Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Build(deps): Bump oauth from 0.5.10 to 1.1.0 #172

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Aug 30, 2022

Bumps oauth from 0.5.10 to 1.1.0.

Release notes

Sourced from oauth's releases.

Stable Release v1

The first "Stable Release" in terms of Semantic Versioning.

The oldest supported Ruby, currently 2.7, will be dropped no later than April 2025, and a new major version of this gem will be released to drop Ruby 2.7 support (and possibly other stuff).

0.6.x is EOL April 2024

Non-commercial support for 0.6.x will end no later than April 2024.

Full Changelog: oauth-xx/oauth-ruby@v0.5.13...v0.6.1

0.5.x is EOL April 2023

Non-commercial support for 0.5.x will end no later than April 2023.

Full Changelog: oauth-xx/oauth-ruby@v0.5.10...v0.5.13

Changelog

Sourced from oauth's changelog.

[1.1.0] 2022-08-29

Changed

  • OAuth::CLI has been extracted to a new gem, oauth-tty, hosted on Gitlab
    • The public API of oauth-tty is backwards compatible (meaning OAuth::CLI)
    • The change within the oauth gem is backwards compatible as oauth-tty has been added as a dependency
    • Minor version bump is cautionary, as many lines of code have changed.
  • OAuth::Comsumer#options hash is now handled by snaky_hash, which was extracted from oauth2
    • symbolized keys, dot-access and snake-case are now normalized

[1.0.1] 2022-08-29

Changed

  • OAuth::Comsumer#options hash is now handled by snaky_hash, which was extracted from oauth2
    • symbolized keys, dot-access and snake-case are now normalized

[1.0.0] 2022-08-23

Changed

  • Dropped support for Ruby < 2.7
  • Dropped support for Rails < 6

Added

  • New EOL Policy
    • Non-commercial support for the oldest version of Ruby (which itself is going EOL) will be dropped each year in April

[0.6.2] 2022-08-29

Changed

  • OAuth::Comsumer#options hash is now handled by snaky_hash, which was extracted from oauth2
    • symbolized keys, dot-access and snake-case are now normalized

[0.6.1] 2022-08-23

Changed

  • Fixed documentation in SECURITY.md
  • Change references to master => main

Added

  • Post install note about v0.6.x EOL approaching in April, 2024

[0.6.0] 2022-08-23

Added

  • New option body_hash_enabled which defaults to true to maintain backward compatibility with prior releases. Setting to false disables generation of a oauth_body_hash component as part of the signature computation.
  • Improved documentation of support policy via Tidelift
  • Stop testing against active_support v2

Changed

  • Utilize version_gem extracted from oauth2 gem for VERSION
    • Added new OAuth::Version namespace
    • VERSION constant now at OAuth::Version::VERSION

Removed

  • Ruby 2.0, 2.1, 2.2, and 2.3 are no longer valid install targets

... (truncated)

Commits
  • 4acc792 πŸ”– Prepare release 1.1.0
  • 0b62127 πŸ”€ Merge pull request #276 from oauth-xx/271/snaky_hash
  • 206ce85 πŸ”– Prepare release 1.1.0
  • 7110a74 βž• OAuth::Comsumer#options hash is now handled by snaky_hash
  • eaee350 Merge pull request #275 from oauth-xx/274/extract-oauth-tty-gem
  • 6c2e65f πŸ”₯ Extract CLI to new oauth-tty gem
  • ba94eac πŸ“ Document rails support range for v1.0 in CHANGELOG
  • df56183 ✨ Contrib Rocks link
  • aa09e1d πŸ”§ Minimum Ruby is now 2.7
  • 6574ac4 πŸ”§ Minimum Ruby is now 2.7
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [oauth](https://github.com/oauth-xx/oauth-ruby) from 0.5.10 to 1.1.0.
- [Release notes](https://github.com/oauth-xx/oauth-ruby/releases)
- [Changelog](https://github.com/oauth-xx/oauth-ruby/blob/migrated/CHANGELOG.md)
- [Commits](oauth-xx/oauth-ruby@v0.5.10...v1.1.0)

---
updated-dependencies:
- dependency-name: oauth
  dependency-type: indirect
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Aug 30, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code
Projects
None yet
0 participants