Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency passport to ^0.7.0 #23

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Nov 30, 2022

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
passport (source) ^0.4.0 -> ^0.7.0 age adoption passing confidence

Release Notes

jaredhanson/passport (passport)

v0.7.0

Compare Source

Changed
  • Set req.authInfo by default when using the assignProperty option to
    authenticate() middleware. This makes the behavior the same as when not using
    the option, and can be disabled by setting authInfo option to false.

v0.6.0

Compare Source

Added
  • authenticate(), req#login, and req#logout accept a
    keepSessionInfo: true option to keep session information after regenerating
    the session.
Changed
  • req#login() and req#logout() regenerate the the session and clear session
    information by default.
  • req#logout() is now an asynchronous function and requires a callback
    function as the last argument.
Security
  • Improved robustness against session fixation attacks in cases where there is
    physical access to the same system or the application is susceptible to
    cross-site scripting (XSS).

v0.5.3

Compare Source

Fixed
  • initialize() middleware extends request with login(), logIn(),
    logout(), logOut(), isAuthenticated(), and isUnauthenticated() functions
    again, reverting change from 0.5.1.

v0.5.2

Compare Source

Fixed
  • Introduced a compatibility layer for strategies that depend directly on
    [email protected] or earlier (such as passport-azure-ad), which were
    broken by the removal of private variables in [email protected].

v0.5.1

Compare Source

Added
  • Informative error message in session strategy if session support is not
    available.
Changed
  • authenticate() middleware, rather than initialize() middleware, extends
    request with login(), logIn(), logout(), logOut(), isAuthenticated(),
    and isUnauthenticated() functions.

v0.5.0

Compare Source

Changed
  • initialize() middleware extends request with login(), logIn(),
    logout(), logOut(), isAuthenticated(), and isUnauthenticated()
    functions.
Removed
  • login(), logIn(), logout(), logOut(), isAuthenticated(), and
    isUnauthenticated() functions no longer added to http.IncomingMessage.prototype.
Fixed
  • userProperty option to initialize() middleware only affects the current
    request, rather than all requests processed via singleton Passport instance,
    eliminating a race condition in situations where initialize() middleware is
    used multiple times in an application with userProperty set to different
    values.

v0.4.1

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Author

renovate bot commented Nov 30, 2022

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: packages/server/package-lock.json
npm WARN ignoring workspace config at /tmp/worker/4491d2/06f70b/repos/github/celluloid-camp/espectateur/packages/server/.npmrc 
npm WARN ignoring workspace config at /tmp/worker/4491d2/06f70b/repos/github/celluloid-camp/espectateur/packages/server/.npmrc 
npm WARN old lockfile 
npm WARN old lockfile The package-lock.json file was created with an old version of npm,
npm WARN old lockfile so supplemental metadata must be fetched from the registry.
npm WARN old lockfile 
npm WARN old lockfile This is a one-time fix-up, please be patient...
npm WARN old lockfile 
npm WARN workspaces @celluloid/server in filter set, but no workspace folder present
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: [email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/typescript
npm ERR!   peer typescript@"3.x.x" from [email protected]
npm ERR!   node_modules/react-scripts-ts
npm ERR!     react-scripts-ts@"^3.1.0" from the root project
npm ERR!   peer typescript@">=2.3.0-dev || >=2.4.0-dev || >=2.5.0-dev || >=2.6.0-dev || >=2.7.0-dev || >=2.8.0-dev || >=2.9.0-dev || >=3.0.0-dev || >= 3.1.0-dev || >= 3.2.0-dev" from [email protected]
npm ERR!   node_modules/tslint
npm ERR!     tslint@"^5.7.0" from [email protected]
npm ERR!     node_modules/react-scripts-ts
npm ERR!       react-scripts-ts@"^3.1.0" from the root project
npm ERR!     peer tslint@"^5.1.0" from [email protected]
npm ERR!     node_modules/tslint-react
npm ERR!       tslint-react@"^3.2.0" from [email protected]
npm ERR!       node_modules/react-scripts-ts
npm ERR!         react-scripts-ts@"^3.1.0" from the root project
npm ERR!       2 more (@celluloid/client, @celluloid/server)
npm ERR!     2 more (@celluloid/client, @celluloid/server)
npm ERR!   6 more (tslint-react, tsutils, @celluloid/client, ...)
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer typescript@"^2.1.0" from [email protected]
npm ERR! node_modules/fork-ts-checker-webpack-plugin
npm ERR!   fork-ts-checker-webpack-plugin@"^0.2.8" from [email protected]
npm ERR!   node_modules/react-scripts-ts
npm ERR!     react-scripts-ts@"^3.1.0" from the root project
npm ERR!   fork-ts-checker-webpack-plugin@"^0.2.8" from @celluloid/[email protected]
npm ERR!   packages/client
npm ERR!     @celluloid/[email protected]
npm ERR!     node_modules/@celluloid/client
npm ERR!       workspace packages/client from the root project
npm ERR!       1 more (@celluloid/server)
npm ERR! 
npm ERR! Conflicting peer dependency: [email protected]
npm ERR! node_modules/typescript
npm ERR!   peer typescript@"^2.1.0" from [email protected]
npm ERR!   node_modules/fork-ts-checker-webpack-plugin
npm ERR!     fork-ts-checker-webpack-plugin@"^0.2.8" from [email protected]
npm ERR!     node_modules/react-scripts-ts
npm ERR!       react-scripts-ts@"^3.1.0" from the root project
npm ERR!     fork-ts-checker-webpack-plugin@"^0.2.8" from @celluloid/[email protected]
npm ERR!     packages/client
npm ERR!       @celluloid/[email protected]
npm ERR!       node_modules/@celluloid/client
npm ERR!         workspace packages/client from the root project
npm ERR!         1 more (@celluloid/server)
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! 
npm ERR! For a full report see:
npm ERR! /tmp/worker/4491d2/06f70b/cache/others/npm/_logs/2023-11-28T02_40_32_901Z-eresolve-report.txt

npm ERR! A complete log of this run can be found in: /tmp/worker/4491d2/06f70b/cache/others/npm/_logs/2023-11-28T02_40_32_901Z-debug-0.log

@renovate renovate bot changed the title Update dependency passport to ^0.6.0 Update dependency passport to ^0.7.0 Nov 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants