Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 16, 2024

Bumps league/oauth2-client from 2.7.0 to 2.8.0.

Release notes

Sourced from league/oauth2-client's releases.

2.8.0

  • This version is certified for PHP 8.3 and PHP 8.4! 🎉
  • Fix cases where expires is not a number #929
  • Add SettableRefreshTokenInterface to support setting the refresh token #994
  • Set minimum version of Guzzle to 6.5.8 and 7.4.5, due to security vulnerabilities reported in earlier versions #1022
  • Fix parameter docblock type hint for AbstractProvider::prepareAccessTokenResponse() #1025
    • Take note, this might affect static analysis reports for downstream providers
  • Send scopes with access token request #1029 #1030
  • Explicitly mark nullable parameter #1034 #1039
    • This change requires PHP 7.1 as the minimum version for this library
  • Plus a number of test and documentation improvements; see the commit log for more details
Changelog

Sourced from league/oauth2-client's changelog.

2.8.0

Released: 2024-12-11

  • This version is certified for PHP 8.3 and PHP 8.4! 🎉
  • Fix cases where expires is not a number #929
  • Add SettableRefreshTokenInterface to support setting the refresh token #994
  • Set minimum version of Guzzle to 6.5.8 and 7.4.5, due to security vulnerabilities reported in earlier versions #1022
  • Fix parameter docblock type hint for AbstractProvider::prepareAccessTokenResponse() #1025
    • Take note, this might affect static analysis reports for downstream providers
  • Send scopes with access token request #1029 #1030
  • Explicitly mark nullable parameter #1034 #1039
    • This change requires PHP 7.1 as the minimum version for this library
  • Plus a number of test and documentation improvements; see the commit log for more details
Commits
  • 3d5cf8d Update CHANGELOG for version 2.8.0
  • ba37ec1 docs: change variable name for clarity in usage docs
  • 0bfe348 docs: clarify refresh token example in usage docs
  • 8b920f7 security: increase the minimimum versions for guzzlehttp/guzzle
  • 26ee9c4 CI: Adjust the build workflow
  • 8cee80a fix for invalid expires value
  • 3c8c2b4 hasExpired() should use self::getTimeNow()
  • 2d06e3e Fix Markdown link in list of 3rd-party providers
  • bfb0098 Re-enable PHP down to version 7.1 (#1049)
  • 17f5b55 Adding third-party Digi-Key provider to docs (#1001)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [league/oauth2-client](https://github.com/thephpleague/oauth2-client) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/thephpleague/oauth2-client/releases)
- [Changelog](https://github.com/thephpleague/oauth2-client/blob/master/CHANGELOG.md)
- [Commits](thephpleague/oauth2-client@2.7.0...2.8.0)

---
updated-dependencies:
- dependency-name: league/oauth2-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Dec 16, 2024
@github-actions github-actions bot enabled auto-merge December 16, 2024 22:49
@github-actions github-actions bot merged commit 6735afb into main Dec 16, 2024
4 checks passed
@github-actions github-actions bot deleted the dependabot/composer/graph-tutorial/league/oauth2-client-2.8.0 branch December 16, 2024 22:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant