Skip to content

Commit 42e3d59

Browse files
fix(deps): update dependency jose to v6 (#1248)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [jose](https://redirect.github.com/panva/jose) | [`^5.9.6` -> `^6.0.0`](https://renovatebot.com/diffs/npm/jose/5.10.0/6.0.10) | [![age](https://developer.mend.io/api/mc/badges/age/npm/jose/6.0.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/jose/6.0.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/jose/5.10.0/6.0.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/jose/5.10.0/6.0.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>panva/jose (jose)</summary> ### [`v6.0.10`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#6010-2025-03-12) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.9...v6.0.10) ##### Refactor - removed unused claims methods ([74719cf](https://redirect.github.com/panva/jose/commit/74719cfcfba1920b87740245da08bb70b68e7cd1)) - reorganize jwt claim set utils ([1f12d88](https://redirect.github.com/panva/jose/commit/1f12d88ee8cfa328126934a7020396f9a8dd8932)) ### [`v6.0.9`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#609-2025-03-11) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.8...v6.0.9) ##### Documentation - add more symbol document, ignore ts-private fields ([8b73687](https://redirect.github.com/panva/jose/commit/8b73687595a7ca608aa1b78870b6b165ad5249f2)) - bump typedoc ([6163a8b](https://redirect.github.com/panva/jose/commit/6163a8b6a773100ed31d207b598db1259a7e13a8)) - drop cdnjs links in README ([a910038](https://redirect.github.com/panva/jose/commit/a9100383ab16cb62c375401fac08a77f3c6c528d)) - drop denoland/x links in README and add jsr ([3662b9e](https://redirect.github.com/panva/jose/commit/3662b9ec44403bd501fc895bea4ded623d23e7e1)) - fix key export links from docs/README.md ([c8edfc2](https://redirect.github.com/panva/jose/commit/c8edfc29416d3339f6c78fdc42bdfdfadaa5cf7e)) ##### Refactor - always assume structuredClone is present ([f7898a9](https://redirect.github.com/panva/jose/commit/f7898a9487508684dbbeba990e0cc96d344b1ff6)) - hide internal private fields and drop ProduceJWT inheritance ([ab18881](https://redirect.github.com/panva/jose/commit/ab18881a57524897aec300c9bf7bbd73d9e3447c)) - less objects when JWE JWT Replicated Header Parameters are used ([c763a0e](https://redirect.github.com/panva/jose/commit/c763a0e373b0e814dc4705dd2eb7daa614eae43a)) ### [`v6.0.8`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#608-2025-02-26) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.7...v6.0.8) ##### Fixes - export \[customFetch] symbol from the default entrypoint ([1615614](https://redirect.github.com/panva/jose/commit/1615614964b4a66ac888f470bad94b6dee7009bc)), closes [#&#8203;762](https://redirect.github.com/panva/jose/issues/762) ### [`v6.0.7`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#607-2025-02-25) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.6...v6.0.7) ##### Documentation - improve generate key/secret and import function descriptions ([cd06359](https://redirect.github.com/panva/jose/commit/cd06359597a3b8e5c30892142f3d750eded2fbce)) ##### Fixes - use \[customFetch] when provided to createRemoteJWKSet ([35f6509](https://redirect.github.com/panva/jose/commit/35f6509ff45927d9f55f3b5c09f96f459e60136a)), closes [#&#8203;760](https://redirect.github.com/panva/jose/issues/760) ### [`v6.0.6`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#606-2025-02-23) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.5...v6.0.6) ##### Refactor - move base64url around ([e1350ef](https://redirect.github.com/panva/jose/commit/e1350eff8786b92eead82258dc2d5b9db128b523)) ##### Documentation - add various exported symbol descriptions ([3b8ff71](https://redirect.github.com/panva/jose/commit/3b8ff717ad2054c1c50f72bcc866f08cd672b49d)) - add various exported symbol descriptions ([fc4e7da](https://redirect.github.com/panva/jose/commit/fc4e7dab4c7021d5d2f23a55de93c9ed35b79cef)) - add various exported symbol descriptions ([74f02c8](https://redirect.github.com/panva/jose/commit/74f02c833e057ab419173be7b8b8140eddcfc19f)) - update base64url function descriptions ([03d72c8](https://redirect.github.com/panva/jose/commit/03d72c8a5578bd442190724ca05994b0856432d5)) ### [`v6.0.5`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#605-2025-02-23) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.4...v6.0.5) ##### Refactor - **types:** make JWKParameters.kty compatible with [@&#8203;types/node](https://redirect.github.com/types/node) and [@&#8203;types/web](https://redirect.github.com/types/web) ([bb6ccfe](https://redirect.github.com/panva/jose/commit/bb6ccfed3efd5c84c540c2a1f621b9d2951f2b84)) ##### Documentation - add various exported symbol descriptions ([f52c2ff](https://redirect.github.com/panva/jose/commit/f52c2ff0c3edbe30b32a4c9858199bfbc9f9367e)) ### [`v6.0.4`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#604-2025-02-22) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.3...v6.0.4) ##### Refactor - optimize base64 with tc39/proposal-arraybuffer-base64 ([8a0da69](https://redirect.github.com/panva/jose/commit/8a0da6968ec2813ced80962e847a89676ef9e8af)), closes [#&#8203;752](https://redirect.github.com/panva/jose/issues/752) - update getSPKI to use crypto.createPublicKey when available ([92392a0](https://redirect.github.com/panva/jose/commit/92392a0aa278ecf419a8b0b6a984c72d071125ad)), closes [#&#8203;752](https://redirect.github.com/panva/jose/issues/752) - use Double HMAC pattern for AES-CBC tag comparison ([f3ba4c7](https://redirect.github.com/panva/jose/commit/f3ba4c715f3ff5baef624bbb62771398de488166)), closes [#&#8203;752](https://redirect.github.com/panva/jose/issues/752) ### [`v6.0.3`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#603-2025-02-22) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.2...v6.0.3) ##### Documentation - remove root module tag so that README.md shows up on jsr.io ([ee70698](https://redirect.github.com/panva/jose/commit/ee7069818b6a3bc6df7aa7ab8060a90299ef0c9a)) ### [`v6.0.2`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#602-2025-02-22) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.1...v6.0.2) ##### Documentation - add module tags to all entrypoints ([a5687aa](https://redirect.github.com/panva/jose/commit/a5687aaed475ba113dd01d8fddf95f5911c17d0f)) ### [`v6.0.1`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#601-2025-02-22) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.0...v6.0.1) ##### Fixes - **types:** update build to include extensions in type imports ([9b96672](https://redirect.github.com/panva/jose/commit/9b96672ef79aabf07699e0ccafa5b54380f6330c)) ### [`v6.0.0`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#600-2025-02-22) [Compare Source](https://redirect.github.com/panva/jose/compare/v5.10.0...v6.0.0) ##### ⚠ BREAKING CHANGES - The PEMImportOptions type interface is renamed to KeyImportOptions. - all builds and bundles now use ES2022 as target - createRemoteJWKSet now uses fetch, because of that its Node.js only options.agent property has been removed and new fetch-related options were added - drop support for Ed448 and X448 - drop support for JWK key_ops and CryptoKey usages "(un)wrapKey" and "deriveKey" - resolved keys returned as part of verify/decrypt operations (when get key functions are used) are always normalized to either Uint8Array / CryptoKey depending on what's more efficient for the executed operation - Key "Type" Generics are removed - CJS-style require is now only possible when require(esm) support is present in the Node.js runtime - private KeyObject instances can no longer be used for verify operations - private KeyObject instances can no longer be used for encryption operations - generateSecret, generateKeyPair, importPKCS8, importSPKI, importJWK, and importX509 now yield a CryptoKey instead of a KeyObject in Node.js - drop support for Node.js 18.x and earlier - runtime-specific npm releases (jose-browser-runtime, jose-node-cjs-runtime, and jose-node-esm-runtime) are no longer maintained or supported - removed secp256k1 JWS support - removed deprecated experimental APIs - removed RSA1\_5 JWE support ##### Features - enable CryptoKey and KeyObject inputs in JWK thumbprint functions ([6fc9c44](https://redirect.github.com/panva/jose/commit/6fc9c4461a1fa39b363185e866bd686044ee30c6)) - JSON Web Key is now an allowed input everywhere ([ebda967](https://redirect.github.com/panva/jose/commit/ebda9674e9daf9b9d09568cf17b1a23d9cf20a60)) ##### Refactor - always use infered CryptoKey ([c4abaa2](https://redirect.github.com/panva/jose/commit/c4abaa265ef56b517f868cf49db4ed8975446465)) - backport the [`Ed25519`](https://redirect.github.com/panva/jose/commit/Ed25519) JWS Algorithm Identifier support ([7a94cb9](https://redirect.github.com/panva/jose/commit/7a94cb997af94ae2db61efbeb271e0555afc62d8)) - drop support for Ed448 and X448 ([2fae1c4](https://redirect.github.com/panva/jose/commit/2fae1c447b621fb5dbdb1896c29c3a0772f26f44)) - drop support for JWK key_ops and CryptoKey usages "(un)wrapKey" and "deriveKey" ([ef918be](https://redirect.github.com/panva/jose/commit/ef918be8bab1b8dc5ec30b026d85da8ce7e0b062)) - ensure export functions continue to work with KeyObject inputs ([28e9e68](https://redirect.github.com/panva/jose/commit/28e9e684bbe15a1fa40631465b9688fdf1cecf0e)) - hardcode the cryptoRuntime export since it is now always WebCryptoAPI ([e00f273](https://redirect.github.com/panva/jose/commit/e00f2737fdc7b44b3c9d8c581460617d64152ce2)) - JWK import extractable default for public keys is now true ([64dcebe](https://redirect.github.com/panva/jose/commit/64dcebef368851863d11c3718f10bdbb1f0102c7)) - PEM import extractable default for public keys is now true ([4e9f114](https://redirect.github.com/panva/jose/commit/4e9f1143c7c31176e55d2e75aea96ead16db4107)) - removed deprecated APIs ([5352083](https://redirect.github.com/panva/jose/commit/5352083dc603f8f71acd34d969842be1881f3b19)) - removed secp256k1 JWS support ([e2b58a5](https://redirect.github.com/panva/jose/commit/e2b58a5ca50a40559451179cdd15f62be831eda2)) - restructure src/lib and src/runtime now that runtime is fixed ([9b236ce](https://redirect.github.com/panva/jose/commit/9b236cec4e66a588d0e7f27039a08a51db5abc49)) - target is now ES2022 everywhere ([aa590d5](https://redirect.github.com/panva/jose/commit/aa590d569f7eff948f96e4e8210843668777c724)) - update importJWK args to align with other import functions ([355a2dd](https://redirect.github.com/panva/jose/commit/355a2dd33a2466245f2872014110c9a1c0257c16)) - WebCryptoAPI is now the only crypto used ([161de46](https://redirect.github.com/panva/jose/commit/161de466a29d90a1129e671ed3a23be556c77f27)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/unraid/api). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDcuMSIsInVwZGF0ZWRJblZlciI6IjM5LjIwNy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent e237f38 commit 42e3d59

File tree

2 files changed

+8
-3
lines changed

2 files changed

+8
-3
lines changed

api/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -106,7 +106,7 @@
106106
"graphql-ws": "^5.16.0",
107107
"ini": "^5.0.0",
108108
"ip": "^2.0.1",
109-
"jose": "^5.9.6",
109+
"jose": "^6.0.0",
110110
"lodash-es": "^4.17.21",
111111
"multi-ini": "^2.3.2",
112112
"mustache": "^4.2.0",

pnpm-lock.yaml

Lines changed: 7 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)