From 134ef89ed3f2e337b1cc23c4015c2e0cf5c1cd7b Mon Sep 17 00:00:00 2001 From: Frederik Prijck Date: Thu, 3 Oct 2024 10:44:08 +0200 Subject: [PATCH 1/6] Create test.yml --- .github/workflows/test.yml | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 .github/workflows/test.yml diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml new file mode 100644 index 0000000..11293ff --- /dev/null +++ b/.github/workflows/test.yml @@ -0,0 +1,34 @@ +name: Test + +on: + push: + branches: [ master ] + pull_request: + branches: [ master ] + +permissions: + contents: read + +jobs: + test: + strategy: + matrix: + node: [ 12, 14, 16, 18, 20 ] + + name: Test (Node ${{ matrix.node }}) + runs-on: ubuntu-latest + + steps: + - name: Checkout code + uses: actions/checkout@v4 + - name: Setup Node + uses: actions/setup-node@v4 + with: + node-version: ${{ matrix.node }} + cache: npm + + - name: Install dependencies + run: npm install + + - name: Test + run: npm test From 8d348c64a8f78805caabc40c5f3af75559b9f635 Mon Sep 17 00:00:00 2001 From: Frederik Prijck Date: Thu, 3 Oct 2024 10:44:19 +0200 Subject: [PATCH 2/6] Delete .circleci directory --- .circleci/config.yml | 47 -------------------------------------------- 1 file changed, 47 deletions(-) delete mode 100644 .circleci/config.yml diff --git a/.circleci/config.yml b/.circleci/config.yml deleted file mode 100644 index 51f2d61..0000000 --- a/.circleci/config.yml +++ /dev/null @@ -1,47 +0,0 @@ -version: 2.1 - -# Thanks to https://github.com/teppeis-sandbox/circleci2-multiple-node-versions - -commands: - test-nodejs: - steps: - - run: - name: Versions - command: npm version - - checkout - - run: - name: Install dependencies - command: npm install - - run: - name: Test - command: npm test - -jobs: - node-v12: - docker: - - image: node:12 - steps: - - test-nodejs - node-v14: - docker: - - image: node:14 - steps: - - test-nodejs - node-v16: - docker: - - image: node:16 - steps: - - test-nodejs - node-v18: - docker: - - image: node:18 - steps: - - test-nodejs - -workflows: - node-multi-build: - jobs: - - node-v12 - - node-v14 - - node-v16 - - node-v18 From ffc411966116942e94fca5e92ee4360b79608467 Mon Sep 17 00:00:00 2001 From: Frederik Prijck Date: Thu, 3 Oct 2024 10:51:34 +0200 Subject: [PATCH 3/6] Update test.yml --- .github/workflows/test.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 11293ff..1ad4f12 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -25,7 +25,6 @@ jobs: uses: actions/setup-node@v4 with: node-version: ${{ matrix.node }} - cache: npm - name: Install dependencies run: npm install From f0c865ed2cd99d4f45dec6bf7ca1ac800568a722 Mon Sep 17 00:00:00 2001 From: julienwoll Date: Thu, 4 Dec 2025 10:39:20 +0100 Subject: [PATCH 4/6] bump jws to version 4.0.1 --- .gitignore | 1 + .npmignore | 1 + CHANGELOG.md | 4 ++++ package.json | 4 ++-- 4 files changed, 8 insertions(+), 2 deletions(-) create mode 100644 .npmignore diff --git a/.gitignore b/.gitignore index 8886139..9f5fc90 100644 --- a/.gitignore +++ b/.gitignore @@ -2,3 +2,4 @@ node_modules .DS_Store .nyc_output coverage +package-lock.json diff --git a/.npmignore b/.npmignore new file mode 100644 index 0000000..32c7e91 --- /dev/null +++ b/.npmignore @@ -0,0 +1 @@ +opslevel.yml \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md index e41fdfc..13247e4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file starting from version **v4.0.0**. This project adheres to [Semantic Versioning](http://semver.org/). +## 9.0.3 - 2025-12-04 + +- updates jws version to 4.0.1. + ## 9.0.2 - 2023-08-30 - security: updating semver to 7.5.4 to resolve CVE-2022-25883, closes [#921](https://github.com/auth0/node-jsonwebtoken/issues/921). diff --git a/package.json b/package.json index 81f78da..b2cc47c 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "jsonwebtoken", - "version": "9.0.2", + "version": "9.0.3", "description": "JSON Web Token implementation (symmetric and asymmetric)", "main": "index.js", "nyc": { @@ -36,7 +36,7 @@ "url": "https://github.com/auth0/node-jsonwebtoken/issues" }, "dependencies": { - "jws": "^3.2.2", + "jws": "^4.0.1", "lodash.includes": "^4.3.0", "lodash.isboolean": "^3.0.3", "lodash.isinteger": "^4.0.4", From 1390bfe7cec408b0c330f562b6d62f78f87d44b9 Mon Sep 17 00:00:00 2001 From: julienwoll Date: Thu, 4 Dec 2025 10:51:57 +0100 Subject: [PATCH 5/6] update CI workflows --- .github/workflows/test.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 1ad4f12..c034c66 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -2,9 +2,9 @@ name: Test on: push: - branches: [ master ] + branches: [master] pull_request: - branches: [ master ] + branches: [master] permissions: contents: read @@ -13,21 +13,21 @@ jobs: test: strategy: matrix: - node: [ 12, 14, 16, 18, 20 ] + node: [12, 14, 16, 18, 20, 22, 24] name: Test (Node ${{ matrix.node }}) runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: ${{ matrix.node }} - name: Install dependencies run: npm install - + - name: Test run: npm test From 2e070c48ad46fcdf86cc8866707ca4ce7ecf79f3 Mon Sep 17 00:00:00 2001 From: julienwoll Date: Thu, 4 Dec 2025 10:57:35 +0100 Subject: [PATCH 6/6] chore: fixing test command --- .github/workflows/test.yml | 3 ++- package.json | 3 +-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index c034c66..bd1167b 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -12,8 +12,9 @@ permissions: jobs: test: strategy: + fail-fast: false matrix: - node: [12, 14, 16, 18, 20, 22, 24] + node: [14, 16, 18, 20, 22, 24] name: Test (Node ${{ matrix.node }}) runs-on: ubuntu-latest diff --git a/package.json b/package.json index b2cc47c..eab30c0 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "scripts": { "lint": "eslint .", "coverage": "nyc mocha --use_strict", - "test": "npm run lint && npm run coverage && cost-of-modules" + "test": "mocha" }, "repository": { "type": "git", @@ -51,7 +51,6 @@ "atob": "^2.1.2", "chai": "^4.1.2", "conventional-changelog": "~1.1.0", - "cost-of-modules": "^1.0.1", "eslint": "^4.19.1", "mocha": "^5.2.0", "nsp": "^2.6.2",