Bump jwt from 1.5.6 to 2.2.2

[dependabot-preview]

Bumps jwt from 1.5.6 to 2.2.2.

Changelog

Sourced from jwt's changelog.

v2.2.2 (2020-08-18)

Full Changelog

Implemented enhancements:

• JWK does not decode. #332
• Inconsistent use of symbol and string keys in args (exp and alrogithm). #331
• Pin simplecov to < 0.18 #356 (anakinj)
• verifies algorithm before evaluating keyfinder #346 (jb08)
• Update Rails 6 appraisal to use actual release version #336 (smudge)
• Update Travis #326 (berkos)
• Improvement/encode hmac without key #312 (JotaSe)

Fixed bugs:

• v2.2.1 warning: already initialized constant JWT Error #335
• 2.2.1 is no longer raising JWT::DecodeError on nil verification key #328
• Fix algorithm picking from decode options #359 (excpt)
• Raise error when verification key is empty #358 (anakinj)

Closed issues:

• JWT RSA: is it possible to encrypt using the public key? #366
• Example unsigned token that bypasses verification #364
• Verify exp claim/field even if it's not present #363
• Decode any token #360
• [question] example of using a pub/priv keys for signing? #351
• JWT::ExpiredSignature raised for non-JSON payloads #350
• verify_aud only verifies that at least one aud is expected #345
• Sinatra 4.90s TTFB #344
• How to Logout #342
• jwt token decoding even when wrong token is provided for some letters #337
• Need to use symbolize\_keys everywhere! #330
• eval() used in Forwardable limits usage in iOS App Store #324
• HS512256 OpenSSL Exception: First num too large #322
• Can we change the separator character? #321
• Verifying iat without leeway may break with poorly synced clocks #319
• Adding support for 'hd' hosted domain string #314
• There is no "typ" header in version 2.0.0 #233

Merged pull requests:

• Fix 'already initialized constant JWT Error' #357 (excpt)
• Support RSA.import for all Ruby versions. #333 (rabajaj0509)
• Removed forwardable dependency #325 (anakinj)

v2.2.1 (2019-05-24)

Full Changelog

Commits

• d79d045 Update CHANGELOG
• 88c0ad6 Update version to 2.2.2
• 2492d58 Fix algorithm picking from options
• d8dc68a Add tests using string keys for algorithm
• 0f7dd57 Raise error when verification key is empty
• f26eea6 Merge pull request #357 from excpt/issue/335
• 57258e4 Fix 'already initialized constant JWT Error'
• 95d8d9f encode hmac without key
• b9b1b03 Update travis config to use 6.0 instead of rc1
• e19fee8 Add Rails 6 appraisal
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #132.