Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump fast-jwt from 1.7.2 to 2.0.0 #267

Merged
merged 1 commit into from
Nov 17, 2022

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 14, 2022

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps fast-jwt from 1.7.2 to 2.0.0.

Release notes

Sourced from fast-jwt's releases.

v2.0.0

Breaking changes

  • Errors are no longer cached by default. To enable error caching set errorCacheTTL, check documentation.

What's Changed

Full Changelog: nearform/fast-jwt@v1.7.2...v2.0.0

Changelog

Sourced from fast-jwt's changelog.

2021-12-30 / 1.4.1

  • feat: Release v1.4.1 (#178)
  • feat: Distinguish between sync & async methods in types (#177)
  • chore(deps): bump actions/setup-node from 2.5.0 to 2.5.1 (#176)
  • chore: use major version of notify release action
  • chore(deps): bump nearform/github-action-notify-release (#175)
  • chore(deps-dev): bump @​types/node from 16.11.14 to 17.0.1 (#172)
  • feat: Update release.yml to use the new token naming convention (#169)
  • chore(deps): bump fastify/github-action-merge-dependabot from 2.7.1 to 3.0.2 (#168)
  • chore(deps): bump fastify/github-action-merge-dependabot (#166)

2021-12-01 / 1.4.0

  • feat: v1.4.0 (#163)
  • feat: Added support for x509 certificate public key (#161)
  • feat: Refactoring checkAreCompatibleAlgorithms function (#158)
  • chore(deps): bump actions/setup-node from 2.4.1 to 2.5.0 (#156)
  • chore(deps): bump actions/cache from 2.1.6 to 2.1.7 (#154)
  • feat: Added JwtHeader type definition (#153)
  • refactor (docs): Improve documentation (#151)
  • chore(deps): bump mnemonist from 0.38.5 to 0.39.0 (#150)
  • chore(deps-dev): bump tsd from 0.18.0 to 0.19.0 (#149)
  • chore(deps): bump fastify/github-action-merge-dependabot (#148)
  • refactor (docs): fix mutatePayload definition sentence (#146)
  • chore: use main for optic action to test (#144)

2021-11-10 / 1.3.2

  • feat: v1.3.2 (#141)
  • feat: 1.3.1 (#140)
  • chore: Updated README with missing information (#138)
  • chore(deps): bump nearform/optic-release-automation from 2.1.3 to 2.1.4 (#132)
  • chore(deps): bump nearform/optic-release-automation from 2.1.2 to 2.1.3 (#130)
  • chore(deps): bump nearform/optic-release-automation from 2.1.0 to 2.1.2 (#128)
  • fix: bump optic-release-automation (#126)
  • fix: bump optic-release-automation (#124)
  • fix: ci (#123)
  • chore(deps): bump nearform/optic-release-automation from 1.0.1 to 2.0.0 (#122)
  • fix: release ci (#121)
  • chore(deps): bump actions/checkout from 2.3.5 to 2.4.0 (#120)
  • feat: Add support for ES* password protected private keys (#119)

2021-11-01 / 1.3.0

  • feat: Bumped v1.3.0
  • feat: Support passphrase protected keys (#117)
  • docs: remove readme deps badge
  • chore(deps): bump actions/checkout from 2.3.4 to 2.3.5 (#114)
  • chore(deps-dev): bump tsd from 0.17.0 to 0.18.0 (#112)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fast-jwt](https://github.com/nearform/fast-jwt) from 1.7.2 to 2.0.0.
- [Release notes](https://github.com/nearform/fast-jwt/releases)
- [Changelog](https://github.com/nearform/fast-jwt/blob/master/CHANGELOG.md)
- [Commits](nearform/fast-jwt@v1.7.2...v2.0.0)

---
updated-dependencies:
- dependency-name: fast-jwt
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 14, 2022
@bcomnes
Copy link

bcomnes commented Nov 17, 2022

Anyone able to land this?

@climba03003
Copy link
Member

@dependabot recreate

@github-actions github-actions bot merged commit c399fbe into master Nov 17, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/fast-jwt-2.0.0 branch November 17, 2022 17:11
@simoneb
Copy link
Contributor

simoneb commented Nov 21, 2022

@climba03003 note this is a semver major with a breaking change around how errors are cached (they are no longer cached by default)

@climba03003
Copy link
Member

To me, disable error cache by default can be consider as either major or patch.
I don't think caching error is a good behavior.

If it is a concern, I raised a PR to enable error cache by default. #269

@simoneb
Copy link
Contributor

simoneb commented Nov 21, 2022

No concern, I was just making sure this change didn't go unnoticed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants