Skip to content

ci(dependabot-pip): bump oauthlib from 3.2.2 to 3.3.1 (RDT-1404) #67

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: v1
Choose a base branch
from
Open

ci(dependabot-pip): bump oauthlib from 3.2.2 to 3.3.1 (RDT-1404) #67

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 27, 2025 •
edited
Loading

Bumps oauthlib from 3.2.2 to 3.3.1.

Release notes

Sourced from oauthlib's releases.

v3.3.1

What's Changed

Full Changelog: oauthlib/oauthlib@v3.3.0...v3.3.1

3.3.0

What's Changed

See also CHANGELOG.md

New Contributors

... (truncated)

Changelog

Sourced from oauthlib's changelog.

3.3.1 (2025-06-19):

OAuth2.0 Client:

  • #906: fix regression of expires_in parsing when float in string.

3.3.0 (2025-06-17):

OAuth2.0 Provider:

  • OIDC: #879 Changed in how ui_locales is parsed
  • RFC8628: Added OAuth2.0 Device Authorization Grant support
  • PKCE: #876, #893 Fixed create_code_verifier length
  • OIDC: Pre-configured OIDC server to use Refresh Token by default

OAuth2.0 Common:

  • OAuth2Error: Allow 0 to be a valid state

OAuth2.0 Client:

  • #745: expires_at is forced to be an int
  • #899: expires_at clarification

General:

  • Removed Python 3.5, 3.6, 3.7 support
  • #859, #883: Added Python 3.12, 3.13 Support
  • Added dependency-review GitHub Action
  • Updated various references of license (SPDX identifier..)
  • Added GitHub Action for lint, replaced bandy with ruff, removed isort...
  • Migrated to GitHub Actions from Travis
  • Added Security Policy
Commits
  • a2779c6 Bump dependency-review
  • 38c2a8e Merge publish into build workflow
  • 9b65baf Bump version
  • 93fdf91 Add twine manual instructions
  • 6b65bd1 Merge branch 'master' into release-3.3.1
  • 34c9012 Handle expires_in as float to be backward compatible with 3.2.*
  • f5d58f8 Merge pull request #908 from oauthlib/rtd-cfg
  • 136b3e7 Add mandatory RTD configuration
  • 8929532 Add unit test sample based on 3.3.0 regression of expires_in
  • 9ed616d Merge pull request #903 from oauthlib/security-ghsa
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team July 27, 2025 10:18
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 27, 2025

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

@dependabot dependabot bot requested review from XDanielPaul and removed request for a team July 27, 2025 10:18
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 27, 2025
@github-actions github-actions bot changed the title ci(dependabot-pip): bump oauthlib from 3.2.2 to 3.3.1 ci(dependabot-pip): bump oauthlib from 3.2.2 to 3.3.1 (RDT-1404) Jul 27, 2025
@dependabot
ci(dependabot-pip): bump oauthlib from 3.2.2 to 3.3.1
721a054 
Bumps [oauthlib](https://github.com/oauthlib/oauthlib) from 3.2.2 to 3.3.1.
- [Release notes](https://github.com/oauthlib/oauthlib/releases)
- [Changelog](https://github.com/oauthlib/oauthlib/blob/master/CHANGELOG.rst)
- [Commits](oauthlib/oauthlib@v3.2.2...v3.3.1)

---
updated-dependencies:
- dependency-name: oauthlib
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/oauthlib-3.3.1 branch from 5395cdf to 721a054 Compare August 19, 2025 13:08
@dependabot dependabot bot requested a review from a team as a code owner August 19, 2025 13:08
@github-actions GitHub Actions
Copy link

github-actions bot commented Aug 19, 2025 •
edited
Loading

Warnings
⚠️

The source branch "dependabot/pip/oauthlib-3.3.1" incorrect format:

  • contains more than one slash (/). This can cause troubles with git sync.
    Please rename your branch.

👋 Hello dependabot[bot], we appreciate your contribution to this project!

📘 Please review the project's Contributions Guide for key guidelines on code, documentation, testing, and more.
Click to see more instructions ...


This automated output is generated by the PR linter DangerJS, which checks if your Pull Request meets the project's requirements and helps you fix potential issues.

DangerJS is triggered with each push event to a Pull Request and modify the contents of this comment.

Please consider the following:
- Danger mainly focuses on the PR structure and formatting and can't understand the meaning behind your code or changes.
- Danger is not a substitute for human code reviews; it's still important to request a code review from your colleagues.
- Resolve all warnings (⚠️ ) before requesting a review from human reviewers - they will appreciate it.
- To manually retry these Danger checks, please navigate to the Actions tab and re-run last Danger workflow.

Review and merge process you can expect ...


We do welcome contributions in the form of bug reports, feature requests and pull requests.

1. An internal issue has been created for the PR, we assign it to the relevant engineer.
2. They review the PR and either approve it or ask you for changes or clarifications.
3. Once the GitHub PR is approved we do the final review, collect approvals from core owners and make sure all the automated tests are passing.
- At this point we may do some adjustments to the proposed change, or extend it by adding tests or documentation.
4. If the change is approved and passes the tests it is merged into the default branch.

Generated by 🚫 dangerJS against 721a054

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@XDanielPaul XDanielPaul Awaiting requested review from XDanielPaul XDanielPaul is a code owner automatically assigned from espressif/ci

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants