Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/open-webui/open-webui/pull/5070
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 9/1/2024
**Status:** ✅ Merged
**Merged:** 9/3/2024
**Merged by:** [@tjbck](https://github.com/tjbck)
**Base:** `dev` ← **Head:** `dependabot/pip/backend/dev/authlib-1.3.2`
---
### 📝 Commits (1)
- [`665c851`](https://github.com/open-webui/open-webui/commit/665c851f6621a6eb4caeb135bfe3aca344fb25cd) build(deps): bump authlib from 1.3.1 to 1.3.2 in /backend
### 📊 Changes
**1 file changed** (+1 additions, -1 deletions)
<details>
<summary>View changed files</summary>
📝 `backend/requirements.txt` (+1 -1)
</details>
### 📄 Description
Bumps [authlib](https://github.com/lepture/authlib) from 1.3.1 to 1.3.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/lepture/authlib/releases">authlib's releases</a>.</em></p>
<blockquote>
<h2>Version 1.3.2</h2>
<ul>
<li>Prevent ever-growing session size for OAuth clients.</li>
<li>Revert <code>quote</code> client id and secret.</li>
<li><code>unquote</code> basic auth header for authorization server.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/lepture/authlib/blob/master/docs/changelog.rst">authlib's changelog</a>.</em></p>
<blockquote>
<h2>Version 1.3.2</h2>
<ul>
<li>Prevent ever-growing session size for OAuth clients.</li>
<li>Revert <code>quote</code> client id and secret.</li>
<li><code>unquote</code> basic auth header for authorization server.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/lepture/authlib/commit/d7db2c33226983648b91e3ec0d9cf2e43dc480d4"><code>d7db2c3</code></a> chore: release 1.3.2</li>
<li><a href="https://github.com/lepture/authlib/commit/01f1243b12edd00b15db4d3905fa8dcf43736ae9"><code>01f1243</code></a> Revert "fix encode_client_secret_basic to match rfc6749"</li>
<li><a href="https://github.com/lepture/authlib/commit/63c9fb698912dd7c87eaaa7979640fead1cb3694"><code>63c9fb6</code></a> fix(oauth2): unquote username and password for basic auth</li>
<li><a href="https://github.com/lepture/authlib/commit/66d5b19caf6623bb010693c35f3cc8225fdcf341"><code>66d5b19</code></a> docs: Update index.rst (<a href="https://redirect.github.com/lepture/authlib/issues/670">#670</a>)</li>
<li><a href="https://github.com/lepture/authlib/commit/11f13e4070c20fffe9c713440d7ce835c686935e"><code>11f13e4</code></a> fix: Fix list of scopes in app integrations (<a href="https://redirect.github.com/lepture/authlib/issues/631">#631</a>)</li>
<li><a href="https://github.com/lepture/authlib/commit/4da41da0d57ecde370b91b77ae6b83eca94f9feb"><code>4da41da</code></a> Merge pull request <a href="https://redirect.github.com/lepture/authlib/issues/661">#661</a> from Presence-AI/master</li>
<li><a href="https://github.com/lepture/authlib/commit/01583a3f8c5946ec4c7321acf192c595345e489b"><code>01583a3</code></a> fix: use unique variable name when clearing old state data to avoid setting s...</li>
<li><a href="https://github.com/lepture/authlib/commit/0ad753cbe39e3cb5bee33ef93b7497020a33dea1"><code>0ad753c</code></a> Merge pull request <a href="https://redirect.github.com/lepture/authlib/issues/644">#644</a> from Wauplin/622-fix-ever-growing-session-cookie</li>
<li><a href="https://github.com/lepture/authlib/commit/174248e64b4ba0746cdaa1ec763cf417760e8935"><code>174248e</code></a> Merge pull request <a href="https://redirect.github.com/lepture/authlib/issues/656">#656</a> from borislaviv/master</li>
<li><a href="https://github.com/lepture/authlib/commit/341ce0e3e5264cfc2aa9bac20cac14ef17d416da"><code>341ce0e</code></a> Extract load_key construction to separate method</li>
<li>Additional commits viewable in <a href="https://github.com/lepture/authlib/compare/v1.3.1...v1.3.2">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/5070
Author: @dependabot[bot]
Created: 9/1/2024
Status: ✅ Merged
Merged: 9/3/2024
Merged by: @tjbck
Base:
dev← Head:dependabot/pip/backend/dev/authlib-1.3.2📝 Commits (1)
665c851build(deps): bump authlib from 1.3.1 to 1.3.2 in /backend📊 Changes
1 file changed (+1 additions, -1 deletions)
View changed files
📝
backend/requirements.txt(+1 -1)📄 Description
Bumps authlib from 1.3.1 to 1.3.2.
Release notes
Sourced from authlib's releases.
Changelog
Sourced from authlib's changelog.
Commits
d7db2c3chore: release 1.3.201f1243Revert "fix encode_client_secret_basic to match rfc6749"63c9fb6fix(oauth2): unquote username and password for basic auth66d5b19docs: Update index.rst (#670)11f13e4fix: Fix list of scopes in app integrations (#631)4da41daMerge pull request #661 from Presence-AI/master01583a3fix: use unique variable name when clearing old state data to avoid setting s...0ad753cMerge pull request #644 from Wauplin/622-fix-ever-growing-session-cookie174248eMerge pull request #656 from borislaviv/master341ce0eExtract load_key construction to separate methodDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.