CLDR-19055 js:(deps): Bump jira.js from 4.1.0 to 5.4.0 in /tools/scripts/jira-updater

[dependabot]

Bumps jira.js from 4.1.0 to 5.4.0.

Release notes

Sourced from jira.js's releases.

v5.4.0

Features

• #293: Re-added JWT (Atlassian Connect) authentication via authentication.jwt (issuer, secret, expiryTimeSeconds). Implemented with isomorphic WebCrypto and zero new runtime dependencies, so the browser build is unaffected. See the step-by-step guide.
  • Note: Atlassian Connect is reaching end of support (Q4 2026) and new private apps can no longer be installed via a descriptor URL. This auth method is intended for existing Connect app installations.
• #269, #401: Added full Atlassian OAuth 2.0 (3LO) support: stateless flow helpers (generateAuthorizationUrl, exchangeAuthorizationCode, refreshOAuth2Token, getAccessibleResources) plus an auto-refreshing client with automatic cloudId resolution via the API gateway. Configure authentication.oauth2 with refreshToken/clientId/clientSecret (and optional cloudId/siteUrl/expiresAt/onTokenRefresh); the access token is refreshed on expiry and on 401, and the rotated refresh token is surfaced via onTokenRefresh. Fully backward compatible — oauth2: { accessToken } is unchanged. Partially addresses #404 (built-in token refresh / 401 retry, though general axios interceptors are still not exposed). See the OAuth 2.0 guide and the runnable playground/oauth2.
• #396: IssueAttachments.getAttachmentContent (version2 & version3) now accepts an optional range (HTTP Range header) for partial/byte-range downloads, e.g. getAttachmentContent({ id, range: 'bytes=0-1023' }). When range is set and redirect isn't specified explicitly, the request is sent with redirect=false so Jira returns 206 Partial Content. Closes #396.

Bug Fixes

• #403: Restored deep subpath imports for the typed models/parameters barrels (e.g. jira.js/version3/parameters, jira.js/version3/models, and the version2/agile/serviceDesk equivalents). They were unreachable since 5.2.0 because the exports map only had a flat ./* wildcard, which resolves a directory barrel to a non-existent *.d.ts/*.mjs file. Added ./*/models and ./*/parameters exports patterns that point at the barrel index files. Requires an exports-aware resolver (moduleResolution: bundler/node16/nodenext); with legacy node resolution use the root namespace (Version3.Version3Parameters.*).

General

• Updated dependencies (including axios to ^1.18.1 and zod to ^4.4.3)
• Bumped the package manager to pnpm@10.34.4 (kept on the 10.x line, which still supports Node.js 20; pnpm@11 requires Node.js ≥ 22.13)
• Adjusted avatar content-type parsing in version2/version3 to match the stricter response header types introduced by the axios update

v5.3.1

Bug Fixes

• #416: Fixed mime.getType is not a function when using the CommonJS build. Replaced the ESM-only mime dependency with mime-types, which supports both ESM and CJS. Thanks to Alxs39 for reporting this issue.

v5.3.0

5.3.0

General

• Updated dependencies
• Improved JSDoc coverage and quality
• Refactored integration tests to use global setup/teardown for better performance and reliability
• Wrapped all integration tests in describe blocks for better organization

Bug Fixes

• #410: Fixed getWorkflowSchemeProjectAssociations to properly serialize multiple project IDs as separate query parameters (projectId=10000&projectId=10001) instead of comma-separated values. Thanks to konrad-garus for reporting this issue.
• #411: Added missing url field to Webhook model. Thanks to vrmiguel for reporting this issue.

Version 2 Client

New Endpoints

• Api
  • Added Api endpoints for bulk worklog operations
• FieldSchemes
  • Added FieldSchemes endpoints for field association scheme management
• IssueRedaction
  • Added IssueRedaction endpoints for issue field data redaction
• MigrationOfConnectModulesToForge
  • Added MigrationOfConnectModulesToForge endpoints for Connect to Forge migration

... (truncated)

Changelog

Sourced from jira.js's changelog.

5.4.0

Features

• #293: Re-added JWT (Atlassian Connect) authentication via authentication.jwt (issuer, secret, expiryTimeSeconds). Implemented with isomorphic WebCrypto and zero new runtime dependencies, so the browser build is unaffected. See the step-by-step guide.
  • Note: Atlassian Connect is reaching end of support (Q4 2026) and new private apps can no longer be installed via a descriptor URL. This auth method is intended for existing Connect app installations.
• #269, #401: Added full Atlassian OAuth 2.0 (3LO) support: stateless flow helpers (generateAuthorizationUrl, exchangeAuthorizationCode, refreshOAuth2Token, getAccessibleResources) plus an auto-refreshing client with automatic cloudId resolution via the API gateway. Configure authentication.oauth2 with refreshToken/clientId/clientSecret (and optional cloudId/siteUrl/expiresAt/onTokenRefresh); the access token is refreshed on expiry and on 401, and the rotated refresh token is surfaced via onTokenRefresh. Fully backward compatible — oauth2: { accessToken } is unchanged. Partially addresses #404 (built-in token refresh / 401 retry, though general axios interceptors are still not exposed). See the OAuth 2.0 guide and the runnable playground/oauth2.
• #396: IssueAttachments.getAttachmentContent (version2 & version3) now accepts an optional range (HTTP Range header) for partial/byte-range downloads, e.g. getAttachmentContent({ id, range: 'bytes=0-1023' }). When range is set and redirect isn't specified explicitly, the request is sent with redirect=false so Jira returns 206 Partial Content. Closes #396.

Bug Fixes

• #403: Restored deep subpath imports for the typed models/parameters barrels (e.g. jira.js/version3/parameters, jira.js/version3/models, and the version2/agile/serviceDesk equivalents). They were unreachable since 5.2.0 because the exports map only had a flat ./* wildcard, which resolves a directory barrel to a non-existent *.d.ts/*.mjs file. Added ./*/models and ./*/parameters exports patterns that point at the barrel index files. Requires an exports-aware resolver (moduleResolution: bundler/node16/nodenext); with legacy node resolution use the root namespace (Version3.Version3Parameters.*).

General

• Updated dependencies (including axios to ^1.18.1 and zod to ^4.4.3)
• Bumped the package manager to pnpm@10.34.4 (kept on the 10.x line, which still supports Node.js 20; pnpm@11 requires Node.js ≥ 22.13)
• Adjusted avatar content-type parsing in version2/version3 to match the stricter response header types introduced by the axios update

5.3.1

Bug Fixes

• #416: Fixed mime.getType is not a function when using the CommonJS build. Replaced the ESM-only mime dependency with mime-types, which supports both ESM and CJS. Thanks to Alxs39 for reporting this issue.

5.3.0

General

• Updated dependencies
• Improved JSDoc coverage and quality
• Refactored integration tests to use global setup/teardown for better performance and reliability
• Wrapped all integration tests in describe blocks for better organization

Bug Fixes

• #410: Fixed getWorkflowSchemeProjectAssociations to properly serialize multiple project IDs as separate query parameters (projectId=10000&projectId=10001) instead of comma-separated values. Thanks to konrad-garus for reporting this issue.
• #411: Added missing url field to Webhook model. Thanks to vrmiguel for reporting this issue.

Version 2 Client

New Endpoints

• Api
  • Added Api endpoints for bulk worklog operations
• FieldSchemes
  • Added FieldSchemes endpoints for field association scheme management
• IssueRedaction
  • Added IssueRedaction endpoints for issue field data redaction
• MigrationOfConnectModulesToForge

... (truncated)

Commits

• f6e12c8 chore(context7): best-practice config with agent rules and noise filtering (#...
• 48b601d v5.4.0 — JWT & OAuth 2.0 auth, attachment Range, subpath-import fix, docs sit...
• 6f9b560 fix: mime.getType is not a function in CJS build (#416) (#417)
• 2ddb182 v5.3.0 RC (#409)
• d1d9560 Fix build after dependencies updates (#405)
• bd950af fixing bulkFetchIssues link (#395)
• 2ef3d99 v5.2.1 (#389)
• 58d0560 v5.2.0 (#386)
• 2a6b490 v5.1.1 (#385)
• ff4d9ed v5.1.0 (#379)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Assignees

The following users could not be added as assignees: btangmu, srl295. Either they do not exist or they do not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.