Skip to content

chore(deps): bump oidc-provider from 8.5.1 to 9.7.0 in /dev/oidc-provider#4661

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/dev/oidc-provider/oidc-provider-9.7.0
Open

chore(deps): bump oidc-provider from 8.5.1 to 9.7.0 in /dev/oidc-provider#4661
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/dev/oidc-provider/oidc-provider-9.7.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps oidc-provider from 8.5.1 to 9.7.0.

Release notes

Sourced from oidc-provider's releases.

v9.7.0

Features

  • add configuration for limiting external resource body limits (0c424cd)
  • experimental support for Client ID Metadata Document (CIMD) (d5323f4)
  • prevent fetching special-use IP address resources (1548834)

Documentation

  • align section titles and auto-generate toc (287bfa8)
  • description fixes and various editorial edits (a8f4f15)
  • fix attestClientAuth link (9c6f095)
  • solve generated nested lists (d1ebcd2)
  • update README.md prose for experimental features (b029f47)
  • update the generated content to reflect the jsdoc structure (aa9f83b)

Refactor

  • extract setWWWAuthenticateHeader to a shared module (bb66e62)

v9.6.1

Refactor

  • extract NON_REJECTABLE_CLAIMS into shared constant (2b7c025)
  • extract shared grant handler helpers to reduce duplication (f5eee9e)
  • extract shared token finder for introspection and revocation (666c2b0)

Fixes

  • required PAR should not affect CIBA and DAG (8167bd0)

v9.6.0

Features

Documentation

v9.5.2

Refactor

v9.5.1

... (truncated)

Changelog

Sourced from oidc-provider's changelog.

9.7.0 (2026-03-06)

Features

  • add configuration for limiting external resource body limits (0c424cd)
  • experimental support for Client ID Metadata Document (CIMD) (d5323f4)
  • prevent fetching special-use IP address resources (1548834)

Documentation

  • align section titles and auto-generate toc (287bfa8)
  • description fixes and various editorial edits (a8f4f15)
  • fix attestClientAuth link (9c6f095)
  • solve generated nested lists (d1ebcd2)
  • update README.md prose for experimental features (b029f47)
  • update the generated content to reflect the jsdoc structure (aa9f83b)

Refactor

  • extract setWWWAuthenticateHeader to a shared module (bb66e62)

9.6.1 (2026-02-19)

Refactor

  • extract NON_REJECTABLE_CLAIMS into shared constant (2b7c025)
  • extract shared grant handler helpers to reduce duplication (f5eee9e)
  • extract shared token finder for introspection and revocation (666c2b0)

Fixes

  • required PAR should not affect CIBA and DAG (8167bd0)

9.6.0 (2025-12-07)

Features

Documentation

... (truncated)

Commits
  • a355655 chore(release): 9.7.0
  • d5323f4 feat: experimental support for Client ID Metadata Document (CIMD)
  • 0c424cd feat: add configuration for limiting external resource body limits
  • 1548834 feat: prevent fetching special-use IP address resources
  • 8239209 chore: bump packages
  • 768cd08 chore: bump packages
  • b87a679 chore(deps): bump actions/upload-artifact in the actions group
  • 29599bd chore(deps): bump minimatch
  • f8659e9 chore(deps): bump koa from 3.1.1 to 3.1.2
  • 14f84cf chore: update SECURITY.md
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for oidc-provider since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [oidc-provider](https://github.com/panva/node-oidc-provider) from 8.5.1 to 9.7.0.
- [Release notes](https://github.com/panva/node-oidc-provider/releases)
- [Changelog](https://github.com/panva/node-oidc-provider/blob/main/CHANGELOG.md)
- [Commits](panva/node-oidc-provider@v8.5.1...v9.7.0)

---
updated-dependencies:
- dependency-name: oidc-provider
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 9, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 9, 2026 21:34
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants