From a64d8360b2e1e9cac68bc451144276cf5f0208e1 Mon Sep 17 00:00:00 2001 From: "dependabot-preview[bot]" <27856297+dependabot-preview[bot]@users.noreply.github.com> Date: Tue, 30 Jun 2020 20:42:16 +0000 Subject: [PATCH] [Security] Bump express-jwt from 5.3.1 to 6.0.0 Bumps [express-jwt](https://github.com/auth0/express-jwt) from 5.3.1 to 6.0.0. **This update includes a security fix.** - [Release notes](https://github.com/auth0/express-jwt/releases) - [Changelog](https://github.com/auth0/express-jwt/blob/master/CHANGELOG.md) - [Commits](https://github.com/auth0/express-jwt/compare/v5.3.1...v6.0.0) Signed-off-by: dependabot-preview[bot] --- package.json | 2 +- yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 77ec4a440..c99611743 100644 --- a/package.json +++ b/package.json @@ -19,7 +19,7 @@ "cookie-parser": "^1.4.3", "express": "^4.16.3", "express-graphql": "^0.6.12", - "express-jwt": "^5.3.1", + "express-jwt": "^6.0.0", "graphql": "^0.13.2", "history": "^4.7.2", "isomorphic-style-loader": "^4.0.0", diff --git a/yarn.lock b/yarn.lock index 4b04643bd..4449b0f7e 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3419,9 +3419,9 @@ express-graphql@^0.6.12: http-errors "^1.3.0" raw-body "^2.3.2" -express-jwt@^5.3.1: - version "5.3.1" - resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-5.3.1.tgz#66f05c7dddb5409c037346a98b88965bb10ea4ae" +express-jwt@^6.0.0: + version "6.0.0" + resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-6.0.0.tgz#20886c730983ffb1c706a4383235df86eff349b8" dependencies: async "^1.5.0" express-unless "^0.3.0" @@ -6322,7 +6322,7 @@ onecolor@^3.0.4: onetime@^1.0.0: version "1.1.0" - resolved "http://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz#a1f7838f8314c516f05ecefcbc4ccfe04b4ed789" + resolved "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz#a1f7838f8314c516f05ecefcbc4ccfe04b4ed789" onetime@^2.0.0: version "2.0.1"