Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump OpenIddict.EntityFrameworkCore and Microsoft.EntityFrameworkCore in /Application #153

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 19, 2024

Bumps OpenIddict.EntityFrameworkCore and Microsoft.EntityFrameworkCore. These dependencies needed to be updated together.
Updates OpenIddict.EntityFrameworkCore from 4.4.0 to 5.7.1

Release notes

Sourced from OpenIddict.EntityFrameworkCore's releases.

5.7.1

This release introduces the following changes:

  • The LinkedIn integration was updated to react to a breaking change introduced by LinkedIn in their discovery document and that was causing an issuer validation error in the OpenIddict client due to the issuer being changed from https://www.linkedin.com/ to https://www.linkedin.com/oauth (thanks @​DovydasNavickas! ❤️).

[!IMPORTANT] If your code relies on the issuer identity, make sure you update your code/database to use https://www.linkedin.com/oauth instead of https://www.linkedin.com/.

5.7.0

This release introduces the following changes:

  • To increase interoperability and support advanced scenarios, the OpenIddict server now allows using OAuth 2.0 Proof Key for Code Exchange with response_type combinations containing token when response type permissions are not disabled and the appropriate response type permissions are granted to the client application. See openiddict/openiddict-core#2088 for more information about this change.

  • The embedded web server that is part of the OpenIddict client system integration package now natively supports POST callbacks, allowing to use the implicit and hybrid flows - that require response_mode=form_post - in desktop applications.

  • response_mode=fragment is now fully supported by the system integration package when using protocol activations or the UWP web authentication broker.

  • The OpenIddict client and its ASP.NET Core/OWIN integrations now support setting a specific code_challenge_method/grant_type/response_mode/response_type for each challenge operation:

// Ask OpenIddict to initiate the authentication flow (typically, by starting the system browser).
var result = await _service.ChallengeInteractivelyAsync(new()
{
    // Note: both the grant type and the response type MUST be set when using a specific flow:
    GrantType = GrantTypes.AuthorizationCode,
    ResponseType = ResponseTypes.Code + ' ' + ResponseTypes.IdToken
});
var properties = new AuthenticationProperties(new Dictionary<string, string>
{
    // Note: both the grant type and the response type MUST be set when using a specific flow:
    [OpenIddictClientAspNetCoreConstants.Properties.GrantType] = GrantTypes.AuthorizationCode,
    [OpenIddictClientAspNetCoreConstants.Properties.ResponseType] = ResponseTypes.Code + ' ' + ResponseTypes.IdToken
})
{
    RedirectUri = Url.IsLocalUrl(returnUrl) ? returnUrl : "/"
};
return Challenge(properties, OpenIddictClientAspNetCoreDefaults.AuthenticationScheme);

  • The following providers are now supported by the OpenIddict.Client.WebIntegration package:

  • Behavior change: for boolean values, OpenIddictParameter.ToString() and the string?/string?[]? conversion operators now return true and false instead of True and False.

... (truncated)

Commits
  • 460fc4f Update Versions.props to build 5.7.1 packages
  • 62ce984 Fix the LinkedIn provider to use the new issuer returned by the configuration...
  • 99c5e90 Update Versions.props to build 5.7.0 packages
  • 22ee0c9 Bump the .NET SDK and the .NET/ASP.NET Core dependencies
  • bb9b8dc Bump Wilson to 7.6.1
  • 683efb5 Fix the XML documentation associated with the AdjustRedirectUriInTokenRequest...
  • 710946d Fix the ExtractWebAuthenticationResultData event handler to correctly set the...
  • e1b0ea2 Add Weibo to the list of supported providers
  • 1459d94 Allow negotiating response_mode=fragment/form_post in more cases
  • da5f9c4 Update the sponsors section
  • Additional commits viewable in compare view

Updates Microsoft.EntityFrameworkCore from 8.0.1 to 8.0.6

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

EF Core 8.0.6

This is a patch release of EF Core 8.0 containing only updates to dependencies. There are no additional fixes in this release beyond those already shipped in EF Core 8.0.5.

EF Core 8.0.5

This is a patch release of EF Core 8.0 containing only updates to dependencies. There are no additional fixes in this release beyond those already shipped in EF Core 8.0.4.

EF Core 8.0.4 is available on NuGet now. This is a patch release of EF Core 8 (EF8) containing only important bug fixes:

EF Core 8.0.3 is available on NuGet now. This is a patch release of EF Core 8 (EF8) containing only important bug fixes:

EF Core 8.0.2 is available on NuGet now. This is a patch release of EF Core 8 (EF8) containing only important bug fixes:

... (truncated)

Commits
  • 6a2be34 Update to runtime 226073
  • ad2e6b2 Update to arcade with WiX fix (225805)
  • e53280a Update branding to 8.0.6 (#33659)
  • f42a208 Merged PR 39039: [internal/release/8.0] Update dependencies from dnceng/inter...
  • 59616ed [internal/release/8.0] Update dependencies from dnceng/internal/dotnet-runtime
  • e04487d [internal/release/8.0] Update dependencies from dnceng/internal/dotnet-runtime
  • 3d36306 Merge in 'release/8.0' changes
  • 4900726 Update dependencies from https://github.com/dotnet/arcade build 20240404.3 (#...
  • b8e872c Merge in 'release/8.0' changes
  • c12b6dc Merge pull request #33499 from vseanreesermsft/internal-merge-8.0-2024-04-09-...
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [OpenIddict.EntityFrameworkCore](https://github.com/openiddict/openiddict-core) and [Microsoft.EntityFrameworkCore](https://github.com/dotnet/efcore). These dependencies needed to be updated together.

Updates `OpenIddict.EntityFrameworkCore` from 4.4.0 to 5.7.1
- [Release notes](https://github.com/openiddict/openiddict-core/releases)
- [Commits](openiddict/openiddict-core@4.4.0...5.7.1)

Updates `Microsoft.EntityFrameworkCore` from 8.0.1 to 8.0.6
- [Release notes](https://github.com/dotnet/efcore/releases)
- [Commits](dotnet/efcore@v8.0.1...v8.0.6)

---
updated-dependencies:
- dependency-name: OpenIddict.EntityFrameworkCore
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Copy link

Test Results

14 tests   14 ✅  0s ⏱️
 1 suites   0 💤
 1 files     0 ❌

Results for commit 7a0670e.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants