Skip to content

build(deps): bump oidc-provider and @types/oidc-provider - #8099

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/multi-8580eeadab
Closed

build(deps): bump oidc-provider and @types/oidc-provider#8099
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/multi-8580eeadab

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps oidc-provider and @types/oidc-provider. These dependencies needed to be updated together.
Updates oidc-provider from 9.10.0 to 9.11.1

Release notes

Sourced from oidc-provider's releases.

v9.11.1

Fixes

  • correct typos and grammar in user-facing messages (1be723e)
  • derive server challenges from the clock rather than a timer (ba9d960), closes #1438
  • don't dereference a skipped refresh token lookup (fe6f90e)
  • don't emit grant.revoked twice during logout (a41d043)
  • only recognize dpop_jkt when DPoP is enabled (8c38630)
  • use the effective scope when resolving ID Token claims (ab1f41b)

Documentation

  • correct stale configuration documentation (6096bef)
  • document the missing emitted events (c295623)

Refactor

  • remove unused OIDCContext resolvedClaims (5fe6807)

v9.11.0

Features

  • allow customizing the OpenID4VCI Credential Endpoint expected audience (313eaa6)
Changelog

Sourced from oidc-provider's changelog.

9.11.1 (2026-07-27)

Fixes

  • correct typos and grammar in user-facing messages (1be723e)
  • derive server challenges from the clock rather than a timer (ba9d960), closes #1438
  • don't dereference a skipped refresh token lookup (fe6f90e)
  • don't emit grant.revoked twice during logout (a41d043)
  • only recognize dpop_jkt when DPoP is enabled (8c38630)
  • use the effective scope when resolving ID Token claims (ab1f41b)

Documentation

  • correct stale configuration documentation (6096bef)
  • document the missing emitted events (c295623)

Refactor

  • remove unused OIDCContext resolvedClaims (5fe6807)

9.11.0 (2026-07-26)

Features

  • allow customizing the OpenID4VCI Credential Endpoint expected audience (313eaa6)
Commits
  • c0d9247 chore(release): 9.11.1
  • 7ffd328 chore: bump packages
  • 4ec1b46 chore: drop end-of-life v8.x from the version tables
  • 1389be4 ci: run the linter
  • 6096bef docs: correct stale configuration documentation
  • c295623 docs: document the missing emitted events
  • 1be723e fix: correct typos and grammar in user-facing messages
  • 5fe6807 refactor: remove unused OIDCContext resolvedClaims
  • a41d043 fix: don't emit grant.revoked twice during logout
  • 8c38630 fix: only recognize dpop_jkt when DPoP is enabled
  • Additional commits viewable in compare view

Updates @types/oidc-provider from 9.5.0 to 9.11.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 4, 2026
@SamTV12345

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [oidc-provider](https://github.com/panva/node-oidc-provider) and [@types/oidc-provider](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/oidc-provider). These dependencies needed to be updated together.

Updates `oidc-provider` from 9.10.0 to 9.11.1
- [Release notes](https://github.com/panva/node-oidc-provider/releases)
- [Changelog](https://github.com/panva/node-oidc-provider/blob/main/CHANGELOG.md)
- [Commits](panva/node-oidc-provider@v9.10.0...v9.11.1)

Updates `@types/oidc-provider` from 9.5.0 to 9.11.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/oidc-provider)

---
updated-dependencies:
- dependency-name: "@types/oidc-provider"
  dependency-version: 9.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: oidc-provider
  dependency-version: 9.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-8580eeadab branch from 926c7f1 to cbce68d Compare August 5, 2026 18:32
@dependabot @github

dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #8116.

@dependabot dependabot Bot closed this Aug 7, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-8580eeadab branch August 7, 2026 15:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant