Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 18, 2025

Bumps no.nav.security:mock-oauth2-server from 2.3.0 to 3.0.0.

Release notes

Sourced from no.nav.security:mock-oauth2-server's releases.

3.0.0

What's Changed

  • feat(build): use chainguard jre:latest-dev base image for docker healthcheck support (#882) @​tronghn
  • fix(introspect): exp, iat, nbf claims were always null (#865) @​Lutonite

⚠️ Breaking Changes

  • refactor: replace custom TokenExchangeGrant with Nimbus SDK grant (#732) @​tommytroen
    • TokenExchangeGrant.kt has been removed in favor of com.nimbusds.oauth2.sdk.tokenexchange.TokenExchangeGrant
    • this affects the extension function fun TokenRequest.tokenExchangeGrantOrNull()
  • The aud property in IntrospectResponse is now a List<String> instead of String
  • The Docker image now uses Chainguard's jre:latest-dev base image for Docker healthcheck support

⬆️ Dependency upgrades

Commits
  • 1839faa refactor: replace deprecated methods, remove unnecessary non-null safe calls
  • 134bfcb feat(build): use chainguard jre:latest-dev base image for docker healthcheck ...
  • 4675cce refactor!: replace custom TokenExchangeGrant with Nimbus SDK grant (#732)
  • 6174c6c chore(deps): bump kotestVersion from 5.9.1 to 6.0.3 (#883)
  • c2c636a chore(deps): bump gradle/actions in the github-actions group (#886)
  • 7034c07 chore(deps): bump io.projectreactor:reactor-test from 3.7.9 to 3.7.11 (#889)
  • b3fe00a chore(deps): bump org.jetbrains.kotlin.jvm from 2.2.10 to 2.2.20 (#887)
  • bc91df3 chore(deps): bump io.netty:netty-codec-http (#888)
  • fc5b017 build: bump okhttp to 5.1 (#884)
  • 61e09e1 Merge pull request #865 from Lutonite/fix/introspect-date
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 18, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 18, 2025 08:08
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 18, 2025
Bumps [no.nav.security:mock-oauth2-server](https://github.com/navikt/mock-oauth2-server) from 2.3.0 to 3.0.0.
- [Release notes](https://github.com/navikt/mock-oauth2-server/releases)
- [Commits](navikt/mock-oauth2-server@2.3.0...3.0.0)

---
updated-dependencies:
- dependency-name: no.nav.security:mock-oauth2-server
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/gradle/no.nav.security-mock-oauth2-server-3.0.0 branch from 326a63f to 363b524 Compare September 18, 2025 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants