config.go 72.72% <72.72%> (ø)
... and 9 more

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

Most of the changes in this commit are because of these fosite PRs
which changed behavior and/or APIs in fosite:
- ory/fosite#667
- ory/fosite#679 (from me!)
- ory/fosite#675
- ory/fosite#688

Due to the changes in fosite PR #688, we need to bump our storage
version for anything which stores the DefaultSession struct as JSON.
Copy link
Member

@joshuatcasey joshuatcasey left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A bit scary to see over 3000 LOC delta just due to dependency bumps.

I suspect in the future we can ease the pain by introducing smaller changes with each Dependabot PR.

There are a lot of lines such as Added line ... was not covered by tests, approving I'm curious about that.

@cfryanr cfryanr merged commit 30818cb into main Dec 15, 2022
@cfryanr cfryanr deleted the dump_deps_dec_2022 branch December 15, 2022 17:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants