Skip to content

Bump jsonwebtoken from 9.0.2 to 9.0.3 - #2685

Merged
jainakanksha-msft merged 2 commits into
mainfrom
dependabot/npm_and_yarn/jsonwebtoken-9.0.3
Aug 3, 2026
Merged

Bump jsonwebtoken from 9.0.2 to 9.0.3#2685
jainakanksha-msft merged 2 commits into
mainfrom
dependabot/npm_and_yarn/jsonwebtoken-9.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps jsonwebtoken from 9.0.2 to 9.0.3.

Changelog

Sourced from jsonwebtoken's changelog.

9.0.3 - 2025-12-04

  • updates jws version to 4.0.1.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) from 9.0.2 to 9.0.3.
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jsonwebtoken@v9.0.2...v9.0.3)

---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 31, 2026
Copilot AI review requested due to automatic review settings July 31, 2026 18:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 31, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@jainakanksha-msft

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@jainakanksha-msft

Copy link
Copy Markdown
Member

@copilot

  1. if there is any build issue fix that
  2. Run though test cases and validate the changes fully if it impacts the code
  3. Update the changelist

Copilot AI commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

@copilot

  1. if there is any build issue fix that
  2. Run though test cases and validate the changes fully if it impacts the code
    ...

Validated on commit 94cebe5.

  • Build/lint checks passed (npm ci triggered npm run build, and npm run lint passed).
  • Ran targeted OAuth/JWT impact tests and they passed: tests/blob/oauth.test.ts, tests/queue/oauth.test.ts, tests/table/auth/oauth.test.ts (41 passing, 1 pending).
  • No build issue was reproduced, so no additional code changes were needed; changelist remains the existing jsonwebtoken bump in package-lock.json.

Copilot AI review requested due to automatic review settings August 3, 2026 08:02
@dependabot
dependabot Bot removed the request for review from Copilot August 3, 2026 08:02
@jainakanksha-msft
jainakanksha-msft merged commit ec865e4 into main Aug 3, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/jsonwebtoken-9.0.3 branch August 3, 2026 08:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants