get-jwks - npm Package Compare versions

Comparing version 8.0.4 to 8.0.5

.github/workflows/check-linked-issues.yml

 name: Check Linked Issues
-
-on:
+'on':
   pull_request_target:
-    types: [opened, edited, reopened, synchronize]
-
+    types:
+      - opened
+      - edited
+      - reopened
+      - synchronize
 jobs:
@@ -12,5 +14,8 @@ check_pull_requests:
     steps:
-      - uses: nearform/github-action-check-linked-issues@v1
+      - uses: nearform-actions/github-action-check-linked-issues@v1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
-          exclude-branches: 'release/**, dependabot/**'
+          exclude-branches: release/**, dependabot/**
+    permissions:
+      issues: read
+      pull-requests: write

.github/workflows/notify-release.yml

@@ -13,5 +13,9 @@ name: notify-release
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     steps:
-      - uses: nearform/github-action-notify-release@v1
+      - uses: nearform-actions/github-action-notify-release@v1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
+
+

.github/workflows/release.yml

@@ -20,5 +20,8 @@ name: release
   release:
+    permissions:
+      pull-requests: write
+      contents: write
     runs-on: ubuntu-latest
     steps:
-      - uses: nearform/optic-release-automation-action@v4
+      - uses: nearform-actions/optic-release-automation-action@v4
         with:
@@ -28,2 +31,3 @@ github-token: ${{ secrets.GITHUB_TOKEN }}
           optic-token: ${{ secrets[format('OPTIC_TOKEN_{0}', github.actor)] || secrets.OPTIC_TOKEN }}
-          semver: ${{ github.event.inputs.semver }}
+          semver: ${{ github.event.inputs.semver }}
+

package.json

 {
   "name": "get-jwks",
-  "version": "8.0.4",
+  "version": "8.0.5",
   "description": "Fetch utils for JWKS keys",
@@ -33,3 +33,3 @@ "main": "src/get-jwks.js",
     "jwk-to-pem": "^2.0.4",
-    "lru-cache": "^8.0.0",
+    "lru-cache": "^9.0.0",
     "node-fetch": "^2.6.1"
@@ -36,0 +36,0 @@ },

src/get-jwks.d.ts

@@ -1,2 +0,2 @@
-import LRU from 'lru-cache'
+import type { LRUCache } from 'lru-cache'
 import type { Agent } from 'https'
@@ -26,6 +26,6 @@
   getJwksUri: (normalizedDomain: string) => Promise<string>
-  cache: LRU<string, JWK>
-  staleCache: LRU<string, JWK>
+  cache: LRUCache<string, JWK>
+  staleCache: LRUCache<string, JWK>
 }
 
 export default function buildGetJwks(options?: GetJwksOptions): GetJwks

src/get-jwks.js

 'use strict'
 
 const fetch = require('node-fetch')
-const LRU = require('lru-cache')
+const { LRUCache } = require('lru-cache')
 const jwkToPem = require('jwk-to-pem')
@@ -26,4 +26,4 @@
   const agent = options.agent || null
-  const staleCache = new LRU({ max: max * 2, ttl })
-  const cache = new LRU({
+  const staleCache = new LRUCache({ max: max * 2, ttl })
+  const cache = new LRUCache({
     max,
@@ -30,0 +30,0 @@ ttl,

test/types/get-jwks.test-d.ts

 import { expectAssignable } from 'tsd'
-import LRU from 'lru-cache'
+import type { LRUCache } from 'lru-cache'
 import buildGetJwks, { GetPublicKeyOptions, JWK, JWKSignature } from '../../src/get-jwks'
@@ -10,3 +10,3 @@
 expectAssignable<(options?: GetPublicKeyOptions) => Promise<string>>(getPublicKey)
-expectAssignable<LRU<string, JWK>>(cache)
-expectAssignable<LRU<string, JWK>>(staleCache)
+expectAssignable<LRUCache<string, JWK>>(cache)
+expectAssignable<LRUCache<string, JWK>>(staleCache)

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

50970

0.57%

Lines of code

969

0.1%

Dependency changes

• + Added

  lru-cache@9.1.2
  (transitive)

• - Removed

  lru-cache@8.0.5
  (transitive)

• Updated

  lru-cache@^9.0.0