mirror of
https://github.com/evroon/bracket.git
synced 2026-04-19 23:07:01 -04:00
77e91508df
Bumps [fastapi-sso](https://github.com/tomasvotava/fastapi-sso) from 0.18.0 to 0.19.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tomasvotava/fastapi-sso/releases">fastapi-sso's releases</a>.</em></p> <blockquote> <h2>0.19.0</h2> <p>️⚠️ A critical OAuth login CSRF vulnerability caused by missing <code>state</code> validation was reported by <a href="https://github.com/davidbors-snyk"><code>@davidbors-snyk</code></a> (Snyk Security Labs) in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/266">#266</a> and has been resolved in version <code>0.19.0</code>.</p> <p>Starting with <code>fastapi-sso==1.0.0</code>, OAuth <code>state</code> will be backed by a pluggable server-side store (in-memory by default, with support for external stores such as <code>Redis</code>).</p> <h2>What's Changed</h2> <ul> <li>chore(deps): bump the all group with 11 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/230">tomasvotava/fastapi-sso#230</a></li> <li>chore(deps): bump the all group with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/231">tomasvotava/fastapi-sso#231</a></li> <li>chore(deps): bump the all group with 6 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/232">tomasvotava/fastapi-sso#232</a></li> <li>chore(deps): bump the all group with 4 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/233">tomasvotava/fastapi-sso#233</a></li> <li>chore(deps-dev): bump the all group with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/234">tomasvotava/fastapi-sso#234</a></li> <li>chore(deps-dev): bump the all group with 2 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/235">tomasvotava/fastapi-sso#235</a></li> <li>chore(deps): bump the all group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/237">tomasvotava/fastapi-sso#237</a></li> <li>chore(deps): bump the all group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/239">tomasvotava/fastapi-sso#239</a></li> <li>chore(deps-dev): bump the all group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/241">tomasvotava/fastapi-sso#241</a></li> <li>chore(deps): bump the all group with 5 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/242">tomasvotava/fastapi-sso#242</a></li> <li>chore(deps): bump the all group across 1 directory with 10 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/247">tomasvotava/fastapi-sso#247</a></li> <li>chore(deps-dev): bump the all group with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/248">tomasvotava/fastapi-sso#248</a></li> <li>chore(deps-dev): bump the all group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/251">tomasvotava/fastapi-sso#251</a></li> <li>chore(deps-dev): bump the all group with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/252">tomasvotava/fastapi-sso#252</a></li> <li>chore(deps-dev): bump the all group with 2 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/253">tomasvotava/fastapi-sso#253</a></li> <li>chore(deps): bump the all group with 2 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/254">tomasvotava/fastapi-sso#254</a></li> <li>chore(deps): bump the all group across 1 directory with 12 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/259">tomasvotava/fastapi-sso#259</a></li> <li>fix: enforce state validation by <a href="https://github.com/davidbors-snyk"><code>@davidbors-snyk</code></a> in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/267">tomasvotava/fastapi-sso#267</a></li> <li>chore(deps): bump the all group across 1 directory with 7 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/265">tomasvotava/fastapi-sso#265</a></li> <li>docs(<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/266">#266</a>): warn against using state as an arbitrary data transport by <a href="https://github.com/tomasvotava"><code>@tomasvotava</code></a> in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/269">tomasvotava/fastapi-sso#269</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/davidbors-snyk"><code>@davidbors-snyk</code></a> made their first contribution in <a href="https://redirect.github.com/tomasvotava/fastapi-sso/pull/267">tomasvotava/fastapi-sso#267</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tomasvotava/fastapi-sso/compare/0.18.0...0.19.0">https://github.com/tomasvotava/fastapi-sso/compare/0.18.0...0.19.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="c905eafe2d"><code>c905eaf</code></a> chore: 0.18.0 => 0.19.0</li> <li><a href="94343bf276"><code>94343bf</code></a> docs(<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/266">#266</a>): warn against using state as an arbitrary data transport (<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/269">#269</a>)</li> <li><a href="d057c1d4db"><code>d057c1d</code></a> chore(deps): bump the all group across 1 directory with 7 updates (<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/265">#265</a>)</li> <li><a href="6117d1a5ad"><code>6117d1a</code></a> fix: enforce state validation (<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/267">#267</a>)</li> <li><a href="da63c19bca"><code>da63c19</code></a> chore(deps): bump the all group across 1 directory with 12 updates (<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/259">#259</a>)</li> <li><a href="0ccaeddf9e"><code>0ccaedd</code></a> chore(deps): bump the all group with 2 updates (<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/254">#254</a>)</li> <li><a href="a43e62e67d"><code>a43e62e</code></a> chore(deps-dev): bump the all group with 2 updates (<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/253">#253</a>)</li> <li><a href="8cd706d335"><code>8cd706d</code></a> chore(deps-dev): bump the all group with 3 updates (<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/252">#252</a>)</li> <li><a href="ea769fa223"><code>ea769fa</code></a> chore(deps-dev): bump the all group across 1 directory with 3 updates (<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/251">#251</a>)</li> <li><a href="7aba1e6ea4"><code>7aba1e6</code></a> chore(deps-dev): bump the all group with 3 updates (<a href="https://redirect.github.com/tomasvotava/fastapi-sso/issues/248">#248</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tomasvotava/fastapi-sso/compare/0.18.0...0.19.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>