Merge pull request #892 from Crown-Commercial-Service/dependabot/bundler/multi-5c113cbb90

build(deps): bump jwt, auth0, mini_racer and rubocop

Author: reemi1510

Gemfile

@@ -19,7 +19,7 @@ gem 'mini_racer'
 # Build JSON APIs with ease. Read more: https://github.com/rails/jbuilder
 gem 'jbuilder', '~> 2.14', '>= 2.14.0'
 
-gem 'jwt', '~> 2.2'
+gem 'jwt', '~> 3.2'
 
 gem 'csv', '~> 3.3', '>= 3.3.4'
 
@@ -71,7 +71,7 @@ gem 'sprockets-rails', '~> 3.5', '>= 3.5.1'
 gem 'rack-maintenance', '~> 3.0'
 
 # Auth0 client for user setup scripts
-gem 'auth0', '~> 4.17', require: false
+gem 'auth0', '~> 5.20', require: false
 
 # Locking above vulnerable version https://nvd.nist.gov/vuln/detail/CVE-2019-5477
 gem 'nokogiri', '>= 1.19.1'

Gemfile.lock

@@ -91,10 +91,12 @@ GEM
     addressable (2.8.7)
       public_suffix (>= 2.0.2, < 7.0)
     ast (2.4.3)
-    auth0 (4.17.0)
-      jwt (~> 2.2.0)
-      rest-client (~> 2.0.0)
-      zache (~> 0.12.0)
+    auth0 (5.20.0)
+      addressable (~> 2.8)
+      jwt (>= 2.7, < 4.0)
+      rest-client (~> 2.1)
+      retryable (~> 3.0)
+      zache (~> 0.12)
     aws-eventstream (1.4.0)
     aws-partitions (1.1196.0)
     aws-sdk-core (3.240.0)
@@ -150,8 +152,7 @@ GEM
     date (3.5.1)
     diff-lcs (1.6.2)
     docile (1.4.0)
-    domain_name (0.5.20190701)
-      unf (>= 0.0.5, < 1.0.0)
+    domain_name (0.6.20240107)
     dotenv (3.2.0)
     dotenv-rails (3.2.0)
       dotenv (= 3.2.0)
@@ -207,7 +208,8 @@ GEM
       logger
     highline (3.1.2)
       reline
-    http-cookie (1.0.5)
+    http-accept (1.7.0)
+    http-cookie (1.1.6)
       domain_name (~> 0.5)
     httparty (0.24.2)
       csv
@@ -231,8 +233,9 @@ GEM
       thor (>= 0.14, < 2.0)
     js_cookie_rails (2.2.0)
       railties (>= 3.1)
-    json (2.19.3)
-    jwt (2.2.3)
+    json (2.19.7)
+    jwt (3.2.0)
+      base64
     kaminari (1.2.2)
       activesupport (>= 4.1.0)
       kaminari-actionview (= 1.2.2)
@@ -246,7 +249,7 @@ GEM
       kaminari-core (= 1.2.2)
     kaminari-core (1.2.2)
     language_server-protocol (3.17.0.5)
-    libv8-node (18.16.0.0)
+    libv8-node (24.12.0.1)
     lint_roller (1.1.0)
     listen (3.8.0)
       rb-fsevent (~> 0.10, >= 0.10.3)
@@ -268,13 +271,14 @@ GEM
     marcel (1.1.0)
     matrix (0.4.2)
     method_source (1.0.0)
-    mime-types (3.5.1)
-      mime-types-data (~> 3.2015)
-    mime-types-data (3.2023.0808)
+    mime-types (3.7.0)
+      logger
+      mime-types-data (~> 3.2025, >= 3.2025.0507)
+    mime-types-data (3.2026.0414)
     mini_mime (1.1.5)
     mini_portile2 (2.8.9)
-    mini_racer (0.8.0)
-      libv8-node (~> 18.16.0.0)
+    mini_racer (0.21.1)
+      libv8-node (~> 24.12.0.1)
     minitest (6.0.2)
       drb (~> 2.0)
       prism (~> 1.5)
@@ -322,8 +326,8 @@ GEM
     orderly (0.1.1)
       capybara (>= 1.1)
       rspec (>= 2.14)
-    parallel (1.27.0)
-    parser (3.3.9.0)
+    parallel (2.1.0)
+    parser (3.3.11.1)
       ast (~> 2.4.1)
       racc
     pg (1.5.6)
@@ -401,15 +405,17 @@ GEM
       erb
       psych (>= 4.0.0)
       tsort
-    regexp_parser (2.11.3)
+    regexp_parser (2.12.0)
     reline (0.6.3)
       io-console (~> 0.5)
     request_store (1.5.1)
       rack (>= 1.4)
-    rest-client (2.0.2)
+    rest-client (2.1.0)
+      http-accept (>= 1.7.0, < 2.0)
       http-cookie (>= 1.0.2, < 2.0)
       mime-types (>= 1.16, < 4.0)
       netrc (~> 0.8)
+    retryable (3.0.5)
     rexml (3.4.4)
     rollbar (3.1.2)
     rspec (3.13.0)
@@ -433,11 +439,11 @@ GEM
       rspec-mocks (>= 3.13.0, < 5.0.0)
       rspec-support (>= 3.13.0, < 5.0.0)
     rspec-support (3.13.6)
-    rubocop (1.86.0)
+    rubocop (1.87.0)
       json (~> 2.3)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.1.0)
-      parallel (~> 1.10)
+      parallel (>= 1.10)
       parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
       regexp_parser (>= 2.9.3, < 3.0)
@@ -498,12 +504,9 @@ GEM
       tzinfo (>= 1.0.0)
     uglifier (4.2.0)
       execjs (>= 0.3.0, < 3)
-    unf (0.1.4)
-      unf_ext
-    unf_ext (0.0.8.2)
     unicode-display_width (3.2.0)
       unicode-emoji (~> 4.1)
-    unicode-emoji (4.1.0)
+    unicode-emoji (4.2.0)
     uri (1.1.1)
     useragent (0.16.11)
     version_gem (1.1.9)
@@ -521,14 +524,14 @@ GEM
     websocket-extensions (0.1.5)
     xpath (3.2.0)
       nokogiri (~> 1.8)
-    zache (0.12.0)
+    zache (0.15.2)
     zeitwerk (2.7.5)
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
-  auth0 (~> 4.17)
+  auth0 (~> 5.20)
   aws-sdk-s3 (>= 1.208.0)
   bootsnap (>= 1.1.0)
   brakeman
@@ -546,7 +549,7 @@ DEPENDENCIES
   jquery-rails (>= 4.6.1)
   js_cookie_rails (~> 2.2, >= 2.2.0)
   jsonapi-consumer!
-  jwt (~> 2.2)
+  jwt (~> 3.2)
   kaminari (>= 1.2.2)
   listen (~> 3.5, >= 3.5.1)
   lograge (>= 0.13.0)