Allan Leary
e36c7a8c5d
Migrate JWT Verify and JWT Decode from jsonwebtoken to jose
...
jsonwebtoken is unmaintained and does not work correctly in the
browser at 9.x. Following the JWT Sign migration (#2473 ), switch the
remaining two JWT operations to jose and remove the jsonwebtoken
dependency. Unsigned (alg:none) tokens are now rejected by Verify,
and PKCS#1 RSA public keys are converted to SPKI for WebCrypto.
2026-07-07 09:43:50 +01:00
Thomas M
9ab5108664
Add Ascon (NIST SP 800-232) operations: Hash, MAC, Encrypt, Decrypt ( #2155 )
2026-07-04 11:32:23 +01:00
dependabot[bot]
4707ddb861
chore (deps): bump the patch-updates group across 1 directory with 6 updates ( #2638 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 17:22:33 +01:00
dependabot[bot]
eaf185242a
chore (deps): bump webpack from 5.107.2 to 5.108.3 in the minor-updates group ( #2635 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-03 16:26:10 +01:00
dependabot[bot]
e112da3c12
chore (deps): bump the patch-updates group with 8 updates ( #2602 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 11:08:47 +01:00
dependabot[bot]
6717ae1bc3
chore (deps): bump the minor-updates group with 2 updates ( #2603 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-26 09:24:51 +01:00
dependabot[bot]
7d05017648
chore (deps): bump the patch-updates group with 5 updates ( #2580 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
2026-06-19 09:28:47 +01:00
dependabot[bot]
9e7803e802
chore (deps): bump dompurify from 3.4.8 to 3.4.9 ( #2573 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-17 18:14:12 +01:00
GCHQDeveloper581
d358d82cbc
Bump v11.2.0 ( #2570 )
2026-06-17 12:12:16 +01:00
GCHQDeveloper581
92ea854ea7
Bump v11.1.0 ( #2558 )
2026-06-13 09:35:49 +01:00
dependabot[bot]
dbcfb06d3e
chore (deps): bump the patch-updates group with 4 updates ( #2552 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 12:21:54 +01:00
dependabot[bot]
78d558c858
chore (deps): bump protobufjs from 8.5.0 to 8.6.2 in the minor-updates group ( #2553 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 11:46:48 +01:00
GCHQ Developer 85297
9d43334429
Security Policy Update ( #2547 )
2026-06-11 11:36:01 +01:00
GCHQDeveloper581
61deeb8165
Npm and yarn/major version updates ( #2527 )
...
Updated versions:
* cspell 10.0.1
* grunt-eslint 26.0.0
* grunt-webpack 8.0.0
* bignumber.js 11.1.2
* cbor 10.0.12
* diff 9.0.0
* protobufjs 8.5.0
* tesseract.js 7.0.0
* ua-parser-js 2.0.10
2026-06-08 14:21:26 +01:00
dependabot[bot]
3034d63f90
chore (deps): bump the minor-updates group with 5 updates ( #2500 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (removed jq-web update, and added it to dependabot.yml block list)
2026-06-05 10:26:43 +01:00
dependabot[bot]
8a5c60ac74
chore (deps): bump the patch-updates group with 2 updates ( #2499 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 09:47:23 +01:00
dependabot[bot]
bdcd5fa8b1
chore (deps): bump the patch-updates group across 1 directory with 6 updates ( #2463 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-29 11:31:26 +01:00
dependabot[bot]
61c00ae6da
chore (deps): bump terser from 5.46.2 to 5.48.0 ( #2385 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-28 16:02:34 +01:00
Blank0120
6b780bc507
update sitemap ( #2443 )
2026-05-28 12:59:33 +01:00
GCHQDeveloper581
98bb5f117d
Bump webpack-dev-server to 5.2.4 ( #2417 )
2026-05-28 09:38:25 +01:00
dependabot[bot]
b47c1c0547
chore (deps): bump the patch-updates group across 1 directory with 4 updates ( #2438 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-27 16:33:27 +01:00
Blank0120
6a3a370bb1
update bson ( #2425 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (update of dependabot excluded packages)
2026-05-23 12:42:40 +01:00
dependabot[bot]
fba4a0a0af
chore (deps): bump webpack from 5.106.2 to 5.107.1 ( #2428 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-23 11:47:11 +01:00
dependabot[bot]
ad51a17482
chore (deps): bump protobufjs from 7.5.8 to 7.6.0 ( #2429 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-23 11:40:20 +01:00
dependabot[bot]
9b6619c45a
chore (deps): bump sql-formatter from 15.7.4 to 15.8.0 ( #2430 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-23 11:25:31 +01:00
GCHQDeveloper581
cf6912f640
Update chromedriver, and install corresponding chrome in workflows (fixes build) ( #2387 )
2026-05-18 10:38:11 +01:00
dependabot[bot]
9803553b61
chore (deps): bump @codemirror/view from 6.41.1 to 6.43.0 ( #2384 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-16 11:08:49 +01:00
dependabot[bot]
8f9a01ef33
chore (deps): bump globals from 17.5.0 to 17.6.0 ( #2386 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-16 10:39:19 +01:00
dependabot[bot]
ebeb4f7d6a
chore (deps): bump the patch-updates group across 1 directory with 3 updates ( #2388 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-16 10:34:24 +01:00
GCHQ Developer 85297
9727e2607c
update bcryptjs ( #2368 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (fixed browser tests)
2026-05-09 11:57:41 +01:00
dependabot[bot]
6822bd5584
chore (deps): bump the patch-updates group across 1 directory with 5 updates ( #2354 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-08 11:50:58 +01:00
dependabot[bot]
ec4f1f5605
chore (deps): bump uuid from 13.0.0 to 14.0.0 ( #2332 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-01 12:28:26 +01:00
dependabot[bot]
5f97ef18e1
chore (deps): bump webpack-bundle-analyzer from 5.2.0 to 5.3.0 ( #2353 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-01 12:04:33 +01:00
Zach Bowden
49002e15cf
Fix all zeros after 16384 bytes with Blake3 ( #2351 )
...
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (added test)
2026-04-29 21:52:00 +01:00
GCHQDeveloper581
8de0ded56c
Bump v11.0.0 ( #2349 )
2026-04-28 15:27:13 +01:00
GCHQDeveloper581
339574ec54
Revert sitemap to v8.0.X to fix build/deploy on master ( #2348 )
...
Revert sitemap to 8.0.3 as v9.x no longer provides a default export which code currently relies on
2026-04-28 13:53:44 +01:00
GCHQDeveloper581
1fdd2ecf20
Node version update from 22 to 24 ( #2347 )
...
Changes mostly authored-by: Leon Zandman <leon@wirwar.com>
Cherry pick and minor additions by GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com>
2026-04-28 13:18:02 +01:00
GCHQDeveloper581
864afa85aa
Make compatible with node >=22 ( #2273 )
...
Breaking change: uplifts the minimum version of node required to v20
2026-04-28 07:18:44 +01:00
GCHQDeveloper581
9088561acf
Bump v10.24.0 ( #2338 )
2026-04-27 13:17:39 +01:00
dependabot[bot]
e0774ed940
chore (deps): bump the patch-updates group with 6 updates ( #2330 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 14:13:57 +01:00
dependabot[bot]
85513daea4
chore (deps): bump @codemirror/search from 6.6.0 to 6.7.0 ( #2331 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 12:46:38 +01:00
dependabot[bot]
4675a7dabe
chore (deps): bump the patch-updates group with 6 updates ( #2323 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: GCHQDeveloper581 <63102987+GCHQDeveloper581@users.noreply.github.com> (removed jimp from updated dependencies)
2026-04-17 12:37:50 +01:00
dependabot[bot]
a249132512
chore (deps): bump autoprefixer from 10.4.27 to 10.5.0 ( #2324 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-17 09:35:58 +01:00
dependabot[bot]
093346859d
chore (deps): bump dompurify from 3.3.3 to 3.4.0 ( #2321 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-16 13:33:42 +01:00
dependabot[bot]
7b9ff751d2
chore (deps): bump webpack from 5.105.4 to 5.106.0 ( #2315 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 07:26:01 +01:00
GCHQDeveloper581
42adf5b103
Bump v10.23.0 ( #2310 )
2026-04-07 06:11:44 +01:00
dependabot[bot]
33314ac658
chore (deps): bump lodash from 4.17.23 to 4.18.1 ( #2304 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-04 11:21:45 +01:00
dependabot[bot]
e1352065d8
chore (deps): bump @codemirror/view from 6.40.0 to 6.41.0 ( #2305 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-04 11:14:25 +01:00
dependabot[bot]
eea8bcd250
chore (deps): bump the patch-updates group with 2 updates ( #2303 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-04 11:09:50 +01:00
dependabot[bot]
7d9fd4b26f
chore (deps): bump @xmldom/xmldom from 0.8.11 to 0.8.12 ( #2302 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-01 11:21:55 +01:00
