Update dependency no.nav.security:mock-oauth2-server to v6

[solrbot]

This PR contains the following updates:

Package	Type	Update	Change
no.nav.security:mock-oauth2-server	dependencies	major	5.0.2 → 6.0.2

---

Release Notes

navikt/mock-oauth2-server (no.nav.security:mock-oauth2-server)

v6.0.2

Compare Source

What's Changed

• fix: raise published kotlin-stdlib floor to 2.2.21 (#​1011) @​tronghn

⬆️ Dependency upgrades

• chore(deps): bump nettyVersion from 4.2.16.Final to 4.2.17.Final (#​1010) @​dependabot[bot]
• chore(deps): bump JamesIves/github-pages-deploy-action from 4.8.0 to 4.9.0 in the github-actions group (#​1008) @​dependabot[bot]

v6.0.1

Compare Source

What's Changed

• fix(userinfo): serialize timestamp claims as NumericDate (#​1007) @​tronghn

⬆️ Dependency upgrades

• chore(deps): bump the github-actions group with 3 updates (#​1005) @​dependabot[bot]

v6.0.0

Compare Source

What's Changed

⚠️ Breaking Changes

• mock-oauth2-server no longer bundles ch.qos.logback:logback-classic nor kotlinx-serialization-json in its library.
  • If your test logs went quiet, add testRuntimeOnly("ch.qos.logback:logback-classic:<version>"). slf4j-api still comes transitively.
• The debugger UI (/<issuer>/debugger and /<issuer>/debugger/callback) can no longer target an external identity provider.
• DebuggerRequestHandler now takes an OAuth2HttpServer instead of an Ssl?.
• With (#​1002), the library now uses Jackson 3 (tools.jackson.*) instead of Jackson 2 (com.fasterxml.jackson.*).
  • Consumers on Jackson 2 are unaffected. Jackson 3 uses a different group ID and package, and still depends on jackson-annotations 2.x.
  • no.nav.security.mock.oauth2.http.objectMapper and the deserializers nested in OAuth2Config are now internal. Construct your own mapper if you used objectMapper.
• NettyWrapper rejects request bodies above 1 MiB with 413. This affects the standalone server and Docker image; MockWebServerWrapper is unaffected.

See also the migration guide.

🐛 Bug Fixes

• fix: support subject request mappings for password grant (#​983) @​ybelMekk
• fix: restrict the debugger to this server's own endpoints (#​1000) @​tronghn
• fix: cap Netty request body aggregation at 1 MiB (#​1001) @​tronghn

🧰 Maintenance

• test: stabilize standalone and server tests (#​974) @​ybelMekk
• build: keep logback-classic out of the published artifact (#​998) @​tronghn
• build: move kotlinx-serialization-json to testImplementation (#​997) @​pcmoen

⬆️ Dependency upgrades

• chore(deps): bump the github-actions group with 3 updates (#​1003) @​dependabot[bot]
• chore(deps): bump the github-actions group across 1 directory with 3 updates (#​999) @​dependabot[bot]
• chore(deps): bump kotlinToolchain from 2.4.0 to 2.4.10 (#​993) @​dependabot[bot]
• chore(deps): bump com.nimbusds:oauth2-oidc-sdk from 11.38.1 to 11.38.2 (#​994) @​dependabot[bot]
• chore(deps): bump org.bouncycastle:bcpkix-jdk18on from 1.84 to 1.85 (#​995) @​dependabot[bot]
• chore(deps): bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0 (#​996) @​dependabot[bot]
• chore(deps): bump kotestVersion from 6.2.1 to 6.2.3 (#​991) @​dependabot[bot]
• chore(deps): bump nettyVersion from 4.2.15.Final to 4.2.16.Final (#​985) @​dependabot[bot]
• chore(deps): bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 (#​986) @​dependabot[bot]
• chore(deps): bump jacksonVersion from 2.22.0 to 2.22.1 (#​988) @​dependabot[bot]
• chore(deps): bump junitJupiterVersion from 6.1.1 to 6.1.2 (#​984) @​dependabot[bot]
• chore(deps): bump com.nimbusds:oauth2-oidc-sdk from 11.37.2 to 11.38.1 (#​989) @​dependabot[bot]
• chore(deps): bump the github-actions group across 1 directory with 3 updates (#​990) @​dependabot[bot]
• chore(deps): bump gradle-wrapper from 8.14.4 to 9.6.1 (#​982) @​dependabot[bot]
• chore(deps): bump org.jmailen.kotlinter from 5.4.2 to 5.6.0 (#​978) @​dependabot[bot]
• chore(deps): bump com.squareup.okhttp3:mockwebserver from 5.2.1 to 5.4.0 (#​981) @​dependabot[bot]
• chore(deps): bump com.nimbusds:oauth2-oidc-sdk from 11.37.1 to 11.37.2 (#​980) @​dependabot[bot]
• chore(deps): bump the github-actions group with 2 updates (#​979) @​dependabot[bot]
• chore(deps): bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.37 (#​977) @​dependabot[bot]

New Contributors

• @​pcmoen made their first contribution in #​997

Full Changelog: navikt/mock-oauth2-server@5.0.2...5.0.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on the first day of the month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot

[epugh]

Merging this into #4850 since the overlap.

[solrbot]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 6.x releases. But if you manually upgrade to 6.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.