From ede134b3598ac29a0a048da078c0d237fa81c79f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 19 Aug 2026 01:33:15 +0000
Subject: [PATCH] chore(deps): bump jose from 6.2.8 to 6.2.9

Bumps [jose](https://github.com/panva/jose) from 6.2.8 to 6.2.9.
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/panva/jose/compare/v6.2.8...v6.2.9)

---
updated-dependencies:
- dependency-name: jose
  dependency-version: 6.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json | 2 +-
 yarn.lock    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package.json b/package.json
index 32918ce3..56d7dafa 100644
--- a/package.json
+++ b/package.json
@@ -1323,7 +1323,7 @@
     "@vscode/l10n": "^0.0.18",
     "adm-zip": "^0.6.0",
     "bytes": "^3.1.2",
-    "jose": "^6.2.8",
+    "jose": "^6.2.9",
     "json-schema-library": "^11.6.2",
     "ws": "^8.21.3",
     "yocto-queue": "^1.2.2"
diff --git a/yarn.lock b/yarn.lock
index 6c41f114..dbbdeddc 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1839,10 +1839,10 @@ jackspeak@^3.1.2:
   optionalDependencies:
     "@pkgjs/parseargs" "^0.11.0"
 
-jose@^6.2.8:
-  version "6.2.8"
-  resolved "https://registry.yarnpkg.com/jose/-/jose-6.2.8.tgz#39c1459fe5eac84eb39b1623b8077dcf9ca6c506"
-  integrity sha512-Bsdjwm3Qsd/P0jR+BHDe3LytDfY7WBq2HmCCLIwuVRHMuEC9ae7/R474GIUdF1NgCyZjzVo/A9DOiOBtXq8ZoQ==
+jose@^6.2.9:
+  version "6.2.9"
+  resolved "https://registry.yarnpkg.com/jose/-/jose-6.2.9.tgz#344fa11af928f8000a4f81972c4d567d587170f0"
+  integrity sha512-XrchZOFZUl/T3vTwRe8XK+cJrGtMF4th1ARnDfwbBXFKThGhlsxEE4Zu03AD/bjJSt/9jT/mxrOCkJWOg77aPA==
 
 js-yaml@^4.1.0:
   version "4.3.1"