From 03ece335b82caf2d1146bebd2fa41f25de827f24 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 19 Mar 2025 22:18:27 -0400 Subject: [PATCH] fix(deps): update dependency jose to v6 (#1248) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [jose](https://redirect.github.com/panva/jose) | [`^5.9.6` -> `^6.0.0`](https://renovatebot.com/diffs/npm/jose/5.10.0/6.0.10) | [![age](https://developer.mend.io/api/mc/badges/age/npm/jose/6.0.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/jose/6.0.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/jose/5.10.0/6.0.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/jose/5.10.0/6.0.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes
panva/jose (jose) ### [`v6.0.10`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#6010-2025-03-12) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.9...v6.0.10) ##### Refactor - removed unused claims methods ([74719cf](https://redirect.github.com/panva/jose/commit/74719cfcfba1920b87740245da08bb70b68e7cd1)) - reorganize jwt claim set utils ([1f12d88](https://redirect.github.com/panva/jose/commit/1f12d88ee8cfa328126934a7020396f9a8dd8932)) ### [`v6.0.9`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#609-2025-03-11) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.8...v6.0.9) ##### Documentation - add more symbol document, ignore ts-private fields ([8b73687](https://redirect.github.com/panva/jose/commit/8b73687595a7ca608aa1b78870b6b165ad5249f2)) - bump typedoc ([6163a8b](https://redirect.github.com/panva/jose/commit/6163a8b6a773100ed31d207b598db1259a7e13a8)) - drop cdnjs links in README ([a910038](https://redirect.github.com/panva/jose/commit/a9100383ab16cb62c375401fac08a77f3c6c528d)) - drop denoland/x links in README and add jsr ([3662b9e](https://redirect.github.com/panva/jose/commit/3662b9ec44403bd501fc895bea4ded623d23e7e1)) - fix key export links from docs/README.md ([c8edfc2](https://redirect.github.com/panva/jose/commit/c8edfc29416d3339f6c78fdc42bdfdfadaa5cf7e)) ##### Refactor - always assume structuredClone is present ([f7898a9](https://redirect.github.com/panva/jose/commit/f7898a9487508684dbbeba990e0cc96d344b1ff6)) - hide internal private fields and drop ProduceJWT inheritance ([ab18881](https://redirect.github.com/panva/jose/commit/ab18881a57524897aec300c9bf7bbd73d9e3447c)) - less objects when JWE JWT Replicated Header Parameters are used ([c763a0e](https://redirect.github.com/panva/jose/commit/c763a0e373b0e814dc4705dd2eb7daa614eae43a)) ### [`v6.0.8`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#608-2025-02-26) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.7...v6.0.8) ##### Fixes - export \[customFetch] symbol from the default entrypoint ([1615614](https://redirect.github.com/panva/jose/commit/1615614964b4a66ac888f470bad94b6dee7009bc)), closes [#​762](https://redirect.github.com/panva/jose/issues/762) ### [`v6.0.7`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#607-2025-02-25) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.6...v6.0.7) ##### Documentation - improve generate key/secret and import function descriptions ([cd06359](https://redirect.github.com/panva/jose/commit/cd06359597a3b8e5c30892142f3d750eded2fbce)) ##### Fixes - use \[customFetch] when provided to createRemoteJWKSet ([35f6509](https://redirect.github.com/panva/jose/commit/35f6509ff45927d9f55f3b5c09f96f459e60136a)), closes [#​760](https://redirect.github.com/panva/jose/issues/760) ### [`v6.0.6`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#606-2025-02-23) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.5...v6.0.6) ##### Refactor - move base64url around ([e1350ef](https://redirect.github.com/panva/jose/commit/e1350eff8786b92eead82258dc2d5b9db128b523)) ##### Documentation - add various exported symbol descriptions ([3b8ff71](https://redirect.github.com/panva/jose/commit/3b8ff717ad2054c1c50f72bcc866f08cd672b49d)) - add various exported symbol descriptions ([fc4e7da](https://redirect.github.com/panva/jose/commit/fc4e7dab4c7021d5d2f23a55de93c9ed35b79cef)) - add various exported symbol descriptions ([74f02c8](https://redirect.github.com/panva/jose/commit/74f02c833e057ab419173be7b8b8140eddcfc19f)) - update base64url function descriptions ([03d72c8](https://redirect.github.com/panva/jose/commit/03d72c8a5578bd442190724ca05994b0856432d5)) ### [`v6.0.5`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#605-2025-02-23) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.4...v6.0.5) ##### Refactor - **types:** make JWKParameters.kty compatible with [@​types/node](https://redirect.github.com/types/node) and [@​types/web](https://redirect.github.com/types/web) ([bb6ccfe](https://redirect.github.com/panva/jose/commit/bb6ccfed3efd5c84c540c2a1f621b9d2951f2b84)) ##### Documentation - add various exported symbol descriptions ([f52c2ff](https://redirect.github.com/panva/jose/commit/f52c2ff0c3edbe30b32a4c9858199bfbc9f9367e)) ### [`v6.0.4`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#604-2025-02-22) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.3...v6.0.4) ##### Refactor - optimize base64 with tc39/proposal-arraybuffer-base64 ([8a0da69](https://redirect.github.com/panva/jose/commit/8a0da6968ec2813ced80962e847a89676ef9e8af)), closes [#​752](https://redirect.github.com/panva/jose/issues/752) - update getSPKI to use crypto.createPublicKey when available ([92392a0](https://redirect.github.com/panva/jose/commit/92392a0aa278ecf419a8b0b6a984c72d071125ad)), closes [#​752](https://redirect.github.com/panva/jose/issues/752) - use Double HMAC pattern for AES-CBC tag comparison ([f3ba4c7](https://redirect.github.com/panva/jose/commit/f3ba4c715f3ff5baef624bbb62771398de488166)), closes [#​752](https://redirect.github.com/panva/jose/issues/752) ### [`v6.0.3`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#603-2025-02-22) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.2...v6.0.3) ##### Documentation - remove root module tag so that README.md shows up on jsr.io ([ee70698](https://redirect.github.com/panva/jose/commit/ee7069818b6a3bc6df7aa7ab8060a90299ef0c9a)) ### [`v6.0.2`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#602-2025-02-22) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.1...v6.0.2) ##### Documentation - add module tags to all entrypoints ([a5687aa](https://redirect.github.com/panva/jose/commit/a5687aaed475ba113dd01d8fddf95f5911c17d0f)) ### [`v6.0.1`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#601-2025-02-22) [Compare Source](https://redirect.github.com/panva/jose/compare/v6.0.0...v6.0.1) ##### Fixes - **types:** update build to include extensions in type imports ([9b96672](https://redirect.github.com/panva/jose/commit/9b96672ef79aabf07699e0ccafa5b54380f6330c)) ### [`v6.0.0`](https://redirect.github.com/panva/jose/blob/HEAD/CHANGELOG.md#600-2025-02-22) [Compare Source](https://redirect.github.com/panva/jose/compare/v5.10.0...v6.0.0) ##### ⚠ BREAKING CHANGES - The PEMImportOptions type interface is renamed to KeyImportOptions. - all builds and bundles now use ES2022 as target - createRemoteJWKSet now uses fetch, because of that its Node.js only options.agent property has been removed and new fetch-related options were added - drop support for Ed448 and X448 - drop support for JWK key_ops and CryptoKey usages "(un)wrapKey" and "deriveKey" - resolved keys returned as part of verify/decrypt operations (when get key functions are used) are always normalized to either Uint8Array / CryptoKey depending on what's more efficient for the executed operation - Key "Type" Generics are removed - CJS-style require is now only possible when require(esm) support is present in the Node.js runtime - private KeyObject instances can no longer be used for verify operations - private KeyObject instances can no longer be used for encryption operations - generateSecret, generateKeyPair, importPKCS8, importSPKI, importJWK, and importX509 now yield a CryptoKey instead of a KeyObject in Node.js - drop support for Node.js 18.x and earlier - runtime-specific npm releases (jose-browser-runtime, jose-node-cjs-runtime, and jose-node-esm-runtime) are no longer maintained or supported - removed secp256k1 JWS support - removed deprecated experimental APIs - removed RSA1\_5 JWE support ##### Features - enable CryptoKey and KeyObject inputs in JWK thumbprint functions ([6fc9c44](https://redirect.github.com/panva/jose/commit/6fc9c4461a1fa39b363185e866bd686044ee30c6)) - JSON Web Key is now an allowed input everywhere ([ebda967](https://redirect.github.com/panva/jose/commit/ebda9674e9daf9b9d09568cf17b1a23d9cf20a60)) ##### Refactor - always use infered CryptoKey ([c4abaa2](https://redirect.github.com/panva/jose/commit/c4abaa265ef56b517f868cf49db4ed8975446465)) - backport the [`Ed25519`](https://redirect.github.com/panva/jose/commit/Ed25519) JWS Algorithm Identifier support ([7a94cb9](https://redirect.github.com/panva/jose/commit/7a94cb997af94ae2db61efbeb271e0555afc62d8)) - drop support for Ed448 and X448 ([2fae1c4](https://redirect.github.com/panva/jose/commit/2fae1c447b621fb5dbdb1896c29c3a0772f26f44)) - drop support for JWK key_ops and CryptoKey usages "(un)wrapKey" and "deriveKey" ([ef918be](https://redirect.github.com/panva/jose/commit/ef918be8bab1b8dc5ec30b026d85da8ce7e0b062)) - ensure export functions continue to work with KeyObject inputs ([28e9e68](https://redirect.github.com/panva/jose/commit/28e9e684bbe15a1fa40631465b9688fdf1cecf0e)) - hardcode the cryptoRuntime export since it is now always WebCryptoAPI ([e00f273](https://redirect.github.com/panva/jose/commit/e00f2737fdc7b44b3c9d8c581460617d64152ce2)) - JWK import extractable default for public keys is now true ([64dcebe](https://redirect.github.com/panva/jose/commit/64dcebef368851863d11c3718f10bdbb1f0102c7)) - PEM import extractable default for public keys is now true ([4e9f114](https://redirect.github.com/panva/jose/commit/4e9f1143c7c31176e55d2e75aea96ead16db4107)) - removed deprecated APIs ([5352083](https://redirect.github.com/panva/jose/commit/5352083dc603f8f71acd34d969842be1881f3b19)) - removed secp256k1 JWS support ([e2b58a5](https://redirect.github.com/panva/jose/commit/e2b58a5ca50a40559451179cdd15f62be831eda2)) - restructure src/lib and src/runtime now that runtime is fixed ([9b236ce](https://redirect.github.com/panva/jose/commit/9b236cec4e66a588d0e7f27039a08a51db5abc49)) - target is now ES2022 everywhere ([aa590d5](https://redirect.github.com/panva/jose/commit/aa590d569f7eff948f96e4e8210843668777c724)) - update importJWK args to align with other import functions ([355a2dd](https://redirect.github.com/panva/jose/commit/355a2dd33a2466245f2872014110c9a1c0257c16)) - WebCryptoAPI is now the only crypto used ([161de46](https://redirect.github.com/panva/jose/commit/161de466a29d90a1129e671ed3a23be556c77f27))
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/unraid/api). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- api/package.json | 2 +- pnpm-lock.yaml | 9 +++++++-- 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/api/package.json b/api/package.json index f5cdf55cf..35f1c665b 100644 --- a/api/package.json +++ b/api/package.json @@ -106,7 +106,7 @@ "graphql-ws": "^5.16.0", "ini": "^5.0.0", "ip": "^2.0.1", - "jose": "^5.9.6", + "jose": "^6.0.0", "lodash-es": "^4.17.21", "multi-ini": "^2.3.2", "mustache": "^4.2.0", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 36a8bc88d..53ad2b616 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -189,8 +189,8 @@ importers: specifier: ^2.0.1 version: 2.0.1 jose: - specifier: ^5.9.6 - version: 5.10.0 + specifier: ^6.0.0 + version: 6.0.10 lodash-es: specifier: ^4.17.21 version: 4.17.21 @@ -7679,6 +7679,9 @@ packages: jose@5.10.0: resolution: {integrity: sha512-s+3Al/p9g32Iq+oqXxkW//7jk2Vig6FF1CFqzVXoTUXt2qz89YWbL+OwS17NFYEvxC35n0FKeGO2LGYSxeM2Gg==} + jose@6.0.10: + resolution: {integrity: sha512-skIAxZqcMkOrSwjJvplIPYrlXGpxTPnro2/QWTDCxAdWQrSTV5/KqspMWmi5WAx5+ULswASJiZ0a+1B/Lxt9cw==} + joycon@3.1.1: resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==} engines: {node: '>=10'} @@ -19629,6 +19632,8 @@ snapshots: jose@5.10.0: {} + jose@6.0.10: {} + joycon@3.1.1: {} js-beautify@1.15.3: