From 9a4f303d76ee3aba96df1fa7777aeede8012d21e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 01:33:03 +0000
Subject: [PATCH] chore(deps): bump jose from 6.2.4 to 6.2.5

Bumps [jose](https://github.com/panva/jose) from 6.2.4 to 6.2.5.
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/panva/jose/compare/v6.2.4...v6.2.5)

---
updated-dependencies:
- dependency-name: jose
  dependency-version: 6.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json | 2 +-
 yarn.lock    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package.json b/package.json
index 852aa9c3..b99a471c 100644
--- a/package.json
+++ b/package.json
@@ -1323,7 +1323,7 @@
     "@vscode/l10n": "^0.0.18",
     "adm-zip": "^0.6.0",
     "bytes": "^3.1.2",
-    "jose": "^6.2.4",
+    "jose": "^6.2.5",
     "json-schema-library": "^11.6.2",
     "ws": "^8.21.1",
     "yocto-queue": "^1.2.2"
diff --git a/yarn.lock b/yarn.lock
index 6dd14808..ed20ecd6 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1839,10 +1839,10 @@ jackspeak@^3.1.2:
   optionalDependencies:
     "@pkgjs/parseargs" "^0.11.0"
 
-jose@^6.2.4:
-  version "6.2.4"
-  resolved "https://registry.yarnpkg.com/jose/-/jose-6.2.4.tgz#69de7346761cd04942c659e524d988feb16a4a6e"
-  integrity sha512-N8acGzVsQy6M/fjFcxtysNc4Q379TcM5dM/qKkNtsHFji88yANnXTr7BLeP75iPnFwBfQzM/jg2BZ9+HZrHCZA==
+jose@^6.2.5:
+  version "6.2.5"
+  resolved "https://registry.yarnpkg.com/jose/-/jose-6.2.5.tgz#2db56ed2aa89786cd825843416136de10d6ad424"
+  integrity sha512-2E5L2yRp03FnwreJLJX8/r7mHiZICCf8kG7fAsTWkSQTDAcc46NIZoQLKy+EJ8sPoJlxyS4OQR5H70LjIZZlIQ==
 
 js-yaml@^4.1.0:
   version "4.3.0"