[PR #7001] build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.20.0 #30084

Open
opened 2026-08-05 08:10:02 -04:00 by saavagebueno · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netbirdio/netbird/pull/7001
Author: @dependabot[bot]
Created: 7/30/2026
Status: 🔄 Open

Base: mainHead: dependabot/go_modules/github.com/coreos/go-oidc/v3-3.20.0


📝 Commits (1)

  • c2a48e6 build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.20.0

📊 Changes

2 files changed (+3 additions, -3 deletions)

View changed files

📝 go.mod (+1 -1)
📝 go.sum (+2 -2)

📄 Description

Bumps github.com/coreos/go-oidc/v3 from 3.18.0 to 3.20.0.

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.20.0

What's Changed

Full Changelog: https://github.com/coreos/go-oidc/compare/v3.19.0...v3.20.0

v3.19.0

What's Changed

New Contributors

Full Changelog: https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0

Commits
  • 75dfa5c oidc: add constants for "email" and "profile" scopes
  • a89f046 oidc: add API for determining when issuer URLs mismatch
  • 6a69b6d readme: update README and docs
  • f9049c9 oidc: ignore JWKs with unknown signing algorithms rather than failing
  • 2f178e0 SECURITY.md: add a security policy and point to project-level reporting
  • b3bc7da oidc: improve documentation for APIs
  • 0db9053 oidc: modernize with new Go APIs
  • 4204f0b oidc: add support for validating back-channel logout tokens
  • f77e01c fix: Key refresh should set no-cache to get most up to date keys
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netbirdio/netbird/pull/7001 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 7/30/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `dependabot/go_modules/github.com/coreos/go-oidc/v3-3.20.0` --- ### 📝 Commits (1) - [`c2a48e6`](https://github.com/netbirdio/netbird/commit/c2a48e62f38aca8c2b884a60f2183fc0d80a68ff) build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.20.0 ### 📊 Changes **2 files changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+1 -1) 📝 `go.sum` (+2 -2) </details> ### 📄 Description Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.18.0 to 3.20.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/coreos/go-oidc/releases">github.com/coreos/go-oidc/v3's releases</a>.</em></p> <blockquote> <h2>v3.20.0</h2> <h2>What's Changed</h2> <ul> <li>oidc: modernize with new Go APIs by <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/487">coreos/go-oidc#487</a></li> <li>oidc: improve documentation for APIs by <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/488">coreos/go-oidc#488</a></li> <li>SECURITY.md: add a security policy and point to project-level reporting by <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/489">coreos/go-oidc#489</a></li> <li>oidc: ignore JWKs with unknown signing algorithms rather than failing by <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/491">coreos/go-oidc#491</a></li> <li>readme: update README and docs by <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/492">coreos/go-oidc#492</a></li> <li>oidc: add API for determining when issuer URLs mismatch by <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/493">coreos/go-oidc#493</a></li> <li>oidc: add constants for &quot;email&quot; and &quot;profile&quot; scopes by <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/494">coreos/go-oidc#494</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/coreos/go-oidc/compare/v3.19.0...v3.20.0">https://github.com/coreos/go-oidc/compare/v3.19.0...v3.20.0</a></p> <h2>v3.19.0</h2> <h2>What's Changed</h2> <ul> <li>fix: Key refresh should set <code>no-cache</code> to get most up to date keys by <a href="https://github.com/Yanni8"><code>@​Yanni8</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/485">coreos/go-oidc#485</a></li> <li>oidc: add support for validating back-channel logout tokens by <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a> in <a href="https://redirect.github.com/coreos/go-oidc/pull/486">coreos/go-oidc#486</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Yanni8"><code>@​Yanni8</code></a> made their first contribution in <a href="https://redirect.github.com/coreos/go-oidc/pull/485">coreos/go-oidc#485</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0">https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/coreos/go-oidc/commit/75dfa5c0626c48e0ad8b761fdd9e1dc51cb8498a"><code>75dfa5c</code></a> oidc: add constants for &quot;email&quot; and &quot;profile&quot; scopes</li> <li><a href="https://github.com/coreos/go-oidc/commit/a89f0468ccc8e531b54f469053674a12c2258c72"><code>a89f046</code></a> oidc: add API for determining when issuer URLs mismatch</li> <li><a href="https://github.com/coreos/go-oidc/commit/6a69b6d27e137b9919e468417e438b02c51a54b2"><code>6a69b6d</code></a> readme: update README and docs</li> <li><a href="https://github.com/coreos/go-oidc/commit/f9049c99079786740d492714fb33b671464312dd"><code>f9049c9</code></a> oidc: ignore JWKs with unknown signing algorithms rather than failing</li> <li><a href="https://github.com/coreos/go-oidc/commit/2f178e0a9df71f65464a9a8d25c388e798303323"><code>2f178e0</code></a> SECURITY.md: add a security policy and point to project-level reporting</li> <li><a href="https://github.com/coreos/go-oidc/commit/b3bc7daa5743acd0b6c604ad7e5c9b609b6d39f4"><code>b3bc7da</code></a> oidc: improve documentation for APIs</li> <li><a href="https://github.com/coreos/go-oidc/commit/0db90530b3f5ab1808b26365441e366926b86f0b"><code>0db9053</code></a> oidc: modernize with new Go APIs</li> <li><a href="https://github.com/coreos/go-oidc/commit/4204f0b2b0f903070de5f51a459fe5e23faca113"><code>4204f0b</code></a> oidc: add support for validating back-channel logout tokens</li> <li><a href="https://github.com/coreos/go-oidc/commit/f77e01c50994c6ad4f4c3a6ed3e2380bab1f1ff2"><code>f77e01c</code></a> fix: Key refresh should set no-cache to get most up to date keys</li> <li>See full diff in <a href="https://github.com/coreos/go-oidc/compare/v3.18.0...v3.20.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/coreos/go-oidc/v3&package-manager=go_modules&previous-version=3.18.0&new-version=3.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
saavagebueno added the pull-request label 2026-08-05 08:10:02 -04:00
Sign in to join this conversation.
No Label pull-request
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#30084