From 53d0e037b4a7761c2531edd829f34f3707d6ceed Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 21 Jun 2024 09:53:22 +0000 Subject: [PATCH] Bump jose from 1.28.2 to 5.4.1 Bumps [jose](https://github.com/panva/jose) from 1.28.2 to 5.4.1. - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](https://github.com/panva/jose/compare/v1.28.2...v5.4.1) --- updated-dependencies: - dependency-name: jose dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- package-lock.json | 13 ++++--------- package.json | 2 +- 2 files changed, 5 insertions(+), 10 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4761760a394..8e65330f3c1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -89,7 +89,7 @@ "i18next": "^23.3.0", "i18next-fs-backend": "^2.1.5", "ioredis": "^5.3.2", - "jose": "^1.28.1", + "jose": "^5.4.1", "jsdom": "^23.2.0", "jsonwebtoken": "^9.0.0", "jwks-rsa": "^2.0.5", @@ -15370,14 +15370,9 @@ } }, "node_modules/jose": { - "version": "1.28.2", - "license": "MIT", - "dependencies": { - "@panva/asn1.js": "^1.0.0" - }, - "engines": { - "node": ">=10.13.0" - }, + "version": "5.4.1", + "resolved": "https://registry.npmjs.org/jose/-/jose-5.4.1.tgz", + "integrity": "sha512-U6QajmpV/nhL9SyfAewo000fkiRQ+Yd2H0lBxJJ9apjpOgkOcBQJWOrMo917lxLptdS/n/o/xPzMkXhF46K8hQ==", "funding": { "url": "https://github.com/sponsors/panva" } diff --git a/package.json b/package.json index 27246bf3ed5..439d460b6d1 100644 --- a/package.json +++ b/package.json @@ -205,7 +205,7 @@ "i18next": "^23.3.0", "i18next-fs-backend": "^2.1.5", "ioredis": "^5.3.2", - "jose": "^1.28.1", + "jose": "^5.4.1", "jsdom": "^23.2.0", "jsonwebtoken": "^9.0.0", "jwks-rsa": "^2.0.5",