Closed dependabot-preview[bot] closed 5 years ago
coveralls
commented
5 years ago Coverage remained the same at 99.004% when pulling 167a3127c8c10d90b138e89dda41a689517535a9 on dependabot/bundler/jwt-2.2.1 into d8c70937e621989b22dfd74dd520bce8f3c1799b on master.
dependabot-preview[bot]
commented
5 years ago OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
Bumps jwt from 2.1.0 to 2.2.1.
Changelog
*Sourced from [jwt's changelog](https://github.com/jwt/ruby-jwt/blob/master/CHANGELOG.md).* > ## [v2.2.1](https://github.com/jwt/ruby-jwt/tree/v2.2.1) (2019-05-24) > [Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.2.0...v2.2.1) > > **Fixed bugs:** > > - need to `require 'forwardable'` to use `Forwardable` [\#316](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/316) > - Add forwardable dependency for JWK RSA KeyFinder [\#317](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/317) ([excpt](https://github.com/excpt)) > > ## [v2.2.0](https://github.com/jwt/ruby-jwt/tree/v2.2.0) (2019-05-23) > [Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.2.0.pre.beta.0...v2.2.0) > > **Closed issues:** > > - misspelled es512 curve name [\#310](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/310) > - With Base64 decode i can read the hashed content [\#306](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/306) > - hide post-it's for graphviz views [\#303](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/303) > > **Merged pull requests:** > > - Release 2.2.0 [\#315](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/315) ([excpt](https://github.com/excpt)) > > ## [v2.2.0.pre.beta.0](https://github.com/jwt/ruby-jwt/tree/v2.2.0.pre.beta.0) (2019-03-20) > [Full Changelog](https://github.com/jwt/ruby-jwt/compare/v2.1.0...v2.2.0.pre.beta.0) > > **Implemented enhancements:** > > - Use iat\_leeway option [\#273](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/273) > - Use of global state in latest version breaks thread safety of JWT.decode [\#268](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/268) > - JSON support [\#246](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/246) > - Change the Github homepage URL to https [\#301](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/301) ([ekohl](https://github.com/ekohl)) > - Fix Salt length for conformance with PS family specification. [\#300](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/300) ([tobypinder](https://github.com/tobypinder)) > - Add support for Ruby 2.6 [\#299](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/299) ([bustikiller](https://github.com/bustikiller)) > - update homepage in gemspec to use HTTPS [\#298](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/298) ([evgeni](https://github.com/evgeni)) > - Make sure alg parameter value isn't added twice [\#297](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/297) ([korstiaan](https://github.com/korstiaan)) > - Claims Validation [\#295](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/295) ([jamesstonehill](https://github.com/jamesstonehill)) > - JWT::Encode refactorings, alg and exp related bugfixes [\#293](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/293) ([anakinj](https://github.com/anakinj)) > - Proposal of simple JWK support [\#289](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/289) ([anakinj](https://github.com/anakinj)) > - Add RSASSA-PSS signature signing support [\#285](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/285) ([oliver-hohn](https://github.com/oliver-hohn)) > - Add note about using a hard coded algorithm in README [\#280](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/280) ([revodoge](https://github.com/revodoge)) > - Add Appraisal support [\#278](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/278) ([olbrich](https://github.com/olbrich)) > - Fix decode threading issue [\#269](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/269) ([ab320012](https://github.com/ab320012)) > - Removed leeway from verify\_iat [\#257](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/257) ([ab320012](https://github.com/ab320012)) > > **Fixed bugs:** > > - Inconsistent handling of payload claim data types [\#282](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/282) > - Use iat\\_leeway option [\#273](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/273) > - Issued at validation [\#247](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/247) > - Fix bug and simplify segment validation [\#292](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/292) ([anakinj](https://github.com/anakinj)) > - Removed leeway from verify\\_iat [\#257](https://github-redirect.dependabot.com/jwt/ruby-jwt/pull/257) ([ab320012](https://github.com/ab320012)) > ... (truncated)Commits
- [`8279f62`](https://github.com/jwt/ruby-jwt/commit/8279f62573922a9c301f4209176e6ef7138d054e) Merge pull request [#318](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/318) from jwt/release/2.2.1 - [`183ba89`](https://github.com/jwt/ruby-jwt/commit/183ba891b451fa49eb32fe947f52a08f70ee687a) Release 2.2.1 - [`9eac6e1`](https://github.com/jwt/ruby-jwt/commit/9eac6e167d99c2ae90ea8cf57f67728c52d7af9e) Merge pull request [#317](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/317) from jwt/issue/316 - [`4a5482c`](https://github.com/jwt/ruby-jwt/commit/4a5482c8b95b81d01b5bf9fbd99efdfb672228ce) Add forwardable dependency for JWK RSA KeyFinder - [`61b2906`](https://github.com/jwt/ruby-jwt/commit/61b29062318e7a69955b96f3b8d3cc93d87ca816) Merge pull request [#315](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/315) from jwt/release/2.2.0 - [`8a509c1`](https://github.com/jwt/ruby-jwt/commit/8a509c1b023fbf7daad27e25e5b9059e72db0d04) Bump version to 2.2.0 - [`7a6a3f1`](https://github.com/jwt/ruby-jwt/commit/7a6a3f1dbaff806993156d1dff9c217bb2523ff8) Merge pull request [#302](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/302) from excpt/release/v2.2.0 - [`9693a56`](https://github.com/jwt/ruby-jwt/commit/9693a561be96a380bcc01f0372a55b0b96ba2f6b) Update AUTHORS and CHANGELOG files - [`598d729`](https://github.com/jwt/ruby-jwt/commit/598d7290745564ca5dfadc15efdf14c9cba625f9) Update semver string builder - [`a0544e0`](https://github.com/jwt/ruby-jwt/commit/a0544e0adb0d246d7052d9ac5aac51b90f6fd793) Merge pull request [#298](https://github-redirect.dependabot.com/jwt/ruby-jwt/issues/298) from evgeni/patch-1 - Additional commits viewable in [compare view](https://github.com/jwt/ruby-jwt/compare/v2.1.0...v2.2.1)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it). To ignore the version in this PR you can just close it - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.