From 634645d80d9854d468109d520de78a7d742569de Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 28 Jun 2023 03:03:00 +0000 Subject: [PATCH] fix: upgrade jose from 4.5.0 to 4.14.4 Snyk has created this PR to upgrade jose from 4.5.0 to 4.14.4. See this package in npm: https://www.npmjs.com/package/jose See this project in Snyk: https://app.snyk.io/org/info-7n1/project/40443dec-c77f-41ec-bbd9-ff6da007fcde?utm_source=github&utm_medium=referral&page=upgrade-pr --- package-lock.json | 35 +++++++++++++++++++++-------------- package.json | 2 +- 2 files changed, 22 insertions(+), 15 deletions(-) diff --git a/package-lock.json b/package-lock.json index fb90a05..0df7e47 100644 --- a/package-lock.json +++ b/package-lock.json @@ -11,7 +11,7 @@ "dependencies": { "debug": "^4.3.3", "got": "^11.8.5", - "jose": "^4.5.0", + "jose": "^4.14.4", "lodash": "^4.17.21", "node-cache": "^5.1.2" }, @@ -10497,9 +10497,9 @@ } }, "node_modules/jose": { - "version": "4.5.0", - "resolved": "https://registry.npmjs.org/jose/-/jose-4.5.0.tgz", - "integrity": "sha512-GFcVFQwYQKbQTUOo2JlpFGXTkgBw26uzDsRMD2q1WgSKNSnpKS9Ug7bdQ8dS+p4sZHNH6iRPu6WK2jLIjspaMA==", + "version": "4.14.4", + "resolved": "https://registry.npmjs.org/jose/-/jose-4.14.4.tgz", + "integrity": "sha512-j8GhLiKmUAh+dsFXlX1aJCbt5KMibuKb+d7j1JaOJG6s2UjX1PQlW+OKB/sD4a/5ZYF4RcmYmLSndOoU3Lt/3g==", "funding": { "url": "https://github.com/sponsors/panva" } @@ -19769,7 +19769,8 @@ "version": "1.0.4", "resolved": "https://registry.npmjs.org/@octokit/plugin-request-log/-/plugin-request-log-1.0.4.tgz", "integrity": "sha512-mLUsMkgP7K/cnFEw07kWqXGF5LKrOkD+lhCrKvPHXWDywAwuDUeDwWBpc69XK3pNX0uKiVt8g5z96PJ6z9xCFA==", - "dev": true + "dev": true, + "requires": {} }, "@octokit/plugin-rest-endpoint-methods": { "version": "6.2.0", @@ -20541,7 +20542,8 @@ "version": "5.3.2", "resolved": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz", "integrity": "sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==", - "dev": true + "dev": true, + "requires": {} }, "acorn-walk": { "version": "6.2.0", @@ -20905,13 +20907,15 @@ "version": "0.4.0", "resolved": "https://registry.npmjs.org/babel-plugin-annotate-pure-calls/-/babel-plugin-annotate-pure-calls-0.4.0.tgz", "integrity": "sha512-oi4M/PWUJOU9ZyRGoPTfPMqdyMp06jbJAomd3RcyYuzUtBOddv98BqLm96Lucpi2QFoQHkdGQt0ACvw7VzVEQA==", - "dev": true + "dev": true, + "requires": {} }, "babel-plugin-dev-expression": { "version": "0.2.3", "resolved": "https://registry.npmjs.org/babel-plugin-dev-expression/-/babel-plugin-dev-expression-0.2.3.tgz", "integrity": "sha512-rP5LK9QQTzCW61nVVzw88En1oK8t8gTsIeC6E61oelxNsU842yMjF0G1MxhvUpCkxCEIj7sE8/e5ieTheT//uw==", - "dev": true + "dev": true, + "requires": {} }, "babel-plugin-dynamic-import-node": { "version": "2.3.3", @@ -23170,7 +23174,8 @@ "version": "2.5.1", "resolved": "https://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-2.5.1.tgz", "integrity": "sha512-Y2c4b55R+6ZzwtTppKwSmK/Kar8AdLiC2f9NADCuxbcTgPPg41Gyqa6b9GppgXSvCtkRw43ZE86CT5sejKC6/g==", - "dev": true + "dev": true, + "requires": {} }, "eslint-scope": { "version": "5.1.1", @@ -25418,7 +25423,8 @@ "version": "1.2.2", "resolved": "https://registry.npmjs.org/jest-pnp-resolver/-/jest-pnp-resolver-1.2.2.tgz", "integrity": "sha512-olV41bKSMm8BdnuMsewT4jqlZ8+3TCARAXjZGT9jcoSnrfUnRCqnMoF9XEeoWjbzObpqF9dRhHQj0Xb9QdF6/w==", - "dev": true + "dev": true, + "requires": {} }, "jest-regex-util": { "version": "25.2.6", @@ -25622,9 +25628,9 @@ } }, "jose": { - "version": "4.5.0", - "resolved": "https://registry.npmjs.org/jose/-/jose-4.5.0.tgz", - "integrity": "sha512-GFcVFQwYQKbQTUOo2JlpFGXTkgBw26uzDsRMD2q1WgSKNSnpKS9Ug7bdQ8dS+p4sZHNH6iRPu6WK2jLIjspaMA==" + "version": "4.14.4", + "resolved": "https://registry.npmjs.org/jose/-/jose-4.14.4.tgz", + "integrity": "sha512-j8GhLiKmUAh+dsFXlX1aJCbt5KMibuKb+d7j1JaOJG6s2UjX1PQlW+OKB/sD4a/5ZYF4RcmYmLSndOoU3Lt/3g==" }, "jpjs": { "version": "1.2.1", @@ -30979,7 +30985,8 @@ "version": "7.5.6", "resolved": "https://registry.npmjs.org/ws/-/ws-7.5.6.tgz", "integrity": "sha512-6GLgCqo2cy2A2rjCNFlxQS6ZljG/coZfZXclldI8FB/1G3CCI36Zd8xy2HrFVACi8tfk5XrgLQEk+P0Tnz9UcA==", - "dev": true + "dev": true, + "requires": {} }, "xdg-basedir": { "version": "5.1.0", diff --git a/package.json b/package.json index 357a400..df4f3dc 100644 --- a/package.json +++ b/package.json @@ -97,7 +97,7 @@ "dependencies": { "debug": "^4.3.3", "got": "^11.8.5", - "jose": "^4.5.0", + "jose": "^4.14.4", "lodash": "^4.17.21", "node-cache": "^5.1.2" }