Bump jsonwebtoken and next-auth

[dependabot[bot]]

Removes jsonwebtoken. It's no longer used after updating ancestor dependency next-auth. These dependencies need to be updated together.

Removes jsonwebtoken

Updates next-auth from 3.20.1 to 4.18.7

Release notes

Sourced from next-auth's releases.

next-auth@v4.18.7

Bugfixes

• next-auth: revert to 4.17 and replay other fixes (nextauthjs/next-auth#6132)

next-auth@v4.18.6

Bugfixes

• core: preserve incoming set cookies (#6029) (2875b49f)
• next: correctly bundle next-auth/middleware fixes #6025 (5259d247)

next-auth@v4.18.5

Bugfixes

• core: host detection/NEXTAUTH_URL (#6007) (62f672ae)
• core: correct status code when returning redirects (#6004) (2c669b32)

next-auth@v4.18.4

Bugfixes

• core: handle Request -> Response regressions (#5991) (5c4a9a69)
  • next: don't override Content-Type by unstable_getServerSession nextauthjs/next-auth#5991
  • core: handle , while setting set-cookie nextauthjs/next-auth#5991

next-auth@v4.18.3

Bugfixes

• core: throw error if no action can be determined (157269e0)
• core: add protocol if missing (221bc8e9)

Other

• core: fix test (0a140cdf)

next-auth@v4.18.2

Bugfixes

• core: properly construct url (#5984) (f3291025)

next-auth@v4.18.1

Bugfixes

• core: don't mutate authOptions in unstable_getServerSession (#5973) (b19b2bcb)

Other

... (truncated)

Commits

• 2bd60f6 chore(release): bump version
• a83573e fix(next-auth): revert to 4.17 to fix host issues but keep other fixes (#6132)
• 6242aa7 fix: incorrect signin redirect url on session required (#5976)
• 54cbbad chore: run release on v4 branch
• fd4af65 chore: remove new stuff from v4 branch
• 6482e35 fix: update aloglia index name for next-auth-v4
• 64aac2e docs: fix links
• df37a24 docs: remove unreleased
• 8bcdf8e chore: empty2
• dd765a1 chore: empty
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/my-covid-story/www/network/alerts).

[vercel[bot]]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated
www	❌ Failed (Inspect)		Dec 22, 2022 at 8:39PM (UTC)