Skip to content

Bump jose from 6.2.14 to 6.2.16 - #758

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/jose-6.2.15
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/jose-6.2.15

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026 •

Copy link
Copy Markdown
Contributor

Bumps jose from 6.2.14 to 6.2.16.

Release notes

Sourced from jose's releases.

v6.2.16

Fixes

  • expose invalid options in general JWS and JWE (e41e54e), closes #920

v6.2.15

Fixes

  • jwe: cancel decompression when output exceeds the limit (67541aa)
  • jwks: reject negative cache durations (a3b296f)
  • jwt: reject negative clockTolerance (67d6c83)
Changelog

Sourced from jose's changelog.

6.2.16 (2026-11-08)

Fixes

  • expose invalid options in general JWS and JWE (e41e54e), closes #920

6.2.15 (2026-11-01)

Fixes

  • jwe: cancel decompression when output exceeds the limit (67541aa)
  • jwks: reject negative cache durations (a3b296f)
  • jwt: reject negative clockTolerance (67d6c83)
Commits
  • 63b80ff chore(release): 6.2.16
  • e41e54e fix: expose invalid options in general JWS and JWE
  • 607c3f7 ci: lock workflow action dependencies
  • c9b739c ci: group monthly dependency updates
  • ecf313b chore(deps-dev): bump workerd in /tap/workerd
  • 961f942 ci: schedule updates on the first monday
  • cd4e496 ci: update shared workflows to v1
  • 406fec5 chore: migrate to node:test and typescript 7
  • 496322a chore: cleanup after release
  • f931aa5 chore(release): 6.2.15
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner November 11, 2026 04:13
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 11, 2026
@dependabot
dependabot Bot deployed to ESS PodSpaces November 11, 2026 04:13 Active
@dependabot
dependabot Bot deployed to ESS PodSpaces November 11, 2026 04:13 Active
@dependabot
dependabot Bot deployed to ESS PodSpaces November 11, 2026 04:13 Active
@dependabot
dependabot Bot deployed to ESS PodSpaces November 11, 2026 04:13 Active
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Nov 11, 2026
@dependabot dependabot Bot changed the title Bump jose from 6.2.14 to 6.2.15 Bump jose from 6.2.14 to 6.2.16 Nov 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/jose-6.2.15 branch from c4614b9 to 2580ffc Compare November 12, 2026 08:41
@dependabot
dependabot Bot deployed to ESS PodSpaces November 12, 2026 08:41 Active
Bumps [jose](https://github.com/panva/jose) from 6.2.14 to 6.2.16.
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.14...v6.2.16)

---
updated-dependencies:
- dependency-name: jose
  dependency-version: 6.2.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/jose-6.2.15 branch from 2580ffc to c4c2d98 Compare November 12, 2026 08:43
@dependabot
dependabot Bot deployed to ESS PodSpaces November 12, 2026 08:43 Active
@dependabot
dependabot Bot deployed to ESS PodSpaces November 12, 2026 08:43 Active
@dependabot
dependabot Bot deployed to ESS PodSpaces November 12, 2026 08:43 Active
@dependabot
dependabot Bot deployed to ESS PodSpaces November 12, 2026 08:43 Active
@dependabot @github

dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like jose is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 12, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/jose-6.2.15 branch November 12, 2026 10:57

This branch was successfully deployed

1 active deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants