chore(deps): bump jose from 6.2.8 to 6.2.9 in the production-dependencies group #164

Closed

dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/production-dependencies-843c00ff24 into main

dependabot[bot] commented

2026-08-24 04:20:45 -05:00

(Migrated from github.com)

Bumps the production-dependencies group with 1 update: jose.

Updates jose from 6.2.8 to 6.2.9

Release notes

Sourced from jose's releases.

v6.2.9

Fixes

reject a JWE whose generated Key Management Parameters collide (6ed19a6)

types: undeprecate PBES2 p2c parameter (33bf832)

Changelog

Sourced from jose's changelog.

6.2.9 (2026-08-15)

Fixes

reject a JWE whose generated Key Management Parameters collide (6ed19a6)

types: undeprecate PBES2 p2c parameter (33bf832)

Commits

f3a3c78 chore(release): 6.2.9
33bf832 fix(types): undeprecate PBES2 p2c parameter
6ed19a6 fix: reject a JWE whose generated Key Management Parameters collide
944840d ci: use shared release workflows
05bccf2 chore: bump packages
f7392d1 test: account for workerd nodejs_compat flag default changes
4e944be ci: drop the wait-for-npm machinery
4285b6f chore(deps-dev): bump undici
cb114ec chore: cleanup after release
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 1 update: [jose](https://github.com/panva/jose). Updates `jose` from 6.2.8 to 6.2.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/panva/jose/releases">jose's releases</a>.</em></p> <blockquote> <h2>v6.2.9</h2> <h3>Fixes</h3> <ul> <li>reject a JWE whose generated Key Management Parameters collide (<a href="https://github.com/panva/jose/commit/6ed19a6a9798a7d55a647958b4ee816c4b77627d">6ed19a6</a>)</li> <li><strong>types:</strong> undeprecate PBES2 p2c parameter (<a href="https://github.com/panva/jose/commit/33bf832986d21cce0336b27441e3588499a70d67">33bf832</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/panva/jose/blob/main/CHANGELOG.md">jose's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/panva/jose/compare/v6.2.8...v6.2.9">6.2.9</a> (2026-08-15)</h2> <h3>Fixes</h3> <ul> <li>reject a JWE whose generated Key Management Parameters collide (<a href="https://github.com/panva/jose/commit/6ed19a6a9798a7d55a647958b4ee816c4b77627d">6ed19a6</a>)</li> <li><strong>types:</strong> undeprecate PBES2 p2c parameter (<a href="https://github.com/panva/jose/commit/33bf832986d21cce0336b27441e3588499a70d67">33bf832</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/panva/jose/commit/f3a3c780b9bd8d7d25cb7c5dd5d4e57164d4fbfc"><code>f3a3c78</code></a> chore(release): 6.2.9</li> <li><a href="https://github.com/panva/jose/commit/33bf832986d21cce0336b27441e3588499a70d67"><code>33bf832</code></a> fix(types): undeprecate PBES2 p2c parameter</li> <li><a href="https://github.com/panva/jose/commit/6ed19a6a9798a7d55a647958b4ee816c4b77627d"><code>6ed19a6</code></a> fix: reject a JWE whose generated Key Management Parameters collide</li> <li><a href="https://github.com/panva/jose/commit/944840d16704db727fad2bfaa8385e95b0a52bfe"><code>944840d</code></a> ci: use shared release workflows</li> <li><a href="https://github.com/panva/jose/commit/05bccf239936a0bc0892f32ca86ff079585f5d13"><code>05bccf2</code></a> chore: bump packages</li> <li><a href="https://github.com/panva/jose/commit/f7392d1217ee506cf15a0c4aaadf22f9c8c07db8"><code>f7392d1</code></a> test: account for workerd nodejs_compat flag default changes</li> <li><a href="https://github.com/panva/jose/commit/4e944be71e9bb44704702327fc3c163e93de21c4"><code>4e944be</code></a> ci: drop the wait-for-npm machinery</li> <li><a href="https://github.com/panva/jose/commit/4285b6f411e2f7f1ac09f7fd97ef836dda01981b"><code>4285b6f</code></a> chore(deps-dev): bump undici</li> <li><a href="https://github.com/panva/jose/commit/cb114ecde718b06423c426109454b418e5d76497"><code>cb114ec</code></a> chore: cleanup after release</li> <li>See full diff in <a href="https://github.com/panva/jose/compare/v6.2.8...v6.2.9">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=jose&package-manager=npm_and_yarn&previous-version=6.2.8&new-version=6.2.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details>

dependabot[bot] commented

2026-08-31 04:22:21 -05:00

(Migrated from github.com)

Looks like jose is updatable in another way, so this is no longer needed.

Pull request closed

This pull request cannot be reopened because the branch was deleted.

No reviewers

No milestone

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

gitchegumi/GitchAlerts!164

No description provided.

Rows
Columns