dependabot[bot] opened a new pull request, #252: URL: https://github.com/apache/doris-mcp-server/pull/252
Bumps [authlib](https://github.com/authlib/authlib) from 1.6.12 to 1.9.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/authlib/authlib/releases";>authlib's releases</a>.</em></p> <blockquote> <h2>v1.9.1</h2> <p>Changelog: <a href="https://docs.authlib.org/en/stable/upgrades/changelog.html#changelog-1-9-1";>https://docs.authlib.org/en/stable/upgrades/changelog.html#changelog-1-9-1</a></p> <h2>What's Changed</h2> <ul> <li>Use scriv to handle the changelog by <a href="https://github.com/azmeuk";><code>@azmeuk</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/954";>authlib/authlib#954</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/authlib/authlib/compare/v1.9.0...v1.9.1";>https://github.com/authlib/authlib/compare/v1.9.0...v1.9.1</a></p> <h2>v1.9.0</h2> <h2>What's Changed</h2> <ul> <li>feat: add Identity Assertion JWT Authorization Grant (ID-JAG) by <a href="https://github.com/BinoyOza-okta";><code>@BinoyOza-okta</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/898";>authlib/authlib#898</a></li> <li>Fix empty signatures validation in JWS JSON deserialization by <a href="https://github.com/loporto";><code>@loporto</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/938";>authlib/authlib#938</a></li> <li>fix(jose): reject boolean values for NumericDate claims by <a href="https://github.com/cpruijsen";><code>@cpruijsen</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/942";>authlib/authlib#942</a></li> <li>fix(client): avoid duplicated OAuth 1.0 parameters in signed requests by <a href="https://github.com/cpruijsen";><code>@cpruijsen</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/943";>authlib/authlib#943</a></li> <li>OAuth2 token fetch crashes with JSONDecodeError instead of a catchable error on rate-limit responses by <a href="https://github.com/juneja-varun";><code>@juneja-varun</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/929";>authlib/authlib#929</a></li> <li>docs: add i18n wrappers in conf.py and templates by <a href="https://github.com/hwhsu1231";><code>@hwhsu1231</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/901";>authlib/authlib#901</a></li> <li>fix(oauth): enforce JOSE key, scope, and audience validation by <a href="https://github.com/lepture";><code>@lepture</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/945";>authlib/authlib#945</a></li> <li>AsyncOpenIDMixin.parse_id_token: return None when id_token is absent, matching the sync client by <a href="https://github.com/ckarnell";><code>@ckarnell</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/924";>authlib/authlib#924</a></li> <li>fix(oauth): enforce nonce and JAR request validation by <a href="https://github.com/lepture";><code>@lepture</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/949";>authlib/authlib#949</a></li> <li>fix(oauth): require client authentication for ID-JAG grants by <a href="https://github.com/lepture";><code>@lepture</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/955";>authlib/authlib#955</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/BinoyOza-okta";><code>@BinoyOza-okta</code></a> made their first contribution in <a href="https://redirect.github.com/authlib/authlib/pull/898";>authlib/authlib#898</a></li> <li><a href="https://github.com/loporto";><code>@loporto</code></a> made their first contribution in <a href="https://redirect.github.com/authlib/authlib/pull/938";>authlib/authlib#938</a></li> <li><a href="https://github.com/cpruijsen";><code>@cpruijsen</code></a> made their first contribution in <a href="https://redirect.github.com/authlib/authlib/pull/942";>authlib/authlib#942</a></li> <li><a href="https://github.com/juneja-varun";><code>@juneja-varun</code></a> made their first contribution in <a href="https://redirect.github.com/authlib/authlib/pull/929";>authlib/authlib#929</a></li> <li><a href="https://github.com/hwhsu1231";><code>@hwhsu1231</code></a> made their first contribution in <a href="https://redirect.github.com/authlib/authlib/pull/901";>authlib/authlib#901</a></li> <li><a href="https://github.com/ckarnell";><code>@ckarnell</code></a> made their first contribution in <a href="https://redirect.github.com/authlib/authlib/pull/924";>authlib/authlib#924</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/authlib/authlib/compare/v1.8.0...v1.9.0";>https://github.com/authlib/authlib/compare/v1.8.0...v1.9.0</a></p> <h2>v1.8.0</h2> <h2>What's Changed</h2> <ul> <li>Prefer <code>id_token_signed_response_alg</code> client metadata to guess algs by <a href="https://github.com/azmeuk";><code>@azmeuk</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/888";>authlib/authlib#888</a></li> <li>fix: Catch InvalidKeyIdError in RFC 9068 JWTBearerTokenValidator by <a href="https://github.com/liudonggalaxy";><code>@liudonggalaxy</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/891";>authlib/authlib#891</a></li> <li>fix: make leeway configurable in JWTBearerTokenValidator by <a href="https://github.com/mondi04";><code>@mondi04</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/903";>authlib/authlib#903</a></li> <li>feat: add default jti claim to sign_jwt_bearer_assertion by <a href="https://github.com/liudonggalaxy";><code>@liudonggalaxy</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/897";>authlib/authlib#897</a></li> <li>fix(oauth): cast sub claim to string in JWTBearerTokenGenerator by <a href="https://github.com/levinKaus";><code>@levinKaus</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/911";>authlib/authlib#911</a></li> <li>Declare lower bounds for dependencies by <a href="https://github.com/azmeuk";><code>@azmeuk</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/912";>authlib/authlib#912</a></li> <li>feat(client): use httpx2 instead of httpx by <a href="https://github.com/levinKaus";><code>@levinKaus</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/909";>authlib/authlib#909</a></li> <li>Fix RFC7523 malformed claims handling by <a href="https://github.com/azmeuk";><code>@azmeuk</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/916";>authlib/authlib#916</a></li> <li>Fix httpx oauth1 binary form data by <a href="https://github.com/shc261392";><code>@shc261392</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/779";>authlib/authlib#779</a></li> <li>fix(starlette_client): remove default= keyword from config.get calls by <a href="https://github.com/aliaksei-protchanka";><code>@aliaksei-protchanka</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/770";>authlib/authlib#770</a></li> <li>Added client_id parameter to AssertionClient by <a href="https://github.com/vilmar-hillow";><code>@vilmar-hillow</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/476";>authlib/authlib#476</a></li> <li>fix(oauth): save device credential with authenticated client id by <a href="https://github.com/arpitjain099";><code>@arpitjain099</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/908";>authlib/authlib#908</a></li> <li>fix(oauth1): correct protocol name in InsecureTransportError description by <a href="https://github.com/RavSinghChandan";><code>@RavSinghChandan</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/919";>authlib/authlib#919</a></li> <li>fix(client): client can be flexible with jwt's header by <a href="https://github.com/lepture";><code>@lepture</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/922";>authlib/authlib#922</a></li> <li>fix(oidc): omit claims when the value is None by <a href="https://github.com/lepture";><code>@lepture</code></a> in <a href="https://redirect.github.com/authlib/authlib/pull/923";>authlib/authlib#923</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/authlib/authlib/commit/46b94870d915ee77430da8fa2a358378d90b3a45";><code>46b9487</code></a> chore: release 1.9.1</li> <li><a href="https://github.com/authlib/authlib/commit/abb3f49dd97b086ade807942957ffdf4949d9f30";><code>abb3f49</code></a> docs: use the issuer identifier as ID-JAG audience and fix broken links</li> <li><a href="https://github.com/authlib/authlib/commit/1bd2a313492ce0a4d0571c150730907aa3fc91ff";><code>1bd2a31</code></a> Merge commit from fork</li> <li><a href="https://github.com/authlib/authlib/commit/311da11e41ae44fac570ac5224a45e0fec993939";><code>311da11</code></a> docs: more detailed PKCE instructions</li> <li><a href="https://github.com/authlib/authlib/commit/873f72c0345a6fc9b303b2e686bab29cab90f4ac";><code>873f72c</code></a> docs: rpinitiated instructions</li> <li><a href="https://github.com/authlib/authlib/commit/4ff30db442c70e29486e1982cb0ad37c037f5f4b";><code>4ff30db</code></a> Merge commit from fork</li> <li><a href="https://github.com/authlib/authlib/commit/9a86ff3e54e3c87d419d425c105f03fd84f3fe39";><code>9a86ff3</code></a> docs: rpinitiated sequence chart</li> <li><a href="https://github.com/authlib/authlib/commit/1c357571408cad6c9a3cc08ea6df96df5e4edaf7";><code>1c35757</code></a> docs: RFC 9101 sequence chart</li> <li><a href="https://github.com/authlib/authlib/commit/a755e2869f07710a5077784d04807bbe9bfd8026";><code>a755e28</code></a> docs: add a sequence diagram to the token introspection page</li> <li><a href="https://github.com/authlib/authlib/commit/1996c567ed325c5e328f3c00dc7452ff79a89bd2";><code>1996c56</code></a> docs: PKCE flow chart illustration</li> <li>Additional commits viewable in <a href="https://github.com/authlib/authlib/compare/v1.6.12...v1.9.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/doris-mcp-server/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
