[Snyk] Security upgrade oidc-provider from 6.31.1 to 8.4.3

[susheel]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	716/1000 Why? Recently disclosed, Has a fix available, CVSS 8.6	Origin Validation Error SNYK-JS-KOACORS-6117545	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: oidc-provider

The new version differs by 250 commits.

• 55f4fb7 chore(release): 8.4.3
• 6904545 chore: bump deps
• 9023e23 build(deps): bump @ koa/cors from 4.0.0 to 5.0.0 (#1240)
• a450345 refactor: fix typo in resume action (#1239)
• deef8bd chore(release): 8.4.2
• 9267dce chore: bump deps
• cce6d43 fix: reject client JSON Web Key Set `null` value (#1237)
• a0af4c4 docs: point to a specific part of Discovery 1.0 RFC (#1236)
• 5020ab9 build(deps): bump dessant/lock-threads from 5.0.0 to 5.0.1 (#1235)
• 6ddb486 chore: set discussion-inactive-days in lock threads action
• 991ba52 build(deps): bump dessant/lock-threads from 4.0.1 to 5.0.0 (#1232)
• ad5adb7 chore: bump deps
• cf2069c chore(release): 8.4.1
• 0b82217 chore: bump jose
• e1b0e8e chore: bump sinon
• bbc0871 chore: bump jose
• 73c5570 chore: bump deps
• 5bec859 example: return certification/oidc/docker.js
• 5c77997 example: cleanup unused setup
• f0fd46a ci: add and use lts/iron (Node.js 20 LTS)
• e553da4 build(deps): bump actions/checkout from 3 to 4 (#1231)
• 90f1dd4 build(deps): bump actions/setup-node from 3 to 4 (#1230)
• 6101165 ci: unleash dependabot on github actions
• 4d854df refactor: warning on unsupported runtimes

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.