fix(deps): update module github.com/lestrrat-go/jwx/v4 to v4.0.1 #306

2026-05-01T14:01:13Z

renovate commented

2026-05-01 14:01:13 +00:00

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/lestrrat-go/jwx/v4	`v4.0.0` → `v4.0.1`

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v4)

`v4.0.1`

Compare Source

What's Changed

docs: add jwxfilter to extension modules doc by @lestrrat in #2041
autodoc updates by @github-actions[bot] in #2042
docs: fix broken v3-to-v4.yaml link in Changes-v4.md by @lestrrat in #2048
guard ecdsa coordinates against oversized big.Int by @lestrrat in #2049
reject jwe with conflicting alg in protected vs per-recipient by @lestrrat in #2051
autodoc updates by @github-actions[bot] in #2053
docs: document PrivateClaims concurrency contract by @lestrrat in #2055
fix AddressClaim.MarshalJSON for non-printable bytes by @lestrrat in #2054
jwt: only call ParseForm when WithFormKey is supplied by @lestrrat in #2057
jws: jkuProvider rejects fetched keys marked use=enc by @lestrrat in #2059
jwk: refuse RegisterKeyImporter for built-in raw key types by @lestrrat in #2061
jwa: unify SignatureAlgorithm/KeyEncryption/ContentEncryption into one registry by @lestrrat in #2062
docs: jwkbb X509 registry is a privileged extension point by @lestrrat in #2067
docs(internals): record Settings unknown-option handling as design intent by @lestrrat in #2068
cmd/jwx: warn on private-key-to-tty + reject keysize<=0 for oct by @lestrrat in #2070
autodoc updates by @github-actions[bot] in #2069
fix jwxmigrate install path in MIGRATION.md by @lestrrat in #2076

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v4.0.0...v4.0.1

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lestrrat-go/jwx/v4](https://github.com/lestrrat-go/jwx) | `v4.0.0` → `v4.0.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2flestrrat-go%2fjwx%2fv4/v4.0.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2flestrrat-go%2fjwx%2fv4/v4.0.0/v4.0.1?slim=true) | --- ### Release Notes <details> <summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v4)</summary> ### [`v4.0.1`](https://github.com/lestrrat-go/jwx/releases/tag/v4.0.1) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v4.0.0...v4.0.1) #### What's Changed - docs: add jwxfilter to extension modules doc by [@lestrrat](https://github.com/lestrrat) in [#2041](https://github.com/lestrrat-go/jwx/pull/2041) - autodoc updates by [@github-actions](https://github.com/github-actions)\[bot] in [#2042](https://github.com/lestrrat-go/jwx/pull/2042) - docs: fix broken v3-to-v4.yaml link in Changes-v4.md by [@lestrrat](https://github.com/lestrrat) in [#2048](https://github.com/lestrrat-go/jwx/pull/2048) - guard ecdsa coordinates against oversized big.Int by [@lestrrat](https://github.com/lestrrat) in [#2049](https://github.com/lestrrat-go/jwx/pull/2049) - reject jwe with conflicting alg in protected vs per-recipient by [@lestrrat](https://github.com/lestrrat) in [#2051](https://github.com/lestrrat-go/jwx/pull/2051) - autodoc updates by [@github-actions](https://github.com/github-actions)\[bot] in [#2053](https://github.com/lestrrat-go/jwx/pull/2053) - docs: document PrivateClaims concurrency contract by [@lestrrat](https://github.com/lestrrat) in [#2055](https://github.com/lestrrat-go/jwx/pull/2055) - fix AddressClaim.MarshalJSON for non-printable bytes by [@lestrrat](https://github.com/lestrrat) in [#2054](https://github.com/lestrrat-go/jwx/pull/2054) - jwt: only call ParseForm when WithFormKey is supplied by [@lestrrat](https://github.com/lestrrat) in [#2057](https://github.com/lestrrat-go/jwx/pull/2057) - jws: jkuProvider rejects fetched keys marked use=enc by [@lestrrat](https://github.com/lestrrat) in [#2059](https://github.com/lestrrat-go/jwx/pull/2059) - jwk: refuse RegisterKeyImporter for built-in raw key types by [@lestrrat](https://github.com/lestrrat) in [#2061](https://github.com/lestrrat-go/jwx/pull/2061) - jwa: unify SignatureAlgorithm/KeyEncryption/ContentEncryption into one registry by [@lestrrat](https://github.com/lestrrat) in [#2062](https://github.com/lestrrat-go/jwx/pull/2062) - docs: jwkbb X509 registry is a privileged extension point by [@lestrrat](https://github.com/lestrrat) in [#2067](https://github.com/lestrrat-go/jwx/pull/2067) - docs(internals): record Settings unknown-option handling as design intent by [@lestrrat](https://github.com/lestrrat) in [#2068](https://github.com/lestrrat-go/jwx/pull/2068) - cmd/jwx: warn on private-key-to-tty + reject keysize<=0 for oct by [@lestrrat](https://github.com/lestrrat) in [#2070](https://github.com/lestrrat-go/jwx/pull/2070) - autodoc updates by [@github-actions](https://github.com/github-actions)\[bot] in [#2069](https://github.com/lestrrat-go/jwx/pull/2069) - fix jwxmigrate install path in MIGRATION.md by [@lestrrat](https://github.com/lestrrat) in [#2076](https://github.com/lestrrat-go/jwx/pull/2076) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v4.0.0...v4.0.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate added 1 commit 2026-05-01 14:01:15 +00:00

fix(deps): update module github.com/lestrrat-go/jwx/v4 to v4.0.1

renovate/stability-days Updates have met minimum release age requirement

Details

auth0mock / build (pull_request) Successful in 1m30s

Details

dcefb81abb

renovate scheduled this pull request to auto merge when all checks succeed 2026-05-01 14:01:16 +00:00

renovate merged commit 3fd070fbf3 into main

2026-05-01 14:04:11 +00:00

renovate deleted branch renovate/github.com-lestrrat-go-jwx-v4-4.x

2026-05-01 14:04:12 +00:00