[Snyk] Upgrade p-memoize from 4.0.1 to 4.0.2

[snyk-bot]

Snyk has created this PR to upgrade p-memoize from 4.0.1 to 4.0.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 21 days ago, on 2021-09-17.

Release notes

Package name: p-memoize

• 4.0.2 - 2021-09-17
  
  • Fix maxAge to start on Promise settlement (#24) 49a4db9

  v4.0.1...v4.0.2

• 4.0.1 - 2020-09-24
  
  • Fix TypeScript types 1018414

  v4.0.0...v4.0.1

from p-memoize GitHub release notes

Commit messages

Package name: p-memoize

• f409988 4.0.2
• 49a4db9 Fix `maxAge` start on Promise settlement (Minor documentation fix to set the options descriptions correctly in the README #24)
• 325cdda Document difference between this package and `mem` (Fix sec warnings for dependencies #18)
• e1a807d Docs: Add caching strategies and strict equality comparison /2
• a1c9b76 Docs: Add caching strategies and strict equality comparison (Add telemetry to HTTP requests #23)
• f26a670 Replace incorrect info about Primitives with `strict equality` mention (Validate configured routes #21)
• 4d921a9 Move to GitHub Actions (Remove debugging callbacks #17)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[JMS-1]

warning express-openid-connect > p-memoize@4.0.2: 4.0.2 has a bug which causes cache misses. Stay on 4.0.1 or upgrade to 5.0.0.

Is this an issue?

[adamjmcgrath]

@JMS-1 - because the memoized function is awaited (

express-openid-connect/lib/client.js

Line 43 in 0f434fb

const issuer = await getIssuer(config.issuerBaseURL);

) - I would say that issue does not affect us. That said, I'll add something to the backlog to update p-memoize so you don't get that warning