Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump com.nimbusds:nimbus-jose-jwt from 9.31 to 9.32 #3452

Merged
merged 2 commits into from
Sep 26, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 14, 2023

Bumps com.nimbusds:nimbus-jose-jwt from 9.31 to 9.32.

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

version 1.0 (2012-03-01)

  • First version based on the OpenInfoCard JWT, JWS and JWE code base.

version 1.1 (2012-03-06)

  • Introduces type-safe enumeration of the JSON Web Algorithms (JWA).
  • Refactors the JWT class.

version 1.2 (2012-03-08)

  • Moves JWS and JWE code into separate classes.

version 1.3 (2012-03-09)

  • Switches to Apache Commons Codec for Base64URL encoding and decoding
  • Consolidates the crypto utilities within the package.
  • Introduces a JWT content serialiser class.

version 1.4 (2012-03-09)

  • Refactoring of JWT class and JUnit tests.

version 1.5 (2012-03-18)

  • Switches to JSON Smart for JSON serialisation and parsing.
  • Introduces claims set class with JSON objects, string, Base64URL and byte array views.

version 1.6 (2012-03-20)

  • Creates class for representing, serialising and parsing JSON Web Keys (JWK).
  • Introduces separate class for representing JWT headers.

version 1.7 (2012-04-01)

  • Introduces separate classes for plain, JWS and JWE headers.
  • Introduces separate classes for plain, signed and encrypted JWTs.
  • Removes the JWTContent class.
  • Removes password-based (PE820) encryption support.

version 1.8 (2012-04-03)

  • Adds support for the ZIP JWE header parameter.
  • Removes unsupported algorithms from the JWA enumeration.

version 1.9 (2012-04-03)

  • Renames JWEHeader.{get|set}EncryptionAlgorithm() to JWEHeader.{get|set}EncryptionMethod().

version 1.9.1 (2012-04-03)

  • Upgrades JSON Smart JAR to 1.1.1.

version 1.10 (2012-04-14)

  • Introduces serialize() method to base abstract JWT class.

version 1.11 (2012-05-13)

  • JWT.serialize() throws checked JWTException instead of

... (truncated)

Commits
  • ae11844 Merged in iss517 (pull request #107)
  • e2dafd0 Revert "Allow the Algorithm.NONE for the JWEHeader alg attribute"
  • e3350c2 Improves the MultiEncrypter constructor exception messages
  • ad2b211 JWEMultipleRecipientsTest exceptions checks must use concrete exception class...
  • 14331d4 Minor JWEMultipleRecipientsTest updates for better clarity
  • ffbb2dc Updates MultiDecrypter JavaDocs
  • ed8925e Adds special JWEAlgorithm.JWK_ALG constant for use in multi-recipient JWEObje...
  • 7e298d0 Updates the JWT processing framework examples for the Wiki
  • 0e73307 make the 'alg' parameter optional in the JWEHeader
  • 973bdbe make use of HeaderValidation ensureDisjoint method with any protected JOSE he...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 9.31 to 9.32.
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/9.32..9.31)

---
updated-dependencies:
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 14, 2023
@codecov-commenter
Copy link

codecov-commenter commented Sep 14, 2023

Codecov Report

Patch and project coverage have no change.

Comparison is base (7c109a8) 71.97% compared to head (0524aab) 71.97%.

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #3452   +/-   ##
=======================================
  Coverage   71.97%   71.97%           
=======================================
  Files         837      837           
  Lines       17018    17018           
  Branches      948      948           
=======================================
  Hits        12249    12249           
  Misses       4364     4364           
  Partials      405      405           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@github-actions
Copy link

github-actions bot commented Sep 14, 2023

Test Results

     585 files  ±0       585 suites  ±0   16m 52s ⏱️ +36s
12 600 tests ±0  12 593 ✔️ ±0  7 💤 ±0  0 ±0 
12 851 runs  ±0  12 844 ✔️ ±0  7 💤 ±0  0 ±0 

Results for commit 0524aab. ± Comparison against base commit 7c109a8.

This pull request removes 90 and adds 90 tests. Note that renamed tests count towards both.
org.eclipse.edc.connector.callback.staticendpoint.CallbackStaticEndpointExtensionTest ‑ [1] {edc.callback.cb.transactional=false, edc.cb.callback.events=test}
org.eclipse.edc.connector.callback.staticendpoint.CallbackStaticEndpointExtensionTest ‑ [2] {edc.callback.cb.transactional=false, edc.callback.cb.uri=url}
org.eclipse.edc.connector.callback.staticendpoint.CallbackStaticEndpointExtensionTest ‑ [3] {edc.callback.cb.uri=url, edc.callback.cb.auth-key=test, edc.callback.cb.events=test, edc.callback.cb.transactional=false}
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [10] ACCEPTING, TERMINATED, java.util.concurrent.CompletableFuture@65d7eea4[Completed normally], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$642/0x00007f67d43897a8@5d37aa0f
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [11] VERIFYING, TERMINATED, java.util.concurrent.CompletableFuture@48277712[Completed normally], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$643/0x00007f67d4389a08@3d53e876
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [12] TERMINATING, TERMINATED, java.util.concurrent.CompletableFuture@1d3a03fe[Completed normally], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$644/0x00007f67d4389c68@f48a080
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [1] REQUESTING, REQUESTING, java.util.concurrent.CompletableFuture@763b0996[Completed exceptionally: org.eclipse.edc.spi.EdcException: error], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$633/0x00007f67d4388000@386e9fd8
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [2] ACCEPTING, ACCEPTING, java.util.concurrent.CompletableFuture@298e002d[Completed exceptionally: org.eclipse.edc.spi.EdcException: error], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$634/0x00007f67d4388260@6b9a1205
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [3] VERIFYING, VERIFYING, java.util.concurrent.CompletableFuture@280ecc33[Completed exceptionally: org.eclipse.edc.spi.EdcException: error], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$635/0x00007f67d43884c0@57b1ec84
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [4] TERMINATING, TERMINATING, java.util.concurrent.CompletableFuture@4a336377[Completed exceptionally: org.eclipse.edc.spi.EdcException: error], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$636/0x00007f67d4388720@65af05b2
…
org.eclipse.edc.connector.callback.staticendpoint.CallbackStaticEndpointExtensionTest ‑ [1] {edc.cb.callback.events=test, edc.callback.cb.transactional=false}
org.eclipse.edc.connector.callback.staticendpoint.CallbackStaticEndpointExtensionTest ‑ [2] {edc.callback.cb.uri=url, edc.callback.cb.transactional=false}
org.eclipse.edc.connector.callback.staticendpoint.CallbackStaticEndpointExtensionTest ‑ [3] {edc.callback.cb.transactional=false, edc.callback.cb.uri=url, edc.callback.cb.auth-key=test, edc.callback.cb.events=test}
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [10] ACCEPTING, TERMINATED, java.util.concurrent.CompletableFuture@65d7eea4[Completed normally], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$642/0x00007fa4f8389b98@5d37aa0f
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [11] VERIFYING, TERMINATED, java.util.concurrent.CompletableFuture@48277712[Completed normally], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$643/0x00007fa4f8389df8@3d53e876
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [12] TERMINATING, TERMINATED, java.util.concurrent.CompletableFuture@1d3a03fe[Completed normally], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$644/0x00007fa4f838a058@f48a080
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [1] REQUESTING, REQUESTING, java.util.concurrent.CompletableFuture@763b0996[Completed exceptionally: org.eclipse.edc.spi.EdcException: error], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$633/0x00007fa4f83881f8@386e9fd8
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [2] ACCEPTING, ACCEPTING, java.util.concurrent.CompletableFuture@298e002d[Completed exceptionally: org.eclipse.edc.spi.EdcException: error], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$634/0x00007fa4f8388458@6b9a1205
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [3] VERIFYING, VERIFYING, java.util.concurrent.CompletableFuture@280ecc33[Completed exceptionally: org.eclipse.edc.spi.EdcException: error], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$635/0x00007fa4f83886b8@57b1ec84
org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest ‑ [4] TERMINATING, TERMINATING, java.util.concurrent.CompletableFuture@4a336377[Completed exceptionally: org.eclipse.edc.spi.EdcException: error], org.eclipse.edc.connector.contract.negotiation.ConsumerContractNegotiationManagerImplTest$DispatchFailureArguments$$Lambda$636/0x00007fa4f8388918@65af05b2
…

♻️ This comment has been updated with latest results.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2023

A newer version of com.nimbusds:nimbus-jose-jwt exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@github-actions
Copy link

This pull request is stale because it has been open for 7 days with no activity.

@github-actions github-actions bot added the stale Open for x days with no activity label Sep 26, 2023
@ndr-brt ndr-brt merged commit a3be9ed into main Sep 26, 2023
29 checks passed
@ndr-brt ndr-brt deleted the dependabot/gradle/com.nimbusds-nimbus-jose-jwt-9.32 branch September 26, 2023 10:14
ndkrimbacher pushed a commit to nexyo-io/DataSpaceConnector that referenced this pull request Oct 4, 2023
…ipse-edc#3452)

* build(deps): bump com.nimbusds:nimbus-jose-jwt from 9.31 to 9.32

Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 9.31 to 9.32.
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/9.32..9.31)

---
updated-dependencies:
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore: update dependencies file

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Enrico Risa <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code stale Open for x days with no activity
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants