Skip to content

chore(deps): Bump jose from 6.2.2 to 6.2.3 in the production-dependencies group across 1 directory#68

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/production-dependencies-0c9db8033b
Open

chore(deps): Bump jose from 6.2.2 to 6.2.3 in the production-dependencies group across 1 directory#68
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/production-dependencies-0c9db8033b

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the production-dependencies group with 1 update in the / directory: jose.

Updates jose from 6.2.2 to 6.2.3

Release notes

Sourced from jose's releases.

v6.2.3

Refactor

  • cleanly reject invalid PBES2 p2c (0cdb851)
Changelog

Sourced from jose's changelog.

6.2.3 (2026-04-27)

Refactor

  • cleanly reject invalid PBES2 p2c (0cdb851)
Commits
  • 41ad7e9 chore(release): 6.2.3
  • 988e90f chore: account for commit-and-tag-version instead of standard-version
  • 4b24656 chore: update CHANGELOG.md header
  • 0cdb851 refactor: cleanly reject invalid PBES2 p2c
  • a0b261e test: update Bun expectations
  • b39dc1a chore: use fs.globSync
  • 0675be1 build: replace rollup umd build with a custom esbuild iife wrap
  • 9b03323 chore: bump packages
  • 914b73d chore(deps-dev): bump lodash
  • 9dce817 chore: bump packages
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 27, 2026
@dependabot dependabot Bot changed the title chore(deps): Bump jose from 6.2.2 to 6.2.3 in the production-dependencies group chore(deps): Bump jose from 6.2.2 to 6.2.3 in the production-dependencies group across 1 directory Apr 28, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-0c9db8033b branch 2 times, most recently from 2e8e5e0 to b4fe945 Compare April 28, 2026 02:22
jeonghwanko pushed a commit that referenced this pull request Apr 28, 2026
- @onesub/providers 0.2.0 (new package)
- @onesub/mcp-server 0.4.0

Also fix: make google.packageName optional in OneSubServerConfig
(runtime already treated it as optional; type now matches) and add
packageName guards in server/providers/google.ts.

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-0c9db8033b branch from b4fe945 to 4bfbd14 Compare April 28, 2026 02:28
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-0c9db8033b branch from 4bfbd14 to da89286 Compare May 6, 2026 09:04
Bumps the production-dependencies group with 1 update in the / directory: [jose](https://github.com/panva/jose).


Updates `jose` from 6.2.2 to 6.2.3
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.2...v6.2.3)

---
updated-dependencies:
- dependency-name: jose
  dependency-version: 6.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-0c9db8033b branch from da89286 to 9e715ec Compare May 6, 2026 12:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants