Bump @auth0/nextjs-auth0 from 1.2.0 to 1.6.2

Open dependabot[bot] opened this issue 4 years ago • 1 comments

Bumps @auth0/nextjs-auth0 from 1.2.0 to 1.6.2.

Release notes

Sourced from @auth0/nextjs-auth0's releases.

v1.6.2

Fixed

Fix issue where error reporting wrong instanceof #543 (adamjmcgrath)

Security

Enforce configured host on user supplied returnTo #557 (adamjmcgrath)

v1.6.1

Fixed

[Snyk] Upgrade openid-client from 4.8.0 to 4.9.0 #518 (snyk-bot)

v1.6.0

Added

SDK-2818 Export error classes #508 (adamjmcgrath)

SDK-2529 Add ability to pass custom params to refresh grant and code exchange #507 (adamjmcgrath)

SDK-2813 Add afterRefresh hook #506 (adamjmcgrath)

Fixed

Fix types in server-side withPageAuthRequired #512 (Widcket)

v1.5.0

Added

Add IE11 support #432 (Widcket)

v1.4.2

Fixed

Fix reflected XSS from the callback handler's error query parameter CVE-2021-32702 (adamjmcgrath)

v1.4.0

Added

withPageAuthRequired CSR now adds user to wrapped component props #405 (adamjmcgrath)

Fixed

env var substitutions now means you can define AUTH0_BASE_URL from VERCEL_URL in next.config.js #404 (adamjmcgrath)

v1.3.1

Fixed

... (truncated)

Changelog

Sourced from @auth0/nextjs-auth0's changelog.

v1.6.2 (2021-12-16)

Full Changelog

Fixed

Fix issue where error reporting wrong instanceof #543 (adamjmcgrath)

Security

Enforce configured host on user supplied returnTo #557 (adamjmcgrath)

v1.6.1 (2021-10-13)

Full Changelog

Fixed

[Snyk] Upgrade openid-client from 4.8.0 to 4.9.0 #518 (snyk-bot)

v1.6.0 (2021-10-11)

Full Changelog

Added

[SDK-2818] Export error classes #508 (adamjmcgrath)

[SDK-2529] Add ability to pass custom params to refresh grant and code exchange #507 (adamjmcgrath)

[SDK-2813] Add afterRefresh hook #506 (adamjmcgrath)

Fixed

Fix types in server-side withPageAuthRequired #512 (Widcket)

1.5.0 (2021-07-14)

Added

Add IE11 support #432 (Widcket)

1.4.2 (2021-06-24)

Fixed

Fix reflected XSS from the callback handler's error query parameter CVE-2021-32702 (adamjmcgrath)

1.4.0 (2021-06-03)

Added

withPageAuthRequired CSR now adds user to wrapped component props #405 (adamjmcgrath)

Fixed

env var substitutions now means you can define AUTH0_BASE_URL from VERCEL_URL in next.config.js #404 (adamjmcgrath)

1.3.1 (2021-05-05)

... (truncated)

Commits

762da1e Merge pull request #558 from auth0/release/v1.6.2
35f3f89 Release v1.6.2
0bbd9f8 Enforce configured host on user supplied returnTo (#557)
129650d Bump next from 11.1.2 to 11.1.3 (#556)
c5d4fff fix: upgrade http-errors from 1.8.0 to 1.8.1 (#553)
f7323d0 Merge pull request #543 from auth0/error-instanceof
1954087 Fix issue where error reporting wrong instanceof
3060c89 Merge pull request #531 from auth0/snyk-upgrade-fbe7e8fa031d12c55e1e6a76583750d5
d1eea0d fix: upgrade openid-client from 4.9.0 to 4.9.1
994bd60 Merge pull request #530 from auth0/caching-readme
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by auth0-oss, a new releaser for @auth0/nextjs-auth0 since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Dec 16 '21 18:12 dependabot[bot]

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/jonathondmeyers/courses/E41XURQtVDMGdhxEV9hVtwMSm3mE
✅ Preview: https://courses-git-dependabot-npmandyarnauth0ne-1d6a1c-jonathondmeyers.vercel.app

Dec 16 '21 18:12 vercel[bot]