New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump jose from 4.13.1 to 4.15.5 #160

Open

renovate-pagopa wants to merge 1 commit into master from renovate/jose-to-4.15.5

+3 −3

renovate-pagopa bot commented Apr 16, 2024 •

edited

Loading

This PR contains the following updates:

Package	Type	Update	Change
jose	dependencies	minor	`4.13.1` -> `4.15.5`

For further information on security, please refer to the Confluence page link

Release Notes

panva/jose (jose)

`v4.15.5`

Fixes

add a maxOutputLength option to zlib inflate (1b91d88), fixes CVE-2024-28176

`v4.15.4`

Fixes

types: export GetKeyFunction (#592) (936c9df), closes #591

`v4.15.3`

`v4.15.2`

Fixes

build: add a node target for jose-browser-runtime releases (abb63d0)

`v4.15.1`

Fixes

resolve missing types for the cryptoRuntime const (1627965)

`v4.15.0`

Features

export the used crypto runtime as a constant (0681dda)

`v4.14.6`

Fixes

build: publish bundle and umd files with jose-browser-runtime module (62fcbcc), closes #571

`v4.14.5`

Refactor

catch type error when decoding base64url signature (#569) (935e920)
catch type errors when decoding various base64url strings (9024e87)

`v4.14.4`

Refactor

cleanup NODE-ED25519 workerd workarounds (072e83d)

`v4.14.3`

Reverts

Revert "fix(types): headers and payloads may only be JSON values and primitives" (06d8101), closes #534

`v4.14.2`

Fixes

types: headers and payloads may only be JSON values and primitives (24f306e)

`v4.14.1`

`v4.14.0`

Features

add requiredClaims JWT validation option (eeea91d)

`v4.13.2`

Refactor

src/util/decode_protected_header.ts (5716725)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.


          Bump jose from 4.13.1 to 4.15.5

c8e7ad1

renovate-pagopa bot added the OER label

renovate-pagopa bot requested review from BurnedMarshal, gunzip, francescopersico, AleDore, balanza, gquadrati and arcogabbo as code owners

April 16, 2024 07:07

github-actions bot commented Apr 16, 2024

Jira Pull request Link

It seems this Pull Request has no issues that refers to Jira!!!
Please check it out.

sonarcloud bot commented Apr 16, 2024

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

BurnedMarshal Awaiting requested review from BurnedMarshal BurnedMarshal is a code owner

gunzip Awaiting requested review from gunzip gunzip is a code owner

francescopersico Awaiting requested review from francescopersico francescopersico is a code owner

AleDore Awaiting requested review from AleDore AleDore is a code owner

balanza Awaiting requested review from balanza

gquadrati Awaiting requested review from gquadrati gquadrati is a code owner

arcogabbo Awaiting requested review from arcogabbo arcogabbo is a code owner

At least 1 approving review is required to merge this pull request.