From 2712c981928837a66ad37d02b48b9d474fe1f124 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 27 Oct 2023 16:55:43 +0100
Subject: [PATCH] build(deps-dev): Bump idtoken-verifier from 2.2.3 to 2.2.4
 (#1188)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [idtoken-verifier](https://github.com/auth0/idtoken-verifier) from
2.2.3 to 2.2.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/auth0/idtoken-verifier/releases">idtoken-verifier's
releases</a>.</em></p>
<blockquote>
<h2>v2.2.4</h2>
<p><strong>Security</strong></p>
<ul>
<li>Bump crypto-js from 4.1.1 to 4.2.0 <a
href="https://redirect.github.com/auth0/idtoken-verifier/pull/176">#176</a>
(<a href="https://github.com/apps/dependabot">dependabot[bot]</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/auth0/idtoken-verifier/blob/master/CHANGELOG.md">idtoken-verifier's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/auth0/idtoken-verifier/tree/v2.2.4">v2.2.4</a>
(2023-10-26)</h2>
<p><a
href="https://github.com/auth0/idtoken-verifier/compare/v2.2.3...v2.2.4">Full
Changelog</a></p>
<p><strong>Security</strong></p>
<ul>
<li>Bump crypto-js from 4.1.1 to 4.2.0 <a
href="https://redirect.github.com/auth0/idtoken-verifier/pull/176">#176</a>
(<a href="https://github.com/apps/dependabot">dependabot[bot]</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/auth0/idtoken-verifier/commit/a9f95c3931f5434d6a0b33c02c326bf104ec9ca7"><code>a9f95c3</code></a>
Use input tag not built version as --tag option (<a
href="https://redirect.github.com/auth0/idtoken-verifier/issues/178">#178</a>)</li>
<li><a
href="https://github.com/auth0/idtoken-verifier/commit/0886fbc01a3ab87f9ca0f49334e1642a161266a3"><code>0886fbc</code></a>
Release v2.2.4 (<a
href="https://redirect.github.com/auth0/idtoken-verifier/issues/175">#175</a>)</li>
<li><a
href="https://github.com/auth0/idtoken-verifier/commit/45314bb45aa275b7f664ab52c26980a9c525e54e"><code>45314bb</code></a>
Update publish workflow (<a
href="https://redirect.github.com/auth0/idtoken-verifier/issues/177">#177</a>)</li>
<li><a
href="https://github.com/auth0/idtoken-verifier/commit/8f5e6e3b10d3cdc87123813a4aede682be7100f3"><code>8f5e6e3</code></a>
Bump crypto-js from 4.1.1 to 4.2.0 (<a
href="https://redirect.github.com/auth0/idtoken-verifier/issues/176">#176</a>)</li>
<li><a
href="https://github.com/auth0/idtoken-verifier/commit/705daf2462b1c3448924fefcd8cfc4bd27289126"><code>705daf2</code></a>
Bump actions/setup-node from 3 to 4 (<a
href="https://redirect.github.com/auth0/idtoken-verifier/issues/174">#174</a>)</li>
<li><a
href="https://github.com/auth0/idtoken-verifier/commit/36381fcd2d9c29f3a5c2fbc2af8d159db47ceebf"><code>36381fc</code></a>
Bump <code>@​babel/traverse</code> from 7.22.20 to 7.23.2 (<a
href="https://redirect.github.com/auth0/idtoken-verifier/issues/173">#173</a>)</li>
<li><a
href="https://github.com/auth0/idtoken-verifier/commit/36213828fafca7f5e2aa87d3c15f62c2d15aee25"><code>3621382</code></a>
Bump postcss from 8.4.30 to 8.4.31 (<a
href="https://redirect.github.com/auth0/idtoken-verifier/issues/172">#172</a>)</li>
<li><a
href="https://github.com/auth0/idtoken-verifier/commit/5b6cfe591bfb06b5df3cd8b4b9d42f43ad86d9ca"><code>5b6cfe5</code></a>
test: Migrate CI to GitHub Actions [SDK-4442] (<a
href="https://redirect.github.com/auth0/idtoken-verifier/issues/171">#171</a>)</li>
<li><a
href="https://github.com/auth0/idtoken-verifier/commit/e614698441d7b23daf885f4f8fb0875163ee41c6"><code>e614698</code></a>
Don't export checkStatus</li>
<li><a
href="https://github.com/auth0/idtoken-verifier/commit/cafce87a2b2b4fc687211caf5fd19b1118edc0ca"><code>cafce87</code></a>
Update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/auth0/idtoken-verifier/compare/v2.2.3...v2.2.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=idtoken-verifier&package-manager=npm_and_yarn&previous-version=2.2.3&new-version=2.2.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

[SDK-4442]:
https://auth0team.atlassian.net/browse/SDK-4442?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 package-lock.json | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index e5809aa59..1e4dd670e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6564,12 +6564,13 @@
       }
     },
     "node_modules/idtoken-verifier": {
-      "version": "2.2.3",
+      "version": "2.2.4",
+      "resolved": "https://registry.npmjs.org/idtoken-verifier/-/idtoken-verifier-2.2.4.tgz",
+      "integrity": "sha512-5t7O8cNHpJBB8FnwLD0qFZqy/+qGICObQKUl0njD6vXKHhpZPLEe8LU7qv/GBWB3Qv5e/wAIFHYVi4SoQwdOxQ==",
       "dev": true,
-      "license": "MIT",
       "dependencies": {
         "base64-js": "^1.5.1",
-        "crypto-js": "^4.1.1",
+        "crypto-js": "^4.2.0",
         "es6-promise": "^4.2.8",
         "jsbn": "^1.1.0",
         "unfetch": "^4.2.0",