Skip to content

Comments

Bump golang.org/x/oauth2 from 0.9.0 to 0.14.0#753

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/golang.org/x/oauth2-0.14.0
Closed

Bump golang.org/x/oauth2 from 0.9.0 to 0.14.0#753
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/golang.org/x/oauth2-0.14.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 9, 2023

Bumps golang.org/x/oauth2 from 0.9.0 to 0.14.0.

Commits
  • e067960 go.mod: update golang.org/x dependencies
  • 4c91c17 google: adds header to security considerations section
  • 3c5dbf0 go.mod: update golang.org/x dependencies
  • 11625cc google: add authorized_user conditional to Credentials.UniverseDomain
  • 8d6d45b google: add Credentials.UniverseDomain to support TPC
  • 43b6a7b google: adding support for external account authorized user
  • 14b275c oauth2: workaround misspelling of verification_uri
  • 18352fc google/internal/externalaccount: adding BYOID Metrics
  • 9095a51 oauth2: clarify error if endpoint missing DeviceAuthURL
  • 2d9e4a2 oauth2/google: remove meta validations for aws external credentials
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 9, 2023
@github-actions github-actions bot enabled auto-merge (squash) November 9, 2023 17:19
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from 144846f to c8cd4be Compare November 9, 2023 17:26
@guardrails
Copy link

guardrails bot commented Nov 9, 2023

All previously detected findings have been fixed. Good job! 👍🎉

We will keep this comment up-to-date as you go along and notify you of any security issues that we identify.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from c8cd4be to b448760 Compare November 9, 2023 17:32
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from b448760 to d4bff67 Compare November 10, 2023 17:46
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from d4bff67 to 15697d0 Compare November 10, 2023 17:54
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from 15697d0 to 697d743 Compare November 13, 2023 17:20
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from 697d743 to 5cb4c5b Compare November 14, 2023 18:09
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from 5cb4c5b to b843160 Compare November 15, 2023 17:24
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from b843160 to 62b3632 Compare November 17, 2023 17:28
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from 62b3632 to f0abe11 Compare November 20, 2023 17:56
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from f0abe11 to 31a3a57 Compare November 21, 2023 17:59
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from 31a3a57 to b14d778 Compare November 22, 2023 17:15
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from b14d778 to cc8bdea Compare November 23, 2023 17:12
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.9.0 to 0.14.0.
- [Commits](golang/oauth2@v0.9.0...v0.14.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch from cc8bdea to 64ac61c Compare November 27, 2023 17:40
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 28, 2023

Superseded by #770.

@dependabot dependabot bot closed this Nov 28, 2023
auto-merge was automatically disabled November 28, 2023 18:04

Pull request was closed

@dependabot dependabot bot deleted the dependabot/go_modules/golang.org/x/oauth2-0.14.0 branch November 28, 2023 18:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants