Skip to content

Conversation

solrbot
Copy link
Collaborator

@solrbot solrbot commented Oct 1, 2025

This PR contains the following updates:

Package Type Update Change
no.nav.security:mock-oauth2-server test major 0.5.10 -> 3.0.0

Release Notes

navikt/mock-oauth2-server (no.nav.security:mock-oauth2-server)

v3.0.0

Compare Source

What's Changed

  • feat(build): use chainguard jre:latest-dev base image for docker healthcheck support (#​882) @​tronghn
  • fix(introspect): exp, iat, nbf claims were always null (#​865) @​Lutonite

⚠️ Breaking Changes

  • refactor: replace custom TokenExchangeGrant with Nimbus SDK grant (#​732) @​tommytroen
    • TokenExchangeGrant.kt has been removed in favor of com.nimbusds.oauth2.sdk.tokenexchange.TokenExchangeGrant
    • this affects the extension function fun TokenRequest.tokenExchangeGrantOrNull()
  • The aud property in IntrospectResponse is now a List<String> instead of String
  • The Docker image now uses Chainguard's jre:latest-dev base image for Docker healthcheck support

⬆️ Dependency upgrades

v2.3.0

Compare Source

What's Changed

🚀 Features

⬆️ Dependency upgrades

  • build(deps): bump various dependencies to latest minor and patch (5505ba) @​tronghn

v2.2.1

Compare Source

What's Changed

Full Changelog: navikt/mock-oauth2-server@2.2.0...2.2.1

v2.2.0

Compare Source

What's Changed

  • feat: prefer issuer as client assertion audience for private_key_jwt auth (#​847) @​tronghn

⬆️ Dependency upgrades

Full Changelog: navikt/mock-oauth2-server@2.1.11...2.2.0

v2.1.11

Compare Source

What's Changed

⬆️ Dependency upgrades

  • chore(deps): bump the github group across 1 directory with 19 updates (#​833) @​dependabot[bot]
  • chore(deps): bump JamesIves/github-pages-deploy-action from 4.7.2 to 4.7.3 in the github group (#​812) @​dependabot[bot]
  • chore(deps): bump the github group across 1 directory with 13 updates (#​818) @​dependabot[bot]
  • chore(deps): bump dependabot/fetch-metadata from 2.2.0 to 2.3.0 in the github group (#​801) @​dependabot[bot]
  • chore(deps): bump the github group across 1 directory with 14 updates (#​810) @​dependabot[bot]
  • chore(deps): bump the github group across 1 directory with 32 updates (#​789) @​dependabot[bot]
  • chore(deps): bump JamesIves/github-pages-deploy-action from 4.6.8 to 4.7.2 in the github group across 1 directory (#​776) @​dependabot[bot]
  • chore(deps): bump JamesIves/github-pages-deploy-action from 4.6.3 to 4.6.8 in the github group across 1 directory (#​747) @​dependabot[bot]
  • chore(deps): bump the github group across 1 directory with 21 updates (#​765) @​dependabot[bot]

v2.1.10

Compare Source

What's Changed

⬆️ Dependency upgrades

v2.1.9

Compare Source

What's Changed

⬆️ Dependency upgrades

v2.1.8

Compare Source

What's Changed

🐛 Bug Fixes

⬆️ Dependency upgrades

  • chore(deps): bump the github group across 1 directory with 20 updates (#​709) @​dependabot
  • chore(deps): bump org.jetbrains.kotlinx:kotlinx-serialization-json from 1.6.3 to 1.7.0 in the github group (#​702) @​dependabot

v2.1.7

Compare Source

What's Changed

🚀 Features

v2.1.6

Compare Source

What's Changed

⬆️ Dependency upgrades

v2.1.5

Compare Source

What's Changed

🚀 Features

⬆️ Dependency upgrades

v2.1.4

Compare Source

What's Changed

⬆️ Dependency upgrades

v2.1.3

Compare Source

What's Changed

Breaking changes

  • The constructor for the OAuth2Config class accepts a new parameter rotateRefreshToken. This has a default value of false. You may need to update your code if you're instantiating a OAuth2Config without named parameters.

🚀 Features

⬆️ Dependency upgrades

v2.1.2

Compare Source

What's Changed

⬆️ Dependency upgrades

v2.1.1

Compare Source

What's Changed

⬆️ Dependency upgrades

v2.1.0

Compare Source

What's Changed

🚀 Features

  • Regex based matching in RequestMappingTokenCallback and request parameters used as variables inside claims (#​578) @​kvokacka

⬆️ Dependency upgrades

v2.0.1

Compare Source

What's Changed

🚀 Features

🐛 Bug Fixes

  • fix: use hostname instead of canonicalHostname (#​586) @​tronghn
    • this should resolve issues with inconsistent URLs for Windows users
  • fix(httpRequest): naming clash, update nimbus sdk to latest (#​576) @​ybelMekk

⬆️ Dependency upgrades

v2.0.0

Compare Source

What's Changed

🚀 Features

⚠️ Breaking Changes

⬆️ Dependency upgrades

🚧 Fix

v1.0.0

Compare Source

What's Changed

⬆️ Upgrades
  • Java 11 -> 17
  • Spring Boot 2 -> 3
  • Bumped various libraries to their latest versions

Full Changelog: navikt/mock-oauth2-server@0.5.10...1.0.0


Configuration

📅 Schedule: Branch creation - "before 9am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot

@solrbot solrbot added the exempt-stale Prevent a PR from going stale label Oct 1, 2025
@solrbot
Copy link
Collaborator Author

solrbot commented Oct 1, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Command failed: ./gradlew updateLicenses
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
SLF4J(W): No SLF4J providers were found.
SLF4J(W): Defaulting to no-operation (NOP) logger implementation
SLF4J(W): See https://www.slf4j.org/codes.html#noProviders for further details.
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.

FAILURE: Build failed with an exception.

* Where:
Script '/tmp/renovate/repos/github/apache/solr/gradle/validation/jar-checks.gradle' line: 134

* What went wrong:
Execution failed for task ':solr:modules:jwt-auth:collectJarInfos'.
> Could not resolve all dependencies for configuration ':solr:modules:jwt-auth:testRuntimeClasspath'.
   > Could not resolve no.nav.security:mock-oauth2-server.
     Required by:
         project :solr:modules:jwt-auth
      > Dependency resolution is looking for a library compatible with JVM runtime version 11, but 'no.nav.security:mock-oauth2-server:3.0.0' is only compatible with JVM runtime version 17 or newer.
   > Could not resolve no.nav.security:mock-oauth2-server.
     Required by:
         project :solr:modules:jwt-auth > root project :
      > Dependency resolution is looking for a library compatible with JVM runtime version 11, but 'no.nav.security:mock-oauth2-server:3.0.0' is only compatible with JVM runtime version 17 or newer.
> There is 1 more failure with an identical cause.

* Try:
> Change the dependency on 'no.nav.security:mock-oauth2-server:3.0.0' to an earlier version that supports JVM runtime version 11.
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Get more help at https://help.gradle.org.

BUILD FAILED in 35s

@solrbot solrbot force-pushed the renovate-9x/no.nav.security-mock-oauth2-server-3.x branch from b75d947 to 5912a67 Compare October 14, 2025 08:39
@solrbot solrbot force-pushed the renovate-9x/no.nav.security-mock-oauth2-server-3.x branch from 5912a67 to b81db30 Compare October 17, 2025 01:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

exempt-stale Prevent a PR from going stale

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant