Skip to content

Build(deps): Bump com.nimbusds:oauth2-oidc-sdk from 11.38.2 to 11.39 - #1095

Merged
aaronzi merged 1 commit into
mainfrom
dependabot/maven/com.nimbusds-oauth2-oidc-sdk-11.39
Nov 10, 2026
Merged

aaronzi merged 1 commit into
mainfrom
dependabot/maven/com.nimbusds-oauth2-oidc-sdk-11.39

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps com.nimbusds:oauth2-oidc-sdk from 11.38.2 to 11.39.

Changelog

Sourced from com.nimbusds:oauth2-oidc-sdk's changelog.

version 1.0 (2012-05-29) * First official release with authorisation endpoint, token endpoint, check ID endpoint and UserInfo endpoint support. * JSON Web Tokens (JWTs) support through the Nimbus-JWT library. * Language Tags (RFC 5646) support through the Nimbus-LangTag library. * JSON support through the JSON Smart library.

version 2.0 (2013-05-13) * Intermediary development release with Maven build, published to Maven Central.

version 2.1 (2013-06-06) * Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect Standard draft 21, OpenID Connect Discovery draft 17 and OpenID Connect Registration draft 19. * Major refactoring of the APIs for greater simplicity. * Adds JUnit tests.

version 2.2 (2013-06-18) * Refactors dynamic OpenID Connect client registration. * Adds partial support of the OAuth 2.0 Dynamic Client Registration Protocol (draft-ietf-oauth-dyn-reg-12). * Optimises parsing of request parameters consisting of one or more tokens (scope, response type, etc).

version 2.3 (2013-06-19) * Renames OAuth 2.0 dynamic client registration package. * Adds ClientInformation.getClientMetadata() method. * Adds OIDCClientInformation class.

version 2.4 (2013-06-20) * Adds static OIDCClientInformation.parse(JSONObject) method.

version 2.5 (2013-06-22) * Adds support OAuth 2.0 dynamic client update. * Adds OpenID Connect dynamic client registration classes.

version 2.6 (2013-06-25) * Enforces order of preference of ACR values in OpenID Connect client metadata, as required by the specification. * Documentation and performance improvements.

version 2.7 (2013-06-26) * Switches Identifier generation to java.security.SecureRandom.

version 2.8 (2013-06-30) * Fixes serialisation and assignment bugs in ClientMetadata. * Switches Secret generation to java.security.SecureRandom.

version 2.9 (2013-09-17)

... (truncated)

Commits
  • b1dd5c7 [maven-release-plugin] prepare for next development iteration
  • e9088c5 URIUtils.getBaseURI must preserve the path component without modification (is...
  • 30561df Updates test cert PEM
  • e00052b Adds JWTUtils class with static JWTUtils.ensureContentTypeForNestedJWT method
  • ef624c0 IDTokenValidator and LogoutTokenValidator must reject JWE tokens without a "c...
  • cd9ce1b Backports DPoPProofClaimsSetVerifierTest cases for htu validation
  • e1f8efa Bumps central-publishing-maven-plugin
  • a6dfa6d [maven-release-plugin] prepare release 11.39
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 9, 2026
@aaronzi

aaronzi commented Nov 10, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) from 11.38.2 to 11.39.
- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.39..11.38.2)

---
updated-dependencies:
- dependency-name: com.nimbusds:oauth2-oidc-sdk
  dependency-version: '11.39'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/com.nimbusds-oauth2-oidc-sdk-11.39 branch from 7bed451 to d588ec2 Compare November 10, 2026 19:41
@aaronzi
aaronzi merged commit 03fad4a into main Nov 10, 2026
46 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/com.nimbusds-oauth2-oidc-sdk-11.39 branch November 10, 2026 20:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant