From 8bb4a3ebe57c815c560ee11d91575c05ac539adf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Aug 2022 23:28:01 +0000
Subject: [PATCH] fix(deps): bump pkijs from 3.0.5 to 3.0.7 (#501)
Bumps [pkijs](https://github.com/PeculiarVentures/PKI.js) from 3.0.5 to 3.0.7.
Commits
253ac40
3.0.7
27e60b7
Merge pull request #360 from bdehamer:cert-chain-engine-fix
a6da396
fix issue w/ crypto in CertChainValidationEngine
3e3e614
3.0.6
4e1b170
style(lint): ignore deprecation error
8f8df34
chore(deps): update dependencies
8139f77
refactor: replace any to OctetString for verifyWithPublicKey
f3af29f
Merge pull request #359 from bdehamer/master
0369337
Fix bug in verifySCTsForCertificate
- See full diff in compare view
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pkijs&package-manager=npm_and_yarn&previous-version=3.0.5&new-version=3.0.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
---
package-lock.json | 14 +++++++-------
package.json | 2 +-
2 files changed, 8 insertions(+), 8 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index 047c5ab09..3026ce59a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18,7 +18,7 @@
"dohdec": "^3.1.0",
"is-valid-domain": "^0.1.6",
"moment": "^2.29.4",
- "pkijs": "^3.0.5",
+ "pkijs": "^3.0.7",
"smart-buffer": "^4.2.0",
"uuid4": "^2.0.3",
"verror": "^1.10.1",
@@ -5150,9 +5150,9 @@
}
},
"node_modules/pkijs": {
- "version": "3.0.5",
- "resolved": "https://registry.npmjs.org/pkijs/-/pkijs-3.0.5.tgz",
- "integrity": "sha512-J6P30yzU7qSbuJIBaclwN93WbyoxjVlkYMgjQmE9wWkPUTHVu2cH6lkjWcIr2WAub5KH38BA1Eyeb4s9apUPTg==",
+ "version": "3.0.7",
+ "resolved": "https://registry.npmjs.org/pkijs/-/pkijs-3.0.7.tgz",
+ "integrity": "sha512-QPV44vMDqHAbf3nmiz68NCfYCgZlLFboV0DT5mErSqCMz4CiYtACagGS1Z8Fsb+8yyEp4G3ctQEAktXwA34bRQ==",
"dependencies": {
"asn1js": "^3.0.5",
"bytestreamjs": "^2.0.0",
@@ -10609,9 +10609,9 @@
}
},
"pkijs": {
- "version": "3.0.5",
- "resolved": "https://registry.npmjs.org/pkijs/-/pkijs-3.0.5.tgz",
- "integrity": "sha512-J6P30yzU7qSbuJIBaclwN93WbyoxjVlkYMgjQmE9wWkPUTHVu2cH6lkjWcIr2WAub5KH38BA1Eyeb4s9apUPTg==",
+ "version": "3.0.7",
+ "resolved": "https://registry.npmjs.org/pkijs/-/pkijs-3.0.7.tgz",
+ "integrity": "sha512-QPV44vMDqHAbf3nmiz68NCfYCgZlLFboV0DT5mErSqCMz4CiYtACagGS1Z8Fsb+8yyEp4G3ctQEAktXwA34bRQ==",
"requires": {
"asn1js": "^3.0.5",
"bytestreamjs": "^2.0.0",
diff --git a/package.json b/package.json
index c39484646..36bf5db64 100644
--- a/package.json
+++ b/package.json
@@ -49,7 +49,7 @@
"dohdec": "^3.1.0",
"is-valid-domain": "^0.1.6",
"moment": "^2.29.4",
- "pkijs": "^3.0.5",
+ "pkijs": "^3.0.7",
"smart-buffer": "^4.2.0",
"uuid4": "^2.0.3",
"verror": "^1.10.1",