[Snyk] Upgrade http-signature from 1.1.1 to 1.3.6

[snyk-bot]

Snyk has created this PR to upgrade http-signature from 1.1.1 to 1.3.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2021-11-17.

Release notes

Package name: http-signature

• 1.3.6 - 2021-11-17
  

  version 1.3.6 (2021-11-17)

• 1.3.5 - 2020-09-23
  

  Tag v1.3.5

• 1.3.4 - 2020-04-02
  

  version 1.3.4 (2020-04-02)

• 1.3.3 - 2020-04-01
  

  version 1.3.3 (2020-04-01)

• 1.3.2 - 2020-02-24
  

  version 1.3.2 (2020-02-24)

• 1.3.1 - 2019-11-05
  

  version 1.3.1 (2019-11-05)

• 1.3.0 - 2019-11-05
• 1.2.0 - 2017-08-25
  

  Release 1.2.0

• 1.1.1 - 2016-01-25
  

  Release 1.1.1

from http-signature GitHub release notes

Commit messages

Package name: http-signature

• 391fbe4 Need to update jsprim due to vulnerability in json-schema TritonDataCenter/node-http-signature#123 Need to update jsprim due to vulnerability in json-schema (fix: minor README.md improvements #125)
• e7a8a00 Add colon after (request-target) (#120)
• 868bf82 Cut 1.3.5 (#117)
• 241725d Add keyPassphrase option to signer (#115)
• 4fda5d0 Add support for created and expires values (#110)
• 88b5740 release 1.3.4 (#104)
• b83992f Use the algorithm value, not the keyId for the algorithm field in the signature string (#103)
• 613fb31 Create 1.3.3 release (#102)
• dafcdaa Add support for an opaque param in the Authorization header (-+ #101)
• 202ebc3 Add support for adding the keyId and algorithm params into the signing string (#100)
• 28def30 Use Buffer.isBuffer instead of instanceof (#99)
• f2b5ee3 Allow for non-string HMAC keys (#98)
• dde0188 add 'make cutarelease' to publish new versions; use "files" for smaller published package (#95)
• dee0ee7 Update changelog file to reflect latest changes and bumpver to 1.3.1 (#91)
• a438c3f bump min node version to 0.10 and add CI testing TritonDataCenter/node-http-signature#92 bump min node version to 0.10 and add CI testing (#93)
• db839cd fix make check (#90)
• c8e8805 Bump version due to Signature header support (#83)
• 2424e96 Updating sshpk version (#86)
• 276bd13 Add Signature header support. (#83)
• 523e7c5 Release 1.2.0
• 95925dc accessor properties not supported in IE8 TritonDataCenter/node-http-signature#59 accessor properties not supported in IE8
• aaf66f5 Fix bug where valid mixed case headers fails parse TritonDataCenter/node-http-signature#23 Fix bug where valid mixed case headers fails parse
• 011fa33 Update assert-plus to version 1 (and make tests pass on node v7.6) TritonDataCenter/node-http-signature#63 Update assert-plus to version 1 (and make tests pass on node v7.6)
• 38c1ae7 add ability to pass a custom header name TritonDataCenter/node-http-signature#65 add ability to pass a custom header name

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs