fix(deps): update module github.com/lestrrat-go/jwx/v3 to v4 #297

2026-04-22T01:02:32Z

renovate commented

2026-04-22 01:02:32 +00:00

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/lestrrat-go/jwx/v3	`v3.1.0` → `v4.0.0`

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)

`v4.0.0`

Compare Source

Changes

v4 has many incompatibilities with v3. To see the full list of differences between
v3 and v4, please read the Changes-v4.md file. Coding Agents should read MIGRATION-v4.md

v4.0.0 - 19 Apr 2026

Initial v4 release. Major features:
- Lighter: Core / Companion module separation. Less dependencies in core.
- Faster: Use of generics and other optimizations make v4 2x~3x faster than before.
- Quantum-Ready: ML-KEM and ML-DSA, HPKE (+Hybrid) are supported through companion modules.
See Changes-v4.md for a full set of Changes since v3.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) | `v3.1.0` → `v4.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2flestrrat-go%2fjwx%2fv3/v4.0.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2flestrrat-go%2fjwx%2fv3/v3.1.0/v4.0.0?slim=true) | --- ### Release Notes <details> <summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)</summary> ### [`v4.0.0`](https://github.com/lestrrat-go/jwx/releases/tag/v4.0.0) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.1.0...v4.0.0) # Changes v4 has many incompatibilities with v3. To see the full list of differences between v3 and v4, please read the [Changes-v4.md file](./Changes-v4.md). Coding Agents should read [MIGRATION-v4.md](./MICRATION-v4.md) v4.0.0 - 19 Apr 2026 - Initial v4 release. Major features: - Lighter: Core / Companion module separation. Less dependencies in core. - Faster: Use of generics and other optimizations make v4 2x\~3x faster than before. - Quantum-Ready: ML-KEM and ML-DSA, HPKE (+Hybrid) are supported through companion modules. - See Changes-v4.md for a full set of Changes since v3. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate commented

2026-04-22 01:02:35 +00:00

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.0` -> `1.26.0`
`github.com/lestrrat-go/dsig`	`v1.0.0` -> `v1.3.0`

### ℹ️ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 1 additional dependency was updated - The `go` directive was updated for compatibility reasons Details: | **Package** | **Change** | | :---------------------------- | :------------------- | | `go` | `1.24.0` -> `1.26.0` | | `github.com/lestrrat-go/dsig` | `v1.0.0` -> `v1.3.0` |

renovate force-pushed renovate/github.com-lestrrat-go-jwx-v3-4.x from a4cdb4f2a1 to b9faf0b9b8

2026-04-22 02:02:50 +00:00

Compare

argoyle added 2 commits 2026-04-22 08:18:34 +00:00

fix(deps): update module github.com/lestrrat-go/jwx/v3 to v4 92307d1466

fix(deps): update module github.com/lestrrat-go/jwx/v3 to v4

auth0mock / build (pull_request) Successful in 2m13s

Details

c414d75c3d

Migrate to jwx v4 per MIGRATION.md:
- jwk.Import now generic; use jwk.Import[jwk.Key](raw)
- Set GOEXPERIMENT=jsonv2 (v4 uses encoding/json/v2)

argoyle force-pushed renovate/github.com-lestrrat-go-jwx-v3-4.x from b9faf0b9b8 to c414d75c3d

2026-04-22 08:18:34 +00:00

Compare

renovate commented

2026-04-22 09:01:02 +00:00

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

### Edited/Blocked Notification Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. ⚠️ **Warning**: custom changes will be lost.

argoyle merged commit 30282f3458 into main

2026-04-22 09:05:26 +00:00

argoyle deleted branch renovate/github.com-lestrrat-go-jwx-v3-4.x

2026-04-22 09:05:27 +00:00

releaser referenced this pull request

2026-04-22 09:15:06 +00:00

chore(release): prepare for 0.7.3 #300

argoyle referenced this issue from a commit

2026-04-22 09:39:19 +00:00

chore(release): prepare for 0.7.3 (#300)

Sign in to join this conversation.