Bump jsonwebtoken and universal-github-app-jwt (#6915)

Bumps [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) and [universal-github-app-jwt](https://github.com/gr2m/universal-github-app-jwt). These dependencies needed to be updated together.

Updates `jsonwebtoken` from 8.5.1 to 9.0.0
- [Release notes](https://github.com/auth0/node-jsonwebtoken/releases)
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](https://github.com/auth0/node-jsonwebtoken/compare/v8.5.1...v9.0.0)

Updates `universal-github-app-jwt` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/gr2m/universal-github-app-jwt/releases)
- [Commits](https://github.com/gr2m/universal-github-app-jwt/compare/v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-type: indirect
- dependency-name: universal-github-app-jwt
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

package-lock.json

@@ -3675,9 +3675,10 @@
 			"license": "MIT"
 		},
 		"node_modules/@types/jsonwebtoken": {
-			"version": "8.5.8",
+			"version": "9.0.1",
+			"resolved": "https://registry.npmjs.org/@types/jsonwebtoken/-/jsonwebtoken-9.0.1.tgz",
+			"integrity": "sha512-c5ltxazpWabia/4UzhIoaDcIza4KViOQhdbjRlfcIGVnsE3c3brkz9Z+F/EeJIECOQP7W7US2hNE930cWWkPiw==",
 			"dev": true,
-			"license": "MIT",
 			"dependencies": {
 				"@types/node": "*"
 			}
@@ -5747,8 +5748,9 @@
 		},
 		"node_modules/buffer-equal-constant-time": {
 			"version": "1.0.1",
-			"dev": true,
-			"license": "BSD-3-Clause"
+			"resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
+			"integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
+			"dev": true
 		},
 		"node_modules/buffer-from": {
 			"version": "1.1.2",
@@ -7551,8 +7553,9 @@
 		},
 		"node_modules/ecdsa-sig-formatter": {
 			"version": "1.0.11",
+			"resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
+			"integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==",
 			"dev": true,
-			"license": "Apache-2.0",
 			"dependencies": {
 				"safe-buffer": "^5.0.1"
 			}
@@ -11580,34 +11583,54 @@
 			}
 		},
 		"node_modules/jsonwebtoken": {
-			"version": "8.5.1",
+			"version": "9.0.0",
+			"resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.0.tgz",
+			"integrity": "sha512-tuGfYXxkQGDPnLJ7SibiQgVgeDgfbPq2k2ICcbgqW8WxWLBAxKQM/ZCu/IT8SOSwmaYl4dpTFCW5xZv7YbbWUw==",
 			"dev": true,
-			"license": "MIT",
 			"dependencies": {
 				"jws": "^3.2.2",
-				"lodash.includes": "^4.3.0",
-				"lodash.isboolean": "^3.0.3",
-				"lodash.isinteger": "^4.0.4",
-				"lodash.isnumber": "^3.0.3",
-				"lodash.isplainobject": "^4.0.6",
-				"lodash.isstring": "^4.0.1",
-				"lodash.once": "^4.0.0",
+				"lodash": "^4.17.21",
 				"ms": "^2.1.1",
-				"semver": "^5.6.0"
+				"semver": "^7.3.8"
+			},
+			"engines": {
+				"node": ">=12",
+				"npm": ">=6"
+			}
+		},
+		"node_modules/jsonwebtoken/node_modules/lru-cache": {
+			"version": "6.0.0",
+			"resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
+			"integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==",
+			"dev": true,
+			"dependencies": {
+				"yallist": "^4.0.0"
 			},
 			"engines": {
-				"node": ">=4",
-				"npm": ">=1.4.28"
+				"node": ">=10"
 			}
 		},
 		"node_modules/jsonwebtoken/node_modules/semver": {
-			"version": "5.7.1",
+			"version": "7.3.8",
+			"resolved": "https://registry.npmjs.org/semver/-/semver-7.3.8.tgz",
+			"integrity": "sha512-NB1ctGL5rlHrPJtFDVIVzTyQylMLu9N9VICA6HSFJo8MCGVTMW6gfpicwKmmK/dAjTOrqu5l63JJOpDSrAis3A==",
 			"dev": true,
-			"license": "ISC",
+			"dependencies": {
+				"lru-cache": "^6.0.0"
+			},
 			"bin": {
-				"semver": "bin/semver"
+				"semver": "bin/semver.js"
+			},
+			"engines": {
+				"node": ">=10"
 			}
 		},
+		"node_modules/jsonwebtoken/node_modules/yallist": {
+			"version": "4.0.0",
+			"resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
+			"integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==",
+			"dev": true
+		},
 		"node_modules/jsprim": {
 			"version": "1.4.2",
 			"dev": true,
@@ -11636,8 +11659,9 @@
 		},
 		"node_modules/jwa": {
 			"version": "1.4.1",
+			"resolved": "https://registry.npmjs.org/jwa/-/jwa-1.4.1.tgz",
+			"integrity": "sha512-qiLX/xhEEFKUAJ6FiBMbes3w9ATzyk5W7Hvzpa/SLYdxNtng+gcurvrI7TbACjIXlsJyr05/S1oUhZrc63evQA==",
 			"dev": true,
-			"license": "MIT",
 			"dependencies": {
 				"buffer-equal-constant-time": "1.0.1",
 				"ecdsa-sig-formatter": "1.0.11",
@@ -11646,8 +11670,9 @@
 		},
 		"node_modules/jws": {
 			"version": "3.2.2",
+			"resolved": "https://registry.npmjs.org/jws/-/jws-3.2.2.tgz",
+			"integrity": "sha512-YHlZCB6lMTllWDtSPHz/ZXTsi8S00usEV6v1tjq8tOUZzw7DpSDWVXjXDre6ed1w/pd495ODpHZYSdkRTsa0HA==",
 			"dev": true,
-			"license": "MIT",
 			"dependencies": {
 				"jwa": "^1.4.1",
 				"safe-buffer": "^5.0.1"
@@ -11983,41 +12008,11 @@
 			"dev": true,
 			"license": "MIT"
 		},
-		"node_modules/lodash.includes": {
-			"version": "4.3.0",
-			"dev": true,
-			"license": "MIT"
-		},
-		"node_modules/lodash.isboolean": {
-			"version": "3.0.3",
-			"dev": true,
-			"license": "MIT"
-		},
 		"node_modules/lodash.isequal": {
 			"version": "4.5.0",
 			"dev": true,
 			"license": "MIT"
 		},
-		"node_modules/lodash.isinteger": {
-			"version": "4.0.4",
-			"dev": true,
-			"license": "MIT"
-		},
-		"node_modules/lodash.isnumber": {
-			"version": "3.0.3",
-			"dev": true,
-			"license": "MIT"
-		},
-		"node_modules/lodash.isplainobject": {
-			"version": "4.0.6",
-			"dev": true,
-			"license": "MIT"
-		},
-		"node_modules/lodash.isstring": {
-			"version": "4.0.1",
-			"dev": true,
-			"license": "MIT"
-		},
 		"node_modules/lodash.memoize": {
 			"version": "4.1.2",
 			"dev": true,
@@ -12028,11 +12023,6 @@
 			"dev": true,
 			"license": "MIT"
 		},
-		"node_modules/lodash.once": {
-			"version": "4.1.1",
-			"dev": true,
-			"license": "MIT"
-		},
 		"node_modules/lodash.throttle": {
 			"version": "4.1.1",
 			"dev": true,
@@ -18253,12 +18243,13 @@
 			}
 		},
 		"node_modules/universal-github-app-jwt": {
-			"version": "1.1.0",
+			"version": "1.1.1",
+			"resolved": "https://registry.npmjs.org/universal-github-app-jwt/-/universal-github-app-jwt-1.1.1.tgz",
+			"integrity": "sha512-G33RTLrIBMFmlDV4u4CBF7dh71eWwykck4XgaxaIVeZKOYZRAAxvcGMRFTUclVY6xoUPQvO4Ne5wKGxYm/Yy9w==",
 			"dev": true,
-			"license": "MIT",
 			"dependencies": {
-				"@types/jsonwebtoken": "^8.3.3",
-				"jsonwebtoken": "^8.5.1"
+				"@types/jsonwebtoken": "^9.0.0",
+				"jsonwebtoken": "^9.0.0"
 			}
 		},
 		"node_modules/universal-user-agent": {