Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the prod-deps group with 2 updates #1053

Merged
merged 2 commits into from
Mar 7, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 7, 2024

Bumps the prod-deps group with 2 updates: openid-client and jose.

Updates openid-client from 5.6.4 to 5.6.5

Release notes

Sourced from openid-client's releases.

v5.6.5

Refactor

  • avoid use of prototype attributes in keystore queries (#660) (47a549c)
Changelog

Sourced from openid-client's changelog.

5.6.5 (2024-03-07)

Refactor

  • avoid use of prototype attributes in keystore queries (#660) (47a549c)
Commits
  • 219f956 chore(release): 5.6.5
  • ea2cf24 chore: bump dependencies
  • 47a549c refactor: avoid use of prototype attributes in keystore queries (#660)
  • 7986346 chore: cleanup dead code
  • 5886b0c chore: cleanup dead code
  • 01cd89a ci: stop testing FAPI 1.0 ID-2
  • 1971dcf chore(deps): bump actions/cache from 3 to 4 (#656)
  • 563d9a3 chore: update TODO
  • 439c82b chore: add TODO for future encoding of all non-alphanumerical characters
  • See full diff in compare view

Updates jose from 5.2.2 to 5.2.3

Release notes

Sourced from jose's releases.

v5.2.3

Refactor

  • move iv generation and optional outputs around (05c4351)
Changelog

Sourced from jose's changelog.

5.2.3 (2024-03-07)

Refactor

  • move iv generation and optional outputs around (05c4351)
Commits
  • 259db54 chore(release): 5.2.3
  • ea8a76e chore: bump dev deps
  • 7cb2e3e build: only run release action on the latest major tag releases
  • f009cc1 chore: bump dev deps
  • dc0fe2e build(deps-dev): bump edge-runtime from 2.5.8 to 2.5.9 (#643)
  • 05c4351 refactor: move iv generation and optional outputs around
  • e054f05 test: stop testing JWE RSA1_5 Algorithm
  • e65299c chore: bump dev deps
  • 43ba25e chore: cleanup after release
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot requested a review from a team as a code owner March 7, 2024 14:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 7, 2024
Copy link

changeset-bot bot commented Mar 7, 2024

🦋 Changeset detected

Latest commit: 9feae18

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages
Name Type
@sigstore/mock Patch
@sigstore/cli Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Bumps the prod-deps group with 2 updates: [openid-client](https://github.com/panva/node-openid-client) and [jose](https://github.com/panva/jose).


Updates `openid-client` from 5.6.4 to 5.6.5
- [Release notes](https://github.com/panva/node-openid-client/releases)
- [Changelog](https://github.com/panva/node-openid-client/blob/main/CHANGELOG.md)
- [Commits](panva/openid-client@v5.6.4...v5.6.5)

Updates `jose` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v5.2.2...v5.2.3)

---
updated-dependencies:
- dependency-name: openid-client
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: jose
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/prod-deps-86b019a137 branch from b70cc40 to 0cc9d87 Compare March 7, 2024 14:27
Signed-off-by: Brian DeHamer <[email protected]>
@bdehamer bdehamer merged commit 823341b into main Mar 7, 2024
26 checks passed
@bdehamer bdehamer deleted the dependabot/npm_and_yarn/prod-deps-86b019a137 branch March 7, 2024 18:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants