[Snyk] Security upgrade node-jose from 0.3.1 to 2.2.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • backend/src/functions/order-api/package.json
  • backend/src/functions/order-api/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Infinite loop SNYK-JS-NODEJOSE-3323847	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: node-jose

The new version differs by 250 commits.

• 37db9e5 v2.2.0: Release commit
• 992c1cb build(deps-dev): bump mocha from 10.1.0 to 10.2.0 (#411)
• 901d915 Merge pull request from GHSA-5h4j-qrvg-9xhw
• e95481a Merge pull request #398 from batrudinych/alg-doc-fix
• a27dd90 Fix tests (#409)
• 61655ad Dependency updates (2/n) (#408)
• 2f9d052 .github: Add CodeQL workflow (#407)
• 9a2d404 build(deps): bump uuid from 8.3.2 to 9.0.0 (#392)
• 6649d96 build(deps-dev): bump karma from 6.4.0 to 6.4.1 (#393)
• 88b5e6d build(deps): bump long from 5.2.0 to 5.2.1 (#401)
• 6e7b391 build(deps): bump pako from 2.0.4 to 2.1.0 (#402)
• 3c7ab59 build(deps-dev): bump yargs from 17.5.1 to 17.6.2 (#403)
• feaf0d9 build(deps-dev): bump chai from 4.3.6 to 4.3.7 (#404)
• 8be9aec build(deps-dev): bump webpack from 5.73.0 to 5.75.0 (#406)
• 8d1cab7 build(deps-dev): bump mocha from 10.0.0 to 10.1.0 (#396)
• a29d15f build(deps): bump terser from 5.10.0 to 5.14.2 (#388)
• 9dbacaa build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 (#405)
• e145f31 correct readme
• bf3cf44 build(deps-dev): bump yargs from 17.4.0 to 17.5.1 (#378)
• 369df01 build(deps-dev): bump del from 6.0.0 to 6.1.1 (#380)
• 3aac785 build(deps-dev): bump karma from 6.3.17 to 6.4.0 (#382)
• b91fcdf build(deps-dev): bump webpack from 5.70.0 to 5.73.0 (#381)
• 9daf10b build(deps-dev): bump mocha from 9.2.2 to 10.0.0 (#373)
• a458b83 v2.1.1: Release commit

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.