Bump line-bot-sdk from 3.19.0 to 3.19.1

[dependabot]

Bumps line-bot-sdk from 3.19.0 to 3.19.1.

Release notes

Sourced from line-bot-sdk's releases.

v3.19.1 Add an Option to Skip Webhook Signature Verification

What's Changed

✨ Add an Option to Skip Webhook Signature Verification

• Add option to skip signature verification by @​habara-k in line/line-bot-sdk-python#821

With this release, developers can now optionally skip signature verification when parsing incoming webhook requests. This new capability is especially useful in scenarios where the channel secret may change, potentially causing temporary signature mismatches.

Example Usage:

parser = linebot.v3.WebhookParser(
    'YOUR_CHANNEL_SECRET',
    skip_signature_verification=lambda: True # Skip verification
)

When signature verification is skipped, the signatureValidator will not be invoked. This allows webhook requests to be processed even if their signatures do not match the current channel secret used for verification.

This feature is particularly helpful in high-availability systems where avoiding downtime or message loss during configuration updates is critical.

Dependency updates

• chore(deps): update dependency tox to v4.29.0 by @​renovate[bot] in line/line-bot-sdk-python#843
• chore(deps): update dependency pytest to v8.4.2 by @​renovate[bot] in line/line-bot-sdk-python#844
• chore(deps): update actions/github-script action to v7.1.0 by @​renovate[bot] in line/line-bot-sdk-python#845
• chore(deps): update dependency tox to v4.30.2 by @​renovate[bot] in line/line-bot-sdk-python#847
• chore(deps): update dependency pytest-cov to v6.3.0 by @​renovate[bot] in line/line-bot-sdk-python#846
• chore(deps): update pypa/gh-action-pypi-publish action to v1.13.0 by @​renovate[bot] in line/line-bot-sdk-python#849
• chore(deps): update dependency twine to v6.2.0 by @​renovate[bot] in line/line-bot-sdk-python#848
• chore(deps): update actions/github-script action to v8 by @​renovate[bot] in line/line-bot-sdk-python#850
• chore(deps): update actions/setup-node action to v5 by @​renovate[bot] in line/line-bot-sdk-python#851
• chore(deps): update actions/setup-python action to v6 by @​renovate[bot] in line/line-bot-sdk-python#852
• chore(deps): update actions/stale action to v10 by @​renovate[bot] in line/line-bot-sdk-python#853
• chore(deps): update dependency pytest-cov to v7 by @​renovate[bot] in line/line-bot-sdk-python#855
• chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.4 by @​renovate[bot] in line/line-bot-sdk-python#856

Other Changes

• Set minimumReleaseAge to 7 days to avoid merge renovate PR quickly by @​Yang-33 in line/line-bot-sdk-python#854

Full Changelog: line/line-bot-sdk-python@v3.19.0...v3.19.1

Commits

• 073747e Add option to skip signature verification (#821)
• 850db1f chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin...
• e13ae72 Set minimumReleaseAge to 7 days to avoid merge renovate PR quickly (#854)
• 98edf8f chore(deps): update dependency pytest-cov to v7 (#855)
• 434ff13 chore(deps): update actions/stale action to v10 (#853)
• b790914 chore(deps): update actions/setup-python action to v6 (#852)
• 39873b6 chore(deps): update actions/setup-node action to v5 (#851)
• a4be9f3 chore(deps): update actions/github-script action to v8 (#850)
• 85be916 chore(deps): update dependency twine to v6.2.0 (#848)
• 70227ec chore(deps): update pypa/gh-action-pypi-publish action to v1.13.0 (#849)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)