unboundsoftware/auth0mock
6
0 Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases 22 Activity

fix(deps): update module github.com/lestrrat-go/jwx/v4 to v4.6.0 #457

Merged
renovate merged 1 commits from renovate/github.com-lestrrat-go-jwx-v4-4.x into main 2026-10-26 08:47:25 +00:00
Conversation 1 Commits 1 Files Changed 2
+4 -10
renovate commented 2026-10-26 08:45:59 +00:00
Owner
Copy link
Copy source

This PR contains the following updates:

Package Change Age Confidence
github.com/lestrrat-go/jwx/v4 v4.5.0 → v4.6.0 age confidence

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v4)

v4.6.0

Compare Source

For more detailed release notes, see Changes.

What's Changed

New Contributors

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v4.5.0...v4.6.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lestrrat-go/jwx/v4](https://github.com/lestrrat-go/jwx) | `v4.5.0` → `v4.6.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2flestrrat-go%2fjwx%2fv4/v4.6.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2flestrrat-go%2fjwx%2fv4/v4.5.0/v4.6.0?slim=true) | --- ### Release Notes <details> <summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v4)</summary> ### [`v4.6.0`](https://github.com/lestrrat-go/jwx/releases/tag/v4.6.0) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v4.5.0...v4.6.0) For more detailed release notes, see [Changes](https://github.com/lestrrat-go/jwx/blob/v4.6.0/Changes). #### What's Changed - build(deps): bump github/codeql-action from 4.37.9 to 4.38.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2354](https://github.com/lestrrat-go/jwx/pull/2354) - build(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2353](https://github.com/lestrrat-go/jwx/pull/2353) - update jwx v4 guide by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2355](https://github.com/lestrrat-go/jwx/pull/2355) - require guide skill tests after API changes by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2356](https://github.com/lestrrat-go/jwx/pull/2356) - build(deps): bump github/codeql-action from 4.38.0 to 4.38.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2359](https://github.com/lestrrat-go/jwx/pull/2359) - build(deps): bump github/codeql-action from 4.38.1 to 4.38.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2362](https://github.com/lestrrat-go/jwx/pull/2362) - jwt: reject overflowing NumericDate values by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2368](https://github.com/lestrrat-go/jwx/pull/2368) - jwt: require numbers for pedantic NumericDate by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2369](https://github.com/lestrrat-go/jwx/pull/2369) - jws: support strict ECDSA curve checking during verification by [@&#8203;skarm](https://github.com/skarm) in [#&#8203;2367](https://github.com/lestrrat-go/jwx/pull/2367) - \[v4] replace fastjson header probes with jsontext by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2379](https://github.com/lestrrat-go/jwx/pull/2379) - \[v4] allow jwk set mutation during iteration by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2380](https://github.com/lestrrat-go/jwx/pull/2380) - \[v4] fix jwt.Parse fast path with multiple keys by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2382](https://github.com/lestrrat-go/jwx/pull/2382) - \[v4] fix jwt.Equal for map claims and member order by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2383](https://github.com/lestrrat-go/jwx/pull/2383) - \[v4] keep trying jwe key providers after errors by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2384](https://github.com/lestrrat-go/jwx/pull/2384) - \[v4] allow empty jwe ciphertext in JSON form by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2386](https://github.com/lestrrat-go/jwx/pull/2386) - \[v4] write jwe unprotected header as JSON object by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2388](https://github.com/lestrrat-go/jwx/pull/2388) - handle shrinking JWK sets in verify and decrypt by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2394](https://github.com/lestrrat-go/jwx/pull/2394) - \[v4] jwsbb: size SignBuffer per encoded part by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2400](https://github.com/lestrrat-go/jwx/pull/2400) - \[v4] docs: fix wrong names and links in jwe/jwt by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2403](https://github.com/lestrrat-go/jwx/pull/2403) - \[v4] guide: add nested JWT section by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2404](https://github.com/lestrrat-go/jwx/pull/2404) - \[v4] jwt: honor NumericDate format precision by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2409](https://github.com/lestrrat-go/jwx/pull/2409) - \[v4] jwt: parse negative NumericDate values by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2411](https://github.com/lestrrat-go/jwx/pull/2411) - \[v4] jwt: parse decimal NumericDate values exactly by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2413](https://github.com/lestrrat-go/jwx/pull/2413) - build(deps): bump github/codeql-action from 4.38.2 to 4.38.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2421](https://github.com/lestrrat-go/jwx/pull/2421) - build(deps): bump golang.org/x/crypto from 0.57.0 to 0.58.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2420](https://github.com/lestrrat-go/jwx/pull/2420) - \[v4] jws: sign only the protected header in JSON by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2415](https://github.com/lestrrat-go/jwx/pull/2415) - \[v4] jwt: retry missing alg through jws.Verify by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2422](https://github.com/lestrrat-go/jwx/pull/2422) - Fix typo in migration documentation link by [@&#8203;frostmar](https://github.com/frostmar) in [#&#8203;2425](https://github.com/lestrrat-go/jwx/pull/2425) - build(deps): bump github/codeql-action from 4.38.3 to 4.39.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2428](https://github.com/lestrrat-go/jwx/pull/2428) - use crypto/pbkdf2 and drop x/crypto by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2430](https://github.com/lestrrat-go/jwx/pull/2430) - require latest go patch release by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2432](https://github.com/lestrrat-go/jwx/pull/2432) - use shields.io for the deepwiki badge by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2433](https://github.com/lestrrat-go/jwx/pull/2433) - \[v4] jws: add WithVerifiedSignature verify option by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2434](https://github.com/lestrrat-go/jwx/pull/2434) - \[v4] jwe: add WithDecryptedRecipient decrypt option by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2438](https://github.com/lestrrat-go/jwx/pull/2438) - \[v4] jws: fix crit and multi-signature docs by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2435](https://github.com/lestrrat-go/jwx/pull/2435) - \[v4] jwe: document per-recipient headers by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2439](https://github.com/lestrrat-go/jwx/pull/2439) - \[v4] ci: run autodoc only for develop/v4 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2446](https://github.com/lestrrat-go/jwx/pull/2446) - \[v4] release v4.6.0 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2448](https://github.com/lestrrat-go/jwx/pull/2448) #### New Contributors - [@&#8203;skarm](https://github.com/skarm) made their first contribution in [#&#8203;2367](https://github.com/lestrrat-go/jwx/pull/2367) - [@&#8203;frostmar](https://github.com/frostmar) made their first contribution in [#&#8203;2425](https://github.com/lestrrat-go/jwx/pull/2425) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v4.5.0...v4.6.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODEuOSIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MS45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate added 1 commit 2026-10-26 08:45:59 +00:00
fix(deps): update module github.com/lestrrat-go/jwx/v4 to v4.6.0
renovate/stability-days Updates have met minimum release age requirement
Details
auth0mock / build (pull_request) Successful in 1m18s
Details
746ced5b99
renovate scheduled this pull request to auto merge when all checks succeed 2026-10-26 08:46:00 +00:00
renovate commented 2026-10-26 08:46:00 +00:00
Author
Owner
Copy link
Copy source

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package Change
go 1.26.0 -> 1.26.10
### ℹ️ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - The `go` directive was updated for compatibility reasons Due to Go's usage of [Minimal Version Selection (MVS)](https://go.dev/ref/mod#minimal-version-selection), these packages have been updated to the minimum version available, so will still abide by `minimumReleaseAge=3 days` Details: | **Package** | **Change** | | :---------- | :-------------------- | | `go` | `1.26.0` -> `1.26.10` |
renovate merged commit d83bccdf6a into main 2026-10-26 08:47:25 +00:00
renovate deleted branch renovate/github.com-lestrrat-go-jwx-v4-4.x 2026-10-26 08:47:25 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
dependencies
Pull requests that update a dependency file
 docker
javascript
security
Pull requests that address a security vulnerability
 severity:moderate
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
acctest (Shiny Acctest) argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) peter (Peter Svensson) releaser (Unbound Releaser) renovate (Renovate Bot)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unboundsoftware/auth0mock#457