Bump openid-client from 5.3.1 to 5.6.5

[dependabot[bot]]

Bumps openid-client from 5.3.1 to 5.6.5.

Release notes

Sourced from openid-client's releases.

v5.6.5

Refactor

• avoid use of prototype attributes in keystore queries (#660) (47a549c)

v5.6.4

Revert "fix: encode client_secret_basic - _ . ! ~ * ' ( ) characters"

This reverts commit 5a2ea80ef5e59ec0c03dbd97d82f551e24a9d348, even though it is the correct implementation some of the most widely used identity providers don't follow the specification.

v5.6.3

Fixes

• encode client_secret_basic - _ . ! ~ * ' ( ) characters (5a2ea80)

v5.6.2

Refactor

• issuer discovery (#637) (c228877)

Fixes

• add explicit Accept-Encoding header to http requests (abcb564), closes #648

v5.6.1

Fixes

• consistent space encoding in authorizationUrl (#627) (ad68223), closes #626

v5.6.0

Features

• experimental Bun support (a9d3a87), closes #622 #623

v5.5.0

Features

• DPoP: remove experimental warning, DPoP is now RFC9449 (133a022)

v5.4.3

Fixes

• handle empty client_secret with basic and post client auth (#610) (402c711), closes #609

v5.4.2

Fixes

• bump oidc-token-hash (20607e9)

... (truncated)

Changelog

Sourced from openid-client's changelog.

5.6.5 (2024-03-07)

Refactor

• avoid use of prototype attributes in keystore queries (#660) (47a549c)

5.6.4 (2024-01-06)

5.6.3 (2024-01-05)

Fixes

• encode client_secret_basic - _ . ! ~ * ' ( ) characters (5a2ea80)

5.6.2 (2023-12-22)

Refactor

• issuer discovery (#637) (c228877)

Fixes

• add explicit Accept-Encoding header to http requests (abcb564), closes #648

5.6.1 (2023-10-11)

Fixes

• consistent space encoding in authorizationUrl (#627) (ad68223), closes #626

5.6.0 (2023-10-03)

Features

• experimental Bun support (a9d3a87), closes #622 #623

5.5.0 (2023-09-08)

Features

• DPoP: remove experimental warning, DPoP is now RFC9449 (133a022)

5.4.3 (2023-07-06)

... (truncated)

Commits

• 219f956 chore(release): 5.6.5
• ea2cf24 chore: bump dependencies
• 47a549c refactor: avoid use of prototype attributes in keystore queries (#660)
• 7986346 chore: cleanup dead code
• 5886b0c chore: cleanup dead code
• 01cd89a ci: stop testing FAPI 1.0 ID-2
• 1971dcf chore(deps): bump actions/cache from 3 to 4 (#656)
• 563d9a3 chore: update TODO
• 439c82b chore: add TODO for future encoding of all non-alphanumerical characters
• 0e15612 chore(release): 5.6.4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions[bot]]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

package-lock.json

• jose@4.11.1
• jose@4.15.5
• oidc-token-hash@5.0.3
• openid-client@5.6.5
• oidc-token-hash@5.0.1
• openid-client@5.3.1

package.json

• openid-client@^5.6.5
• openid-client@^5.3.1