Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency jsonwebtoken to ^9.0.2 (main) #173219

Merged
merged 1 commit into from
Dec 13, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 12, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
jsonwebtoken ^9.0.0 -> ^9.0.2 age adoption passing confidence

Release Notes

auth0/node-jsonwebtoken (jsonwebtoken)

v9.0.2

Compare Source

  • security: updating semver to 7.5.4 to resolve CVE-2022-25883, closes #​921.
  • refactor: reduce library size by using lodash specific dependencies, closes #​878.

v9.0.1

Compare Source

  • fix(stubs): allow decode method to be stubbed

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added backport:all-open Backport to all branches that could still receive a release release_note:skip Skip the PR/issue when compiling release notes labels Dec 12, 2023
@renovate renovate bot requested review from a team December 12, 2023 21:45
@kibana-ci
Copy link
Collaborator

💛 Build succeeded, but was flaky

Failed CI Steps

Metrics [docs]

✅ unchanged

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

@pgayvallet
Copy link
Contributor

@elasticmachine run elasticsearch-ci/docs

@pgayvallet pgayvallet enabled auto-merge (squash) December 13, 2023 07:53
@pgayvallet pgayvallet merged commit 7978d19 into main Dec 13, 2023
43 checks passed
@pgayvallet pgayvallet deleted the renovate/main-json-web-token branch December 13, 2023 08:12
@kibanamachine
Copy link
Contributor

💔 Some backports could not be created

Status Branch Result
7.17 Backport failed because of merge conflicts
8.12

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

node scripts/backport --pr 173219

Questions ?

Please refer to the Backport tool documentation

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Dec 13, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [jsonwebtoken](https://togithub.com/auth0/node-jsonwebtoken) |
[`^9.0.0` ->
`^9.0.2`](https://renovatebot.com/diffs/npm/jsonwebtoken/9.0.0/9.0.2) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/jsonwebtoken/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/jsonwebtoken/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/jsonwebtoken/9.0.0/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/jsonwebtoken/9.0.0/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>auth0/node-jsonwebtoken (jsonwebtoken)</summary>

###
[`v9.0.2`](https://togithub.com/auth0/node-jsonwebtoken/blob/HEAD/CHANGELOG.md#902---2023-08-30)

[Compare
Source](https://togithub.com/auth0/node-jsonwebtoken/compare/v9.0.1...v9.0.2)

- security: updating semver to 7.5.4 to resolve CVE-2022-25883, closes
[#&elastic#8203;921](https://togithub.com/auth0/node-jsonwebtoken/issues/921).
- refactor: reduce library size by using lodash specific dependencies,
closes
[#&elastic#8203;878](https://togithub.com/auth0/node-jsonwebtoken/issues/878).

###
[`v9.0.1`](https://togithub.com/auth0/node-jsonwebtoken/blob/HEAD/CHANGELOG.md#901---2023-07-05)

[Compare
Source](https://togithub.com/auth0/node-jsonwebtoken/compare/v9.0.0...v9.0.1)

-   fix(stubs): allow decode method to be stubbed

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/elastic/kibana).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44Ny4yIiwidXBkYXRlZEluVmVyIjoiMzcuODcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
(cherry picked from commit 7978d19)
kibanamachine added a commit that referenced this pull request Dec 13, 2023
…3242)

# Backport

This will backport the following commits from `main` to `8.12`:
- [Update dependency jsonwebtoken to ^9.0.2 (main)
(#173219)](#173219)

<!--- Backport version: 8.9.7 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT
[{"author":{"name":"renovate[bot]","email":"29139614+renovate[bot]@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-12-13T08:12:07Z","message":"Update
dependency jsonwebtoken to ^9.0.2 (main)
(#173219)\n\n[![Mend\r\nRenovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)\r\n\r\nThis
PR contains the following updates:\r\n\r\n| Package | Change | Age |
Adoption | Passing | Confidence |\r\n|---|---|---|---|---|---|\r\n|
[jsonwebtoken](https://togithub.com/auth0/node-jsonwebtoken)
|\r\n[`^9.0.0`
->\r\n`^9.0.2`](https://renovatebot.com/diffs/npm/jsonwebtoken/9.0.0/9.0.2)
|\r\n[![age](https://developer.mend.io/api/mc/badges/age/npm/jsonwebtoken/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/jsonwebtoken/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/jsonwebtoken/9.0.0/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/jsonwebtoken/9.0.0/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n\r\n---\r\n\r\n###
Release Notes\r\n\r\n<details>\r\n<summary>auth0/node-jsonwebtoken
(jsonwebtoken)</summary>\r\n\r\n###\r\n[`v9.0.2`](https://togithub.com/auth0/node-jsonwebtoken/blob/HEAD/CHANGELOG.md#902---2023-08-30)\r\n\r\n[Compare\r\nSource](https://togithub.com/auth0/node-jsonwebtoken/compare/v9.0.1...v9.0.2)\r\n\r\n-
security: updating semver to 7.5.4 to resolve CVE-2022-25883,
closes\r\n[#&#8203;921](https://togithub.com/auth0/node-jsonwebtoken/issues/921).\r\n-
refactor: reduce library size by using lodash specific
dependencies,\r\ncloses\r\n[#&#8203;878](https://togithub.com/auth0/node-jsonwebtoken/issues/878).\r\n\r\n###\r\n[`v9.0.1`](https://togithub.com/auth0/node-jsonwebtoken/blob/HEAD/CHANGELOG.md#901---2023-07-05)\r\n\r\n[Compare\r\nSource](https://togithub.com/auth0/node-jsonwebtoken/compare/v9.0.0...v9.0.1)\r\n\r\n-
fix(stubs): allow decode method to be
stubbed\r\n\r\n</details>\r\n\r\n---\r\n\r\n### Configuration\r\n\r\n📅
**Schedule**: Branch creation - At any time (no schedule
defined),\r\nAutomerge - At any time (no schedule defined).\r\n\r\n🚦
**Automerge**: Disabled by config. Please merge this manually once
you\r\nare satisfied.\r\n\r\n♻ **Rebasing**: Whenever PR becomes
conflicted, or you tick the\r\nrebase/retry checkbox.\r\n\r\n🔕
**Ignore**: Close this PR and you won't be reminded about this
update\r\nagain.\r\n\r\n---\r\n\r\n- [ ] <!-- rebase-check -->If you
want to rebase/retry this PR, check\r\nthis box\r\n\r\n---\r\n\r\nThis
PR has been generated by
[Mend\r\nRenovate](https://www.mend.io/free-developer-tools/renovate/).
View\r\nrepository job
log\r\n[here](https://developer.mend.io/github/elastic/kibana).\r\n\r\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44Ny4yIiwidXBkYXRlZEluVmVyIjoiMzcuODcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->\r\n\r\nCo-authored-by:
renovate[bot]
<29139614+renovate[bot]@users.noreply.github.com>","sha":"7978d199101767a167b70f324ecf394efec37996","branchLabelMapping":{"^v8.13.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:all-open","v8.13.0"],"number":173219,"url":"https://github.com/elastic/kibana/pull/173219","mergeCommit":{"message":"Update
dependency jsonwebtoken to ^9.0.2 (main)
(#173219)\n\n[![Mend\r\nRenovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)\r\n\r\nThis
PR contains the following updates:\r\n\r\n| Package | Change | Age |
Adoption | Passing | Confidence |\r\n|---|---|---|---|---|---|\r\n|
[jsonwebtoken](https://togithub.com/auth0/node-jsonwebtoken)
|\r\n[`^9.0.0`
->\r\n`^9.0.2`](https://renovatebot.com/diffs/npm/jsonwebtoken/9.0.0/9.0.2)
|\r\n[![age](https://developer.mend.io/api/mc/badges/age/npm/jsonwebtoken/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/jsonwebtoken/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/jsonwebtoken/9.0.0/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/jsonwebtoken/9.0.0/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n\r\n---\r\n\r\n###
Release Notes\r\n\r\n<details>\r\n<summary>auth0/node-jsonwebtoken
(jsonwebtoken)</summary>\r\n\r\n###\r\n[`v9.0.2`](https://togithub.com/auth0/node-jsonwebtoken/blob/HEAD/CHANGELOG.md#902---2023-08-30)\r\n\r\n[Compare\r\nSource](https://togithub.com/auth0/node-jsonwebtoken/compare/v9.0.1...v9.0.2)\r\n\r\n-
security: updating semver to 7.5.4 to resolve CVE-2022-25883,
closes\r\n[#&#8203;921](https://togithub.com/auth0/node-jsonwebtoken/issues/921).\r\n-
refactor: reduce library size by using lodash specific
dependencies,\r\ncloses\r\n[#&#8203;878](https://togithub.com/auth0/node-jsonwebtoken/issues/878).\r\n\r\n###\r\n[`v9.0.1`](https://togithub.com/auth0/node-jsonwebtoken/blob/HEAD/CHANGELOG.md#901---2023-07-05)\r\n\r\n[Compare\r\nSource](https://togithub.com/auth0/node-jsonwebtoken/compare/v9.0.0...v9.0.1)\r\n\r\n-
fix(stubs): allow decode method to be
stubbed\r\n\r\n</details>\r\n\r\n---\r\n\r\n### Configuration\r\n\r\n📅
**Schedule**: Branch creation - At any time (no schedule
defined),\r\nAutomerge - At any time (no schedule defined).\r\n\r\n🚦
**Automerge**: Disabled by config. Please merge this manually once
you\r\nare satisfied.\r\n\r\n♻ **Rebasing**: Whenever PR becomes
conflicted, or you tick the\r\nrebase/retry checkbox.\r\n\r\n🔕
**Ignore**: Close this PR and you won't be reminded about this
update\r\nagain.\r\n\r\n---\r\n\r\n- [ ] <!-- rebase-check -->If you
want to rebase/retry this PR, check\r\nthis box\r\n\r\n---\r\n\r\nThis
PR has been generated by
[Mend\r\nRenovate](https://www.mend.io/free-developer-tools/renovate/).
View\r\nrepository job
log\r\n[here](https://developer.mend.io/github/elastic/kibana).\r\n\r\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44Ny4yIiwidXBkYXRlZEluVmVyIjoiMzcuODcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->\r\n\r\nCo-authored-by:
renovate[bot]
<29139614+renovate[bot]@users.noreply.github.com>","sha":"7978d199101767a167b70f324ecf394efec37996"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v8.13.0","labelRegex":"^v8.13.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/173219","number":173219,"mergeCommit":{"message":"Update
dependency jsonwebtoken to ^9.0.2 (main)
(#173219)\n\n[![Mend\r\nRenovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)\r\n\r\nThis
PR contains the following updates:\r\n\r\n| Package | Change | Age |
Adoption | Passing | Confidence |\r\n|---|---|---|---|---|---|\r\n|
[jsonwebtoken](https://togithub.com/auth0/node-jsonwebtoken)
|\r\n[`^9.0.0`
->\r\n`^9.0.2`](https://renovatebot.com/diffs/npm/jsonwebtoken/9.0.0/9.0.2)
|\r\n[![age](https://developer.mend.io/api/mc/badges/age/npm/jsonwebtoken/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/jsonwebtoken/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/jsonwebtoken/9.0.0/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/jsonwebtoken/9.0.0/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n\r\n---\r\n\r\n###
Release Notes\r\n\r\n<details>\r\n<summary>auth0/node-jsonwebtoken
(jsonwebtoken)</summary>\r\n\r\n###\r\n[`v9.0.2`](https://togithub.com/auth0/node-jsonwebtoken/blob/HEAD/CHANGELOG.md#902---2023-08-30)\r\n\r\n[Compare\r\nSource](https://togithub.com/auth0/node-jsonwebtoken/compare/v9.0.1...v9.0.2)\r\n\r\n-
security: updating semver to 7.5.4 to resolve CVE-2022-25883,
closes\r\n[#&#8203;921](https://togithub.com/auth0/node-jsonwebtoken/issues/921).\r\n-
refactor: reduce library size by using lodash specific
dependencies,\r\ncloses\r\n[#&#8203;878](https://togithub.com/auth0/node-jsonwebtoken/issues/878).\r\n\r\n###\r\n[`v9.0.1`](https://togithub.com/auth0/node-jsonwebtoken/blob/HEAD/CHANGELOG.md#901---2023-07-05)\r\n\r\n[Compare\r\nSource](https://togithub.com/auth0/node-jsonwebtoken/compare/v9.0.0...v9.0.1)\r\n\r\n-
fix(stubs): allow decode method to be
stubbed\r\n\r\n</details>\r\n\r\n---\r\n\r\n### Configuration\r\n\r\n📅
**Schedule**: Branch creation - At any time (no schedule
defined),\r\nAutomerge - At any time (no schedule defined).\r\n\r\n🚦
**Automerge**: Disabled by config. Please merge this manually once
you\r\nare satisfied.\r\n\r\n♻ **Rebasing**: Whenever PR becomes
conflicted, or you tick the\r\nrebase/retry checkbox.\r\n\r\n🔕
**Ignore**: Close this PR and you won't be reminded about this
update\r\nagain.\r\n\r\n---\r\n\r\n- [ ] <!-- rebase-check -->If you
want to rebase/retry this PR, check\r\nthis box\r\n\r\n---\r\n\r\nThis
PR has been generated by
[Mend\r\nRenovate](https://www.mend.io/free-developer-tools/renovate/).
View\r\nrepository job
log\r\n[here](https://developer.mend.io/github/elastic/kibana).\r\n\r\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44Ny4yIiwidXBkYXRlZEluVmVyIjoiMzcuODcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->\r\n\r\nCo-authored-by:
renovate[bot]
<29139614+renovate[bot]@users.noreply.github.com>","sha":"7978d199101767a167b70f324ecf394efec37996"}}]}]
BACKPORT-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport:all-open Backport to all branches that could still receive a release release_note:skip Skip the PR/issue when compiling release notes v8.12.0 v8.13.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants