unboundsoftware/auth0mock
6
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases 14 Activity

fix(deps): update module github.com/lestrrat-go/jwx/v2 to v3 #227

Merged
group_2759636_bot_1c34751f7eccad09e089ac15ee7bd902 merged 1 commits from renovate/github.com-lestrrat-go-jwx-v2-3.x into main 2025-12-29 16:16:42 +00:00
Conversation 4 Commits 1 Files Changed 3
+54 -45
group_2759636_bot_1c34751f7eccad09e089ac15ee7bd902 commented 2025-12-29 16:04:29 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

This MR contains the following updates:

Package Change Age Confidence
github.com/lestrrat-go/jwx/v2 v2.1.6 → v3.0.12 age confidence

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v2)

v3.0.12

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.11...v3.0.12

v3.0.11

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.10...v3.0.11

v3.0.10

Compare Source

What's Changed

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.9...v3.0.10

v3.0.9

Compare Source

What's Changed

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.8...v3.0.9

v3.0.8

Compare Source

What's Changed

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.7...v3.0.8

v3.0.7

Compare Source

What's Changed

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.6...v3.0.7

v3.0.6

Compare Source

What's Changed

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.5...v3.0.6

v3.0.5

Compare Source

What's Changed

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.4...v3.0.5

v3.0.4

Compare Source

v3.0.3

Compare Source

What's Changed

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.2...v3.0.3

v3.0.2

Compare Source

What's Changed

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.1...v3.0.2

v3.0.1

Compare Source

What's Changed

Please read the Changes file and upgrade accordingly, especially if you are using the following combinations for JWE:

  • DIRECT mode content encryption
  • Using A256CBC_HS512
  • With an erroneously created CEK of exactly 32-bytes.

New Contributors

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.0...v3.0.1

v3.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v2.1.0...v3.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

This MR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lestrrat-go/jwx/v2](https://github.com/lestrrat-go/jwx) | `v2.1.6` → `v3.0.12` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2flestrrat-go%2fjwx%2fv2/v3.0.12?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2flestrrat-go%2fjwx%2fv2/v2.1.6/v3.0.12?slim=true) | --- ### Release Notes <details> <summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v2)</summary> ### [`v3.0.12`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.12) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.11...v3.0.12) #### What's Changed - Change go.mod version requirements to go 1.24.0 and introduce toolchain directive by [@&#8203;henrymcconville](https://github.com/henrymcconville) in [#&#8203;1465](https://github.com/lestrrat-go/jwx/pull/1465) - Use go.mod for go version in Bazel module by [@&#8203;henrymcconville](https://github.com/henrymcconville) in [#&#8203;1466](https://github.com/lestrrat-go/jwx/pull/1466) - Enable legacy signers by default, and explicitly populate new signer instances by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1460](https://github.com/lestrrat-go/jwx/pull/1460) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;1475](https://github.com/lestrrat-go/jwx/pull/1475) - Fix `godoclint` issues by [@&#8203;babakks](https://github.com/babakks) in [#&#8203;1469](https://github.com/lestrrat-go/jwx/pull/1469) - Bump actions/cache from 4.2.4 to 4.3.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1463](https://github.com/lestrrat-go/jwx/pull/1463) - Bump actions/stale from 10.0.0 to 10.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1468](https://github.com/lestrrat-go/jwx/pull/1468) - Bump github.com/segmentio/asm from 1.2.0 to 1.2.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1462](https://github.com/lestrrat-go/jwx/pull/1462) - Bump github/codeql-action from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1472](https://github.com/lestrrat-go/jwx/pull/1472) - Bump golang.org/x/crypto from 0.42.0 to 0.43.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1474](https://github.com/lestrrat-go/jwx/pull/1474) - revive godoclint by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1478](https://github.com/lestrrat-go/jwx/pull/1478) - \[jwe] Add option to explicitly clear per-recipient headers (`"header"`) for flattened JSON serialization by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1477](https://github.com/lestrrat-go/jwx/pull/1477) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;1480](https://github.com/lestrrat-go/jwx/pull/1480) #### New Contributors - [@&#8203;henrymcconville](https://github.com/henrymcconville) made their first contribution in [#&#8203;1465](https://github.com/lestrrat-go/jwx/pull/1465) - [@&#8203;babakks](https://github.com/babakks) made their first contribution in [#&#8203;1469](https://github.com/lestrrat-go/jwx/pull/1469) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.11...v3.0.12> ### [`v3.0.11`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.11) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.10...v3.0.11) #### What's Changed - Bump actions/cache from 4.2.3 to 4.2.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1438](https://github.com/lestrrat-go/jwx/pull/1438) - Bump golang.org/x/crypto from 0.40.0 to 0.41.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1436](https://github.com/lestrrat-go/jwx/pull/1436) - \[jwe] Work with non X25519 ECDH encryption by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1442](https://github.com/lestrrat-go/jwx/pull/1442) - Bump actions/checkout from 4.2.2 to 5.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1440](https://github.com/lestrrat-go/jwx/pull/1440) - Separate out signature generation / verification into its own framework by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1439](https://github.com/lestrrat-go/jwx/pull/1439) - Bump github.com/lestrrat-go/httprc/v3 from 3.0.0 to 3.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1443](https://github.com/lestrrat-go/jwx/pull/1443) - Bump actions/stale from 9.1.0 to 10.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1451](https://github.com/lestrrat-go/jwx/pull/1451) - Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1447](https://github.com/lestrrat-go/jwx/pull/1447) - Bump golang.org/x/crypto from 0.41.0 to 0.42.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1456](https://github.com/lestrrat-go/jwx/pull/1456) - Bump actions/setup-go from 5.5.0 to 6.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1449](https://github.com/lestrrat-go/jwx/pull/1449) - Warh40k fix/connection leak by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1458](https://github.com/lestrrat-go/jwx/pull/1458) - Allow shutting down jwk cache by [@&#8203;adam-bates](https://github.com/adam-bates) in [#&#8203;1457](https://github.com/lestrrat-go/jwx/pull/1457) #### New Contributors - [@&#8203;adam-bates](https://github.com/adam-bates) made their first contribution in [#&#8203;1457](https://github.com/lestrrat-go/jwx/pull/1457) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.10...v3.0.11> ### [`v3.0.10`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.10) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.9...v3.0.10) #### What's Changed - Fix header not found error by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1435](https://github.com/lestrrat-go/jwx/pull/1435) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.9...v3.0.10> ### [`v3.0.9`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.9) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.8...v3.0.9) #### What's Changed - \[jwk] Implement X509 related code in jwkbb by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1423](https://github.com/lestrrat-go/jwx/pull/1423) - Tweak error message by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1424](https://github.com/lestrrat-go/jwx/pull/1424) - \[jwt] implement distinguishable jwt.Get errors by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1426](https://github.com/lestrrat-go/jwx/pull/1426) - Update bazel to v8 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1429](https://github.com/lestrrat-go/jwx/pull/1429) - Bump golang.org/x/crypto from 0.39.0 to 0.40.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1428](https://github.com/lestrrat-go/jwx/pull/1428) - Allow HeaderGetXXX() functions to differentiate not found / invalid headers by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1432](https://github.com/lestrrat-go/jwx/pull/1432) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.8...v3.0.9> ### [`v3.0.8`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.8) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.7...v3.0.8) #### What's Changed - change from interface{} to any by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1417](https://github.com/lestrrat-go/jwx/pull/1417) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1418](https://github.com/lestrrat-go/jwx/pull/1418) - Introduce jwe lower level API (jwebb), and refactor a bunch of things. by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1419](https://github.com/lestrrat-go/jwx/pull/1419) - \[jws/jwsbb] Add io.Reader for source of randomness by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1420](https://github.com/lestrrat-go/jwx/pull/1420) - Add package level doc for jwe by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1421](https://github.com/lestrrat-go/jwx/pull/1421) - Add jwsbb.HeaderParse by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1422](https://github.com/lestrrat-go/jwx/pull/1422) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.7...v3.0.8> ### [`v3.0.7`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.7) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.6...v3.0.7) #### What's Changed - Update examples by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1412](https://github.com/lestrrat-go/jwx/pull/1412) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1413](https://github.com/lestrrat-go/jwx/pull/1413) - Add error when signature could not be verified by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1414](https://github.com/lestrrat-go/jwx/pull/1414) - Add Header type for quick and dirty access to JWS headers by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1415](https://github.com/lestrrat-go/jwx/pull/1415) - Refactor jwsbb code by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1416](https://github.com/lestrrat-go/jwx/pull/1416) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.6...v3.0.7> ### [`v3.0.6`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.6) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.5...v3.0.6) #### What's Changed - Use shared constants for better legibility/greppability by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1398](https://github.com/lestrrat-go/jwx/pull/1398) - Rework pool objects by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1399](https://github.com/lestrrat-go/jwx/pull/1399) - Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 in /examples by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1395](https://github.com/lestrrat-go/jwx/pull/1395) - Add AppendEncode to the interface by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1400](https://github.com/lestrrat-go/jwx/pull/1400) - Upgrade option and blackmagic by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1401](https://github.com/lestrrat-go/jwx/pull/1401) - Add comparison benchmark by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1407](https://github.com/lestrrat-go/jwx/pull/1407) - Implement low-level API for jws, and incorporate it to JWT to achieve massive performance gains by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1408](https://github.com/lestrrat-go/jwx/pull/1408) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1409](https://github.com/lestrrat-go/jwx/pull/1409) - Rename comparison by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1410](https://github.com/lestrrat-go/jwx/pull/1410) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.5...v3.0.6> ### [`v3.0.5`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.5) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.4...v3.0.5) #### What's Changed - Revert "Improve performance ([#&#8203;1391](https://github.com/lestrrat-go/jwx/issues/1391))" by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1397](https://github.com/lestrrat-go/jwx/pull/1397) - v3.0.4 has also been retracted on go.mod **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.4...v3.0.5> ### [`v3.0.4`](https://github.com/lestrrat-go/jwx/compare/v3.0.3...v3.0.4) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.3...v3.0.4) ### [`v3.0.3`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.3) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.2...v3.0.3) #### What's Changed - Add more context to the errors by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1387](https://github.com/lestrrat-go/jwx/pull/1387) - Update httprc version by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1388](https://github.com/lestrrat-go/jwx/pull/1388) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.2...v3.0.3> ### [`v3.0.2`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.2) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.1...v3.0.2) #### What's Changed - Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1369](https://github.com/lestrrat-go/jwx/pull/1369) - Bump golang.org/x/crypto from 0.37.0 to 0.38.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1372](https://github.com/lestrrat-go/jwx/pull/1372) - Bump actions/setup-go from 5.4.0 to 5.5.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1373](https://github.com/lestrrat-go/jwx/pull/1373) - Add .deprecated field to algorithms in anticipation of future deprecations by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1374](https://github.com/lestrrat-go/jwx/pull/1374) - Add .deprecated field to algorithms in anticipation of future deprecations by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1376](https://github.com/lestrrat-go/jwx/pull/1376) - Add doc tweaks to [#&#8203;1380](https://github.com/lestrrat-go/jwx/issues/1380) by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1383](https://github.com/lestrrat-go/jwx/pull/1383) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1384](https://github.com/lestrrat-go/jwx/pull/1384) - Use jwk interfaces for each key type rather than concrete types by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1381](https://github.com/lestrrat-go/jwx/pull/1381) - Implement Filter objects for container types by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1377](https://github.com/lestrrat-go/jwx/pull/1377) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1386](https://github.com/lestrrat-go/jwx/pull/1386) - Implement generic AsMap by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1385](https://github.com/lestrrat-go/jwx/pull/1385) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.1...v3.0.2> ### [`v3.0.1`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.1) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.0...v3.0.1) #### What's Changed Please read the Changes file and upgrade accordingly, especially if you are using the following combinations for JWE: - DIRECT mode content encryption - Using A256CBC\_HS512 - With an erroneously created CEK of exactly 32-bytes. *** - Bump actions/cache from 4.2.1 to 4.2.3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1336](https://github.com/lestrrat-go/jwx/pull/1336) - Bump actions/checkout from 4.1.7 to 4.2.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1337](https://github.com/lestrrat-go/jwx/pull/1337) - Bump actions/setup-go from 5.0.2 to 5.4.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1338](https://github.com/lestrrat-go/jwx/pull/1338) - Update 02-jws.md by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1341](https://github.com/lestrrat-go/jwx/pull/1341) - Bump golang.org/x/crypto from 0.36.0 to 0.37.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1342](https://github.com/lestrrat-go/jwx/pull/1342) - Add the claim name to error messages produced by ClaimValueIs() by [@&#8203;jmalloc](https://github.com/jmalloc) in [#&#8203;1347](https://github.com/lestrrat-go/jwx/pull/1347) - Tweak comments generated by genwa under jwa directory by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1348](https://github.com/lestrrat-go/jwx/pull/1348) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1349](https://github.com/lestrrat-go/jwx/pull/1349) - Disable funcorder by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1351](https://github.com/lestrrat-go/jwx/pull/1351) - Update .golangci.yml by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1353](https://github.com/lestrrat-go/jwx/pull/1353) - Update github.com/lestrrat-go/blackmagic by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1352](https://github.com/lestrrat-go/jwx/pull/1352) - disable dependabot for develop/v1 branch by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1358](https://github.com/lestrrat-go/jwx/pull/1358) - jws: improve performance for SplitCompact/SplitCompactString by [@&#8203;drakkan](https://github.com/drakkan) in [#&#8203;1360](https://github.com/lestrrat-go/jwx/pull/1360) - jwe: use strings.Cut in parseCompact by [@&#8203;drakkan](https://github.com/drakkan) in [#&#8203;1362](https://github.com/lestrrat-go/jwx/pull/1362) - Update httprc to v3.0.0-beta2 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1364](https://github.com/lestrrat-go/jwx/pull/1364) - Create SECURITY.md by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1365](https://github.com/lestrrat-go/jwx/pull/1365) - \[v3] Explcitly check key sizes before passing to aes.NewCipher by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1367](https://github.com/lestrrat-go/jwx/pull/1367) #### New Contributors - [@&#8203;jmalloc](https://github.com/jmalloc) made their first contribution in [#&#8203;1347](https://github.com/lestrrat-go/jwx/pull/1347) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.0...v3.0.1> ### [`v3.0.0`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.0) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v2.1.6...v3.0.0) #### What's Changed - Add support for RSA-OAEP-384 and RSA-OAEP-512 by [@&#8203;Hannes-Kunnen](https://github.com/Hannes-Kunnen) in [#&#8203;1142](https://github.com/lestrrat-go/jwx/pull/1142) - fix: typos by [@&#8203;maro114510](https://github.com/maro114510) in [#&#8203;1145](https://github.com/lestrrat-go/jwx/pull/1145) - Update httprc to v1.0.6 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1150](https://github.com/lestrrat-go/jwx/pull/1150) - Improve API for checking algorithm characteristics around symmetry by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1151](https://github.com/lestrrat-go/jwx/pull/1151) - Fix typos/mistakes/wording/links in documentation/comments by [@&#8203;Hannes-Kunnen](https://github.com/Hannes-Kunnen) in [#&#8203;1152](https://github.com/lestrrat-go/jwx/pull/1152) - Apply changes from [#&#8203;1156](https://github.com/lestrrat-go/jwx/issues/1156) to v2 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1158](https://github.com/lestrrat-go/jwx/pull/1158) - Avoid problems on 32-bit systems by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1159](https://github.com/lestrrat-go/jwx/pull/1159) - Update minimum required go version to 1.20 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1161](https://github.com/lestrrat-go/jwx/pull/1161) - Run CI with minimum go version 1.20 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1162](https://github.com/lestrrat-go/jwx/pull/1162) - Bump golang.org/x/crypto from 0.24.0 to 0.25.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1149](https://github.com/lestrrat-go/jwx/pull/1149) - Deprecate jws.WithHeaders by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1163](https://github.com/lestrrat-go/jwx/pull/1163) - Bump golang.org/x/crypto from 0.25.0 to 0.26.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1168](https://github.com/lestrrat-go/jwx/pull/1168) - Fix document of how to parse PEM via CLI by [@&#8203;kg0r0](https://github.com/kg0r0) in [#&#8203;1174](https://github.com/lestrrat-go/jwx/pull/1174) - Wrap the errors from functions called within ParseRequest by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1176](https://github.com/lestrrat-go/jwx/pull/1176) - V3 modernize infra by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1180](https://github.com/lestrrat-go/jwx/pull/1180) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1181](https://github.com/lestrrat-go/jwx/pull/1181) - V3 dependabot by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1184](https://github.com/lestrrat-go/jwx/pull/1184) - Completely rework jwk.Cache using github.com/lestrrat-go/httprc/v3 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1189](https://github.com/lestrrat-go/jwx/pull/1189) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1190](https://github.com/lestrrat-go/jwx/pull/1190) - Use import by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1191](https://github.com/lestrrat-go/jwx/pull/1191) - include an extra attribute in the trace log for debugging by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1192](https://github.com/lestrrat-go/jwx/pull/1192) - remove old references and unused files by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1193](https://github.com/lestrrat-go/jwx/pull/1193) - Bump golang.org/x/crypto from 0.26.0 to 0.27.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1185](https://github.com/lestrrat-go/jwx/pull/1185) - cleanup docs, options around cache by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1194](https://github.com/lestrrat-go/jwx/pull/1194) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1195](https://github.com/lestrrat-go/jwx/pull/1195) - fix docs by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1196](https://github.com/lestrrat-go/jwx/pull/1196) - Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1197](https://github.com/lestrrat-go/jwx/pull/1197) - Allow flexible key usage values by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1198](https://github.com/lestrrat-go/jwx/pull/1198) - Remove assert by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1200](https://github.com/lestrrat-go/jwx/pull/1200) - Convert jwa constants to function calls returning objects by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1203](https://github.com/lestrrat-go/jwx/pull/1203) - Mention RegisterKeyUsage by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1201](https://github.com/lestrrat-go/jwx/pull/1201) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1206](https://github.com/lestrrat-go/jwx/pull/1206) - Change accessors in jwk to return (T, bool) by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1207](https://github.com/lestrrat-go/jwx/pull/1207) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1211](https://github.com/lestrrat-go/jwx/pull/1211) - Bump golang.org/x/crypto from 0.27.0 to 0.28.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1210](https://github.com/lestrrat-go/jwx/pull/1210) - Change JWT accessors from returning T to returning (T, bool) by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1212](https://github.com/lestrrat-go/jwx/pull/1212) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1213](https://github.com/lestrrat-go/jwx/pull/1213) - update comments to include iat ([#&#8203;1216](https://github.com/lestrrat-go/jwx/issues/1216)) by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1217](https://github.com/lestrrat-go/jwx/pull/1217) - Rename the old WithMaxBufferSize option as previously warned by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1218](https://github.com/lestrrat-go/jwx/pull/1218) - Streamline errors by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1220](https://github.com/lestrrat-go/jwx/pull/1220) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1221](https://github.com/lestrrat-go/jwx/pull/1221) - allow passing context.Contex to jwe.Decrypt by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1222](https://github.com/lestrrat-go/jwx/pull/1222) - Remove non-applicable comment by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1224](https://github.com/lestrrat-go/jwx/pull/1224) - fix document by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1226](https://github.com/lestrrat-go/jwx/pull/1226) - Remove jws.WithHeaders by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1227](https://github.com/lestrrat-go/jwx/pull/1227) - tweak badge URL by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1228](https://github.com/lestrrat-go/jwx/pull/1228) - Add quid pro quo in README by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1225](https://github.com/lestrrat-go/jwx/pull/1225) - Update serialize.go by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1234](https://github.com/lestrrat-go/jwx/pull/1234) - Lint fix by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1235](https://github.com/lestrrat-go/jwx/pull/1235) - Bump golang.org/x/crypto from 0.28.0 to 0.29.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1231](https://github.com/lestrrat-go/jwx/pull/1231) - Change random big value to math.MaxInt by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1241](https://github.com/lestrrat-go/jwx/pull/1241) - Bump pozil/auto-assign-issue from 2.0.0 to 2.0.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1238](https://github.com/lestrrat-go/jwx/pull/1238) - Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1245](https://github.com/lestrrat-go/jwx/pull/1245) - Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1269](https://github.com/lestrrat-go/jwx/pull/1269) - Bump pozil/auto-assign-issue from 2.0.1 to 2.1.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1261](https://github.com/lestrrat-go/jwx/pull/1261) - Bump golang.org/x/crypto from 0.29.0 to 0.32.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1263](https://github.com/lestrrat-go/jwx/pull/1263) - Bump actions/stale from 9.0.0 to 9.1.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1272](https://github.com/lestrrat-go/jwx/pull/1272) - \[v3] Fixes to work with go1.24 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1299](https://github.com/lestrrat-go/jwx/pull/1299) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1300](https://github.com/lestrrat-go/jwx/pull/1300) - Bump pozil/auto-assign-issue from 2.1.2 to 2.2.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1279](https://github.com/lestrrat-go/jwx/pull/1279) - Develop v3 actions cache by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1303](https://github.com/lestrrat-go/jwx/pull/1303) - Bump golangci/golangci-lint-action from 6.2.0 to 6.5.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1290](https://github.com/lestrrat-go/jwx/pull/1290) - Bump github.com/decred/dcrd/dcrec/secp256k1/v4 from 4.3.0 to 4.4.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1293](https://github.com/lestrrat-go/jwx/pull/1293) - Bump golang.org/x/crypto from 0.32.0 to 0.34.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1297](https://github.com/lestrrat-go/jwx/pull/1297) - Bump golang.org/x/crypto from 0.34.0 to 0.35.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1307](https://github.com/lestrrat-go/jwx/pull/1307) - jws/jwe: split token into fixed number of parts by [@&#8203;drakkan](https://github.com/drakkan) in [#&#8203;1308](https://github.com/lestrrat-go/jwx/pull/1308) - \[jwk] Change ecdh importer/exporter by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1315](https://github.com/lestrrat-go/jwx/pull/1315) - Bump golang.org/x/crypto from 0.35.0 to 0.36.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1312](https://github.com/lestrrat-go/jwx/pull/1312) - Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1316](https://github.com/lestrrat-go/jwx/pull/1316) - Change default behavior around truncation of time fields by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1318](https://github.com/lestrrat-go/jwx/pull/1318) - Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1320](https://github.com/lestrrat-go/jwx/pull/1320) - Tweaks on [#&#8203;1322](https://github.com/lestrrat-go/jwx/issues/1322) by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1323](https://github.com/lestrrat-go/jwx/pull/1323) - Bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;1325](https://github.com/lestrrat-go/jwx/pull/1325) - Implement AWS ALB User Claims parser by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1328](https://github.com/lestrrat-go/jwx/pull/1328) - Add docs for WithBase64Encoder by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1329](https://github.com/lestrrat-go/jwx/pull/1329) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1330](https://github.com/lestrrat-go/jwx/pull/1330) - avoid internal module by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1331](https://github.com/lestrrat-go/jwx/pull/1331) - Clear key.Precomputed values before testing equality by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;1333](https://github.com/lestrrat-go/jwx/pull/1333) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1332](https://github.com/lestrrat-go/jwx/pull/1332) - autodoc updates by [@&#8203;github-actions](https://github.com/github-actions) in [#&#8203;1334](https://github.com/lestrrat-go/jwx/pull/1334) #### New Contributors - [@&#8203;Hannes-Kunnen](https://github.com/Hannes-Kunnen) made their first contribution in [#&#8203;1142](https://github.com/lestrrat-go/jwx/pull/1142) - [@&#8203;maro114510](https://github.com/maro114510) made their first contribution in [#&#8203;1145](https://github.com/lestrrat-go/jwx/pull/1145) - [@&#8203;kg0r0](https://github.com/kg0r0) made their first contribution in [#&#8203;1174](https://github.com/lestrrat-go/jwx/pull/1174) - [@&#8203;drakkan](https://github.com/drakkan) made their first contribution in [#&#8203;1308](https://github.com/lestrrat-go/jwx/pull/1308) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v2.1.0...v3.0.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42Ni4xMSIsInVwZGF0ZWRJblZlciI6IjQyLjY2LjExIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
group_2759636_bot_1c34751f7eccad09e089ac15ee7bd902 commented 2025-12-29 16:04:32 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24 -> 1.24.0
github.com/lestrrat-go/blackmagic v1.0.3 -> v1.0.4
github.com/lestrrat-go/httpcc v1.0.1 -> v1.0.1
github.com/segmentio/asm v1.2.0 -> v1.2.1
### ℹ️ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 3 additional dependencies were updated - The `go` directive was updated for compatibility reasons Details: | **Package** | **Change** | | :---------------------------------- | :------------------- | | `go` | `1.24` -> `1.24.0` | | `github.com/lestrrat-go/blackmagic` | `v1.0.3` -> `v1.0.4` | | `github.com/lestrrat-go/httpcc` | `v1.0.1` -> `v1.0.1` | | `github.com/segmentio/asm` | `v1.2.0` -> `v1.2.1` |
group_2759636_bot_1c34751f7eccad09e089ac15ee7bd902 commented 2025-12-29 16:04:37 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

mentioned in issue #5

mentioned in issue #5
argoyle commented 2025-12-29 16:15:17 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

added 3 commits

  • 13c0543d...c951b8b2 - 2 commits from branch main
  • 058c8182 - fix(deps): update module github.com/lestrrat-go/jwx/v2 to v3

Compare with previous version

added 3 commits <ul><li>13c0543d...c951b8b2 - 2 commits from branch <code>main</code></li><li>058c8182 - fix(deps): update module github.com/lestrrat-go/jwx/v2 to v3</li></ul> [Compare with previous version](/unboundsoftware/auth0mock/-/merge_requests/222/diffs?diff_id=1612055463&start_sha=13c0543d4e0cb9775ca91f0d3969f61096bb529b)
argoyle (Migrated from gitlab.com) scheduled this pull request to auto merge when all checks succeed 2025-12-29 16:16:02 +00:00
argoyle (Migrated from gitlab.com) merged commit 84f3ce58b4 into main 2025-12-29 16:16:42 +00:00
argoyle commented 2025-12-29 16:16:43 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

mentioned in commit 84f3ce58b4

mentioned in commit 84f3ce58b45cde125f6a939e4955afde139bc718
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
dependencies
Pull requests that update a dependency file
 docker
javascript
security
Pull requests that address a security vulnerability
 severity:moderate
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
acctest (Shiny Acctest) argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) peter releaser (Unbound Releaser) renovate (Renovate Bot)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unboundsoftware/auth0mock#227
Delete Branch "renovate/github.com-lestrrat-go-jwx-v2-3.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?