coreos/go-oidc (github.com/coreos/go-oidc/v3)
### [`v3.7.0`](https://togithub.com/coreos/go-oidc/releases/tag/v3.7.0)
[Compare Source](https://togithub.com/coreos/go-oidc/compare/v3.6.0...v3.7.0)
#### What's Changed
- io/ioutil deprecated by [@testwill](https://togithub.com/testwill) in [https://github.com/coreos/go-oidc/pull/380](https://togithub.com/coreos/go-oidc/pull/380)
- oidc: use %w verb for wrapping errors by [@rliebz](https://togithub.com/rliebz) in [https://github.com/coreos/go-oidc/pull/381](https://togithub.com/coreos/go-oidc/pull/381)
- vulnerability: bump dependencies \[CVE-2023-44487] by [@joshua-auchincloss](https://togithub.com/joshua-auchincloss) in [https://github.com/coreos/go-oidc/pull/393](https://togithub.com/coreos/go-oidc/pull/393)
#### New Contributors
- [@testwill](https://togithub.com/testwill) made their first contribution in [https://github.com/coreos/go-oidc/pull/380](https://togithub.com/coreos/go-oidc/pull/380)
- [@rliebz](https://togithub.com/rliebz) made their first contribution in [https://github.com/coreos/go-oidc/pull/381](https://togithub.com/coreos/go-oidc/pull/381)
- [@joshua-auchincloss](https://togithub.com/joshua-auchincloss) made their first contribution in [https://github.com/coreos/go-oidc/pull/393](https://togithub.com/coreos/go-oidc/pull/393)
**Full Changelog**: https://github.com/coreos/go-oidc/compare/v3.6.0...v3.7.0
Configuration
📅 Schedule: Branch creation - "before 4am" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
:warning: We detected 2 security issues in this pull request:
Vulnerable Libraries (2)
Severity | Details
:-: | :--
High | [pkg:golang/github.com/coreos/go-oidc/v3@v3.7.0](https://github.com/Darkness4/auth-htmx/blob/1c1d600adf37a1241442441009c88a00816bb4d1/go.mod#L6) upgrade to: *> v3.7.0*
High | [pkg:golang/golang.org/x/oauth2@v0.13.0](https://github.com/Darkness4/auth-htmx/blob/1c1d600adf37a1241442441009c88a00816bb4d1/go.mod#L17) upgrade to: *> v0.13.0*
More info on how to fix Vulnerable Libraries in [Go](https://docs.guardrails.io/docs/en/vulnerabilities/go/using_vulnerable_libraries.html?utm_source=ghpr).
This PR contains the following updates:
v3.6.0
->v3.7.0
Release Notes
coreos/go-oidc (github.com/coreos/go-oidc/v3)
### [`v3.7.0`](https://togithub.com/coreos/go-oidc/releases/tag/v3.7.0) [Compare Source](https://togithub.com/coreos/go-oidc/compare/v3.6.0...v3.7.0) #### What's Changed - io/ioutil deprecated by [@testwill](https://togithub.com/testwill) in [https://github.com/coreos/go-oidc/pull/380](https://togithub.com/coreos/go-oidc/pull/380) - oidc: use %w verb for wrapping errors by [@rliebz](https://togithub.com/rliebz) in [https://github.com/coreos/go-oidc/pull/381](https://togithub.com/coreos/go-oidc/pull/381) - vulnerability: bump dependencies \[CVE-2023-44487] by [@joshua-auchincloss](https://togithub.com/joshua-auchincloss) in [https://github.com/coreos/go-oidc/pull/393](https://togithub.com/coreos/go-oidc/pull/393) #### New Contributors - [@testwill](https://togithub.com/testwill) made their first contribution in [https://github.com/coreos/go-oidc/pull/380](https://togithub.com/coreos/go-oidc/pull/380) - [@rliebz](https://togithub.com/rliebz) made their first contribution in [https://github.com/coreos/go-oidc/pull/381](https://togithub.com/coreos/go-oidc/pull/381) - [@joshua-auchincloss](https://togithub.com/joshua-auchincloss) made their first contribution in [https://github.com/coreos/go-oidc/pull/393](https://togithub.com/coreos/go-oidc/pull/393) **Full Changelog**: https://github.com/coreos/go-oidc/compare/v3.6.0...v3.7.0Configuration
📅 Schedule: Branch creation - "before 4am" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.