From 3a4df7cc625b939c0e7bc3e57602cdf7c67d2d20 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Nov 2022 13:38:18 +0000 Subject: [PATCH] chore(deps): bump jose from 2.0.3 to 4.10.4 Bumps [jose](https://github.com/panva/jose) from 2.0.3 to 4.10.4. - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](https://github.com/panva/jose/compare/v2.0.3...v4.10.4) --- updated-dependencies: - dependency-name: jose dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- packages/server/package.json | 2 +- yarn.lock | 12 +++++------- 2 files changed, 6 insertions(+), 8 deletions(-) diff --git a/packages/server/package.json b/packages/server/package.json index 1b946e7..1cebbb5 100644 --- a/packages/server/package.json +++ b/packages/server/package.json @@ -29,7 +29,7 @@ "cross-env": "^7.0.3", "express": "^4.17.1", "fs-extra": "^9.0.1", - "jose": "^2.0.3", + "jose": "^4.10.4", "method-override": "^3.0.0", "oidc-provider": "7.3.1", "uuid": "^8.3.1" diff --git a/yarn.lock b/yarn.lock index f9f7069..4b7abd0 100644 --- a/yarn.lock +++ b/yarn.lock @@ -9583,18 +9583,16 @@ jest@26.6.0: dependencies: "@panva/asn1.js" "^1.0.0" -jose@^2.0.3: - version "2.0.3" - resolved "https://registry.yarnpkg.com/jose/-/jose-2.0.3.tgz#9c931ab3e13e2d16a5b9e6183e60b2fc40a8e1b8" - integrity sha512-L+RlDgjO0Tk+Ki6/5IXCSEnmJCV8iMFZoBuEgu2vPQJJ4zfG/k3CAqZUMKDYNRHIDyy0QidJpOvX0NgpsAqFlw== - dependencies: - "@panva/asn1.js" "^1.0.0" - jose@^3.11.1: version "3.11.6" resolved "https://registry.yarnpkg.com/jose/-/jose-3.11.6.tgz#34028990dd0da69c444d40961107080047bb51ce" integrity sha512-h/qTZ80NygTGeNA6ok9KIz5N6GFrNzlnchSmFrtPzeTMvYN7mDJ2Z2QMKKp/9rrqPW1BVeBiu0KQkdYDUx2DSw== +jose@^4.10.4: + version "4.10.4" + resolved "https://registry.yarnpkg.com/jose/-/jose-4.10.4.tgz#5f934b2fcf2995776e8f671f7523c6ac52c138f7" + integrity sha512-eBH77Xs9Yc/oTDvukhAEDVMijhekPuNktXJL4tUlB22jqKP1k48v5nmsUmc8feoJPsxB3HsfEt2LbVSoz+1mng== + "js-tokens@^3.0.0 || ^4.0.0", js-tokens@^4.0.0: version "4.0.0" resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"