Bump strimzi-oauth.version from 0.16.1 to 0.17.0

[dependabot]

Bumps strimzi-oauth.version from 0.16.1 to 0.17.0.
Updates io.strimzi:kafka-oauth-client from 0.16.1 to 0.17.0

Release notes

Sourced from io.strimzi:kafka-oauth-client's releases.

0.17.0

Main Changes since 0.16.2

Make client credentials grant type configurable

OAuth clients using client_credentials can now set grant_type to a custom value. Custom authorization servers' OAuth implementations of client_credentials mechanism can now use grant_type as a discriminator.

A new configuration option was introduced: oauth.client.credentials.grant.type.

For more details about the new features see the RELEASE_NOTES.md and the README.md. All changes can be found under the 0.17.0 milestone.

Full Changelog: strimzi/strimzi-kafka-oauth@0.16.2...0.17.0

0.17.0-rc1

Main Changes since 0.16.2

Make client credentials grant type configurable

OAuth clients using client_credentials can now set grant_type to a custom value. Custom authorization servers' OAuth implementations of client_credentials mechanism can now use grant_type as a discriminator.

A new configuration option was introduced: oauth.client.credentials.grant.type.

For more details about the new features see the RELEASE_NOTES.md and the README.md. All changes can be found under the 0.17.0 milestone.

How to test

Released Maven repository artifacts are available in Maven Central using version 0.17.0-RC1

Example:

<dependency>
    <groupId>io.strimzi</groupId>
    <artifactId>kafka-oauth-client</artifactId>
    <version>0.17.0-RC1</version>
</dependency>

Full Changelog: strimzi/strimzi-kafka-oauth@0.16.2...0.17.0-rc1

0.16.2

Main Changes since 0.16.1

Properly fixed version of json-smart transitive dependency for third parties (#266)

Properly bumped json-smart version to 2.5.2 in order to address CVE-2024-57699 brought in by JsonPath 2.9.0. It also fixes json-smart version being pulled in for third party projects using OAuth project’s artifacts.

For more details about the new features see the RELEASE_NOTES.md and the README.md. All changes can be found under the 0.16.2 milestone.

... (truncated)

Changelog

Sourced from io.strimzi:kafka-oauth-client's changelog.

0.17.0

Make client credentials grant type configurable

OAuth clients using client_credentials can now set grant_type to a custom value. Custom authorization servers' OAuth implementations of client_credentials mechanism can now use grant_type as a discriminator.

A new configuration option was introduced: oauth.client.credentials.grant.type.

See PR 279

0.16.2

Properly override json-smart version to 2.5.2 to address CVE-2024-57699 warnings

The version override in 0.16.1 was inadequate. It didn't work for third party components using the OAuth components. They would still transitively bring in net.minidev:json-smart version 2.5.0.

Commits

• e18a819 Prepare for 0.17.0 release
• e453b12 Update dependencies - libraries with CVEs, image versions used in examples an...
• 3fea88d Custom client credentials grant type (#279)
• 769f95e Change nimbus-jose-jwt to version 10.0.2 to minimise diff from 9.37.3 (#278)
• 5d5d7ee Bump nimbus-jose-jwt to version 10.3 (#277)
• 14d40c6 Moved to use the Sonatype Central Portal (#271)
• ee7c5d6 Fixed project name within pom file (#270)
• a3a58f9 Properly fix version of json-smart transitive dependency for third parties (#...
• See full diff in compare view

Updates io.strimzi:kafka-oauth-common from 0.16.1 to 0.17.0

Release notes

Sourced from io.strimzi:kafka-oauth-common's releases.

0.17.0

Main Changes since 0.16.2

Make client credentials grant type configurable

OAuth clients using client_credentials can now set grant_type to a custom value. Custom authorization servers' OAuth implementations of client_credentials mechanism can now use grant_type as a discriminator.

A new configuration option was introduced: oauth.client.credentials.grant.type.

For more details about the new features see the RELEASE_NOTES.md and the README.md. All changes can be found under the 0.17.0 milestone.

Full Changelog: strimzi/strimzi-kafka-oauth@0.16.2...0.17.0

0.17.0-rc1

Main Changes since 0.16.2

Make client credentials grant type configurable

OAuth clients using client_credentials can now set grant_type to a custom value. Custom authorization servers' OAuth implementations of client_credentials mechanism can now use grant_type as a discriminator.

A new configuration option was introduced: oauth.client.credentials.grant.type.

For more details about the new features see the RELEASE_NOTES.md and the README.md. All changes can be found under the 0.17.0 milestone.

How to test

Released Maven repository artifacts are available in Maven Central using version 0.17.0-RC1

Example:

<dependency>
    <groupId>io.strimzi</groupId>
    <artifactId>kafka-oauth-client</artifactId>
    <version>0.17.0-RC1</version>
</dependency>

Full Changelog: strimzi/strimzi-kafka-oauth@0.16.2...0.17.0-rc1

0.16.2

Main Changes since 0.16.1

Properly fixed version of json-smart transitive dependency for third parties (#266)

Properly bumped json-smart version to 2.5.2 in order to address CVE-2024-57699 brought in by JsonPath 2.9.0. It also fixes json-smart version being pulled in for third party projects using OAuth project’s artifacts.

For more details about the new features see the RELEASE_NOTES.md and the README.md. All changes can be found under the 0.16.2 milestone.

... (truncated)

Changelog

Sourced from io.strimzi:kafka-oauth-common's changelog.

0.17.0

Make client credentials grant type configurable

OAuth clients using client_credentials can now set grant_type to a custom value. Custom authorization servers' OAuth implementations of client_credentials mechanism can now use grant_type as a discriminator.

A new configuration option was introduced: oauth.client.credentials.grant.type.

See PR 279

0.16.2

Properly override json-smart version to 2.5.2 to address CVE-2024-57699 warnings

The version override in 0.16.1 was inadequate. It didn't work for third party components using the OAuth components. They would still transitively bring in net.minidev:json-smart version 2.5.0.

Commits

• e18a819 Prepare for 0.17.0 release
• e453b12 Update dependencies - libraries with CVEs, image versions used in examples an...
• 3fea88d Custom client credentials grant type (#279)
• 769f95e Change nimbus-jose-jwt to version 10.0.2 to minimise diff from 9.37.3 (#278)
• 5d5d7ee Bump nimbus-jose-jwt to version 10.3 (#277)
• 14d40c6 Moved to use the Sonatype Central Portal (#271)
• ee7c5d6 Fixed project name within pom file (#270)
• a3a58f9 Properly fix version of json-smart transitive dependency for third parties (#...
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[quarkus-bot]

Status for workflow Quarkus CI

This is the status report for running Quarkus CI on commit 9f4d1c2.

Failing Jobs

Status	Name	Step	Failures	Logs	Raw logs	Build scan
❌	Initial JDK 17 Build	Build	Failures	Logs	Raw logs	🔍

You can consult the Develocity build scans.

Failures

⚙️ Initial JDK 17 Build #

- Failing: integration-tests/kafka-oauth-keycloak 

📦 integration-tests/kafka-oauth-keycloak

❌ Failed to execute goal org.apache.maven.plugins:maven-enforcer-plugin:3.6.1:enforce (enforce) on project quarkus-integration-test-kafka-oauth-keycloak: Rule 0: org.apache.maven.enforcer.rules.dependency.DependencyConvergence failed with message: Failed while enforcing releasability.

Dependency convergence error for net.minidev:json-smart:jar:2.5.0. Paths to dependency are: