oauth2 from 0.26.0 to 0.28.0 #556

New issue

Closed

opened 2026-03-04 00:26:33 +03:00 by kerem · 0 comments

kerem commented

2026-03-04 00:26:33 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/SignTools/SignTools/pull/551
Author: @dependabot[bot]
Created: 3/6/2025
Status: ❌ Closed

Base: master ← Head: dependabot/go_modules/golang.org/x/oauth2-0.28.0

📝 Commits (1)

c5a223b fix(deps): bump golang.org/x/oauth2 from 0.26.0 to 0.28.0

📊 Changes

2 files changed (+3 additions, -4 deletions)

View changed files

📝 go.mod (+1 -2)
📝 go.sum (+2 -2)

📄 Description

Bumps golang.org/x/oauth2 from 0.26.0 to 0.28.0.

Commits

0042180 oauth2: Deep copy context client in NewClient
ce350bf oauth2: remove unneeded TokenSource implementation in transport test
44967ab google: fix typos
9c82a8c oauth2.go: use a more straightforward return value
681b4d8 jws: split token into fixed number of parts
3f78298 all: upgrade go directive to at least 1.23.0 [generated]
109dabf endpoints: add links/provider for Discord
ac571fa oauth2: fix docs for Config.DeviceAuth
314ee5b endpoints: add patreon endpoint
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/SignTools/SignTools/pull/551 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/6/2025 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/go_modules/golang.org/x/oauth2-0.28.0` --- ### 📝 Commits (1) - [`c5a223b`](https://github.com/SignTools/SignTools/commit/c5a223bca29b59fdfd4064674ef8c1aff04d793e) fix(deps): bump golang.org/x/oauth2 from 0.26.0 to 0.28.0 ### 📊 Changes **2 files changed** (+3 additions, -4 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+1 -2) 📝 `go.sum` (+2 -2) </details> ### 📄 Description Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.26.0 to 0.28.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/oauth2/commit/0042180b24f3cfe500f4cad3cabbc33c0a341f78"><code>0042180</code></a> oauth2: Deep copy context client in NewClient</li> <li><a href="https://github.com/golang/oauth2/commit/ce350bff61d844ec163c2a0c0eaf35c71948cae7"><code>ce350bf</code></a> oauth2: remove unneeded TokenSource implementation in transport test</li> <li><a href="https://github.com/golang/oauth2/commit/44967abe9097d1169118ef5de80b29ef293edc15"><code>44967ab</code></a> google: fix typos</li> <li><a href="https://github.com/golang/oauth2/commit/9c82a8cf7ac23b0c34d335ffae37db2995a5ad37"><code>9c82a8c</code></a> oauth2.go: use a more straightforward return value</li> <li><a href="https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3"><code>681b4d8</code></a> jws: split token into fixed number of parts</li> <li><a href="https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502"><code>3f78298</code></a> all: upgrade go directive to at least 1.23.0 [generated]</li> <li><a href="https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac"><code>109dabf</code></a> endpoints: add links/provider for Discord</li> <li><a href="https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47"><code>ac571fa</code></a> oauth2: fix docs for Config.DeviceAuth</li> <li><a href="https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2"><code>314ee5b</code></a> endpoints: add patreon endpoint</li> <li>See full diff in <a href="https://github.com/golang/oauth2/compare/v0.26.0...v0.28.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.26.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>