Bump the prod-deps group across 1 directory with 5 updates (#1251)

* Bump the prod-deps group across 1 directory with 5 updates

Bumps the prod-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@oclif/core](https://github.com/oclif/core) | `4.0.19` | `4.0.22` |
| [@oclif/plugin-help](https://github.com/oclif/plugin-help) | `6.2.10` | `6.2.11` |
| [openid-client](https://github.com/panva/node-openid-client) | `5.6.5` | `5.7.0` |
| [jose](https://github.com/panva/jose) | `5.8.0` | `5.9.2` |
| [express](https://github.com/expressjs/express) | `4.19.2` | `4.21.0` |



Updates `@oclif/core` from 4.0.19 to 4.0.22
- [Release notes](https://github.com/oclif/core/releases)
- [Changelog](https://github.com/oclif/core/blob/main/CHANGELOG.md)
- [Commits](oclif/core@4.0.19...4.0.22)

Updates `@oclif/plugin-help` from 6.2.10 to 6.2.11
- [Release notes](https://github.com/oclif/plugin-help/releases)
- [Changelog](https://github.com/oclif/plugin-help/blob/main/CHANGELOG.md)
- [Commits](oclif/plugin-help@6.2.10...6.2.11)

Updates `openid-client` from 5.6.5 to 5.7.0
- [Release notes](https://github.com/panva/node-openid-client/releases)
- [Changelog](https://github.com/panva/node-openid-client/blob/main/CHANGELOG.md)
- [Commits](panva/openid-client@v5.6.5...v5.7.0)

Updates `jose` from 5.8.0 to 5.9.2
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v5.8.0...v5.9.2)

Updates `express` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](expressjs/express@4.19.2...4.21.0)

---
updated-dependencies:
- dependency-name: "@oclif/core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: "@oclif/plugin-help"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: openid-client
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: jose
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: express
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>

* add changesets

Signed-off-by: Brian DeHamer <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Brian DeHamer <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian DeHamer <[email protected]>

.changeset/forty-moose-work.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/mock': patch
+---
+
+Bump jose from 5.8.0 to 5.9.2

.changeset/friendly-pumas-fold.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/mock-server': patch
+---
+
+Bump express from 4.20.0 to 4.21.0

.changeset/unlucky-cars-own.md

@@ -0,0 +1,5 @@
+---
+'@sigstore/cli': patch
+---
+
+Bump openid-client from 5.6.5 to 5.7.0

packages/cli/package.json

@@ -39,7 +39,7 @@
     "@sigstore/oci": "^0.3.0",
     "@sigstore/sign": "^2.3.0",
     "open": "^8.4.2",
-    "openid-client": "^5.6.5",
+    "openid-client": "^5.7.0",
     "sigstore": "^2.3.0"
   },
   "devDependencies": {

packages/mock-server/package.json

@@ -22,7 +22,7 @@
     "@oclif/core": "^4",
     "@sigstore/mock": "^0.7.4",
     "@tufjs/repo-mock": "^2.0.1",
-    "express": "4.20.0"
+    "express": "4.21.0"
   },
   "devDependencies": {
     "@types/express": "^4.17.21",

packages/mock/package.json

@@ -36,7 +36,7 @@
     "asn1js": "^3.0.5",
     "bytestreamjs": "^2.0.1",
     "canonicalize": "^2.0.0",
-    "jose": "^5.8.0",
+    "jose": "^5.9.2",
     "nock": "^13.5.5",
     "pkijs": "^3.2.4",
     "pvutils": "^1.1.3"