Allan Leary
e36c7a8c5d
Migrate JWT Verify and JWT Decode from jsonwebtoken to jose
...
jsonwebtoken is unmaintained and does not work correctly in the
browser at 9.x. Following the JWT Sign migration (#2473 ), switch the
remaining two JWT operations to jose and remove the jsonwebtoken
dependency. Unsigned (alg:none) tokens are now rejected by Verify,
and PKCS#1 RSA public keys are converted to SPKI for WebCrypto.
2026-07-07 09:43:50 +01:00
Thomas M
9ab5108664
Add Ascon (NIST SP 800-232) operations: Hash, MAC, Encrypt, Decrypt ( #2155 )
2026-07-04 11:32:23 +01:00
dependabot[bot]
4707ddb861
chore (deps): bump the patch-updates group across 1 directory with 6 updates ( #2638 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 17:22:33 +01:00
dependabot[bot]
eaf185242a
chore (deps): bump webpack from 5.107.2 to 5.108.3 in the minor-updates group ( #2635 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 16:26:10 +01:00
GCHQDeveloper581
89feb7f9e9
Update 4 vulnerable dependencies ( #2616 )
2026-07-01 10:35:10 +01:00
dependabot[bot]
e112da3c12
chore (deps): bump the patch-updates group with 8 updates ( #2602 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 11:08:47 +01:00
dependabot[bot]
6717ae1bc3
chore (deps): bump the minor-updates group with 2 updates ( #2603 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 09:24:51 +01:00
dependabot[bot]
43f19c0494
chore (deps): bump form-data from 4.0.5 to 4.0.6 ( #2572 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-19 09:46:59 +01:00
dependabot[bot]
7d05017648
chore (deps): bump the patch-updates group with 5 updates ( #2580 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
2026-06-19 09:28:47 +01:00
dependabot[bot]
65f47c0343
chore (deps): bump launch-editor from 2.13.1 to 2.14.1 ( #2574 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-17 18:21:56 +01:00
dependabot[bot]
9e7803e802
chore (deps): bump dompurify from 3.4.8 to 3.4.9 ( #2573 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-17 18:14:12 +01:00
GCHQDeveloper581
d358d82cbc
Bump v11.2.0 ( #2570 )
2026-06-17 12:12:16 +01:00
GCHQDeveloper581
92ea854ea7
Bump v11.1.0 ( #2558 )
2026-06-13 09:35:49 +01:00
dependabot[bot]
dbcfb06d3e
chore (deps): bump the patch-updates group with 4 updates ( #2552 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 12:21:54 +01:00
dependabot[bot]
78d558c858
chore (deps): bump protobufjs from 8.5.0 to 8.6.2 in the minor-updates group ( #2553 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 11:46:48 +01:00
dependabot[bot]
f30668aeff
chore (deps): bump shell-quote from 1.8.3 to 1.8.4 ( #2543 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 11:41:49 +01:00
GCHQDeveloper581
61deeb8165
Npm and yarn/major version updates ( #2527 )
...
Updated versions:
* cspell 10.0.1
* grunt-eslint 26.0.0
* grunt-webpack 8.0.0
* bignumber.js 11.1.2
* cbor 10.0.12
* diff 9.0.0
* protobufjs 8.5.0
* tesseract.js 7.0.0
* ua-parser-js 2.0.10
2026-06-08 14:21:26 +01:00
dependabot[bot]
3034d63f90
chore (deps): bump the minor-updates group with 5 updates ( #2500 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (removed jq-web update, and added it to dependabot.yml block list)
2026-06-05 10:26:43 +01:00
dependabot[bot]
8a5c60ac74
chore (deps): bump the patch-updates group with 2 updates ( #2499 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 09:47:23 +01:00
dependabot[bot]
53d6f0c746
chore (deps): bump qs and express ( #2478 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-30 12:44:28 +01:00
dependabot[bot]
a50e868cb9
chore (deps): bump tmp from 0.2.5 to 0.2.7 ( #2479 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-30 12:38:34 +01:00
dependabot[bot]
bdcd5fa8b1
chore (deps): bump the patch-updates group across 1 directory with 6 updates ( #2463 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-29 11:31:26 +01:00
dependabot[bot]
61c00ae6da
chore (deps): bump terser from 5.46.2 to 5.48.0 ( #2385 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-28 16:02:34 +01:00
Blank0120
6b780bc507
update sitemap ( #2443 )
2026-05-28 12:59:33 +01:00
GCHQDeveloper581
98bb5f117d
Bump webpack-dev-server to 5.2.4 ( #2417 )
2026-05-28 09:38:25 +01:00
dependabot[bot]
b47c1c0547
chore (deps): bump the patch-updates group across 1 directory with 4 updates ( #2438 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-27 16:33:27 +01:00
Blank0120
6a3a370bb1
update bson ( #2425 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (update of dependabot excluded packages)
2026-05-23 12:42:40 +01:00
dependabot[bot]
fba4a0a0af
chore (deps): bump webpack from 5.106.2 to 5.107.1 ( #2428 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-23 11:47:11 +01:00
dependabot[bot]
ad51a17482
chore (deps): bump protobufjs from 7.5.8 to 7.6.0 ( #2429 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-23 11:40:20 +01:00
dependabot[bot]
9b6619c45a
chore (deps): bump sql-formatter from 15.7.4 to 15.8.0 ( #2430 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-23 11:25:31 +01:00
GCHQDeveloper581
cf6912f640
Update chromedriver, and install corresponding chrome in workflows (fixes build) ( #2387 )
2026-05-18 10:38:11 +01:00
dependabot[bot]
9803553b61
chore (deps): bump @codemirror/view from 6.41.1 to 6.43.0 ( #2384 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-16 11:08:49 +01:00
dependabot[bot]
8f9a01ef33
chore (deps): bump globals from 17.5.0 to 17.6.0 ( #2386 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-16 10:39:19 +01:00
dependabot[bot]
ebeb4f7d6a
chore (deps): bump the patch-updates group across 1 directory with 3 updates ( #2388 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-16 10:34:24 +01:00
dependabot[bot]
d8aec9c43f
chore (deps): bump fast-uri from 3.1.0 to 3.1.2 ( #2372 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 09:52:59 +01:00
GCHQ Developer 85297
9727e2607c
update bcryptjs ( #2368 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (fixed browser tests)
2026-05-09 11:57:41 +01:00
dependabot[bot]
055ae50e8e
chore (deps): bump picomatch from 2.3.1 to 2.3.2 ( #2370 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 17:25:37 +01:00
dependabot[bot]
a581353434
chore (deps): bump ip-address from 10.1.0 to 10.2.0 ( #2371 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 17:14:00 +01:00
dependabot[bot]
67452c1e0f
chore (deps): bump axios from 1.15.0 to 1.16.0 ( #2369 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 17:08:02 +01:00
dependabot[bot]
6822bd5584
chore (deps): bump the patch-updates group across 1 directory with 5 updates ( #2354 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 11:50:58 +01:00
dependabot[bot]
ec4f1f5605
chore (deps): bump uuid from 13.0.0 to 14.0.0 ( #2332 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-01 12:28:26 +01:00
dependabot[bot]
5f97ef18e1
chore (deps): bump webpack-bundle-analyzer from 5.2.0 to 5.3.0 ( #2353 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-01 12:04:33 +01:00
Zach Bowden
49002e15cf
Fix all zeros after 16384 bytes with Blake3 ( #2351 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (added test)
2026-04-29 21:52:00 +01:00
GCHQDeveloper581
8de0ded56c
Bump v11.0.0 ( #2349 )
2026-04-28 15:27:13 +01:00
GCHQDeveloper581
339574ec54
Revert sitemap to v8.0.X to fix build/deploy on master ( #2348 )
...
Revert sitemap to 8.0.3 as v9.x no longer provides a default export which code currently relies on
2026-04-28 13:53:44 +01:00
GCHQDeveloper581
1fdd2ecf20
Node version update from 22 to 24 ( #2347 )
...
Changes mostly authored-by: Leon Zandman <leon@wirwar.com>
Cherry pick and minor additions by GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
2026-04-28 13:18:02 +01:00
GCHQDeveloper581
9088561acf
Bump v10.24.0 ( #2338 )
2026-04-27 13:17:39 +01:00
dependabot[bot]
e0774ed940
chore (deps): bump the patch-updates group with 6 updates ( #2330 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 14:13:57 +01:00
dependabot[bot]
85513daea4
chore (deps): bump @codemirror/search from 6.6.0 to 6.7.0 ( #2331 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 12:46:38 +01:00
dependabot[bot]
32b748afd3
chore (deps): bump lodash, grunt-legacy-log and grunt-legacy-util ( #2327 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-17 13:03:50 +01:00
