From 88e85c84c629d6024e1cb827a817b2f4f6402daf Mon Sep 17 00:00:00 2001 From: "renovate[bot]" Date: Sat, 8 Nov 2025 20:06:35 +0000 Subject: [PATCH] fix(deps): update module github.com/coreos/go-oidc/v3 to v3.16.0 (#3) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `v3.11.0` -> `v3.16.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcoreos%2fgo-oidc%2fv3/v3.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcoreos%2fgo-oidc%2fv3/v3.11.0/v3.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes
coreos/go-oidc (github.com/coreos/go-oidc/v3) ### [`v3.16.0`](https://github.com/coreos/go-oidc/releases/tag/v3.16.0) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0) #### What's Changed - refactor: Remove unused time injection from RemoteKeySet by [@​ponimas](https://github.com/ponimas) in [#​466](https://github.com/coreos/go-oidc/pull/466) - bump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net dependency by [@​wardviaene](https://github.com/wardviaene) in [#​467](https://github.com/coreos/go-oidc/pull/467) #### New Contributors - [@​wardviaene](https://github.com/wardviaene) made their first contribution in [#​467](https://github.com/coreos/go-oidc/pull/467) **Full Changelog**: ### [`v3.15.0`](https://github.com/coreos/go-oidc/releases/tag/v3.15.0) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.14.1...v3.15.0) #### What's Changed - oidc: verify the ID Token's signature before processing claims by [@​ericchiang](https://github.com/ericchiang) in [#​464](https://github.com/coreos/go-oidc/pull/464) **Full Changelog**: ### [`v3.14.1`](https://github.com/coreos/go-oidc/releases/tag/v3.14.1) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.14.0...v3.14.1) #### What's Changed - oidctest: fix import by [@​ericchiang](https://github.com/ericchiang) in [#​457](https://github.com/coreos/go-oidc/pull/457) **Full Changelog**: ### [`v3.14.0`](https://github.com/coreos/go-oidc/releases/tag/v3.14.0) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.0) #### What's Changed - oidc/oidctest: add new package by [@​ericchiang](https://github.com/ericchiang) in [#​400](https://github.com/coreos/go-oidc/pull/400) **Full Changelog**: ### [`v3.13.0`](https://github.com/coreos/go-oidc/releases/tag/v3.13.0) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.12.0...v3.13.0) #### What's Changed - \*: bump dependency versions by [@​ericchiang](https://github.com/ericchiang) in [#​453](https://github.com/coreos/go-oidc/pull/453) **Full Changelog**: ### [`v3.12.0`](https://github.com/coreos/go-oidc/releases/tag/v3.12.0) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.11.0...v3.12.0) #### What's Changed - oidc: add JSON tags to ProviderConfig by [@​ericchiang](https://github.com/ericchiang) in [#​446](https://github.com/coreos/go-oidc/pull/446) **Full Changelog**:
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://git.tainton.uk/repos/saml-oidc-bridge/pulls/3 Co-authored-by: renovate[bot] Co-committed-by: renovate[bot] --- go.mod | 12 ++++++------ go.sum | 6 ++++++ 2 files changed, 12 insertions(+), 6 deletions(-) diff --git a/go.mod b/go.mod index a37d4b6..3f54e26 100644 --- a/go.mod +++ b/go.mod @@ -1,21 +1,21 @@ module shamilnunhuck/saml-oidc-bridge -go 1.22 +go 1.24.0 require ( - github.com/coreos/go-oidc/v3 v3.11.0 + github.com/beevik/etree v1.5.0 + github.com/coreos/go-oidc/v3 v3.16.0 github.com/crewjam/saml v0.5.1 github.com/fsnotify/fsnotify v1.7.0 - golang.org/x/oauth2 v0.23.0 + github.com/russellhaering/goxmldsig v1.4.0 + golang.org/x/oauth2 v0.28.0 gopkg.in/yaml.v3 v3.0.1 ) require ( - github.com/beevik/etree v1.5.0 // indirect - github.com/go-jose/go-jose/v4 v4.0.2 // indirect + github.com/go-jose/go-jose/v4 v4.1.3 // indirect github.com/jonboulle/clockwork v0.2.2 // indirect github.com/mattermost/xml-roundtrip-validator v0.1.0 // indirect - github.com/russellhaering/goxmldsig v1.4.0 // indirect golang.org/x/crypto v0.33.0 // indirect golang.org/x/sys v0.30.0 // indirect ) diff --git a/go.sum b/go.sum index ff498f4..f098fb5 100644 --- a/go.sum +++ b/go.sum @@ -4,6 +4,8 @@ github.com/beevik/etree v1.5.0 h1:iaQZFSDS+3kYZiGoc9uKeOkUY3nYMXOKLl6KIJxiJWs= github.com/beevik/etree v1.5.0/go.mod h1:gPNJNaBGVZ9AwsidazFZyygnd+0pAU38N4D+WemwKNs= github.com/coreos/go-oidc/v3 v3.11.0 h1:Ia3MxdwpSw702YW0xgfmP1GVCMA9aEFWu12XUZ3/OtI= github.com/coreos/go-oidc/v3 v3.11.0/go.mod h1:gE3LgjOgFoHi9a4ce4/tJczr0Ai2/BoDhf0r5lltWI0= +github.com/coreos/go-oidc/v3 v3.16.0 h1:qRQUCFstKpXwmEjDQTIbyY/5jF00+asXzSkmkoa/mow= +github.com/coreos/go-oidc/v3 v3.16.0/go.mod h1:wqPbKFrVnE90vty060SB40FCJ8fTHTxSwyXJqZH+sI8= github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E= github.com/crewjam/saml v0.4.14 h1:g9FBNx62osKusnFzs3QTN5L9CVA/Egfgm+stJShzw/c= github.com/crewjam/saml v0.4.14/go.mod h1:UVSZCf18jJkk6GpWNVqcyQJMD5HsRugBPf4I1nl2mME= @@ -14,6 +16,8 @@ github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nos github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM= github.com/go-jose/go-jose/v4 v4.0.2 h1:R3l3kkBds16bO7ZFAEEcofK0MkrAJt3jlJznWZG0nvk= github.com/go-jose/go-jose/v4 v4.0.2/go.mod h1:WVf9LFMHh/QVrmqrOfqun0C45tMe3RoiKJMPvgWwLfY= +github.com/go-jose/go-jose/v4 v4.1.3 h1:CVLmWDhDVRa6Mi/IgCgaopNosCaHz7zrMeF9MlZRkrs= +github.com/go-jose/go-jose/v4 v4.1.3/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08= github.com/jonboulle/clockwork v0.2.2 h1:UOGuzwb1PwsrDAObMuhUnj0p5ULPj8V/xJ7Kx9qUBdQ= github.com/jonboulle/clockwork v0.2.2/go.mod h1:Pkfl5aHPm1nk2H9h0bjmnJD/BcgbGXUBGnn1kMkgxc8= github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= @@ -40,6 +44,8 @@ golang.org/x/crypto v0.33.0 h1:IOBPskki6Lysi0lo9qQvbxiQ+FvsCC/YWOecCHAixus= golang.org/x/crypto v0.33.0/go.mod h1:bVdXmD7IV/4GdElGPozy6U7lWdRXA4qyRVGJV57uQ5M= golang.org/x/oauth2 v0.23.0 h1:PbgcYx2W7i4LvjJWEbf0ngHV6qJYr86PkAV3bXdLEbs= golang.org/x/oauth2 v0.23.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI= +golang.org/x/oauth2 v0.28.0 h1:CrgCKl8PPAVtLnU3c+EDw6x11699EWlsDeWNWKdIOkc= +golang.org/x/oauth2 v0.28.0/go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8= golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI= golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=