[JS] bump (deps): Bump the production group in /js with 5 updates (#583)

#minor Bumps the production group in /js with 5 updates: | Package | From | To | | --- | --- | --- | | [axios](https://github.com/axios/axios) | `1.4.0` | `1.5.0` | | [yaml](https://github.com/eemeli/yaml) | `2.3.1` | `2.3.2` | | [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `9.0.1` | `9.0.2` | | [@types/jsonwebtoken](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jsonwebtoken) | `9.0.2` | `9.0.3` | | [@microsoft/teamsfx](https://github.com/OfficeDev/TeamsFx) | `2.2.2` | `2.3.0` | Updates `axios` from 1.4.0 to 1.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>Release v1.5.0</h2> <h2>Release notes:</h2> <h3>Bug Fixes</h3> <ul> <li><strong>adapter:</strong> make adapter loading error more clear by using platform-specific adapters explicitly (<a href="https://redirect.github.com/axios/axios/issues/5837">#5837</a>) (<a href="https://github.com/axios/axios/commit/9a414bb6c81796a95c6c7fe668637825458e8b6d">9a414bb</a>)</li> <li><strong>dns:</strong> fixed <code>cacheable-lookup</code> integration; (<a href="https://redirect.github.com/axios/axios/issues/5836">#5836</a>) (<a href="https://github.com/axios/axios/commit/b3e327dcc9277bdce34c7ef57beedf644b00d628">b3e327d</a>)</li> <li><strong>headers:</strong> added support for setting header names that overlap with class methods; (<a href="https://redirect.github.com/axios/axios/issues/5831">#5831</a>) (<a href="https://github.com/axios/axios/commit/d8b4ca0ea5f2f05efa4edfe1e7684593f9f68273">d8b4ca0</a>)</li> <li><strong>headers:</strong> fixed common Content-Type header merging; (<a href="https://redirect.github.com/axios/axios/issues/5832">#5832</a>) (<a href="https://github.com/axios/axios/commit/8fda2766b1e6bcb72c3fabc146223083ef13ce17">8fda276</a>)</li> </ul> <h3>Features</h3> <ul> <li>export getAdapter function (<a href="https://redirect.github.com/axios/axios/issues/5324">#5324</a>) (<a href="https://github.com/axios/axios/commit/ca73eb878df0ae2dace81fe3a7f1fb5986231bf1">ca73eb8</a>)</li> <li><strong>export:</strong> export adapters without <code>unsafe</code> prefix (<a href="https://redirect.github.com/axios/axios/issues/5839">#5839</a>) (<a href="https://github.com/axios/axios/commit/1601f4a27a81ab47fea228f1e244b2c4e3ce28bf">1601f4a</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li> <a href="https://github.com/DigitalBrainJS" title="+66/-29 ([#5839](axios/axios#5839) [#5837](axios/axios#5837) [#5836](axios/axios#5836) [#5832](axios/axios#5832) [#5831](axios/axios#5831) )">Dmitriy Mozgovoy</a></li> <li> <a href="https://github.com/geekact" title="+42/-0 ([#5324](axios/axios#5324) )">夜葬</a></li> <li> <a href="https://github.com/JBudiman00" title="+30/-0 ([#5788](axios/axios#5788) )">Jonathan Budiman</a></li> <li> <a href="https://github.com/Cadienvan" title="+3/-5 ([#5791](axios/axios#5791) )">Michael Di Prisco</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/axios/axios/compare/v1.4.0...v1.5.0">1.5.0</a> (2023-08-26)</h1> <h3>Bug Fixes</h3> <ul> <li><strong>adapter:</strong> make adapter loading error more clear by using platform-specific adapters explicitly (<a href="https://redirect.github.com/axios/axios/issues/5837">#5837</a>) (<a href="https://github.com/axios/axios/commit/9a414bb6c81796a95c6c7fe668637825458e8b6d">9a414bb</a>)</li> <li><strong>dns:</strong> fixed <code>cacheable-lookup</code> integration; (<a href="https://redirect.github.com/axios/axios/issues/5836">#5836</a>) (<a href="https://github.com/axios/axios/commit/b3e327dcc9277bdce34c7ef57beedf644b00d628">b3e327d</a>)</li> <li><strong>headers:</strong> added support for setting header names that overlap with class methods; (<a href="https://redirect.github.com/axios/axios/issues/5831">#5831</a>) (<a href="https://github.com/axios/axios/commit/d8b4ca0ea5f2f05efa4edfe1e7684593f9f68273">d8b4ca0</a>)</li> <li><strong>headers:</strong> fixed common Content-Type header merging; (<a href="https://redirect.github.com/axios/axios/issues/5832">#5832</a>) (<a href="https://github.com/axios/axios/commit/8fda2766b1e6bcb72c3fabc146223083ef13ce17">8fda276</a>)</li> </ul> <h3>Features</h3> <ul> <li>export getAdapter function (<a href="https://redirect.github.com/axios/axios/issues/5324">#5324</a>) (<a href="https://github.com/axios/axios/commit/ca73eb878df0ae2dace81fe3a7f1fb5986231bf1">ca73eb8</a>)</li> <li><strong>export:</strong> export adapters without <code>unsafe</code> prefix (<a href="https://redirect.github.com/axios/axios/issues/5839">#5839</a>) (<a href="https://github.com/axios/axios/commit/1601f4a27a81ab47fea228f1e244b2c4e3ce28bf">1601f4a</a>)</li> </ul> <h3>Contributors to this release</h3> <ul> <li> <a href="https://github.com/DigitalBrainJS" title="+66/-29 ([#5839](axios/axios#5839) [#5837](axios/axios#5837) [#5836](axios/axios#5836) [#5832](axios/axios#5832) [#5831](axios/axios#5831) )">Dmitriy Mozgovoy</a></li> <li> <a href="https://github.com/geekact" title="+42/-0 ([#5324](axios/axios#5324) )">夜葬</a></li> <li> <a href="https://github.com/JBudiman00" title="+30/-0 ([#5788](axios/axios#5788) )">Jonathan Budiman</a></li> <li> <a href="https://github.com/Cadienvan" title="+3/-5 ([#5791](axios/axios#5791) )">Michael Di Prisco</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/6365751ba6725cc283f7364b9ee6ca9917e9737c"><code>6365751</code></a> chore(release): v1.5.0 (<a href="https://redirect.github.com/axios/axios/issues/5838">#5838</a>)</li> <li><a href="https://github.com/axios/axios/commit/1601f4a27a81ab47fea228f1e244b2c4e3ce28bf"><code>1601f4a</code></a> feat(export): export adapters without <code>unsafe</code> prefix (<a href="https://redirect.github.com/axios/axios/issues/5839">#5839</a>)</li> <li><a href="https://github.com/axios/axios/commit/dff74ae374b75ad1b99cb1050fe4a4c52cf4b9f5"><code>dff74ae</code></a> docs: linting documentation notes (<a href="https://redirect.github.com/axios/axios/issues/5791">#5791</a>)</li> <li><a href="https://github.com/axios/axios/commit/ca73eb878df0ae2dace81fe3a7f1fb5986231bf1"><code>ca73eb8</code></a> feat: export getAdapter function (<a href="https://redirect.github.com/axios/axios/issues/5324">#5324</a>)</li> <li><a href="https://github.com/axios/axios/commit/9a414bb6c81796a95c6c7fe668637825458e8b6d"><code>9a414bb</code></a> fix(adapter): make adapter loading error more clear by using platform-specifi...</li> <li><a href="https://github.com/axios/axios/commit/b3e327dcc9277bdce34c7ef57beedf644b00d628"><code>b3e327d</code></a> fix(dns): fixed <code>cacheable-lookup</code> integration; (<a href="https://redirect.github.com/axios/axios/issues/5836">#5836</a>)</li> <li><a href="https://github.com/axios/axios/commit/8fda2766b1e6bcb72c3fabc146223083ef13ce17"><code>8fda276</code></a> fix(headers): fixed common Content-Type header merging; (<a href="https://redirect.github.com/axios/axios/issues/5832">#5832</a>)</li> <li><a href="https://github.com/axios/axios/commit/d8b4ca0ea5f2f05efa4edfe1e7684593f9f68273"><code>d8b4ca0</code></a> fix(headers): added support for setting header names that overlap with class ...</li> <li><a href="https://github.com/axios/axios/commit/3f53eb6960f05a1f88409c4b731a40de595cb825"><code>3f53eb6</code></a> docs: Add axios error type definitions in README.MD (<a href="https://redirect.github.com/axios/axios/issues/5788">#5788</a>)</li> <li>See full diff in <a href="https://github.com/axios/axios/compare/v1.4.0...v1.5.0">compare view</a></li> </ul> </details> <br /> Updates `yaml` from 2.3.1 to 2.3.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eemeli/yaml/releases">yaml's releases</a>.</em></p> <blockquote> <h2>v2.3.2</h2> <ul> <li>Fix docs typo (<a href="https://redirect.github.com/eemeli/yaml/issues/489">#489</a>)</li> <li>Do not require quotes for implicit keys with flow indicators (<a href="https://redirect.github.com/eemeli/yaml/issues/494">#494</a>)</li> <li>Update Prettier to v3 & update ESLint config</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eemeli/yaml/commit/a4d8569c2139eee8a0324b6b861283f7b3b508f8"><code>a4d8569</code></a> 2.3.2</li> <li><a href="https://github.com/eemeli/yaml/commit/899c75ce0164978e2b46cc7770cb215aea79919f"><code>899c75c</code></a> chore: Update Prettier to v3 & update ESLint config</li> <li><a href="https://github.com/eemeli/yaml/commit/f7f0971fbae1433edc5b75b50eb02393b0ef55e6"><code>f7f0971</code></a> chore: Refresh lockfile</li> <li><a href="https://github.com/eemeli/yaml/commit/9558e96301e028927210da05cbacb88d364d88b2"><code>9558e96</code></a> fix: Do not require quotes for implicit keys with flow indicators (<a href="https://redirect.github.com/eemeli/yaml/issues/494">#494</a>)</li> <li><a href="https://github.com/eemeli/yaml/commit/07063bc865b862c2dc375630e27078b2886d4668"><code>07063bc</code></a> docs: Fix typo (<a href="https://redirect.github.com/eemeli/yaml/issues/489">#489</a>)</li> <li>See full diff in <a href="https://github.com/eemeli/yaml/compare/v2.3.1...v2.3.2">compare view</a></li> </ul> </details> <br /> Updates `jsonwebtoken` from 9.0.1 to 9.0.2 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md">jsonwebtoken's changelog</a>.</em></p> <blockquote> <h2>9.0.2 - 2023-08-30</h2> <ul> <li>security: updating semver to 7.5.4 to resolve CVE-2022-25883, closes <a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/921">#921</a>.</li> <li>refactor: reduce library size by using lodash specific dependencies, closes <a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/878">#878</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/bc28861f1fa981ed9c009e29c044a19760a0b128"><code>bc28861</code></a> Release 9.0.2 (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/935">#935</a>)</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/96b89060cfc19272a7d853f53cb28c42580a6a67"><code>96b8906</code></a> refactor: use specific lodash packages (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/933">#933</a>)</li> <li><a href="https://github.com/auth0/node-jsonwebtoken/commit/ed35062239c0195d4341025d4699cc39608b435e"><code>ed35062</code></a> security: Updating semver to 7.5.4 to resolve CVE-2022-25883 (<a href="https://redirect.github.com/auth0/node-jsonwebtoken/issues/932">#932</a>)</li> <li>See full diff in <a href="https://github.com/auth0/node-jsonwebtoken/compare/v9.0.1...v9.0.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~charlesrea">charlesrea</a>, a new releaser for jsonwebtoken since your current version.</p> </details> <br /> Updates `@types/jsonwebtoken` from 9.0.2 to 9.0.3 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jsonwebtoken">compare view</a></li> </ul> </details> <br /> Updates `@microsoft/teamsfx` from 2.2.2 to 2.3.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/OfficeDev/TeamsFx/commit/522d0807b6c61e1b967e7cec063b1eabef102d83"><code>522d080</code></a> build(release): publish detail</li> <li><a href="https://github.com/OfficeDev/TeamsFx/commit/46a90562cc2b7deab6ec51316c0e708868e3c748"><code>46a9056</code></a> Merge pull request <a href="https://redirect.github.com/OfficeDev/TeamsFx/issues/9969">#9969</a> from OfficeDev/siglud/release520-fix</li> <li><a href="https://github.com/OfficeDev/TeamsFx/commit/d57ce359eb25cc11d7ffb4c1745e9609cf2e2ee6"><code>d57ce35</code></a> Revert "build(release): publish detail"</li> <li><a href="https://github.com/OfficeDev/TeamsFx/commit/9623973b6d6a5bd7f29ecd280e39e3f77496af5f"><code>9623973</code></a> Merge pull request <a href="https://redirect.github.com/OfficeDev/TeamsFx/issues/9951">#9951</a> from OfficeDev/changelog-0919</li> <li><a href="https://github.com/OfficeDev/TeamsFx/commit/c77deb2f419d12580341e8840a4c3324cb50d305"><code>c77deb2</code></a> build(release): publish detail</li> <li><a href="https://github.com/OfficeDev/TeamsFx/commit/a9ee40e595581f4c57cb8fd6c7c69f54fe607a8f"><code>a9ee40e</code></a> docs: update changelog based on comments</li> <li><a href="https://github.com/OfficeDev/TeamsFx/commit/4588df15bdfaf2d347c3e61de0836d143def3031"><code>4588df1</code></a> docs: changelog for 0919 stable release</li> <li><a href="https://github.com/OfficeDev/TeamsFx/commit/be75efe255e451b800b1abba80931071525c46e3"><code>be75efe</code></a> build(release): publish detail</li> <li><a href="https://github.com/OfficeDev/TeamsFx/commit/101a70a40445cf7b05632ac198733bc318424ca0"><code>101a70a</code></a> Merge pull request <a href="https://redirect.github.com/OfficeDev/TeamsFx/issues/9932">#9932</a> from OfficeDev/wenyt/cd1</li> <li><a href="https://github.com/OfficeDev/TeamsFx/commit/d5501095d4c659aa9b58b21728843a7456051423"><code>d550109</code></a> ci: update condition for release</li> <li>Additional commits viewable in <a href="https://github.com/OfficeDev/TeamsFx/compare/@microsoft/[email protected]...@microsoft/[email protected]">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
microsoft · Sep 18, 2023 · 146ac87 · 146ac87
1 parent 7dc7a1b
commit 146ac87
Show file tree

Hide file tree

Showing 8 changed files with 76 additions and 42 deletions.
diff --git a/js/package.json b/js/package.json
@@ -24,7 +24,7 @@
         "@azure/ms-rest-js": "2.7.0",
         "@microsoft/api-extractor": "^7.15.1",
         "@standardlabs/is-private": "^1.0.1",
-        "@types/jsonwebtoken": "9.0.2",
+        "@types/jsonwebtoken": "9.0.3",
         "@types/lodash": "^4.14.196",
         "@types/mocha": "^10.0.1",
         "@types/sinon": "^10.0.16",

diff --git a/js/packages/teams-ai/package.json b/js/packages/teams-ai/package.json
@@ -22,20 +22,20 @@
     "main": "./lib/index.js",
     "types": "./lib/index.d.ts",
     "dependencies": {
-        "axios": "^1.4.0",
+        "axios": "^1.5.0",
         "botbuilder": "^4.20.0",
         "botbuilder-dialogs": "^4.20.0",
         "gpt-3-encoder": "^1.1.4",
-        "yaml": "^2.2.2"
+        "yaml": "^2.3.2"
     },
     "resolutions": {
         "follow-redirects": "^1.15.0"
     },
     "devDependencies": {
-        "@types/jsonwebtoken": "^9.0.2",
+        "@types/jsonwebtoken": "^9.0.3",
         "@types/node": "^20.6.2",
         "eslint": "^8.42.0",
-        "jsonwebtoken": "^9.0.0",
+        "jsonwebtoken": "^9.0.2",
         "typescript": "^5.1.6",
         "@types/mocha": "^10.0.1",
         "@types/assert": "^1.5.6",

diff --git a/js/samples/02.messageExtensions.a.searchCommand/package.json b/js/samples/02.messageExtensions.a.searchCommand/package.json
@@ -24,7 +24,7 @@
         "dotenv": "^16.3.1",
         "replace": "~1.2.0",
         "restify": "~11.1.0",
-        "axios": "^1.3.2"
+        "axios": "^1.5.0"
     },
     "devDependencies": {
         "@types/dotenv": "6.1.1",

diff --git a/js/samples/03.adaptiveCards.a.typeAheadBot/package.json b/js/samples/03.adaptiveCards.a.typeAheadBot/package.json
@@ -24,7 +24,7 @@
         "dotenv": "^16.3.1",
         "replace": "~1.2.0",
         "restify": "~11.1.0",
-        "axios": "^1.3.2"
+        "axios": "^1.5.0"
     },
     "devDependencies": {
         "@types/dotenv": "6.1.1",

diff --git a/js/samples/04.ai.a.teamsChefBot/package.json b/js/samples/04.ai.a.teamsChefBot/package.json
@@ -21,7 +21,7 @@
     },
     "dependencies": {
         "@microsoft/teams-ai": "~0.1.0-preview.2",
-        "@microsoft/teamsfx": "^2.2.0",
+        "@microsoft/teamsfx": "^2.3.0",
         "botbuilder": "^4.20.0",
         "dotenv": "^16.3.1",
         "replace": "~1.2.0",

diff --git a/js/samples/04.ai.d.chainedActions.listBot/package.json b/js/samples/04.ai.d.chainedActions.listBot/package.json
@@ -26,7 +26,7 @@
         "restify": "~11.1.0"
     },
     "devDependencies": {
-        "@types/jsonwebtoken": "^9.0.2",
+        "@types/jsonwebtoken": "^9.0.3",
         "@types/restify": "8.5.7",
         "nodemon": "~1.19.4",
         "shx": "^0.3.4",

diff --git a/js/samples/05.chatModeration/package.json b/js/samples/05.chatModeration/package.json
@@ -20,16 +20,16 @@
     },
     "dependencies": {
         "@microsoft/teams-ai": "~0.1.0-preview.2",
-        "axios": "^1.4.0",
+        "axios": "^1.5.0",
         "botbuilder": "^4.20.0",
         "dotenv": "^16.3.1",
-        "jsonwebtoken": "^9.0.0",
+        "jsonwebtoken": "^9.0.2",
         "replace": "~1.2.0",
         "restify": "~11.1.0"
     },
     "devDependencies": {
         "@types/dotenv": "6.1.1",
-        "@types/jsonwebtoken": "^9.0.2",
+        "@types/jsonwebtoken": "^9.0.3",
         "@types/restify": "8.5.7",
         "env-cmd": "^10.1.0",
         "nodemon": "~1.19.4",

diff --git a/js/yarn.lock b/js/yarn.lock
@@ -761,10 +761,10 @@
   resolved "https://registry.yarnpkg.com/@microsoft/recognizers-text/-/recognizers-text-1.1.4.tgz#264530f748b2cad3fac54d53538f88ad2bf99b7e"
   integrity sha512-hlSVXcaX5i8JcjuUJpVxmy2Z/GxvFXarF0KVySCFop57wNEnrLWMHe4I4DjP866G19VyIKRw+vPA32pkGhZgTg==
 
-"@microsoft/teamsfx@^2.2.0":
-  version "2.2.2"
-  resolved "https://registry.yarnpkg.com/@microsoft/teamsfx/-/teamsfx-2.2.2.tgz#f059708a2221387d4207354305af399254d4d869"
-  integrity sha512-HYAEX7Fau4xMVcD22MK90gMuREPj3hYuvrSbmggWTwPMS+62dSmOxrZUHnpchVpBpUpPAGaElWsxFDRQ+NTtiw==
+"@microsoft/teamsfx@^2.3.0":
+  version "2.3.0"
+  resolved "https://registry.yarnpkg.com/@microsoft/teamsfx/-/teamsfx-2.3.0.tgz#a9139e53f0d03be4ae7341102c33cd79b2bb9533"
+  integrity sha512-cxJwZxD/CbzEQawY4CQ40fkcHXX16et2txcdu1yIM9S5TGt6ievMP9M1VmjerqVEujNDMSJadWzzf72ib5TvEw==
   dependencies:
     "@azure/identity" "^2.0.1"
     "@azure/msal-browser" "^2.21.0"
@@ -1063,10 +1063,10 @@
   resolved "https://registry.yarnpkg.com/@types/json5/-/json5-0.0.29.tgz#ee28707ae94e11d2b827bcbe5270bcea7f3e71ee"
   integrity sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==
 
-"@types/[email protected].2", "@types/jsonwebtoken@^9.0.2":
-  version "9.0.2"
-  resolved "https://registry.yarnpkg.com/@types/jsonwebtoken/-/jsonwebtoken-9.0.2.tgz#9eeb56c76dd555039be2a3972218de5bd3b8d83e"
-  integrity sha512-drE6uz7QBKq1fYqqoFKTDRdFCPHd5TCub75BM+D+cMx7NU9hUz7SESLfC2fSCXVFMO5Yj8sOWHuGqPgjc+fz0Q==
+"@types/[email protected].3", "@types/jsonwebtoken@^9.0.3":
+  version "9.0.3"
+  resolved "https://registry.yarnpkg.com/@types/jsonwebtoken/-/jsonwebtoken-9.0.3.tgz#1f22283b8e1f933af9e195d720798b64b399d84c"
+  integrity sha512-b0jGiOgHtZ2jqdPgPnP6WLCXZk1T8p06A/vPGzUvxpFGgKMbjXJDjC5m52ErqBnIuWZFgGoIJyRdeG5AyreJjA==
   dependencies:
     "@types/node" "*"
 
@@ -1911,10 +1911,10 @@ axios@^0.27.2:
     follow-redirects "^1.14.9"
     form-data "^4.0.0"
 
-axios@^1.3.2, axios@^1.3.4, axios@^1.4.0:
-  version "1.4.0"
-  resolved "https://registry.yarnpkg.com/axios/-/axios-1.4.0.tgz#38a7bf1224cd308de271146038b551d725f0be1f"
-  integrity sha512-S4XCWMEmzvo64T9GfvQDOXgYRDJ/wsSZc7Jvdgx5u1sd0JwsuPLqb3SYmusag+edF6ziyMensPVqLTSc1PiSEA==
+axios@^1.3.4, axios@^1.5.0:
+  version "1.5.0"
+  resolved "https://registry.yarnpkg.com/axios/-/axios-1.5.0.tgz#f02e4af823e2e46a9768cfc74691fdd0517ea267"
+  integrity sha512-D4DdjDo5CY50Qms0qGQTTw6Q44jl7zRwY7bthds06pUGfChBCTcQs+N743eFWGEd6pRTMd6A+I87aWyFV5wiZQ==
   dependencies:
     follow-redirects "^1.15.0"
     form-data "^4.0.0"
@@ -5699,15 +5699,21 @@ jsonparse@^1.2.0:
   resolved "https://registry.yarnpkg.com/jsonparse/-/jsonparse-1.3.1.tgz#3f4dae4a91fac315f71062f8521cc239f1366280"
   integrity sha512-POQXvpdL69+CluYsillJ7SUhKvytYjW9vG/GKpnf+xP8UWgYEM/RaMzHHofbALDiKbbP1W8UEYmgGl39WkPZsg==
 
-jsonwebtoken@^9.0.0:
-  version "9.0.1"
-  resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-9.0.1.tgz#81d8c901c112c24e497a55daf6b2be1225b40145"
-  integrity sha512-K8wx7eJ5TPvEjuiVSkv167EVboBDv9PZdDoF7BgeQnBLVvZWW9clr2PsQHVJDTKaEIH5JBIwHujGcHp7GgI2eg==
+jsonwebtoken@^9.0.0, jsonwebtoken@^9.0.2:
+  version "9.0.2"
+  resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-9.0.2.tgz#65ff91f4abef1784697d40952bb1998c504caaf3"
+  integrity sha512-PRp66vJ865SSqOlgqS8hujT5U4AOgMfhrwYIuIhfKaoSCZcirrmASQr8CX7cUg+RMih+hgznrjp99o+W4pJLHQ==
   dependencies:
     jws "^3.2.2"
-    lodash "^4.17.21"
+    lodash.includes "^4.3.0"
+    lodash.isboolean "^3.0.3"
+    lodash.isinteger "^4.0.4"
+    lodash.isnumber "^3.0.3"
+    lodash.isplainobject "^4.0.6"
+    lodash.isstring "^4.0.1"
+    lodash.once "^4.0.0"
     ms "^2.1.1"
-    semver "^7.3.8"
+    semver "^7.5.4"
 
 jspath@^0.4.0:
   version "0.4.0"
@@ -5884,11 +5890,41 @@ lodash.get@^4.4.2:
   resolved "https://registry.yarnpkg.com/lodash.get/-/lodash.get-4.4.2.tgz#2d177f652fa31e939b4438d5341499dfa3825e99"
   integrity sha512-z+Uw/vLuy6gQe8cfaFWD7p0wVv8fJl3mbzXh33RS+0oW2wvUqiRXiQ69gLWSLpgB5/6sU+r6BlQR0MBILadqTQ==
 
+lodash.includes@^4.3.0:
+  version "4.3.0"
+  resolved "https://registry.yarnpkg.com/lodash.includes/-/lodash.includes-4.3.0.tgz#60bb98a87cb923c68ca1e51325483314849f553f"
+  integrity sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==
+
+lodash.isboolean@^3.0.3:
+  version "3.0.3"
+  resolved "https://registry.yarnpkg.com/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz#6c2e171db2a257cd96802fd43b01b20d5f5870f6"
+  integrity sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==
+
 lodash.isequal@^4.5.0:
   version "4.5.0"
   resolved "https://registry.yarnpkg.com/lodash.isequal/-/lodash.isequal-4.5.0.tgz#415c4478f2bcc30120c22ce10ed3226f7d3e18e0"
   integrity sha512-pDo3lu8Jhfjqls6GkMgpahsF9kCyayhgykjyLMNFTKWrpVdAQtYyB4muAMWozBB4ig/dtWAmsMxLEI8wuz+DYQ==
 
+lodash.isinteger@^4.0.4:
+  version "4.0.4"
+  resolved "https://registry.yarnpkg.com/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz#619c0af3d03f8b04c31f5882840b77b11cd68343"
+  integrity sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA==
+
+lodash.isnumber@^3.0.3:
+  version "3.0.3"
+  resolved "https://registry.yarnpkg.com/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz#3ce76810c5928d03352301ac287317f11c0b1ffc"
+  integrity sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw==
+
+lodash.isplainobject@^4.0.6:
+  version "4.0.6"
+  resolved "https://registry.yarnpkg.com/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz#7c526a52d89b45c45cc690b88163be0497f550cb"
+  integrity sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA==
+
+lodash.isstring@^4.0.1:
+  version "4.0.1"
+  resolved "https://registry.yarnpkg.com/lodash.isstring/-/lodash.isstring-4.0.1.tgz#d527dfb5456eca7cc9bb95d5daeaf88ba54a5451"
+  integrity sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw==
+
 lodash.last@^3.0.0:
   version "3.0.0"
   resolved "https://registry.yarnpkg.com/lodash.last/-/lodash.last-3.0.0.tgz#242f663112dd4c6e63728c60a3c909d1bdadbd4c"
@@ -5909,6 +5945,11 @@ lodash.merge@^4.6.2:
   resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.2.tgz#558aa53b43b661e1925a0afdfa36a9a1085fe57a"
   integrity sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==
 
+lodash.once@^4.0.0:
+  version "4.1.1"
+  resolved "https://registry.yarnpkg.com/lodash.once/-/lodash.once-4.1.1.tgz#0dd3971213c7c56df880977d504c88fb471a97ac"
+  integrity sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==
+
 lodash.sortby@^4.7.0:
   version "4.7.0"
   resolved "https://registry.yarnpkg.com/lodash.sortby/-/lodash.sortby-4.7.0.tgz#edd14c824e2cc9c1e0b0a1b42bb5210516a42438"
@@ -6241,14 +6282,7 @@ mkdirp-classic@^0.5.2:
   resolved "https://registry.yarnpkg.com/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz#fa10c9115cc6d8865be221ba47ee9bed78601113"
   integrity sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==
 
-[email protected]:
-  version "0.5.4"
-  resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.4.tgz#fd01504a6797ec5c9be81ff43d204961ed64a512"
-  integrity sha512-iG9AK/dJLtJ0XNgTuDbSyNS3zECqDlAhnQW4CsNxBG3LQJBbHmRX1egw39DmtOdCAqY+dKXV+sgPgilNWUKMVw==
-  dependencies:
-    minimist "^1.2.5"
-
-mkdirp@^0.5.1, mkdirp@~0.5.1:
+mkdirp@^0.5.1:
   version "0.5.6"
   resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.6.tgz#7def03d2432dcae4ba1d611445c48396062255f6"
   integrity sha512-FP+p8RB8OWpF3YZBCrP5gtADmtXApB5AMLn+vdyA+PyxCjrCs00mjyUozssO33cwDeT3wNGdLxJ5M//YqtHAJw==
@@ -9438,10 +9472,10 @@ yaml@^1.10.0:
   resolved "https://registry.yarnpkg.com/yaml/-/yaml-1.10.2.tgz#2301c5ffbf12b467de8da2333a459e29e7920e4b"
   integrity sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==
 
-yaml@^2.2.2:
-  version "2.3.1"
-  resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.3.1.tgz#02fe0975d23cd441242aa7204e09fc28ac2ac33b"
-  integrity sha512-2eHWfjaoXgTBC2jNM1LRef62VQa0umtvRiDSk6HSzW7RvS5YtkabJrwYLLEKWBc8a5U2PTSCs+dJjUTJdlHsWQ==
+yaml@^2.3.2:
+  version "2.3.2"
+  resolved "https://registry.yarnpkg.com/yaml/-/yaml-2.3.2.tgz#f522db4313c671a0ca963a75670f1c12ea909144"
+  integrity sha512-N/lyzTPaJasoDmfV7YTrYCI0G/3ivm/9wdG0aHuheKowWQwGTsK0Eoiw6utmzAnI6pkJa0DUVygvp3spqqEKXg==
 
 [email protected]:
   version "20.2.4"