chore(deps): update dependency no.nav.security:mock-oauth2-server to v4

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
no.nav.security:mock-oauth2-server	3.0.1 → 4.0.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

navikt/mock-oauth2-server (no.nav.security:mock-oauth2-server)

v4.0.0

Compare Source

What's Changed

🚀 Features

• feat: publish major and minor Docker image tags on release (#​941) @​ybelMekk

⚠️ Breaking Changes

• fix: reject unknown and revoked refresh tokens with invalid_grant (#​936) @​ybelMekk

Previously any arbitrary string was accepted as a refresh_token.
Tests relying on this behavior will now receive 400 invalid_grant.
See the migration guide for details.

Affected test patterns:

❌ Passing a hardcoded or arbitrary string as refresh_token
❌ Expecting refresh to succeed after revocation
❌ Presenting a refresh token issued by issuer A to issuer B

🐛 Bug Fixes

• fix: reject unknown and revoked refresh tokens with invalid_grant (#​936) @​ybelMekk
• fix: match requestMappings when client_id is provided via HTTP Basic auth (#​935) @​ybelMekk
• fix: harden authorization code single-use and PKCE verification (#​934) @​ybelMekk

🧰 Maintenance

• docs: improve README accuracy and new user experience (#​937) @​ybelMekk
• Corrected registry name (#​917) @​jksolbakken

⬆️ Dependency upgrades

• chore(deps): bump release-drafter/release-drafter from 7.2.1 to 7.3.0 in the github-actions group (#​939) @​dependabot[bot]

v3.0.3

Compare Source

What's Changed

• fix(ci): migrate dokka task from V1 to V2 API (#​933) @​ybelMekk

v3.0.2

Compare Source

What's Changed

• chore(ci): update and ratchet-pin all GitHub Actions to latest versions (#​932) @​ybelMekk
• fix: set dependency-graph-continue-on-failure to true in build-master workflow (#​931) @​ybelMekk
• chore: update gradle wrapper distributionUrl to 8.14.4 (#​930) @​ybelMekk
• chore(deps): apply all pending dependabot updates (#​929) @​ybelMekk

⬆️ Dependency upgrades

• chore(deps): bump org.bouncycastle:bcpkix-jdk18on from 1.82 to 1.84 (#​928) @​dependabot[bot]
• chore(deps): bump the github-actions group across 1 directory with 5 updates (#​923) @​dependabot[bot]
• chore(deps): bump io.netty:netty-codec-http from 4.2.6.Final to 4.2.7.Final (#​909) @​dependabot[bot]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.