Skip to content
This repository was archived by the owner on Sep 22, 2021. It is now read-only.

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 26, 2021

Bumps lcobucci/jwt from 3.3.3 to 4.1.4.

Release notes

Sourced from lcobucci/jwt's releases.

4.1.4

Release Notes for 4.1.4

This release removes the possibility of having parsing issues when dealing with time-fractions with more than 6 decimal places.

4.1.4

  • Total issues resolved: 0
  • Total pull requests resolved: 1
  • Total contributors: 1

Bug

4.1.3

Release Notes for 4.1.3

This release fixes a specification compatibility issue by making sure we use floats to represent time fractions.

4.1.3

  • Total issues resolved: 0
  • Total pull requests resolved: 1
  • Total contributors: 1

Bug

4.1.2

Release Notes for 4.1.2

This release fixes the polyfill for sodium base64 encoding.

4.1.2

  • Total issues resolved: 0
  • Total pull requests resolved: 1
  • Total contributors: 1

Bug

4.1.1

Release Notes for 4.1.1

This release makes it possible to use the library when libsodium < 1.0.14 is installed.

... (truncated)

Commits
  • 71cf170 Merge pull request #711 from lcobucci/4.0.x-merge-up-into-4.1.x_605a7ef3683fb...
  • 3227923 Merge branch '4.1.x' into 4.0.x-merge-up-into-4.1.x_605a7ef3683fb4.94092104
  • ae4165a Merge pull request #710 from lcobucci/guard-against-potential-precision-issues
  • c0938eb Prevent type conversions issues when parsing time-fractions
  • 1e66927 Merge pull request #707 from lcobucci/4.0.x-merge-up-into-4.1.x_60550fb033e09...
  • 1d393b4 Merge branch '4.1.x' into 4.0.x-merge-up-into-4.1.x_60550fb033e094.43133164
  • cefaeb3 Merge pull request #706 from yassinrais/4.0.x
  • 9a961f4 Fix usage of non JSON numeric values for time fractions
  • ad4729f Guard against precision issues on time fractions
  • c544710 Merge pull request #685 from lcobucci/Slamdunk-patch-1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [lcobucci/jwt](https://github.com/lcobucci/jwt) from 3.3.3 to 4.1.4.
- [Release notes](https://github.com/lcobucci/jwt/releases)
- [Commits](lcobucci/jwt@3.3.3...4.1.4)

---
updated-dependencies:
- dependency-name: lcobucci/jwt
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 26, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants