Merge pull request #22 from bcgov/feature/DESCW-2329-dependabot-updates

update dependencies and remove yarn.lock

.github/workflows/buildTestPublishContainerDeploy.yml

@@ -24,7 +24,7 @@ jobs:
           npm ci
           yarn test
   publish-container:
-    if: ${{ github.repository == 'bcgov/des-notifybc' && github.event_name != 'pull_request' }}
+    if: ${{ github.repository == 'bcgov/des-notifybc' }}
     needs: build-and-test
     runs-on: ubuntu-latest
     steps:
@@ -39,6 +39,7 @@ jobs:
           images: |
             ghcr.io/bcgov/des-notify-bc
           tags: |
+            type=ref,event=pr
             type=semver,pattern={{version}}
             type=semver,pattern={{major}}.{{minor}}
             type=semver,pattern={{major}}

package.json

@@ -1,6 +1,6 @@
 {
   "name": "notify-bc",
-  "version": "4.1.11",
+  "version": "4.1.12",
   "dbSchemaVersion": "0.8.0",
   "description": "A versatile notification API server",
   "keywords": [
@@ -80,7 +80,7 @@
     "ip-range-check": "0.0.2",
     "jmespath": "f-w/jmespath.js#semver:^1.0",
     "js-base64": "^3.6.0",
-    "jsonwebtoken": "^8.5.1",
+    "jsonwebtoken": "^9.0.2",
     "lodash": "^4.17.21",
     "loopback-connector-mongodb": "^5.5.0",
     "mailparser": "^3.4.0",
@@ -94,8 +94,8 @@
     "serve-favicon": "^2.5.0",
     "smtp-server": "^3.1.0",
     "tslib": "^2.0.0",
-    "twilio": "^3.7.0",
-    "underscore.string": "^3.3.4"
+    "twilio": "^5.0.4",
+    "underscore.string": "^3.3.6"
   },
   "devDependencies": {
     "@loopback/build": "^11.0.0",