[Snyk] Fix for 5 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	718/1000 Why? Currently trending on Twitter, Recently disclosed, Has a fix available, CVSS 7.7	Improper Input Validation SNYK-JS-JSONWEBTOKEN-3180020	Yes	No Known Exploit
	776/1000 Why? Recently disclosed, Has a fix available, CVSS 9.8	Improper Authentication SNYK-JS-JSONWEBTOKEN-3180022	Yes	No Known Exploit
	611/1000 Why? Recently disclosed, Has a fix available, CVSS 6.5	Improper Restriction of Security Token Assignment SNYK-JS-JSONWEBTOKEN-3180024	Yes	No Known Exploit
	626/1000 Why? Recently disclosed, Has a fix available, CVSS 6.8	Use of a Broken or Risky Cryptographic Algorithm SNYK-JS-JSONWEBTOKEN-3180026	Yes	No Known Exploit
	751/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.6	SQL Injection SNYK-JS-KNEX-3175610	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: hapi-auth-jwt2

The new version differs by 135 commits.

• 308ea43 Update version of jsonwebtoken to avoid potential security issues https://github.com/V10.4.0 dwyl/hapi-auth-jwt2#375
• dc35688 Update version of jsonwebtoken to avoid potential security issues https://github.com/V10.4.0 dwyl/hapi-auth-jwt2#375
• 160d0d6 manually revert version so npm can handle update #375
• 2a026ae rename "master" to "main" https://www.bbc.com/news/technology-53050955
• 1baa513 add "run: npm run lint" to ci.yml to run eslint on GitHub Actions/CI to avoid lint issues in future ...
• 42087c8 re-enable "run: npm ci" in ci.yml (duh!)
• 94f9d5a replace "function" with "=>" (arrow functions) to keep prettier happy https://github.com/V10.4.0 dwyl/hapi-auth-jwt2#375#issuecomment-1371859575 https://youtu.be/dyihQtBes1I?t=70
• 9796ba6 update version of eslint & prettier https://github.com/V10.4.0 dwyl/hapi-auth-jwt2#375#issuecomment-1371849302
• 2d12ed3 Merge branch 'v10.3.0' of github.com:dwyl/hapi-auth-jwt2 into v10.3.0
• e105d37 github being very unhelpful right now ... 🤦
• 00d7061 remove .travis.yml https://github.com/🤦‍♂️ Builds have been temporarily disabled for private and public repositories ...  dwyl/learn-travis#67
• 50c5e31 Merge branch 'master' into v10.3.0
• a32773d remove deps badges from README.md as 404 #375
• a025767 add jsonwebtoken update to CHANGELOG.md #373 #374 #375
• d5e8a84 comment out "- run: npm ci" in .github/workflows/ci.yml as Missing script: "ci" ...
• 8889df1 create .github for CI + @ dependabot 🤖
• 4cd3cae explicitly add package-lock.json to Git for tracking/transparency
• 2357b17 attempt upgrade to @ hapi/hapi v21.1.0 in devDependencies
• 0cf2b34 Merge pull request #374 from AntoineAA/update-jwt
• 5a45986 update jsonwebtoken dependency
• 379bc10 Merge pull request #362 from brick9527/translate/zh-CN
• 62ae86b Merge pull request #371 from Arhell/upd
• db9ca6a update hapijs links
• b344229 Merge pull request #369 from Arhell/upd

See the full diff

Package name: knex

The new version differs by 250 commits.

• 3475d81 Prepare to release 2.4.0
• e97f922 Bump tsd from 0.24.1 to 0.25.0 (#5396)
• e145322 1227: add assertion for basic where clause values (#5417)
• 962bb0a Bump sinon from 14.0.2 to 15.0.1 (#5413)
• ab45314 Add JSDoc (TS Flavour) to mjs stub file (#5390)
• 72bd1f7 Fix: orWhereJson (#5361)
• 4fc939a Fixes unexpected max acquire-timeout (#5377)
• 5c4837c Fix lib/.gitignore path separator on Windows. (#5325)
• 7dbbd00 Bump actions/setup-node from 3.4.1 to 3.5.1 (#5356)
• d39051f fix: add missing type for 'expirationChecker' on PgConnectionConfig (#5334)
• f7ccde8 Make compiling SQL in error message optional (#5282)
• 82610ca Bump tsd from 0.23.0 to 0.24.1 (#5329)
• cb5be88 Bump typescript from 4.8.2 to 4.8.3 (#5324)
• dc6dbbf fix: insert array into json column (#5321)
• 864530c feat: support partial unique indexes (#5316)
• 6bed5e9 Fix changing the default value of a boolean column in SQLite (#5319)
• f52b2c5 Merge remote-tracking branch 'origin/master'
• 05c4707 Prepare to release 2.3.0
• 13b61c0 Update dependencies (#5317)
• 97fccdf Explicit jsonb support for custom pg clients (#5201)
• 1cc1df9 chore: remove bindingHolder for proper scoping (#5235)
• e0c0fa9 Implement mapBinding mssql dialect option (#5292)
• 29283a1 Bump tsd from 0.22.0 to 0.23.0 (#5314)
• 57692d3 Infer specific column value type in aggregations (#5297)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use of a Broken or Risky Cryptographic Algorithm
🦉 SQL Injection