[Snyk] Fix for 1 vulnerabilities

[rubychi]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/server/package.json
  • packages/server/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:hoek:20180212	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jsonwebtoken

The new version differs by 10 commits.

• f313850 8.0.0
• f38bd8e updated changelog
• 2ec3263 Merge pull request #393 from ziluvatar/migration-notes-to-readme
• 12cd8f7 docs: readme, migration notes
• cfc04a9 Merge pull request #349 from ziluvatar/fix-max-age-number-and-seconds
• 3305cf0 verify: remove process.nextTick (#302)
• 0be5409 Reduce size of NPM package (#347)
• 2e7e68d Remove joi to shrink module size (#348)
• 66a4f8b maxAge: Add validation to timespan result
• b61cc34 maxAge: Fix logic with number + use seconds instead of ms

See the full diff

Package name: passport-jwt

The new version differs by 40 commits.

• 8f543a9 Update version to 4.0.0
• f381cea Updating migration guide for 4.0.0
• 5497660 Update jsonwebtoken dependency to latest.
• 685fffe Move supporters up a little higher in README
• d2d950e Remove codesponsor.io link
• 6d4b3fa Rev patch version for doc update
• f39b87f Merge branch 'add-auth0-sponsor'
• 3401015 Simplify "supported by" section
• 5fc1cd8 Add sponsor link and put all migration docs in one file
• cfb13c0 Add Codesponsor.io link
• 28ffbb0 Update package version
• cfa4db3 Merge branch 'pr108-secret-key-provider'
• 3a07c77 Update docs for 2.x.x to 3.0.0 migration
• d5af311 Get rid of JWT as the default auth scheme.
• 80e049c Travis docs don't specifically mention v8
• ef0cecd Add test to cover missed branch in strategy.
• 1bb3d5b should be clear that jwt passed to secretOrKeyProvider is not decoded
• a236e40 Cleanup of PR #108.
• b3846ef Merge branch 'secret-key-provider' of https://github.com/gpoole/passport-jwt into pr108-secret-key-provider
• 98a7a09 Merge branch 'pr-113-jwtOptions'
• 4a7416c Merge branch 'master' of https://github.com/itayadler/passport-jwt into pr-113-jwtOptions
• c1dccf8 Merge branch 'pr-118-case-insensitive-auth-scheme'
• d127fd8 Calculate auth_scheme.toLowerCase() once
• b1d7ccc Test for case insensitive comparison of token_type

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution