Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 18, 2025

Bumps no.nav.security:mock-oauth2-server from 2.3.0 to 3.0.0.

Release notes

Sourced from no.nav.security:mock-oauth2-server's releases.

3.0.0

What's Changed

  • feat(build): use chainguard jre:latest-dev base image for docker healthcheck support (#882) @​tronghn
  • fix(introspect): exp, iat, nbf claims were always null (#865) @​Lutonite

⚠️ Breaking Changes

  • refactor: replace custom TokenExchangeGrant with Nimbus SDK grant (#732) @​tommytroen
    • TokenExchangeGrant.kt has been removed in favor of com.nimbusds.oauth2.sdk.tokenexchange.TokenExchangeGrant
    • this affects the extension function fun TokenRequest.tokenExchangeGrantOrNull()
  • The aud property in IntrospectResponse is now a List<String> instead of String
  • The Docker image now uses Chainguard's jre:latest-dev base image for Docker healthcheck support

⬆️ Dependency upgrades

Commits
  • 1839faa refactor: replace deprecated methods, remove unnecessary non-null safe calls
  • 134bfcb feat(build): use chainguard jre:latest-dev base image for docker healthcheck ...
  • 4675cce refactor!: replace custom TokenExchangeGrant with Nimbus SDK grant (#732)
  • 6174c6c chore(deps): bump kotestVersion from 5.9.1 to 6.0.3 (#883)
  • c2c636a chore(deps): bump gradle/actions in the github-actions group (#886)
  • 7034c07 chore(deps): bump io.projectreactor:reactor-test from 3.7.9 to 3.7.11 (#889)
  • b3fe00a chore(deps): bump org.jetbrains.kotlin.jvm from 2.2.10 to 2.2.20 (#887)
  • bc91df3 chore(deps): bump io.netty:netty-codec-http (#888)
  • fc5b017 build: bump okhttp to 5.1 (#884)
  • 61e09e1 Merge pull request #865 from Lutonite/fix/introspect-date
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [no.nav.security:mock-oauth2-server](https://github.com/navikt/mock-oauth2-server) from 2.3.0 to 3.0.0.
- [Release notes](https://github.com/navikt/mock-oauth2-server/releases)
- [Commits](navikt/mock-oauth2-server@2.3.0...3.0.0)

---
updated-dependencies:
- dependency-name: no.nav.security:mock-oauth2-server
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 18, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 18, 2025 19:05
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants