1.6.3

panva · Mar 14, 2017 · 45c7cb0 · 45c7cb0
1 parent 58a5424
commit 45c7cb0
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -18,6 +18,10 @@ Yay for [SemVer](http://semver.org/).
 <!-- TOC END -->
 
 ## Version 1.6.0
+### Version 1.6.3
+- [DIFF](https://github.com/panva/node-openid-client/compare/v1.6.2...v1.6.3)
+- bumped minimum node-jose version to cover http://blog.intothesymmetry.com/2017/03/critical-vulnerability-in-json-web.html
+
 ### Version 1.6.2
 - [DIFF](https://github.com/panva/node-openid-client/compare/v1.6.1...v1.6.2)
 - fixed verify callback skipping userinfo when userinfo_endpoint is not configured (#19)

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "openid-client",
-  "version": "1.6.2",
+  "version": "1.6.3",
   "description": "OpenID Connect Relying Party (RP, Client) implementation for Node.js servers, supports passportjs",
   "main": "lib/index.js",
   "scripts": {