Build(deps): Bump assent from 0.2.10 to 0.3.1

[dependabot]

Bumps assent from 0.2.10 to 0.3.1.

Release notes

Sourced from assent's releases.

v0.3.1

Bug fixes

• Assent.JWTAdapter.AssentJWT fixed padding issue with ECDSA that caused invalid signatures #192

v0.3.0

This release consists of breaking changes.

Userinfo is now cast to the correct type per https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.5.1 (thanks @​robinvdvleuten). When upgrading you must ensure that you do not depend on a specific type in the returned userinfo for any of the strategies listed below.

Breaking changes

• Assent.Strategy.Auth0.authorize_url/2 no longer accepts :domain config, use :base_url instead #178
• Assent.Strategy.Basecamp.callback/2 now encodes sub as a binary() instead of an integer() #167
• Assent.Strategy.Github.callback/2 now encodes sub as a binary() instead of an integer() #167
• Assent.Strategy.Google now encodes email_verified as a boolean() instead of a binary() #167
• Assent.Strategy.Google now return hd instead of google_hd #169
• Assent.Strategy.Strava.callback/2 now encodes sub as a binary() instead of an integer() #167
• Assent.Strategy.Telegram.callback/2 now encodes sub as a binary() instead of an integer() #167
• Assent.Strategy.Twitter.callback/2 now encodes sub as a binary() instead of an integer() #167
• Assent.Strategy.VK.callback/2 now encodes sub as a binary() instead of an integer() #167
• :site configuration option removed, use :base_url instead #174
• Assent.Strategy.OAuth2.authorize_url/2 no longer allows :state in :authorization_params #174
• Assent.Strategy.decode_response/2removed, use Assent.HTTPAdapter.decode_response/2 instead #174
• Assent.Strategy.request/5 removed, use Assent.Strategy.http_request/5 instead #174
• Assent.Strategy.prune/1 removed #167
• Assent.MissingParamError no longer accepts :expected_key, use :key instead #174
• Assent.HTTPAdapter.Mint removed #174
• Assent.Config removed #174

Changes

• Assent.Strategy.Auth0 now uses OIDC instead of OAuth 2.0 base strategy #178
• Assent.Strategy.Gitlab now uses OIDC instead of OAuth 2.0 base strategy #179
• Assent.Strategy.Google now uses OIDC instead of OAuth 2.0 base strategy #169
• Assent.Strategy.normalize_userinfo/2 now casts the user claims per OpenID specification #167

v0.2.13

• Assent.Strategy.Auth0 deprecated :domain config option in favor of :base_url #177

v0.2.12

• Assent now has a module doc #176

v0.2.11

• Default to using JSON instead of Jason for JSON parsing on Elixir 1.18 #161
• Assent.Strategy.OAuth2 now supports :state config option #162
• Assent.Strategy.OAuth2 :state override in :authorization_parms has been deprecated #162
• Assent.Strategy.OIDC now supports none authentication method #163 (thanks @​tommasop)

... (truncated)

Changelog

Sourced from assent's changelog.

v0.3.1 (2025-06-20)

Bug fixes

• Assent.JWTAdapter.AssentJWT fixed padding issue with ECDSA that caused invalid signatures

v0.3.0 (2025-01-06)

This release consists of breaking changes.

Userinfo is now cast to the correct type per https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.5.1. When upgrading you must ensure that you do not depend on a specific type in the returned userinfo for any of the strategies listed below.

Breaking changes

• Assent.Strategy.Auth0.authorize_url/2 no longer accepts :domain config, use :base_url instead
• Assent.Strategy.Basecamp.callback/2 now encodes sub as a binary() instead of an integer()
• Assent.Strategy.Github.callback/2 now encodes sub as a binary() instead of an integer()
• Assent.Strategy.Google now encodes email_verified as a boolean() instead of a binary()
• Assent.Strategy.Google now return hd instead of google_hd
• Assent.Strategy.Strava.callback/2 now encodes sub as a binary() instead of an integer()
• Assent.Strategy.Telegram.callback/2 now encodes sub as a binary() instead of an integer()
• Assent.Strategy.Twitter.callback/2 now encodes sub as a binary() instead of an integer()
• Assent.Strategy.VK.callback/2 now encodes sub as a binary() instead of an integer()
• :site configuration option removed, use :base_url instead
• Assent.Strategy.OAuth2.authorize_url/2 no longer allows :state in :authorization_params
• Assent.Strategy.decode_response/2removed, use Assent.HTTPAdapter.decode_response/2 instead
• Assent.Strategy.request/5 removed, use Assent.Strategy.http_request/5 instead
• Assent.Strategy.prune/1 removed
• Assent.MissingParamError no longer accepts :expected_key, use :key instead
• Assent.HTTPAdapter.Mint removed
• Assent.Config removed

Changes

• Assent.Strategy.Auth0 now uses OIDC instead of OAuth 2.0 base strategy
• Assent.Strategy.Gitlab now uses OIDC instead of OAuth 2.0 base strategy
• Assent.Strategy.Google now uses OIDC instead of OAuth 2.0 base strategy
• Assent.Strategy.normalize_userinfo/2 now casts the user claims per OpenID specification

v0.2

The CHANGELOG for v0.2 releases can be found in the v0.2 branch.

Commits

• 2f2f767 Roll version
• a658439 Merge pull request #192 from pow-auth/fix-padding
• b4ba190 Fix ECDSA padding
• cd45572 Merge pull request #189 from pow-auth/fix-docs
• 78b46f4 Correct examples in OIDC and OAuth module docs
• cda76a6 Merge pull request #187 from pow-auth/refactor-tests
• eecf8c5 Refactor integration server
• 4e023bf Update dependencies
• 69a8346 Merge pull request #186 from evadne/patch-1
• 91dcc68 Update README.md
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.