Bump jose from 4.9.0 to 4.9.3

[dependabot[bot]]

Bumps jose from 4.9.0 to 4.9.3.

Release notes

Sourced from jose's releases.

v4.9.3

Refactor

• update CEK length validation error message (81a92a9)
• update key input validation error messages (2eac34a)
• update keylike description for WinterCG (6741679)

v4.9.2

Fixes

• limit default PBES2 alg's computational expense (03d6d01)

v4.9.1

Fixes

• deno: add a Deno package entrypoint (9f3c459)

Changelog

Sourced from jose's changelog.

4.9.3 (2022-09-15)

Refactor

• update CEK length validation error message (81a92a9)
• update key input validation error messages (2eac34a)
• update keylike description for WinterCG (6741679)

4.9.2 (2022-09-01)

Fixes

• limit default PBES2 alg's computational expense (03d6d01)

4.9.1 (2022-08-29)

Fixes

• deno: add a Deno package entrypoint (9f3c459)

Commits

• eca8ac3 chore(release): 4.9.3
• 2eac34a refactor: update key input validation error messages
• 6741679 refactor: update keylike description for WinterCG
• 81a92a9 refactor: update CEK length validation error message
• 644a13b style: prettier
• ec6a6a5 test: add a check that signatures are verified before claims set
• f64cadd chore: cleanup after publish
• db71b3d chore(release): 4.9.2
• 03d6d01 fix: limit default PBES2 alg's computational expense
• 8c5cc34 chore: cleanup after publish
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

[codecov[bot]]

Codecov Report

Base: 77.45% // Head: 77.40% // Decreases project coverage by -0.04% :warning:

Coverage data is based on head (00db628) compared to base (851b333). Patch coverage: 85.96% of modified lines in pull request are covered.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #12149      +/-   ##
==========================================
- Coverage   77.45%   77.40%   -0.05%     
==========================================
  Files         147      147              
  Lines        7757     7762       +5     
==========================================
  Hits         6008     6008              
- Misses       1749     1754       +5     

Impacted Files	Coverage Δ
bedrock/base/middleware.py	61.53% <0.00%> (ø)
bedrock/firefox/forms.py	94.11% <ø> (-0.89%)	:arrow_down:
bedrock/firefox/redirects.py	55.55% <ø> (ø)
bedrock/firefox/urls.py	95.45% <ø> (ø)
bedrock/mozorg/models.py	33.33% <ø> (ø)
bedrock/mozorg/urls.py	88.88% <ø> (ø)
bedrock/newsletter/views.py	84.58% <0.00%> (-1.99%)	:arrow_down:
bedrock/privacy/urls.py	100.00% <ø> (ø)
bedrock/firefox/templatetags/helpers.py	93.75% <82.35%> (-1.36%)	:arrow_down:
bedrock/firefox/views.py	92.16% <100.00%> (+0.22%)	:arrow_up:
... and 3 more

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.

[stevejalim]

@craigcook Is this PR something we could replicate with a npm i and committing the updated package-lock.json?

[craigcook]

@craigcook Is this PR something we could replicate with a npm i and committing the updated package-lock.json?

Maybe? I have no idea what jose even is but if we update dependencies manually it would probably make dependabot a bit quieter.

[alexgibson]

@dependabot rebase

[dependabot[bot]]

Superseded by #12602.