Skip to content

fix(deps): update dependency jose to v5.10.0 #483

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

descope[bot]
Copy link
Contributor

@descope descope bot commented Mar 27, 2025

This PR contains the following updates:

Package Type Update Change OpenSSF
jose dependencies minor 5.2.2 -> 5.10.0 OpenSSF Scorecard

Release Notes

panva/jose (jose)

v5.10.0

Compare Source

Features

v5.9.6

Compare Source

Reverts
  • Revert "refactor(build): simplify package exports" (2ef3a52)

v5.9.5

Compare Source

Refactor
  • build: simplify package exports (4783f7f)

v5.9.4

Compare Source

Refactor
  • types: update error definitions (510c5ca)

v5.9.3

Compare Source

Refactor
  • use as Type for type assertions instead of (c4dc24d)

v5.9.2

Compare Source

Refactor
  • types: remove index signatures from JWK interfaces (ccf0cda)

v5.9.1

Compare Source

Fixes
  • types: add missing index signature on the convenience JWK types (90a93dc)

v5.9.0

Compare Source

Features
  • allow JWK objects as "key" input to sign and verify (c6302ea)

v5.8.0

Compare Source

Features
  • add subpath module exports (72ecff6)
Refactor
  • omit LocalJWKSet export since it's no longer needed for RemoteJWKSet (c502731)

v5.7.0

Compare Source

Features
  • graduate jwksCache to stable API (0f09c12)

v5.6.3

Compare Source

Fixes
  • add sideEffects:false to nested ESM package.json files (f3aff1c)

v5.6.2

Compare Source

Refactor
  • CryptoKey normalization is not always async (b7751f5)
  • weak cache normalized CryptoKey instances (32b25a5)
Fixes
  • ensure KeyObject type in Web API encrypt/decrypt (b7920bd)

v5.6.1

Compare Source

Refactor
  • normalize is always defined for Web API runtimes (7bcb103)
Fixes

v5.6.0

Compare Source

Features
  • support KeyObject inputs in WebCryptoAPI runtimes given compatibility (e178b8f)

v5.5.0

Compare Source

Features

v5.4.1

Compare Source

Fixes
  • ensure latest release on npm is v5.x (a9b2a30)

v5.4.0

Compare Source

Features
  • expose JWT's payload in JWTClaimValidationFailed instances (58bcffb), closes #​680
Refactor
  • add explicit return types everywhere (cc2b2d7)

v5.3.0

Compare Source

Features
  • allow observing remote JWKS resolver state and its manual reload (fa8b639)
Refactor
  • if should not be the only statement in else blocks (a6b716b)

v5.2.4

Compare Source

Refactor
  • use createLocalJWKSet instead of LocalJWKSet in createRemoteJWKSet (a7c566c)

v5.2.3

Compare Source

Refactor
  • move iv generation and optional outputs around (05c4351)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled because a matching PR was automerged previously.

Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@descope descope bot added the renovate label Mar 27, 2025
@descope descope bot force-pushed the renovate/jose-5.x branch 4 times, most recently from c1a6e57 to 3bcab58 Compare April 2, 2025 12:20
@descope descope bot force-pushed the renovate/jose-5.x branch 4 times, most recently from 42285f9 to 7f9143d Compare April 10, 2025 16:45
@descope descope bot force-pushed the renovate/jose-5.x branch 3 times, most recently from ca2ec01 to d67e3c0 Compare April 21, 2025 08:04
@descope descope bot force-pushed the renovate/jose-5.x branch from d67e3c0 to 36c7c2b Compare April 22, 2025 06:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants