Skip to content

Bump com.github.kbase:auth2 from 0.7.1 to 0.8.0 - #468

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/gradle/com.github.kbase-auth2-0.8.0
Closed

Bump com.github.kbase:auth2 from 0.7.1 to 0.8.0#468
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/gradle/com.github.kbase-auth2-0.8.0

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJan 1, 2026

Copy link
Copy Markdown

Bumps com.github.kbase:auth2 from 0.7.1 to 0.8.0.

Release notes

Sourced from com.github.kbase:auth2's releases.

0.8.0

What's Changed

  • BACKWARDS INCOMPATIBILITY: In flight login sessions when the server is upgraded will fail. For a completely safe transition, stop the server, remove any temporary session data, and bring the new server up.
  • BACKWARDS INCOMPATIBILITY: Repeated or trailing underscores are no longer allowed in usernames. Existing usernames are unaffected.
  • The MultiFactor Authentication status is now available for tokens fetched from the service. Currently only OrcID supports MFA statuses other than Unknown. Other statuses are Used and Not Used.
  • Fixed a bug where usernames with underscores would not be matched in username searches if an underscore was an interior character of a search prefix.
  • Fixed a bug where a MongoDB error would be thrown if a user search prefix resulted in no search terms if it had no valid characters for the requested search, whether user name or display name. Now a service error is thrown.
  • The /tokens endpoint can now accept Service or service to specify that a service token should be created.

New Contributors

Full Changelog: kbase/auth2@0.7.1...0.8.0

Changelog

Sourced from com.github.kbase:auth2's changelog.

0.8.0

  • BACKWARDS INCOMPATIBILITY: In flight login sessions when the server is upgraded will fail. For a completely safe transition, stop the server, remove any temporary session data, and bring the new server up.
  • BACKWARDS INCOMPATIBILITY: Repeated or trailing underscores are no longer allowed in usernames. Existing usernames are unaffected.
  • The MultiFactor Authentication status is now available for tokens fetched from the service. Currently only OrcID supports MFA statuses other than Unknown. Other statuses are Used and Not Used.
  • Fixed a bug where usernames with underscores would not be matched in username searches if an underscore was an interior character of a search prefix.
  • Fixed a bug where a MongoDB error would be thrown if a user search prefix resulted in no search terms if it had no valid characters for the requested search, whether user name or display name. Now a service error is thrown.
  • The /tokens endpoint can now accept Service or service to specify that a service token should be created.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.github.kbase:auth2](https://github.com/kbase/auth2) from 0.7.1 to 0.8.0.
- [Release notes](https://github.com/kbase/auth2/releases)
- [Changelog](https://github.com/kbase/auth2/blob/develop/RELEASE_NOTES.md)
- [Commits](kbase/auth2@0.7.1...0.8.0)
---
updated-dependencies:
- dependency-name: com.github.kbase:auth2
dependency-version: 0.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 1, 2026
@codecov

codecovBot commented Jan 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.11%. Comparing base (e573a66) to head (3f93bc3).

Additional details and impacted files
@@ Coverage Diff @@## develop #468 +/- ##
==========================================
Coverage 94.11% 94.11% Complexity 1596 1596 ==========================================
Files 102 102 Lines 4739 4739 Branches 828 828 ==========================================
Hits 4460 4460 Misses 265 265 Partials 14 14 

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot@github

dependabotBot commented on behalf of githubMar 1, 2026

Copy link
Copy Markdown
Author

Superseded by #493.

@dependabotdependabotBot closed this Mar 1, 2026
@dependabot
dependabotBot deleted the dependabot/gradle/com.github.kbase-auth2-0.8.0 branch March 1, 2026 11:48
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavaPull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants