From 0dd5d70242fb931e70b90294635674c71e258c60 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 30 Jun 2020 17:26:04 +0000
Subject: [PATCH] build(deps): bump express-jwt from 5.3.1 to 6.0.0 in /server

Bumps [express-jwt](https://github.com/auth0/express-jwt) from 5.3.1 to 6.0.0.
- [Release notes](https://github.com/auth0/express-jwt/releases)
- [Changelog](https://github.com/auth0/express-jwt/blob/master/CHANGELOG.md)
- [Commits](https://github.com/auth0/express-jwt/compare/v5.3.1...v6.0.0)

Signed-off-by: dependabot[bot] <support@github.com>
---
 server/package-lock.json | 14 +++++++-------
 server/package.json      |  2 +-
 server/yarn.lock         | 16 +++++-----------
 3 files changed, 13 insertions(+), 19 deletions(-)

diff --git a/server/package-lock.json b/server/package-lock.json
index 1dfbb34..19bf94a 100644
--- a/server/package-lock.json
+++ b/server/package-lock.json
@@ -3289,14 +3289,14 @@
       }
     },
     "express-jwt": {
-      "version": "5.3.1",
-      "resolved": "https://registry.npmjs.org/express-jwt/-/express-jwt-5.3.1.tgz",
-      "integrity": "sha512-1C9RNq0wMp/JvsH/qZMlg3SIPvKu14YkZ4YYv7gJQ1Vq+Dv8LH9tLKenS5vMNth45gTlEUGx+ycp9IHIlaHP/g==",
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/express-jwt/-/express-jwt-6.0.0.tgz",
+      "integrity": "sha512-C26y9myRjx7CyhZ+BAT3p+gQyRCoDZ7qo8plCvLDaRT6je6ALIAQknT6XLVQGFKwIy/Ux7lvM2MNap5dt0T7gA==",
       "requires": {
-        "async": "1.5.2",
-        "express-unless": "0.3.1",
-        "jsonwebtoken": "8.3.0",
-        "lodash.set": "4.3.2"
+        "async": "^1.5.0",
+        "express-unless": "^0.3.0",
+        "jsonwebtoken": "^8.1.0",
+        "lodash.set": "^4.0.0"
       }
     },
     "express-jwt-authz": {
diff --git a/server/package.json b/server/package.json
index 87d941b..0e26236 100644
--- a/server/package.json
+++ b/server/package.json
@@ -27,7 +27,7 @@
     "del": "^3.0.0",
     "errorhandler": "^1.5.0",
     "express": "^4.16.3",
-    "express-jwt": "^5.3.1",
+    "express-jwt": "^6.0.0",
     "express-jwt-authz": "^1.0.0",
     "express-session": "^1.15.6",
     "express-status-monitor": "^1.0.1",
diff --git a/server/yarn.lock b/server/yarn.lock
index a08ce30..43dcf3b 100644
--- a/server/yarn.lock
+++ b/server/yarn.lock
@@ -634,13 +634,7 @@ async@^1.4.0, async@^1.5.0:
   version "1.5.2"
   resolved "https://registry.yarnpkg.com/async/-/async-1.5.2.tgz#ec6a61ae56480c0c3cb241c95618e20892f9672a"
 
-async@^2.1.4:
-  version "2.6.0"
-  resolved "https://registry.yarnpkg.com/async/-/async-2.6.0.tgz#61a29abb6fcc026fea77e56d1c6ec53a795951f4"
-  dependencies:
-    lodash "^4.14.0"
-
-async@^2.6.0:
+async@^2.1.4, async@^2.6.0:
   version "2.6.1"
   resolved "https://registry.yarnpkg.com/async/-/async-2.6.1.tgz#b245a23ca71930044ec53fa46aa00a3e87c6a610"
   dependencies:
@@ -2159,9 +2153,9 @@ express-jwt-authz@^1.0.0:
   version "1.0.0"
   resolved "https://registry.yarnpkg.com/express-jwt-authz/-/express-jwt-authz-1.0.0.tgz#26155700fa2485bd3e9ace3e6bb14573d45be5a4"
 
-express-jwt@^5.3.1:
-  version "5.3.1"
-  resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-5.3.1.tgz#66f05c7dddb5409c037346a98b88965bb10ea4ae"
+express-jwt@^6.0.0:
+  version "6.0.0"
+  resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-6.0.0.tgz#20886c730983ffb1c706a4383235df86eff349b8"
   dependencies:
     async "^1.5.0"
     express-unless "^0.3.0"
@@ -4059,7 +4053,7 @@ lodash.sortby@^4.7.0:
   version "4.7.0"
   resolved "https://registry.yarnpkg.com/lodash.sortby/-/lodash.sortby-4.7.0.tgz#edd14c824e2cc9c1e0b0a1b42bb5210516a42438"
 
-lodash@^4.13.1, lodash@^4.14.0, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.4, lodash@^4.17.5, lodash@^4.3.0:
+lodash@^4.13.1, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.4, lodash@^4.17.5, lodash@^4.3.0:
   version "4.17.15"
   resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.15.tgz#b447f6670a0455bbfeedd11392eff330ea097548"