search

meza / trance-stack

A production-ready Remix stack built for AWS Lambda. Authentication. Security, Internationalization, Feature Flags, Analytics, Tests, Storybook, Ephemeral and Production CI/CD and more.
https://trance-stack.vsbmeza.com
MIT License
260 stars 15 forks source link

fix(deps): update dependency jose to v5 #655

Closed renovate[bot] closed 10 months ago

renovate[bot] commented 10 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
jose 4.14.4 -> 5.2.0 age adoption passing confidence

Release Notes

panva/jose (jose) ### [`v5.2.0`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#520-2023-12-24) [Compare Source](https://togithub.com/panva/jose/compare/v5.1.3...v5.2.0) ##### Features - extend JWT NumericDate setter syntax ([ae363c3](https://togithub.com/panva/jose/commit/ae363c3c434fb040985f08da68ed02067d205cbe)) ### [`v5.1.3`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#513-2023-11-30) [Compare Source](https://togithub.com/panva/jose/compare/v5.1.2...v5.1.3) ### [`v5.1.2`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#512-2023-11-27) [Compare Source](https://togithub.com/panva/jose/compare/v5.1.1...v5.1.2) ##### Fixes - do not mutate JWTVerifyOptions.requiredClaims ([1bf9cec](https://togithub.com/panva/jose/commit/1bf9cec024a4d01d989e15bb6e4b54e3940b4458)), closes [#​610](https://togithub.com/panva/jose/issues/610) ### [`v5.1.1`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#511-2023-11-14) [Compare Source](https://togithub.com/panva/jose/compare/v5.1.0...v5.1.1) ##### Refactor - deprecate the RSA1\_5 JWE Algorithm ([f746da1](https://togithub.com/panva/jose/commit/f746da172b693eb417c4f75c8db6230cf213cd76)) ### [`v5.1.0`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#510-2023-11-03) [Compare Source](https://togithub.com/panva/jose/compare/v5.0.2...v5.1.0) ##### Features - add payload generics to jose.decodeJwt ([9de49e2](https://togithub.com/panva/jose/commit/9de49e26956a20cdb94472f10f83b20480613329)), closes [#​604](https://togithub.com/panva/jose/issues/604) ### [`v5.0.2`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#502-2023-11-02) [Compare Source](https://togithub.com/panva/jose/compare/v5.0.1...v5.0.2) ##### Fixes - **createRemoteJWKSet:** ensure a default user-agent header is present ([887dd3c](https://togithub.com/panva/jose/commit/887dd3cd05f34e06ce20ad00201599a5a469fbac)), closes [#​600](https://togithub.com/panva/jose/issues/600) ### [`v5.0.1`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#501-2023-10-25) [Compare Source](https://togithub.com/panva/jose/compare/v5.0.0...v5.0.1) ##### Fixes - also use ES2020 in the CDN bundles ([8c4d390](https://togithub.com/panva/jose/commit/8c4d3909db56f2d62cf2bf413e8343c0fdd2b92f)) ### [`v5.0.0`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#500-2023-10-25) [Compare Source](https://togithub.com/panva/jose/compare/v4.15.4...v5.0.0) ##### ⚠ BREAKING CHANGES - **Node.js:** return Uint8Array (not a Buffer) from base64url.decode - Browser distribution is now built using ES2020 as a target - Node.js distribution is now built using ES2022 as a target - **types:** jwtVerify and jwtDecrypt type argument for the resolved KeyLike type is now a second optional type argument following a type for the JWT Claims Set (aka payload) - PBES2 Key Management Algorithms' use in decrypt functions now requires the use of the keyManagementAlgorithms option to explicitly opt-in for their use. - importJWK "octAsKeyObject" option was removed. importJWK will no longer return CryptoKey or KeyObject for "oct" (octet sequence) JWK key types, it will instead always return a Uint8Array formed from the "k" (Key Value) Parameter regardless of the other JWK Parameters that may be present. - End-Of-Life versions of Node.js as of October 2023 are no longer supported. Node.js 18, 20, and 21 and future releases are the ones that remain supported. - The JWE "zip" (Compression Algorithm) Header Parameter is no longer supported by this JOSE implementation. ##### Features - add Date as valid input to timestamp setting functions ([bd830a4](https://togithub.com/panva/jose/commit/bd830a47979912d4c0775d01a05584c2aa9f0dcd)) - default to an empty payload in JWT producing constructors ([98d6ca1](https://togithub.com/panva/jose/commit/98d6ca12c448697ed6342b1230b351eb5bfa0df8)) - **types:** add optional Generics for JWT verify and decrypt ([61bd2a0](https://togithub.com/panva/jose/commit/61bd2a0adb638c1c2469459d78556a99cec697c7)), closes [#​568](https://togithub.com/panva/jose/issues/568) ##### Reverts - Revert "test: fix test under lts/erbium" ([b64b6c7](https://togithub.com/panva/jose/commit/b64b6c731c3e2d0e6751e0221804af08d7015bfa)) ##### Refactor - Browser distribution is now built using ES2020 as a target ([1836684](https://togithub.com/panva/jose/commit/18366840e1ae557b951fe921c5004b17ad56e972)) - drop support for EOL Node.js versions ([b5aee54](https://togithub.com/panva/jose/commit/b5aee542fb5995dd29e012011f832ce8dfd24e29)) - importJWK always returns a Uint8Array for symmetric key inputs ([163e1b0](https://togithub.com/panva/jose/commit/163e1b02ed5b64368110d750c9f5f5c3d247042d)) - Node.js distribution is now built using ES2022 as a target ([239697a](https://togithub.com/panva/jose/commit/239697a17d048b8eb2120d29adff7f98edc0f26e)) - **Node.js:** return Uint8Array (not a Buffer) from base64url.decode ([02d5182](https://togithub.com/panva/jose/commit/02d51827e24195d650cf83de100ae16cd8b0599e)) - PBES2 Algorithms require explicit opt-in during verification ([e2da031](https://togithub.com/panva/jose/commit/e2da031381b7c5327ea9a0ccf58f059fa8af7e92)) - remove support for JWE "zip" (Compression Algorithm) Header Parameter ([16998b1](https://togithub.com/panva/jose/commit/16998b15c75d90b64eb5b0fa0713cfdfa7896757)) - **types:** rename type parameters for the KeyLike returns ([eddd400](https://togithub.com/panva/jose/commit/eddd400235e84e3d84c1a8471b01915a12d3d866)) - update allow list error messages ([fe8114c](https://togithub.com/panva/jose/commit/fe8114c82646f2468857effb934f39dd7bc75902)) ### [`v4.15.4`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#4154-2023-10-14) [Compare Source](https://togithub.com/panva/jose/compare/v4.15.3...v4.15.4) ##### Fixes - **types:** export GetKeyFunction ([#​592](https://togithub.com/panva/jose/issues/592)) ([936c9df](https://togithub.com/panva/jose/commit/936c9dff2bc124dc5f64906a96f665a28e57392c)), closes [#​591](https://togithub.com/panva/jose/issues/591) ### [`v4.15.3`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#4153-2023-10-11) [Compare Source](https://togithub.com/panva/jose/compare/v4.15.2...v4.15.3) ### [`v4.15.2`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#4152-2023-10-04) [Compare Source](https://togithub.com/panva/jose/compare/v4.15.1...v4.15.2) ##### Fixes - **build:** add a node target for jose-browser-runtime releases ([abb63d0](https://togithub.com/panva/jose/commit/abb63d0e8e7a55326dc343eec5f5eee9addc1dcf)) ### [`v4.15.1`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#4151-2023-10-02) [Compare Source](https://togithub.com/panva/jose/compare/v4.15.0...v4.15.1) ##### Fixes - resolve missing types for the cryptoRuntime const ([1627965](https://togithub.com/panva/jose/commit/16279652a67133fba0db7c9879767f000a8f1662)) ### [`v4.15.0`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#4150-2023-10-02) [Compare Source](https://togithub.com/panva/jose/compare/v4.14.6...v4.15.0) ##### Features - export the used crypto runtime as a constant ([0681dda](https://togithub.com/panva/jose/commit/0681dda1592a82c22a18981002b3763c502d0fc4)) ### [`v4.14.6`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#4146-2023-09-04) [Compare Source](https://togithub.com/panva/jose/compare/v4.14.5...v4.14.6) ##### Fixes - **build:** publish bundle and umd files with jose-browser-runtime module ([62fcbcc](https://togithub.com/panva/jose/commit/62fcbcc2170db00f5bbfc817839523dbf970239f)), closes [#​571](https://togithub.com/panva/jose/issues/571) ### [`v4.14.5`](https://togithub.com/panva/jose/blob/HEAD/CHANGELOG.md#4145-2023-09-02) [Compare Source](https://togithub.com/panva/jose/compare/v4.14.4...v4.14.5) ##### Refactor - catch type error when decoding base64url signature ([#​569](https://togithub.com/panva/jose/issues/569)) ([935e920](https://togithub.com/panva/jose/commit/935e920d29d242e0446d365b1e4f0449d144c23c)) - catch type errors when decoding various base64url strings ([9024e87](https://togithub.com/panva/jose/commit/9024e870ece4ef121205dadc733c36d7978b97ab))

Configuration

📅 Schedule: Branch creation - " *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Mend Renovate. View repository job log here.

github-actions[bot] commented 10 months ago

Test Results

115 tests  ±0   115 :white_check_mark: ±0   19s :stopwatch: -1s  40 suites ±0     0 :zzz: ±0    1 files   ±0     0 :x: ±0 

Results for commit 3c657189. ± Comparison against base commit 2e400d8f.

github-actions[bot] commented 10 months ago

Code Coverage

Package Line Rate Branch Rate Complexity Health
src 100% 100% 0 ✔
src.atoms.Icons 100% 100% 0 ✔
src.atoms.Toggle 100% 100% 0 ✔
src.components 100% 100% 0 ✔
src.components.ColorModeSwitcher 100% 100% 0 ✔
src.components.CookieConsent 100% 100% 0 ✔
src.components.CookieYes 100% 100% 0 ✔
src.components.ExposeAppConfig 100% 100% 0 ✔
src.components.GoogleAnalytics 100% 100% 0 ✔
src.components.Hello 100% 100% 0 ✔
src.components.Hotjar 100% 100% 0 ✔
src.components.Login 100% 100% 0 ✔
src.components.Logout 100% 100% 0 ✔
src.components.Posthog 100% 100% 0 ✔
src.hooks 100% 100% 0 ✔
src.i18n 100% 100% 0 ✔
src.routes 100% 100% 0 ✔
src.utils 100% 100% 0 ✔
Summary 100% (1259 / 1259) 100% (129 / 129) 0 ✔
meza commented 10 months ago

Copy/paste detection report

Duplications detection: Found 0 exact clones with 0(0%) duplicated lines in 57 (3 formats) files.

Format Files analyzed Total lines Total tokens Clones found Duplicated lines Duplicated tokens
javascript 15 129 1527 0 0 (0%) 0 (0%)
tsx 26 918 8430 0 0 (0%) 0 (0%)
typescript 16 387 3125 0 0 (0%) 0 (0%)
Total: 57 1434 13082 0 0 (0%) 0 (0%)
meza commented 10 months ago

Deployment details


✅ Your stack: remix-trance-stack-renovate-jose-5-x-ephemeral has been successfully deployed.

You can access your deployment at the following URL: https://4iqcu21go2.execute-api.us-east-1.amazonaws.com

meza commented 10 months ago

:tada: This PR is included in version 3.1.192 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: