[Snyk] Upgrade http-signature from 1.1.1 to 1.3.6

[snyk-bot]

Snyk has created this PR to upgrade http-signature from 1.1.1 to 1.3.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2021-11-17.

Release notes

Package name: http-signature

• 1.3.6 - 2021-11-17
  

  version 1.3.6 (2021-11-17)

• 1.3.5 - 2020-09-23
  

  Tag v1.3.5

• 1.3.4 - 2020-04-02
  

  version 1.3.4 (2020-04-02)

• 1.3.3 - 2020-04-01
  

  version 1.3.3 (2020-04-01)

• 1.3.2 - 2020-02-24
  

  version 1.3.2 (2020-02-24)

• 1.3.1 - 2019-11-05
  

  version 1.3.1 (2019-11-05)

• 1.3.0 - 2019-11-05
• 1.2.0 - 2017-08-25
  

  Release 1.2.0

• 1.1.1 - 2016-01-25
  

  Release 1.1.1

from http-signature GitHub release notes

Commit messages

Package name: http-signature

• 391fbe4 Need to update jsprim due to vulnerability in json-schema TritonDataCenter/node-http-signature#123 Need to update jsprim due to vulnerability in json-schema ([Snyk] Security upgrade async from 0.2.10 to 3.2.2 #125)
• e7a8a00 Add colon after (request-target) ([Snyk] Security upgrade async from 0.2.10 to 3.2.2 #120)
• 868bf82 Cut 1.3.5 ([Snyk] Security upgrade form-data from 1.0.1 to 2.0.0 #117)
• 241725d Add keyPassphrase option to signer ([Snyk] Security upgrade async from 0.9.2 to 3.2.2 #115)
• 4fda5d0 Add support for created and expires values ([Snyk] Security upgrade alpine from 3.10.3 to 3.13 #110)
• 88b5740 release 1.3.4 ([Snyk] Security upgrade python from 3.6-slim to 3.9-slim #104)
• b83992f Use the algorithm value, not the keyId for the algorithm field in the signature string ([Snyk] Security upgrade alpine from 3.12.0 to 3.14 #103)
• 613fb31 Create 1.3.3 release ([Snyk] Security upgrade alpine from 3.10.3 to 3.14 #102)
• dafcdaa Add support for an opaque param in the Authorization header ([Snyk] Security upgrade express-hbs from 0.8.4 to 2.3.2 #101)
• 202ebc3 Add support for adding the keyId and algorithm params into the signing string ([Snyk] Security upgrade node from gallium-buster-slim to 16.14.2-slim #100)
• 28def30 Use Buffer.isBuffer instead of instanceof ([Snyk] Security upgrade alpine from 3.12.0 to 3.13.8 #99)
• f2b5ee3 Allow for non-string HMAC keys ([Snyk] Security upgrade alpine from 3.10.3 to 3.13.8 #98)
• dde0188 add 'make cutarelease' to publish new versions; use "files" for smaller published package ([Snyk] Fix for 1 vulnerabilities #95)
• dee0ee7 Update changelog file to reflect latest changes and bumpver to 1.3.1 ([Snyk] Security upgrade python from 3.6-slim to 3.9-slim #91)
• a438c3f bump min node version to 0.10 and add CI testing TritonDataCenter/node-http-signature#92 bump min node version to 0.10 and add CI testing ([Snyk] Security upgrade alpine from 3.10.3 to 3.14.4 #93)
• db839cd fix make check ([Snyk] Security upgrade alpine from 3.12.0 to 3.14 #90)
• c8e8805 Bump version due to Signature header support ([Snyk] Security upgrade python from 3.6-slim to 3.9.10-slim #83)
• 2424e96 Updating sshpk version ([Snyk] Security upgrade alpine from 3.10.3 to 3.15 #86)
• 276bd13 Add Signature header support. ([Snyk] Security upgrade python from 3.6-slim to 3.9.10-slim #83)
• 523e7c5 Release 1.2.0
• 95925dc accessor properties not supported in IE8 TritonDataCenter/node-http-signature#59 accessor properties not supported in IE8
• aaf66f5 Fix bug where valid mixed case headers fails parse TritonDataCenter/node-http-signature#23 Fix bug where valid mixed case headers fails parse
• 011fa33 Update assert-plus to version 1 (and make tests pass on node v7.6) TritonDataCenter/node-http-signature#63 Update assert-plus to version 1 (and make tests pass on node v7.6)
• 38c1ae7 add ability to pass a custom header name TritonDataCenter/node-http-signature#65 add ability to pass a custom header name

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs