fix(deps): update dependency oidc-client-ts to v3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
oidc-client-ts	2.5.0 → 3.5.0

---

Release Notes

authts/oidc-client-ts (oidc-client-ts)

v3.5.0

Compare Source

oidc-client-ts v3.5.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

• Features:
  • #​2295 add maxSilentRenewTimeoutRetries configuration
  • #​2311 add nonce validation for ID tokens
• Fixes;
  • #​2369 reword misleading error messages for request_type check

thanks to @​ninadvadujkar, @​Osmose and @​ferdinand-varta

v3.4.1

Compare Source

oidc-client-ts v3.4.1 is a bugfix release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

• Fixes:
  • #​2259 forward popupAbortOnClose to PopupNavigator.prepare

thanks to @​watabean

v3.4.0

Compare Source

oidc-client-ts v3.4.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

• Features:
  • #​1890 optionally enforce iframe auth flow in signinSilent
  • #​2180 add support for client_secret_jwt
  • #​2244 optionally restore popup close rejection
• Fixes;
  • #​2147 wait until the page is shown again to resolve in RedirectNavigator

thanks to @​Hyperkid123, @​Nick-Source, @​Skizu and @​smujmaiku

v3.3.0

Compare Source

oidc-client-ts v3.3.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

• Features:
  • #​1924 use BroadcastChannel if no window.opener

thanks to @​jcphill

v3.2.1

Compare Source

oidc-client-ts v3.2.1 is a bugfix release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

• Fixes:
  • #​1850: userStore should be StateStore instead of WebStorageStateStore
  • #​1925: resource owner password credentials flow with oidc scope and no id_token returned will fail sub claim check

thanks to @​sebastienlabine, @​darkbasic and @​sularome

v3.2.0

Compare Source

oidc-client-ts v3.2.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

• Fixes:
  • #​1702: cannot set Authorization via extraHeaders
  • #​1738: allow empty string for client_secret in TokenClient
  • #​1803: metadataSeed.authorization_endpoint not prioritized over remote metadata
• Features:
  • #​1691: add removeState as an option to processSigninResponse
  • #​1817: add raiseEvent parameter to getUser
  • #​1818 : add url_state to SignoutRequest

thanks to @​ZephireNZ, @​ntamotsu, @​jgarplind, @​waldemarennsaed and @​richjyoung

v3.1.0

Compare Source

oidc-client-ts v3.1.0 is a minor release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

• Fixes:
  • #​1666: fix link in docs to issue
  • #​1600: updated docs about logger
  • #​1589: fix compiler error for target=ES2022
  • #​1539: fix small typo in signinCallback doc in UserManager.ts
  • #​1504: typo in sample app config
  • #​1490: fix the return type of signinCallback
  • #​1443: fixes typos in docs
• Features:
  • #​1672: make signoutCallback return signout response if request_type is so:r
  • #​1626: add popupSignal property to signinPopup and signoutPop
  • #​1580: add dpop docs
  • #​1569: add dpop nonce support
  • #​1457: add extra headers
  • #​1461: add demonstrating proof of possession
  • #​1430: add global requestTimeoutInSeconds setting
  • #​1405: allow using default scopes from authorization server

thanks to @​klues, @​smujmaiku, @​mftruso, @​peetck, @​dbfr3qs, @​mottykohn, @​noshiro-pf, @​dbfr3qs, @​grjan7 and @​natergj

v3.0.1

Compare Source

oidc-client-ts 3.0.1 is a bug fix release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

• Fixes:
  • #​1379: userManager.signoutRedirect not working (by reverting #​1342)

v3.0.0

Compare Source

oidc-client-ts 3.0.0 is a major release.

No longer using crypto-js package, but built-in browser crypto.subtle module. Crypto.subtle is available only in secure contexts (HTTPS). Also have a look into the migration info.

Changelog:

• Breaking changes:
  • #​275: use native web crypto instead of crypto-js package
  • #​1232: improve merge claims behavior
  • #​930: drop deprecated settings
  • #​1230: update jwt-decode
  • #​1231: require node >=18
• Fixes:
  • #​1010: make response_mode optional
  • #​1242: session change not fired if identity token does not contain a sid claim
  • #​1300: explicitly throw an error when crypto.subtle is undefined
  • #​1292: docs(authorization-code-grant.md): update broken link
  • #​1316: use npm distribution tags for upcoming releases
  • #​1313: handle promise in Events.raise
  • #​1341: UserManager.events().unload() event is triggered too early on UserManager.signoutRedirect()
• Features:
  • #​1250: improve documentation
  • #​1291: allow to optionally pass redirect_uri to UserManager.signinSilent when using refresh token
  • #​1258: allow to optionally pass extraTokenParams to UserManager.signinSilent when using refresh token
  • #​1275: add documentation section about hash-mode routing

thanks to @​43081j, @​huysentruitw, @​marcoreni, @​Lyokolux, @​MathiasRossen, @​tennox and @​PSanetra

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: services/ui/package-lock.json

npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: react-oidc-context@2.3.1
npm ERR! Found: oidc-client-ts@3.0.1
npm ERR! node_modules/oidc-client-ts
npm ERR!   oidc-client-ts@"3.0.1" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer oidc-client-ts@"^2.2.1" from react-oidc-context@2.3.1
npm ERR! node_modules/react-oidc-context
npm ERR!   react-oidc-context@"2.3.1" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: oidc-client-ts@2.4.0
npm ERR! node_modules/oidc-client-ts
npm ERR!   peer oidc-client-ts@"^2.2.1" from react-oidc-context@2.3.1
npm ERR!   node_modules/react-oidc-context
npm ERR!     react-oidc-context@"2.3.1" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-02-08T09_27_05_646Z-debug-0.log

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (c99edbf) 74.77% compared to head (fcab1a3) 94.98%.

Additional details and impacted files

@@              Coverage Diff              @@
##               main     #673       +/-   ##
=============================================
+ Coverage     74.77%   94.98%   +20.21%     
  Complexity      194      194               
=============================================
  Files            94       56       -38     
  Lines          2022      459     -1563     
  Branches        121       13      -108     
=============================================
- Hits           1512      436     -1076     
+ Misses          505       18      -487     
  Partials          5        5               

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: services/ui/package-lock.json

npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: react-oidc-context@2.4.0
npm ERR! Found: oidc-client-ts@3.5.0
npm ERR! node_modules/oidc-client-ts
npm ERR!   oidc-client-ts@"3.5.0" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer oidc-client-ts@"^2.4.1" from react-oidc-context@2.4.0
npm ERR! node_modules/react-oidc-context
npm ERR!   react-oidc-context@"2.4.0" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: oidc-client-ts@2.5.0
npm ERR! node_modules/oidc-client-ts
npm ERR!   peer oidc-client-ts@"^2.4.1" from react-oidc-context@2.4.0
npm ERR!   node_modules/react-oidc-context
npm ERR!     react-oidc-context@"2.4.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /runner/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /runner/cache/others/npm/_logs/2026-07-18T19_14_51_621Z-debug-0.log