Bump biscuit from 0.5.0-beta2 to 0.6.0-beta1

[dependabot]

Bumps biscuit from 0.5.0-beta2 to 0.6.0-beta1.

Release notes

Sourced from biscuit's releases.

v0.6.0-beta1

0.6.0-beta1 (2021-02-24)

Breaking Changes

• jws::RegisteredHeader field web_key is now of type Option<jwk::JWK<Empty>> instead of Option<String>. If you were not using JWKs, continue setting the value to None will not breaking. If you were previously serializing your JWK as JSON strings, you will now have to deserialize them into jwk::JWK<Empty>. Please raise issues if you encounter any bugs. [#189](lawliet89/biscuit#189)

Enhancements

• Add support for Flattened JWS [#190](lawliet89/biscuit#190)
• Added more documentation for using OpenSSL to manipulate keys [#179](lawliet89/biscuit#179)

v0.5.0 2020-11-17

The only changes since v0.5.0-beta2 are dependencies upgrades and setting a higher MSRV.

0.5.0 (2020-11-17)

These are changes since v0.4.2.

Breaking Changes

• MSRV is now Rust 1.41 due to changes in Cargo.lock format. See announcement.

• The jwk::AlgorithmParameters::OctetKey enum variant is now a newtype variant which takes a jwk::OctetKeyParameters struct for its parameters. To migrate your existing code, you can do the following

  -jwk::AlgorithmParameters::OctetKey {
  +jwk::AlgorithmParameters::OctetKey(jwk::OctetKeyParameters {
     value: key,
     key_type: Default::default(),
  -}
  +})

  (#125)

• jws::Compact::decode_with_jwks now supports JWK without an alg specified. However, a new parameter to specify an expected parameter had to be added to support this use case. This is to mitigate against issues like this. Existing usage of JWK with the alg specified can simply add a None as the second parameter. (#130)

... (truncated)

Changelog

Sourced from biscuit's changelog.

0.6.0-beta1 (2021-02-24)

Breaking Changes

• jws::RegisteredHeader field web_key is now of type Option<jwk::JWK<Empty>> instead of Option<String>. If you were not using JWKs, continue setting the value to None will not breaking. If you were previously serializing your JWK as JSON strings, you will now have to deserialize them into jwk::JWK<Empty>. Please raise issues if you encounter any bugs. [#189](lawliet89/biscuit#189)

Enhancements

• Add support for Flattened JWS [#190](lawliet89/biscuit#190)
• Added more documentation for using OpenSSL to manipulate keys [#179](lawliet89/biscuit#179)

0.5.0 (2020-11-17)

Breaking Changes

• MSRV is now Rust 1.41 due to changes in Cargo.lock format. See announcement.

• The jwk::AlgorithmParameters::OctetKey enum variant is now a newtype variant which takes a jwk::OctetKeyParameters struct for its parameters. To migrate your existing code, you can do the following

  -jwk::AlgorithmParameters::OctetKey {
  +jwk::AlgorithmParameters::OctetKey(jwk::OctetKeyParameters {
     value: key,
     key_type: Default::default(),
  -}
  +})

  (#125)

• jws::Compact::decode_with_jwks now supports JWK without an alg specified. However, a new parameter to specify an expected parameter had to be added to support this use case. This is to mitigate against issues like this. Existing usage of JWK with the alg specified can simply add a None as the second parameter. (#130)

• Remove StringOrUri because it was hard to get the Uri type working properly. Replace all usage of StringOrUri with Strings instead. (#131)

Enhancements

... (truncated)

Commits

• 9148092 Merge pull request #199 from lawliet89/cut-0.6.0-beta1
• 678328f Bump serde_json from 1.0.61 to 1.0.62
• 8a0aaa5 Bump ring from 0.16.19 to 0.16.20
• 9e58a2d Bump data-encoding from 2.3.1 to 2.3.2
• 6e3023b Bump serde_test from 1.0.122 to 1.0.123
• 4a4d324 Bump serde from 1.0.122 to 1.0.123
• b41bd29 Move some shared stuff from jws::compact into jws
• 2a91eeb Internal notes
• 22ba5f8 Docs pass, add code examples for important methods
• e9f7d0f Add a Signable::sign function for convenience
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)