audit-labs/gh-attest

GitHub Audit Evidence Extractor

clone: git clone https://gitbay.org/audit-labs/gh-attest.git

409c07bfff16e2797b8e5f239a1bb8336f924959

signed_unknown_key

author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> · 2026-08-10T01:14:45Z
committer: <noreply@github.com>

Bump jose from 6.2.5 to 6.2.8

Bumps [jose](https://github.com/panva/jose) from 6.2.5 to 6.2.8.
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/panva/jose/compare/v6.2.5...v6.2.8)

---
updated-dependencies:
- dependency-name: jose
  dependency-version: 6.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

 package-lock.json | 8 ++++----
 package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 78a12c7..68ab03c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8,7 +8,7 @@
       "name": "gh-attest",
       "version": "1.0.2",
       "dependencies": {
-        "jose": "^6.2.5",
+        "jose": "^6.2.8",
         "pdf-lib": "^1.17.1"
       },
       "devDependencies": {
@@ -1697,9 +1697,9 @@
       }
     },
     "node_modules/jose": {
-      "version": "6.2.5",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.5.tgz",
-      "integrity": "sha512-2E5L2yRp03FnwreJLJX8/r7mHiZICCf8kG7fAsTWkSQTDAcc46NIZoQLKy+EJ8sPoJlxyS4OQR5H70LjIZZlIQ==",
+      "version": "6.2.8",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.8.tgz",
+      "integrity": "sha512-Bsdjwm3Qsd/P0jR+BHDe3LytDfY7WBq2HmCCLIwuVRHMuEC9ae7/R474GIUdF1NgCyZjzVo/A9DOiOBtXq8ZoQ==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
diff --git a/package.json b/package.json
index 1352ecb..b2a5e18 100644
--- a/package.json
+++ b/package.json
@@ -18,7 +18,7 @@
     "wrangler": "^4.116.0"
   },
   "dependencies": {
-    "jose": "^6.2.5",
+    "jose": "^6.2.8",
     "pdf-lib": "^1.17.1"
   }
 }