From 9b8b316559c19d5ffb41799daf7a752e2d497cd8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Nov 2026 11:35:20 +0000
Subject: [PATCH] build(deps): bump jose from 6.2.13 to 6.2.14

Bumps [jose](https://github.com/panva/jose) from 6.2.13 to 6.2.14.
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/panva/jose/compare/v6.2.13...v6.2.14)

---
updated-dependencies:
- dependency-name: jose
  dependency-version: 6.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 17 ++++++++++-------
 package.json      |  2 +-
 2 files changed, 11 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c6046bf..1b76e30 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,16 +1,16 @@
 {
   "name": "authcore-ts",
-  "version": "1.0.0",
+  "version": "0.1.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "authcore-ts",
-      "version": "1.0.0",
-      "license": "ISC",
+      "version": "0.1.0",
+      "license": "MIT",
       "dependencies": {
         "bcryptjs": "^3.0.3",
-        "jose": "^6.2.13"
+        "jose": "^6.2.14"
       },
       "devDependencies": {
         "@arethetypeswrong/cli": "^0.18.5",
@@ -25,6 +25,9 @@
         "typescript": "^5.9.3",
         "typescript-eslint": "^8.72.0",
         "vitest": "^2.1.9"
+      },
+      "engines": {
+        "node": ">=20"
       }
     },
     "node_modules/@ampproject/remapping": {
@@ -2936,9 +2939,9 @@
       }
     },
     "node_modules/jose": {
-      "version": "6.2.13",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.13.tgz",
-      "integrity": "sha512-7TIg10ZE1x82YediN+lcrPNvGMKge9yFHQD+Qho/b8y2adfugU3AsvvHfxV0fzyFllT6l9xCjf4RWY9g/Z9PJQ==",
+      "version": "6.2.14",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.14.tgz",
+      "integrity": "sha512-3JasLuki1NRLQvY4wCoC37KZk4qxoBx2k2aFqLxT84IezqW0bkJKnNtxnZj/Fu1xsQivoc/lytxaRHJoGLjJ1A==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
diff --git a/package.json b/package.json
index 9fb478b..fe04a28 100644
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
   "description": "Framework-agnostic TypeScript auth core: bcrypt password hashing, revocable signed sessions, typed RBAC, rate limiting and single-use reset tokens. Extracted from AssetOps.",
   "dependencies": {
     "bcryptjs": "^3.0.3",
-    "jose": "^6.2.13"
+    "jose": "^6.2.14"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.5",