chore(repo): bump jwks-rsa from 3.2.2 to 4.1.0 - #2118
Conversation
|
Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits. |
Bumps [jwks-rsa](https://github.com/auth0/node-jwks-rsa) from 3.2.2 to 4.1.0. - [Release notes](https://github.com/auth0/node-jwks-rsa/releases) - [Changelog](https://github.com/auth0/node-jwks-rsa/blob/master/CHANGELOG.md) - [Commits](auth0/node-jwks-rsa@v3.2.2...v4.1.0) --- updated-dependencies: - dependency-name: jwks-rsa dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
64b223e to
e6fa5b0
Compare
jwks-rsa 4 depends on jose ^6.1.3, and jose 6 is ESM-only: "type": "module" with no require condition in its exports. This backend is CommonJS, so Jest could not parse it and six suites died on `Unexpected token 'export'` the moment anything reached the auth stack transitively. Downgrading jose is not an option, since jwks-rsa 4 declares ^6.1.3 and forcing 5 would break the contract it was built against. The jest config therefore transpiles that one package for the test run: a ts-jest transform for .js/.mjs with allowJs, and a transformIgnorePatterns that exempts only jose. The exemption spells out both segments of the pnpm layout, the store directory and the link inside it, because a path like node_modules/.pnpm/jose@6.2.8/node_modules/jose/dist/... contains two node_modules segments and matching either one would keep the file ignored. Scope is the test run alone. tsc never looks at node_modules, so the application build is untouched. Backend type-check, lint and tests pass: 253 suites, 4820 tests.
|
React Doctor found no new issues. 🎉 Reviewed by React Doctor for commit |
|
Closing: superseded by #2188, which took this bump together with the other two backend majors it kept re-conflicting with on |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
2 participants
Bumps jwks-rsa from 3.2.2 to 4.1.0.
Release notes
Sourced from jwks-rsa's releases.
Changelog
Sourced from jwks-rsa's changelog.
Commits
9f8bbdbRelease v4.1.0 (#509)1489926feat: add cacheMaxAgeFallback and onStaleCacheFallback for graceful JWKS degr...588ab0bchore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 (#504)1fcdae1chore(security): uses pinned versions of actions (#505)61b26e7chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 (#503)bb75ac4chore(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1b7202c7chore(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 (#499)ab29051chore(deps): bump codecov/codecov-action from 5.5.2 to 6.0.024ac427docs: add breaking-change note for require(esm) and Jest (#494)a7e3c9achore: remove package-lock (#495)