Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 4 updates - #15

Merged
dbud merged 1 commit into
mainfrom
dependabot/deno/minor-and-patch-c23e85e391
Sep 15, 2026
Merged

build(deps): bump the minor-and-patch group across 1 directory with 4 updates#15
dbud merged 1 commit into
mainfrom
dependabot/deno/minor-and-patch-c23e85e391

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 4 updates in the / directory: @std/encoding, jose, lucide-preact and zod.

Updates @std/encoding from 1.0.0 to 1.0.11

Updates jose from 6.0.0 to 6.2.12

Release notes

Sourced from jose's releases.

v6.2.12

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)
  • jwt: prevent replacing protected headers (ae07d09)
  • jwt: reject invalid duration inputs (282f9aa)
  • jwt: validate builder claim values (ea03f83)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.12 (2026-09-05)

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

6.2.11 (2026-09-04)

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)

... (truncated)

Commits
  • 505a55b chore(release): 6.2.12
  • 7bc9a33 perf: encode single-signature JWS input once
  • 78637bd perf: normalize General JWE shared headers once
  • bf5138b perf: deduplicate pending jwks key imports
  • b23a6f3 perf: use native encoding for larger ASCII strings
  • fd3ae3f perf: normalize jwks selection metadata once
  • 6925d43 perf: avoid copying AES-GCM output
  • be62530 docs: clarify and shorten public API guidance
  • 1b41312 build: preserve README when generation fails
  • 0b51829 build: check tree-shaking for every public binding
  • Additional commits viewable in compare view

Updates lucide-preact from 1.44.0 to 1.45.0

Release notes

Sourced from lucide-preact's releases.

Version 1.45.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.44.0...1.45.0

Commits
  • b998e28 feat(icons): added globe-code icon (#3722)
  • 5da3ee3 ci(ci.yml): Add dispatch post release (#4847)
  • 6bbe5dd chore(deps-dev): bump vitest in /integrations/lucide-react/vite (#4844)
  • 4a26fa5 chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 (#4845)
  • 5d592a9 fix(packages/vue): fix generated icon declaration types for @​lucide/vue (#4841)
  • bdf795a feat(lab): add hand-gear icon (#2327)
  • e4be16a feat(docs): added "How to use Lucide icons" section to resources (#4829)
  • ea1242d fix(icons): also fix album icon in HomeHeroIconsCard.data.ts (#4839)
  • 7cf805a fix(icons): remove duplicate use-cases prop from cookie.json (#4838)
  • c2c2858 fix(icons): changed cookie icon (#4815)
  • Additional commits viewable in compare view

Updates zod from 4.6.1 to 4.6.2

Release notes

Sourced from zod's releases.

v4.6.2

A patch on top of 4.6.1.

Commits

@dependabot dependabot Bot added deno Pull requests that update deno code dependencies Pull requests that update a dependency file labels Sep 15, 2026
@dbud

dbud commented Sep 15, 2026

Copy link
Copy Markdown
Owner

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/deno/minor-and-patch-c23e85e391 branch from e1e402b to aae08a9 Compare September 15, 2026 11:47
@dbud

dbud commented Sep 15, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
build(deps): bump the minor-and-patch group across 1 directory with 4…
1b9852e 
… updates

Bumps the minor-and-patch group with 4 updates in the / directory: @std/encoding, [jose](https://github.com/panva/jose), [lucide-preact](https://github.com/lucide-icons/lucide) and [zod](https://github.com/colinhacks/zod).


Updates `@std/encoding` from 1.0.0 to 1.0.11

Updates `jose` from 6.0.0 to 6.2.12
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.0.0...v6.2.12)

Updates `lucide-preact` from 1.44.0 to 1.45.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](lucide-icons/lucide@1.44.0...1.45.0)

Updates `zod` from 4.6.1 to 4.6.2
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.6.1...v4.6.2)

---
updated-dependencies:
- dependency-name: "@std/encoding"
  dependency-version: 1.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: jose
  dependency-version: 6.2.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: lucide-preact
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: zod
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/deno/minor-and-patch-c23e85e391 branch from aae08a9 to 1b9852e Compare September 15, 2026 12:05
@dbud
dbud merged commit f4ec33d into main Sep 15, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/deno/minor-and-patch-c23e85e391 branch September 15, 2026 12:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

deno Pull requests that update deno code dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dbud