Build(deps): Bump assent from 0.2.10 to 0.3.0

[dependabot]

Bumps assent from 0.2.10 to 0.3.0.

Release notes

Sourced from assent's releases.

v0.3.0

This release consists of breaking changes.

Userinfo is now cast to the correct type per https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.5.1 (thanks @​robinvdvleuten). When upgrading you must ensure that you do not depend on a specific type in the returned userinfo for any of the strategies listed below.

Breaking changes

• Assent.Strategy.Auth0.authorize_url/2 no longer accepts :domain config, use :base_url instead #178
• Assent.Strategy.Basecamp.callback/2 now encodes sub as a binary() instead of an integer() #167
• Assent.Strategy.Github.callback/2 now encodes sub as a binary() instead of an integer() #167
• Assent.Strategy.Google now encodes email_verified as a boolean() instead of a binary() #167
• Assent.Strategy.Google now return hd instead of google_hd #169
• Assent.Strategy.Strava.callback/2 now encodes sub as a binary() instead of an integer() #167
• Assent.Strategy.Telegram.callback/2 now encodes sub as a binary() instead of an integer() #167
• Assent.Strategy.Twitter.callback/2 now encodes sub as a binary() instead of an integer() #167
• Assent.Strategy.VK.callback/2 now encodes sub as a binary() instead of an integer() #167
• :site configuration option removed, use :base_url instead #174
• Assent.Strategy.OAuth2.authorize_url/2 no longer allows :state in :authorization_params #174
• Assent.Strategy.decode_response/2removed, use Assent.HTTPAdapter.decode_response/2 instead #174
• Assent.Strategy.request/5 removed, use Assent.Strategy.http_request/5 instead #174
• Assent.Strategy.prune/1 removed #167
• Assent.MissingParamError no longer accepts :expected_key, use :key instead #174
• Assent.HTTPAdapter.Mint removed #174
• Assent.Config removed #174

Changes

• Assent.Strategy.Auth0 now uses OIDC instead of OAuth 2.0 base strategy #178
• Assent.Strategy.Gitlab now uses OIDC instead of OAuth 2.0 base strategy #179
• Assent.Strategy.Google now uses OIDC instead of OAuth 2.0 base strategy #169
• Assent.Strategy.normalize_userinfo/2 now casts the user claims per OpenID specification #167

v0.2.13

• Assent.Strategy.Auth0 deprecated :domain config option in favor of :base_url #177

v0.2.12

• Assent now has a module doc #176

v0.2.11

• Default to using JSON instead of Jason for JSON parsing on Elixir 1.18 #161
• Assent.Strategy.OAuth2 now supports :state config option #162
• Assent.Strategy.OAuth2 :state override in :authorization_parms has been deprecated #162
• Assent.Strategy.OIDC now supports none authentication method #163 (thanks @​tommasop)
• Assent.Strategy.Bitbucket added #160 (thanks @​djgoku)
• Assent.Strategy.Twitch added #159 (thanks @​s0er3n)
• Assent.Strategy.Telegram added #152 (thanks @​vheathen)
• Assent.Strategy.Zitadel added #154 (thanks @​tommasop)
• Assent.Strategy.Facebook.fetch_user/2 fixed bug with user not being decoded #168 (thanks @​JohnDoneth)

... (truncated)

Changelog

Sourced from assent's changelog.

v0.3.0 (2025-01-06)

This release consists of breaking changes.

Userinfo is now cast to the correct type per https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.5.1. When upgrading you must ensure that you do not depend on a specific type in the returned userinfo for any of the strategies listed below.

Breaking changes

• Assent.Strategy.Auth0.authorize_url/2 no longer accepts :domain config, use :base_url instead
• Assent.Strategy.Basecamp.callback/2 now encodes sub as a binary() instead of an integer()
• Assent.Strategy.Github.callback/2 now encodes sub as a binary() instead of an integer()
• Assent.Strategy.Google now encodes email_verified as a boolean() instead of a binary()
• Assent.Strategy.Google now return hd instead of google_hd
• Assent.Strategy.Strava.callback/2 now encodes sub as a binary() instead of an integer()
• Assent.Strategy.Telegram.callback/2 now encodes sub as a binary() instead of an integer()
• Assent.Strategy.Twitter.callback/2 now encodes sub as a binary() instead of an integer()
• Assent.Strategy.VK.callback/2 now encodes sub as a binary() instead of an integer()
• :site configuration option removed, use :base_url instead
• Assent.Strategy.OAuth2.authorize_url/2 no longer allows :state in :authorization_params
• Assent.Strategy.decode_response/2removed, use Assent.HTTPAdapter.decode_response/2 instead
• Assent.Strategy.request/5 removed, use Assent.Strategy.http_request/5 instead
• Assent.Strategy.prune/1 removed
• Assent.MissingParamError no longer accepts :expected_key, use :key instead
• Assent.HTTPAdapter.Mint removed
• Assent.Config removed

Changes

• Assent.Strategy.Auth0 now uses OIDC instead of OAuth 2.0 base strategy
• Assent.Strategy.Gitlab now uses OIDC instead of OAuth 2.0 base strategy
• Assent.Strategy.Google now uses OIDC instead of OAuth 2.0 base strategy
• Assent.Strategy.normalize_userinfo/2 now casts the user claims per OpenID specification

v0.2

The CHANGELOG for v0.2 releases can be found in the v0.2 branch.

Commits

• 8d36b27 Roll version
• 2fd666c Merge pull request #167 from pow-auth/cast-user-claims-values
• d453a8f Cast user claim values
• f694eff Merge pull request #179 from pow-auth/gitlab-oidc
• 773a986 Switch to OIDC for Gitlab strategy
• b4f708a Merge pull request #178 from pow-auth/auth0-oidc
• b4ecb4e Use OIDC for Auth0
• 2676c79 Merge pull request #177 from pow-auth/deprecate-auth0-domain-config
• 0647b8c Merge pull request #169 from pow-auth/google-oidc
• e175d03 Switch to Google OIDC
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.