From b102ddf686082e0ce8fb7016843bee6206f1234a Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 21 Jun 2024 14:50:54 +0000 Subject: [PATCH] fix: upgrade jose from 4.14.4 to 4.15.5 Snyk has created this PR to upgrade jose from 4.14.4 to 4.15.5. See this package in npm: jose See this project in Snyk: https://app.snyk.io/org/ebay-open-source/project/8f99e2ea-5523-4e04-8fce-99705571d94a?utm_source=github&utm_medium=referral&page=upgrade-pr --- package-lock.json | 15 ++++++++------- package.json | 2 +- 2 files changed, 9 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 2a077fe..ad49038 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10,7 +10,7 @@ "license": "Apache-2.0", "dependencies": { "express": "^4", - "jose": "^4" + "jose": "^4.15.5" }, "devDependencies": { "@types/express": "^4.17.13", @@ -6515,9 +6515,10 @@ } }, "node_modules/jose": { - "version": "4.14.4", - "resolved": "https://registry.npmjs.org/jose/-/jose-4.14.4.tgz", - "integrity": "sha512-j8GhLiKmUAh+dsFXlX1aJCbt5KMibuKb+d7j1JaOJG6s2UjX1PQlW+OKB/sD4a/5ZYF4RcmYmLSndOoU3Lt/3g==", + "version": "4.15.5", + "resolved": "https://registry.npmjs.org/jose/-/jose-4.15.5.tgz", + "integrity": "sha512-jc7BFxgKPKi94uOvEmzlSWFFe2+vASyXaKUpdQKatWAESU2MWjDfFf0fdfc83CDKcA5QecabZeNLyfhe3yKNkg==", + "license": "MIT", "funding": { "url": "https://github.com/sponsors/panva" } @@ -14959,9 +14960,9 @@ } }, "jose": { - "version": "4.14.4", - "resolved": "https://registry.npmjs.org/jose/-/jose-4.14.4.tgz", - "integrity": "sha512-j8GhLiKmUAh+dsFXlX1aJCbt5KMibuKb+d7j1JaOJG6s2UjX1PQlW+OKB/sD4a/5ZYF4RcmYmLSndOoU3Lt/3g==" + "version": "4.15.5", + "resolved": "https://registry.npmjs.org/jose/-/jose-4.15.5.tgz", + "integrity": "sha512-jc7BFxgKPKi94uOvEmzlSWFFe2+vASyXaKUpdQKatWAESU2MWjDfFf0fdfc83CDKcA5QecabZeNLyfhe3yKNkg==" }, "js-tokens": { "version": "4.0.0", diff --git a/package.json b/package.json index e493f4e..5f734dd 100644 --- a/package.json +++ b/package.json @@ -26,7 +26,7 @@ "license": "Apache-2.0", "dependencies": { "express": "^4", - "jose": "^4" + "jose": "^4.15.5" }, "devDependencies": { "@types/express": "^4.17.13",