Update dependency arctic to v3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
arctic	^2.3.4 -> ^3.0.0

---

Release Notes

pilcrowonpaper/arctic (arctic)

v3.7.0

Compare Source

• Add Withings provider (#​304)

v3.6.1

Compare Source

• Fix Start.gg authorization endpoint (#​300)
• Fix Tiltify authorization endpoint (#​300)

v3.6.0

Compare Source

• Add Mastodon client (#​288).
• Add Autodesk Platform Services client (#​292).
• Strava: Add refreshAccessToken() method (#​295).

v3.5.0

Compare Source

• Polar.sh: Fix client authentication (#​286).
• Polar.sh: Support public clients (#​286).

v3.4.0

Compare Source

• Add Kick provider (#​277).
• Add DonationAlerts provider (#​281).
• Add MercadoLibre provider (#​279).
• Add MercadoPago provider (#​279).

v3.3.0

Compare Source

• Add Gitea provider (#​265).

v3.2.4

Compare Source

• Entra ID: Fix Authorization header (#​272).

v3.2.3

Compare Source

• Figma: Update endpoints to latest (#​267).
• Entra ID: Remove Origin header for confidential clients (#​270).

v3.2.2

Compare Source

• Entra ID: Add Origin header to requests (#​260).

v3.2.1

Compare Source

• Add refreshAccessToken() method to Figma provider (#​258).

v3.2.0

Compare Source

• Add Synology provider (#​248).

v3.1.3

Compare Source

• Fix TikTok endpoints and scope parameter.

v3.1.2

Compare Source

• Export TikTok provider (#​249).

v3.1.1

Compare Source

• Fix Authentik endpoints (#​244).

v3.1.0

Compare Source

• Add Battle.net provider (#​241).

v3.0.0

Compare Source

Arctic v3 is here! This is a small major release that adds support for public OAuth clients. There are only a few breaking changes and most breaking changes are small.

npm install arctic@latest

Changes

• [Breaking] Remove clientSecret parameter from Etsy constructor.
• [Breaking] Add codeVerifier parameter to createAuthorizationURL() and validateAuthorizationCode() in Auth0, Discord, Spotify, WorkOS.
• [Breaking] Replaced domain parameter with baseURL parameter for Authentik, GitLab constructor.
• [Breaking] Replaced poolURL parameter with domain parameter for AmazonCognito constructor.
• [Breaking] Add scopes parameter to refreshAccessToken() in AmazonCognito, MicrosoftEntraId.
• [Breaking] Update MyAnimeList constructor.
• [Breaking] Stricter compliance to RFC 6749 for OAuth2Client.
• Add UnexpectedResponseError and UnexpectedErrorResponseBodyError errors.
• Allow null as clientSecret in AmazonCognito, Auth0, Authentik, Bungie, Discord, GitLab, KeyCloak, MicrosoftEntraId, Roblox, Salesforce, Spotify, Twitter, WorkOS constructor.
• Fix scopes parameter in Strava.createAuthorizationURL().
• Add TikTok provider.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.