From 996c233a1ffc6e923195c3242e672d440fa571a2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 10 May 2024 15:06:09 +0000
Subject: [PATCH] chore(deps): bump the npm_and_yarn group with 2 updates

Bumps the npm_and_yarn group with 2 updates: [semver](https://github.com/npm/node-semver) and [jose](https://github.com/panva/jose).


Updates `semver` from 7.6.1 to 7.6.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.6.1...v7.6.2)

Updates `jose` from 5.2.4 to 5.3.0
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/panva/jose/compare/v5.2.4...v5.3.0)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: jose
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json                          |  2 +-
 packages/fxa-auth-server/package.json |  2 +-
 packages/fxa-settings/package.json    |  2 +-
 yarn.lock                             | 23 +++++++++++++++--------
 4 files changed, 18 insertions(+), 11 deletions(-)

diff --git a/package.json b/package.json
index 29a32cc0f1..5e62b762bc 100644
--- a/package.json
+++ b/package.json
@@ -111,7 +111,7 @@
     "react-dom": "^18.2.0",
     "react-ga4": "^2.1.0",
     "rxjs": "^7.8.1",
-    "semver": "^7.6.1",
+    "semver": "^7.6.2",
     "set-value": "^4.1.0",
     "stripe": "^15.4.0",
     "tslib": "^2.6.2",
diff --git a/packages/fxa-auth-server/package.json b/packages/fxa-auth-server/package.json
index 5a5c1a745e..2be85e60bb 100644
--- a/packages/fxa-auth-server/package.json
+++ b/packages/fxa-auth-server/package.json
@@ -103,7 +103,7 @@
     "i18n-iso-countries": "^7.11.0",
     "ioredis": "^4.28.2",
     "joi": "^17.8.3",
-    "jose": "^5.0.1",
+    "jose": "^5.3.0",
     "jsdom": "^24.0.0",
     "jsonwebtoken": "^9.0.0",
     "jwks-rsa": "^3.1.0",
diff --git a/packages/fxa-settings/package.json b/packages/fxa-settings/package.json
index 785081b451..83479e089e 100644
--- a/packages/fxa-settings/package.json
+++ b/packages/fxa-settings/package.json
@@ -177,7 +177,7 @@
     "resolve": "^1.22.8",
     "resolve-url-loader": "^5.0.0",
     "sass-loader": "^14.2.1",
-    "semver": "^7.6.1",
+    "semver": "^7.6.2",
     "source-map-loader": "^5.0.0",
     "style-loader": "^4.0.0",
     "subscriptions-transport-ws": "^0.11.0",
diff --git a/yarn.lock b/yarn.lock
index a878568a2f..83b0bd4b64 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -37781,7 +37781,7 @@ fsevents@~2.1.1:
     i18n-iso-countries: ^7.11.0
     ioredis: ^4.28.2
     joi: ^17.8.3
-    jose: ^5.0.1
+    jose: ^5.3.0
     jsdom: ^24.0.0
     jsonwebtoken: ^9.0.0
     jsxgettext-recursive-next: 1.1.0
@@ -38559,7 +38559,7 @@ fsevents@~2.1.1:
     resolve: ^1.22.8
     resolve-url-loader: ^5.0.0
     sass-loader: ^14.2.1
-    semver: ^7.6.1
+    semver: ^7.6.2
     sinon: ^15.0.1
     source-map-loader: ^5.0.0
     storybook: ^7.0.23
@@ -38810,7 +38810,7 @@ fsevents@~2.1.1:
     react-test-renderer: ^18.3.1
     reflect-metadata: ^0.2.1
     rxjs: ^7.8.1
-    semver: ^7.6.1
+    semver: ^7.6.2
     server-only: ^0.0.1
     set-value: ^4.1.0
     stripe: ^15.4.0
@@ -45908,13 +45908,20 @@ fsevents@~2.1.1:
   languageName: node
   linkType: hard
 
-"jose@npm:^5.0.1, jose@npm:^5.1.3":
+"jose@npm:^5.1.3":
   version: 5.2.4
   resolution: "jose@npm:5.2.4"
   checksum: 81e1f4494f406debd14392975327f0daa8b88ff09c83f2fe94754dcd7cfdefdb1adf785b2ec7481751927e609d342581cd41cb444628ef62fca423facebcd280
   languageName: node
   linkType: hard
 
+"jose@npm:^5.3.0":
+  version: 5.3.0
+  resolution: "jose@npm:5.3.0"
+  checksum: 822ba4d8f80ee5efb53763fd9daad20b08967bc2fcce0f74e95c31280fb12e34bcbc33c2090abccd5c3ef80b7bbab0f656581212bc72281280047a8496ae564c
+  languageName: node
+  linkType: hard
+
 "jquery-modal@https://github.com/mozilla-fxa/jquery-modal.git#0576775d1b4590314b114386019f4c7421c77503":
   version: 0.7.1
   resolution: "jquery-modal@https://github.com/mozilla-fxa/jquery-modal.git#commit=0576775d1b4590314b114386019f4c7421c77503"
@@ -58981,12 +58988,12 @@ resolve@1.1.7:
   languageName: node
   linkType: hard
 
-"semver@npm:^7.6.1":
-  version: 7.6.1
-  resolution: "semver@npm:7.6.1"
+"semver@npm:^7.6.2":
+  version: 7.6.2
+  resolution: "semver@npm:7.6.2"
   bin:
     semver: bin/semver.js
-  checksum: 2c9c89b985230c0fcf02c96ae6a3ca40c474f2f4e838634394691e6e10c347a0c6def0f14fc355d82f90f1744a073b8b9c45457b108aa728280b5d68ed7961cd
+  checksum: 40f6a95101e8d854357a644da1b8dd9d93ce786d5c6a77227bc69dbb17bea83d0d1d1d7c4cd5920a6df909f48e8bd8a5909869535007f90278289f2451d0292d
   languageName: node
   linkType: hard