build(deps): bump jose from 4.3.7 to 4.3.9

[dependabot[bot]]

Bumps jose from 4.3.7 to 4.3.9.

Release notes

Sourced from jose's releases.

v4.3.9

Fixes

• only add y to the epk header parameter when EC keys are used (dd6775e), closes #348

v4.3.8

This release contains only code refactoring and documentation updates.

Changelog

Sourced from jose's changelog.

4.3.9 (2022-01-22)

Fixes

• only add y to the epk header parameter when EC keys are used (dd6775e), closes #348

4.3.8 (2022-01-09)

Commits

• 7b1f293 chore(release): 4.3.9
• dd6775e fix: only add y to the epk header parameter when EC keys are used
• 1039bcd docs: added caching clarification to createRemoteJWKSet
• 7cb8af4 docs: update RemoteJWKSetOptions durations with the unit
• 9492822 ci: update deno to use a min, max, experimental matrix
• 9ca1e47 chore: remove no longer needed deno 1.18 ts ignore
• 573f021 test(deno): mark P-384 ECDH-ES as unsupported by the runtime
• 2cd44d4 chore: remove no longer needed deno ts ignore
• 25adadf chore: cleanup after publish
• 6a575fc chore(release): 4.3.8
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[christian-hawk]

Can one of the admins verify this patch?

[codecov[bot]]

Codecov Report

Merging #416 (09c03f7) into master (f222f07) will not change coverage. The diff coverage is n/a.

:exclamation: Current head 09c03f7 differs from pull request most recent head 3965ab6. Consider uploading reports for the commit 3965ab6 to get more accurate results

@@           Coverage Diff           @@
##           master     #416   +/-   ##
=======================================
  Coverage   78.58%   78.58%           
=======================================
  Files          36       36           
  Lines         780      780           
=======================================
  Hits          613      613           
  Misses        167      167           

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update f222f07...3965ab6. Read the comment docs.

[dependabot[bot]]

Superseded by #418.