Merge pull request #342 from justaugustus/dep-fixes

package.json: Dependency updates (part 1/n)

Author: justaugustus

.github/dependabot.yml

@@ -0,0 +1,10 @@
+# Please see the documentation for all configuration options:
+# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 10

lib/jwk/basekey.js

@@ -5,8 +5,8 @@
  */
 "use strict";
 
-var merge = require("../util/merge"),
-    uuid = require("uuid");
+var merge = require("../util/merge");
+const { v4: uuidv4 } = require("uuid");
 
 var assign = require("lodash/assign");
 var clone = require("lodash/clone");
@@ -77,7 +77,7 @@ var JWKBaseKeyObject = function(kty, ks, props, cfg) {
 
   // force certain values
   props.kty = kty;
-  props.kid = props.kid || kid || uuid();
+  props.kid = props.kid || kid || uuidv4();
 
   // setup base info
   var included = Object.keys(HELPERS.COMMON_PROPS).map(function(p) {