build(deps): bump jose from 4.3.7 to 4.5.0

[dependabot[bot]]

Bumps jose from 4.3.7 to 4.5.0.

Release notes

Sourced from jose's releases.

v4.5.0

Features

• add jose.decodeJwt utility (3d2a2b8)

Fixes

• concurrent fetch await in cloudflare (e44cd18), closes #355

v4.4.0

Features

• add createLocalJWKSet, resolver to verify using a local JWKSet (bd7bf37)

v4.3.9

Fixes

• only add y to the epk header parameter when EC keys are used (dd6775e), closes #348

v4.3.8

This release contains only code refactoring and documentation updates.

Changelog

Sourced from jose's changelog.

4.5.0 (2022-02-07)

Features

• add jose.decodeJwt utility (3d2a2b8)

Fixes

• concurrent fetch await in cloudflare (e44cd18), closes #355

4.4.0 (2022-01-24)

Features

• add createLocalJWKSet, resolver to verify using a local JWKSet (bd7bf37)

4.3.9 (2022-01-22)

Fixes

• only add y to the epk header parameter when EC keys are used (dd6775e), closes #348

4.3.8 (2022-01-09)

Commits

• 8d24d8a chore(release): 4.5.0
• e44cd18 fix: concurrent fetch await in cloudflare
• 3d2a2b8 feat: add jose.decodeJwt utility
• 7835489 docs: update README.md
• 73c9b3d refactor: src/runtime/node/base64url.ts
• 6b5e6ac refactor: src/jwks/local.ts
• b864305 chore: cleanup after publish
• 72aa068 chore(release): 4.4.0
• 4a79f7d docs: update README.md
• bd7bf37 feat: add createLocalJWKSet, resolver to verify using a local JWKSet
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[christian-hawk]

Can one of the admins verify this patch?

[codecov[bot]]

Codecov Report

Merging #421 (39c854e) into master (d61566e) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #421   +/-   ##
=======================================
  Coverage   78.58%   78.58%           
=======================================
  Files          36       36           
  Lines         780      780           
=======================================
  Hits          613      613           
  Misses        167      167           

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update d61566e...39c854e. Read the comment docs.

[dependabot[bot]]

Superseded by #425.