fix(deps): update module github.com/lestrrat-go/jwx/v2 to v3 #227

2025-12-29T16:04:29Z

group_2759636_bot_1c34751f7eccad09e089ac15ee7bd902 commented

2025-12-29 16:04:29 +00:00

(Migrated from gitlab.com)

This MR contains the following updates:

Package	Change	Age	Confidence
github.com/lestrrat-go/jwx/v2	`v2.1.6` → `v3.0.12`

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v2)

`v3.0.12`

Compare Source

What's Changed

Change go.mod version requirements to go 1.24.0 and introduce toolchain directive by @henrymcconville in #1465
Use go.mod for go version in Bazel module by @henrymcconville in #1466
Enable legacy signers by default, and explicitly populate new signer instances by @lestrrat in #1460
autodoc updates by @github-actions[bot] in #1475
Fix godoclint issues by @babakks in #1469
Bump actions/cache from 4.2.4 to 4.3.0 by @dependabot[bot] in #1463
Bump actions/stale from 10.0.0 to 10.1.0 by @dependabot[bot] in #1468
Bump github.com/segmentio/asm from 1.2.0 to 1.2.1 by @dependabot[bot] in #1462
Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #1472
Bump golang.org/x/crypto from 0.42.0 to 0.43.0 by @dependabot[bot] in #1474
revive godoclint by @lestrrat in #1478
[jwe] Add option to explicitly clear per-recipient headers ("header") for flattened JSON serialization by @lestrrat in #1477
autodoc updates by @github-actions[bot] in #1480

New Contributors

@henrymcconville made their first contribution in #1465
@babakks made their first contribution in #1469

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.11...v3.0.12

`v3.0.11`

Compare Source

What's Changed

Bump actions/cache from 4.2.3 to 4.2.4 by @dependabot[bot] in #1438
Bump golang.org/x/crypto from 0.40.0 to 0.41.0 by @dependabot[bot] in #1436
[jwe] Work with non X25519 ECDH encryption by @lestrrat in #1442
Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #1440
Separate out signature generation / verification into its own framework by @lestrrat in #1439
Bump github.com/lestrrat-go/httprc/v3 from 3.0.0 to 3.0.1 by @dependabot[bot] in #1443
Bump actions/stale from 9.1.0 to 10.0.0 by @dependabot[bot] in #1451
Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in #1447
Bump golang.org/x/crypto from 0.41.0 to 0.42.0 by @dependabot[bot] in #1456
Bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #1449
Warh40k fix/connection leak by @lestrrat in #1458
Allow shutting down jwk cache by @adam-bates in #1457

New Contributors

@adam-bates made their first contribution in #1457

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.10...v3.0.11

`v3.0.10`

Compare Source

What's Changed

Fix header not found error by @lestrrat in #1435

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.9...v3.0.10

`v3.0.9`

Compare Source

What's Changed

[jwk] Implement X509 related code in jwkbb by @lestrrat in #1423
Tweak error message by @lestrrat in #1424
[jwt] implement distinguishable jwt.Get errors by @lestrrat in #1426
Update bazel to v8 by @lestrrat in #1429
Bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @dependabot[bot] in #1428
Allow HeaderGetXXX() functions to differentiate not found / invalid headers by @lestrrat in #1432

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.8...v3.0.9

`v3.0.8`

Compare Source

What's Changed

change from interface{} to any by @lestrrat in #1417
autodoc updates by @github-actions in #1418
Introduce jwe lower level API (jwebb), and refactor a bunch of things. by @lestrrat in #1419
[jws/jwsbb] Add io.Reader for source of randomness by @lestrrat in #1420
Add package level doc for jwe by @lestrrat in #1421
Add jwsbb.HeaderParse by @lestrrat in #1422

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.7...v3.0.8

`v3.0.7`

Compare Source

What's Changed

Update examples by @lestrrat in #1412
autodoc updates by @github-actions in #1413
Add error when signature could not be verified by @lestrrat in #1414
Add Header type for quick and dirty access to JWS headers by @lestrrat in #1415
Refactor jwsbb code by @lestrrat in #1416

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.6...v3.0.7

`v3.0.6`

Compare Source

What's Changed

Use shared constants for better legibility/greppability by @lestrrat in #1398
Rework pool objects by @lestrrat in #1399
Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 in /examples by @dependabot in #1395
Add AppendEncode to the interface by @lestrrat in #1400
Upgrade option and blackmagic by @lestrrat in #1401
Add comparison benchmark by @lestrrat in #1407
Implement low-level API for jws, and incorporate it to JWT to achieve massive performance gains by @lestrrat in #1408
autodoc updates by @github-actions in #1409
Rename comparison by @lestrrat in #1410

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.5...v3.0.6

`v3.0.5`

Compare Source

What's Changed

Revert "Improve performance (#1391)" by @lestrrat in #1397
v3.0.4 has also been retracted on go.mod

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.4...v3.0.5

`v3.0.4`

Compare Source

`v3.0.3`

Compare Source

What's Changed

Add more context to the errors by @lestrrat in #1387
Update httprc version by @lestrrat in #1388

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.2...v3.0.3

`v3.0.2`

Compare Source

What's Changed

Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by @dependabot in #1369
Bump golang.org/x/crypto from 0.37.0 to 0.38.0 by @dependabot in #1372
Bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in #1373
Add .deprecated field to algorithms in anticipation of future deprecations by @lestrrat in #1374
Add .deprecated field to algorithms in anticipation of future deprecations by @lestrrat in #1376
Add doc tweaks to #1380 by @lestrrat in #1383
autodoc updates by @github-actions in #1384
Use jwk interfaces for each key type rather than concrete types by @lestrrat in #1381
Implement Filter objects for container types by @lestrrat in #1377
autodoc updates by @github-actions in #1386
Implement generic AsMap by @lestrrat in #1385

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.1...v3.0.2

`v3.0.1`

Compare Source

What's Changed

Please read the Changes file and upgrade accordingly, especially if you are using the following combinations for JWE:

DIRECT mode content encryption
Using A256CBC_HS512
With an erroneously created CEK of exactly 32-bytes.

Bump actions/cache from 4.2.1 to 4.2.3 by @dependabot in #1336
Bump actions/checkout from 4.1.7 to 4.2.2 by @dependabot in #1337
Bump actions/setup-go from 5.0.2 to 5.4.0 by @dependabot in #1338
Update 02-jws.md by @lestrrat in #1341
Bump golang.org/x/crypto from 0.36.0 to 0.37.0 by @dependabot in #1342
Add the claim name to error messages produced by ClaimValueIs() by @jmalloc in #1347
Tweak comments generated by genwa under jwa directory by @lestrrat in #1348
autodoc updates by @github-actions in #1349
Disable funcorder by @lestrrat in #1351
Update .golangci.yml by @lestrrat in #1353
Update github.com/lestrrat-go/blackmagic by @lestrrat in #1352
disable dependabot for develop/v1 branch by @lestrrat in #1358
jws: improve performance for SplitCompact/SplitCompactString by @drakkan in #1360
jwe: use strings.Cut in parseCompact by @drakkan in #1362
Update httprc to v3.0.0-beta2 by @lestrrat in #1364
Create SECURITY.md by @lestrrat in #1365
[v3] Explcitly check key sizes before passing to aes.NewCipher by @lestrrat in #1367

New Contributors

@jmalloc made their first contribution in #1347

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.0.0...v3.0.1

`v3.0.0`

Compare Source

What's Changed

Add support for RSA-OAEP-384 and RSA-OAEP-512 by @Hannes-Kunnen in #1142
fix: typos by @maro114510 in #1145
Update httprc to v1.0.6 by @lestrrat in #1150
Improve API for checking algorithm characteristics around symmetry by @lestrrat in #1151
Fix typos/mistakes/wording/links in documentation/comments by @Hannes-Kunnen in #1152
Apply changes from #1156 to v2 by @lestrrat in #1158
Avoid problems on 32-bit systems by @lestrrat in #1159
Update minimum required go version to 1.20 by @lestrrat in #1161
Run CI with minimum go version 1.20 by @lestrrat in #1162
Bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #1149
Deprecate jws.WithHeaders by @lestrrat in #1163
Bump golang.org/x/crypto from 0.25.0 to 0.26.0 by @dependabot in #1168
Fix document of how to parse PEM via CLI by @kg0r0 in #1174
Wrap the errors from functions called within ParseRequest by @lestrrat in #1176
V3 modernize infra by @lestrrat in #1180
autodoc updates by @github-actions in #1181
V3 dependabot by @lestrrat in #1184
Completely rework jwk.Cache using github.com/lestrrat-go/httprc/v3 by @lestrrat in #1189
autodoc updates by @github-actions in #1190
Use import by @lestrrat in #1191
include an extra attribute in the trace log for debugging by @lestrrat in #1192
remove old references and unused files by @lestrrat in #1193
Bump golang.org/x/crypto from 0.26.0 to 0.27.0 by @dependabot in #1185
cleanup docs, options around cache by @lestrrat in #1194
autodoc updates by @github-actions in #1195
fix docs by @lestrrat in #1196
Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by @dependabot in #1197
Allow flexible key usage values by @lestrrat in #1198
Remove assert by @lestrrat in #1200
Convert jwa constants to function calls returning objects by @lestrrat in #1203
Mention RegisterKeyUsage by @lestrrat in #1201
autodoc updates by @github-actions in #1206
Change accessors in jwk to return (T, bool) by @lestrrat in #1207
autodoc updates by @github-actions in #1211
Bump golang.org/x/crypto from 0.27.0 to 0.28.0 by @dependabot in #1210
Change JWT accessors from returning T to returning (T, bool) by @lestrrat in #1212
autodoc updates by @github-actions in #1213
update comments to include iat (#1216) by @lestrrat in #1217
Rename the old WithMaxBufferSize option as previously warned by @lestrrat in #1218
Streamline errors by @lestrrat in #1220
autodoc updates by @github-actions in #1221
allow passing context.Contex to jwe.Decrypt by @lestrrat in #1222
Remove non-applicable comment by @lestrrat in #1224
fix document by @lestrrat in #1226
Remove jws.WithHeaders by @lestrrat in #1227
tweak badge URL by @lestrrat in #1228
Add quid pro quo in README by @lestrrat in #1225
Update serialize.go by @lestrrat in #1234
Lint fix by @lestrrat in #1235
Bump golang.org/x/crypto from 0.28.0 to 0.29.0 by @dependabot in #1231
Change random big value to math.MaxInt by @lestrrat in #1241
Bump pozil/auto-assign-issue from 2.0.0 to 2.0.1 by @dependabot in #1238
Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #1245
Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 by @dependabot in #1269
Bump pozil/auto-assign-issue from 2.0.1 to 2.1.2 by @dependabot in #1261
Bump golang.org/x/crypto from 0.29.0 to 0.32.0 by @dependabot in #1263
Bump actions/stale from 9.0.0 to 9.1.0 by @dependabot in #1272
[v3] Fixes to work with go1.24 by @lestrrat in #1299
autodoc updates by @github-actions in #1300
Bump pozil/auto-assign-issue from 2.1.2 to 2.2.0 by @dependabot in #1279
Develop v3 actions cache by @lestrrat in #1303
Bump golangci/golangci-lint-action from 6.2.0 to 6.5.0 by @dependabot in #1290
Bump github.com/decred/dcrd/dcrec/secp256k1/v4 from 4.3.0 to 4.4.0 by @dependabot in #1293
Bump golang.org/x/crypto from 0.32.0 to 0.34.0 by @dependabot in #1297
Bump golang.org/x/crypto from 0.34.0 to 0.35.0 by @dependabot in #1307
jws/jwe: split token into fixed number of parts by @drakkan in #1308
[jwk] Change ecdh importer/exporter by @lestrrat in #1315
Bump golang.org/x/crypto from 0.35.0 to 0.36.0 by @dependabot in #1312
Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by @dependabot in #1316
Change default behavior around truncation of time fields by @lestrrat in #1318
Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by @dependabot in #1320
Tweaks on #1322 by @lestrrat in #1323
Bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 by @dependabot in #1325
Implement AWS ALB User Claims parser by @lestrrat in #1328
Add docs for WithBase64Encoder by @lestrrat in #1329
autodoc updates by @github-actions in #1330
avoid internal module by @lestrrat in #1331
Clear key.Precomputed values before testing equality by @lestrrat in #1333
autodoc updates by @github-actions in #1332
autodoc updates by @github-actions in #1334

New Contributors

@Hannes-Kunnen made their first contribution in #1142
@maro114510 made their first contribution in #1145
@kg0r0 made their first contribution in #1174
@drakkan made their first contribution in #1308

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v2.1.0...v3.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

This MR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lestrrat-go/jwx/v2](https://github.com/lestrrat-go/jwx) | `v2.1.6` → `v3.0.12` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2flestrrat-go%2fjwx%2fv2/v3.0.12?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2flestrrat-go%2fjwx%2fv2/v2.1.6/v3.0.12?slim=true) | --- ### Release Notes <details> <summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v2)</summary> ### [`v3.0.12`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.12) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.11...v3.0.12) #### What's Changed - Change go.mod version requirements to go 1.24.0 and introduce toolchain directive by [@henrymcconville](https://github.com/henrymcconville) in [#1465](https://github.com/lestrrat-go/jwx/pull/1465) - Use go.mod for go version in Bazel module by [@henrymcconville](https://github.com/henrymcconville) in [#1466](https://github.com/lestrrat-go/jwx/pull/1466) - Enable legacy signers by default, and explicitly populate new signer instances by [@lestrrat](https://github.com/lestrrat) in [#1460](https://github.com/lestrrat-go/jwx/pull/1460) - autodoc updates by [@github-actions](https://github.com/github-actions)\[bot] in [#1475](https://github.com/lestrrat-go/jwx/pull/1475) - Fix `godoclint` issues by [@babakks](https://github.com/babakks) in [#1469](https://github.com/lestrrat-go/jwx/pull/1469) - Bump actions/cache from 4.2.4 to 4.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1463](https://github.com/lestrrat-go/jwx/pull/1463) - Bump actions/stale from 10.0.0 to 10.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1468](https://github.com/lestrrat-go/jwx/pull/1468) - Bump github.com/segmentio/asm from 1.2.0 to 1.2.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1462](https://github.com/lestrrat-go/jwx/pull/1462) - Bump github/codeql-action from 3 to 4 by [@dependabot](https://github.com/dependabot)\[bot] in [#1472](https://github.com/lestrrat-go/jwx/pull/1472) - Bump golang.org/x/crypto from 0.42.0 to 0.43.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1474](https://github.com/lestrrat-go/jwx/pull/1474) - revive godoclint by [@lestrrat](https://github.com/lestrrat) in [#1478](https://github.com/lestrrat-go/jwx/pull/1478) - \[jwe] Add option to explicitly clear per-recipient headers (`"header"`) for flattened JSON serialization by [@lestrrat](https://github.com/lestrrat) in [#1477](https://github.com/lestrrat-go/jwx/pull/1477) - autodoc updates by [@github-actions](https://github.com/github-actions)\[bot] in [#1480](https://github.com/lestrrat-go/jwx/pull/1480) #### New Contributors - [@henrymcconville](https://github.com/henrymcconville) made their first contribution in [#1465](https://github.com/lestrrat-go/jwx/pull/1465) - [@babakks](https://github.com/babakks) made their first contribution in [#1469](https://github.com/lestrrat-go/jwx/pull/1469) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.11...v3.0.12> ### [`v3.0.11`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.11) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.10...v3.0.11) #### What's Changed - Bump actions/cache from 4.2.3 to 4.2.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#1438](https://github.com/lestrrat-go/jwx/pull/1438) - Bump golang.org/x/crypto from 0.40.0 to 0.41.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1436](https://github.com/lestrrat-go/jwx/pull/1436) - \[jwe] Work with non X25519 ECDH encryption by [@lestrrat](https://github.com/lestrrat) in [#1442](https://github.com/lestrrat-go/jwx/pull/1442) - Bump actions/checkout from 4.2.2 to 5.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1440](https://github.com/lestrrat-go/jwx/pull/1440) - Separate out signature generation / verification into its own framework by [@lestrrat](https://github.com/lestrrat) in [#1439](https://github.com/lestrrat-go/jwx/pull/1439) - Bump github.com/lestrrat-go/httprc/v3 from 3.0.0 to 3.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1443](https://github.com/lestrrat-go/jwx/pull/1443) - Bump actions/stale from 9.1.0 to 10.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1451](https://github.com/lestrrat-go/jwx/pull/1451) - Bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1447](https://github.com/lestrrat-go/jwx/pull/1447) - Bump golang.org/x/crypto from 0.41.0 to 0.42.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1456](https://github.com/lestrrat-go/jwx/pull/1456) - Bump actions/setup-go from 5.5.0 to 6.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1449](https://github.com/lestrrat-go/jwx/pull/1449) - Warh40k fix/connection leak by [@lestrrat](https://github.com/lestrrat) in [#1458](https://github.com/lestrrat-go/jwx/pull/1458) - Allow shutting down jwk cache by [@adam-bates](https://github.com/adam-bates) in [#1457](https://github.com/lestrrat-go/jwx/pull/1457) #### New Contributors - [@adam-bates](https://github.com/adam-bates) made their first contribution in [#1457](https://github.com/lestrrat-go/jwx/pull/1457) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.10...v3.0.11> ### [`v3.0.10`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.10) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.9...v3.0.10) #### What's Changed - Fix header not found error by [@lestrrat](https://github.com/lestrrat) in [#1435](https://github.com/lestrrat-go/jwx/pull/1435) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.9...v3.0.10> ### [`v3.0.9`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.9) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.8...v3.0.9) #### What's Changed - \[jwk] Implement X509 related code in jwkbb by [@lestrrat](https://github.com/lestrrat) in [#1423](https://github.com/lestrrat-go/jwx/pull/1423) - Tweak error message by [@lestrrat](https://github.com/lestrrat) in [#1424](https://github.com/lestrrat-go/jwx/pull/1424) - \[jwt] implement distinguishable jwt.Get errors by [@lestrrat](https://github.com/lestrrat) in [#1426](https://github.com/lestrrat-go/jwx/pull/1426) - Update bazel to v8 by [@lestrrat](https://github.com/lestrrat) in [#1429](https://github.com/lestrrat-go/jwx/pull/1429) - Bump golang.org/x/crypto from 0.39.0 to 0.40.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1428](https://github.com/lestrrat-go/jwx/pull/1428) - Allow HeaderGetXXX() functions to differentiate not found / invalid headers by [@lestrrat](https://github.com/lestrrat) in [#1432](https://github.com/lestrrat-go/jwx/pull/1432) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.8...v3.0.9> ### [`v3.0.8`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.8) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.7...v3.0.8) #### What's Changed - change from interface{} to any by [@lestrrat](https://github.com/lestrrat) in [#1417](https://github.com/lestrrat-go/jwx/pull/1417) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1418](https://github.com/lestrrat-go/jwx/pull/1418) - Introduce jwe lower level API (jwebb), and refactor a bunch of things. by [@lestrrat](https://github.com/lestrrat) in [#1419](https://github.com/lestrrat-go/jwx/pull/1419) - \[jws/jwsbb] Add io.Reader for source of randomness by [@lestrrat](https://github.com/lestrrat) in [#1420](https://github.com/lestrrat-go/jwx/pull/1420) - Add package level doc for jwe by [@lestrrat](https://github.com/lestrrat) in [#1421](https://github.com/lestrrat-go/jwx/pull/1421) - Add jwsbb.HeaderParse by [@lestrrat](https://github.com/lestrrat) in [#1422](https://github.com/lestrrat-go/jwx/pull/1422) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.7...v3.0.8> ### [`v3.0.7`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.7) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.6...v3.0.7) #### What's Changed - Update examples by [@lestrrat](https://github.com/lestrrat) in [#1412](https://github.com/lestrrat-go/jwx/pull/1412) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1413](https://github.com/lestrrat-go/jwx/pull/1413) - Add error when signature could not be verified by [@lestrrat](https://github.com/lestrrat) in [#1414](https://github.com/lestrrat-go/jwx/pull/1414) - Add Header type for quick and dirty access to JWS headers by [@lestrrat](https://github.com/lestrrat) in [#1415](https://github.com/lestrrat-go/jwx/pull/1415) - Refactor jwsbb code by [@lestrrat](https://github.com/lestrrat) in [#1416](https://github.com/lestrrat-go/jwx/pull/1416) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.6...v3.0.7> ### [`v3.0.6`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.6) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.5...v3.0.6) #### What's Changed - Use shared constants for better legibility/greppability by [@lestrrat](https://github.com/lestrrat) in [#1398](https://github.com/lestrrat-go/jwx/pull/1398) - Rework pool objects by [@lestrrat](https://github.com/lestrrat) in [#1399](https://github.com/lestrrat-go/jwx/pull/1399) - Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 in /examples by [@dependabot](https://github.com/dependabot) in [#1395](https://github.com/lestrrat-go/jwx/pull/1395) - Add AppendEncode to the interface by [@lestrrat](https://github.com/lestrrat) in [#1400](https://github.com/lestrrat-go/jwx/pull/1400) - Upgrade option and blackmagic by [@lestrrat](https://github.com/lestrrat) in [#1401](https://github.com/lestrrat-go/jwx/pull/1401) - Add comparison benchmark by [@lestrrat](https://github.com/lestrrat) in [#1407](https://github.com/lestrrat-go/jwx/pull/1407) - Implement low-level API for jws, and incorporate it to JWT to achieve massive performance gains by [@lestrrat](https://github.com/lestrrat) in [#1408](https://github.com/lestrrat-go/jwx/pull/1408) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1409](https://github.com/lestrrat-go/jwx/pull/1409) - Rename comparison by [@lestrrat](https://github.com/lestrrat) in [#1410](https://github.com/lestrrat-go/jwx/pull/1410) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.5...v3.0.6> ### [`v3.0.5`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.5) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.4...v3.0.5) #### What's Changed - Revert "Improve performance ([#1391](https://github.com/lestrrat-go/jwx/issues/1391))" by [@lestrrat](https://github.com/lestrrat) in [#1397](https://github.com/lestrrat-go/jwx/pull/1397) - v3.0.4 has also been retracted on go.mod **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.4...v3.0.5> ### [`v3.0.4`](https://github.com/lestrrat-go/jwx/compare/v3.0.3...v3.0.4) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.3...v3.0.4) ### [`v3.0.3`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.3) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.2...v3.0.3) #### What's Changed - Add more context to the errors by [@lestrrat](https://github.com/lestrrat) in [#1387](https://github.com/lestrrat-go/jwx/pull/1387) - Update httprc version by [@lestrrat](https://github.com/lestrrat) in [#1388](https://github.com/lestrrat-go/jwx/pull/1388) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.2...v3.0.3> ### [`v3.0.2`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.2) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.1...v3.0.2) #### What's Changed - Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by [@dependabot](https://github.com/dependabot) in [#1369](https://github.com/lestrrat-go/jwx/pull/1369) - Bump golang.org/x/crypto from 0.37.0 to 0.38.0 by [@dependabot](https://github.com/dependabot) in [#1372](https://github.com/lestrrat-go/jwx/pull/1372) - Bump actions/setup-go from 5.4.0 to 5.5.0 by [@dependabot](https://github.com/dependabot) in [#1373](https://github.com/lestrrat-go/jwx/pull/1373) - Add .deprecated field to algorithms in anticipation of future deprecations by [@lestrrat](https://github.com/lestrrat) in [#1374](https://github.com/lestrrat-go/jwx/pull/1374) - Add .deprecated field to algorithms in anticipation of future deprecations by [@lestrrat](https://github.com/lestrrat) in [#1376](https://github.com/lestrrat-go/jwx/pull/1376) - Add doc tweaks to [#1380](https://github.com/lestrrat-go/jwx/issues/1380) by [@lestrrat](https://github.com/lestrrat) in [#1383](https://github.com/lestrrat-go/jwx/pull/1383) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1384](https://github.com/lestrrat-go/jwx/pull/1384) - Use jwk interfaces for each key type rather than concrete types by [@lestrrat](https://github.com/lestrrat) in [#1381](https://github.com/lestrrat-go/jwx/pull/1381) - Implement Filter objects for container types by [@lestrrat](https://github.com/lestrrat) in [#1377](https://github.com/lestrrat-go/jwx/pull/1377) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1386](https://github.com/lestrrat-go/jwx/pull/1386) - Implement generic AsMap by [@lestrrat](https://github.com/lestrrat) in [#1385](https://github.com/lestrrat-go/jwx/pull/1385) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.1...v3.0.2> ### [`v3.0.1`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.1) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.0.0...v3.0.1) #### What's Changed Please read the Changes file and upgrade accordingly, especially if you are using the following combinations for JWE: - DIRECT mode content encryption - Using A256CBC\_HS512 - With an erroneously created CEK of exactly 32-bytes. *** - Bump actions/cache from 4.2.1 to 4.2.3 by [@dependabot](https://github.com/dependabot) in [#1336](https://github.com/lestrrat-go/jwx/pull/1336) - Bump actions/checkout from 4.1.7 to 4.2.2 by [@dependabot](https://github.com/dependabot) in [#1337](https://github.com/lestrrat-go/jwx/pull/1337) - Bump actions/setup-go from 5.0.2 to 5.4.0 by [@dependabot](https://github.com/dependabot) in [#1338](https://github.com/lestrrat-go/jwx/pull/1338) - Update 02-jws.md by [@lestrrat](https://github.com/lestrrat) in [#1341](https://github.com/lestrrat-go/jwx/pull/1341) - Bump golang.org/x/crypto from 0.36.0 to 0.37.0 by [@dependabot](https://github.com/dependabot) in [#1342](https://github.com/lestrrat-go/jwx/pull/1342) - Add the claim name to error messages produced by ClaimValueIs() by [@jmalloc](https://github.com/jmalloc) in [#1347](https://github.com/lestrrat-go/jwx/pull/1347) - Tweak comments generated by genwa under jwa directory by [@lestrrat](https://github.com/lestrrat) in [#1348](https://github.com/lestrrat-go/jwx/pull/1348) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1349](https://github.com/lestrrat-go/jwx/pull/1349) - Disable funcorder by [@lestrrat](https://github.com/lestrrat) in [#1351](https://github.com/lestrrat-go/jwx/pull/1351) - Update .golangci.yml by [@lestrrat](https://github.com/lestrrat) in [#1353](https://github.com/lestrrat-go/jwx/pull/1353) - Update github.com/lestrrat-go/blackmagic by [@lestrrat](https://github.com/lestrrat) in [#1352](https://github.com/lestrrat-go/jwx/pull/1352) - disable dependabot for develop/v1 branch by [@lestrrat](https://github.com/lestrrat) in [#1358](https://github.com/lestrrat-go/jwx/pull/1358) - jws: improve performance for SplitCompact/SplitCompactString by [@drakkan](https://github.com/drakkan) in [#1360](https://github.com/lestrrat-go/jwx/pull/1360) - jwe: use strings.Cut in parseCompact by [@drakkan](https://github.com/drakkan) in [#1362](https://github.com/lestrrat-go/jwx/pull/1362) - Update httprc to v3.0.0-beta2 by [@lestrrat](https://github.com/lestrrat) in [#1364](https://github.com/lestrrat-go/jwx/pull/1364) - Create SECURITY.md by [@lestrrat](https://github.com/lestrrat) in [#1365](https://github.com/lestrrat-go/jwx/pull/1365) - \[v3] Explcitly check key sizes before passing to aes.NewCipher by [@lestrrat](https://github.com/lestrrat) in [#1367](https://github.com/lestrrat-go/jwx/pull/1367) #### New Contributors - [@jmalloc](https://github.com/jmalloc) made their first contribution in [#1347](https://github.com/lestrrat-go/jwx/pull/1347) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.0.0...v3.0.1> ### [`v3.0.0`](https://github.com/lestrrat-go/jwx/releases/tag/v3.0.0) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v2.1.6...v3.0.0) #### What's Changed - Add support for RSA-OAEP-384 and RSA-OAEP-512 by [@Hannes-Kunnen](https://github.com/Hannes-Kunnen) in [#1142](https://github.com/lestrrat-go/jwx/pull/1142) - fix: typos by [@maro114510](https://github.com/maro114510) in [#1145](https://github.com/lestrrat-go/jwx/pull/1145) - Update httprc to v1.0.6 by [@lestrrat](https://github.com/lestrrat) in [#1150](https://github.com/lestrrat-go/jwx/pull/1150) - Improve API for checking algorithm characteristics around symmetry by [@lestrrat](https://github.com/lestrrat) in [#1151](https://github.com/lestrrat-go/jwx/pull/1151) - Fix typos/mistakes/wording/links in documentation/comments by [@Hannes-Kunnen](https://github.com/Hannes-Kunnen) in [#1152](https://github.com/lestrrat-go/jwx/pull/1152) - Apply changes from [#1156](https://github.com/lestrrat-go/jwx/issues/1156) to v2 by [@lestrrat](https://github.com/lestrrat) in [#1158](https://github.com/lestrrat-go/jwx/pull/1158) - Avoid problems on 32-bit systems by [@lestrrat](https://github.com/lestrrat) in [#1159](https://github.com/lestrrat-go/jwx/pull/1159) - Update minimum required go version to 1.20 by [@lestrrat](https://github.com/lestrrat) in [#1161](https://github.com/lestrrat-go/jwx/pull/1161) - Run CI with minimum go version 1.20 by [@lestrrat](https://github.com/lestrrat) in [#1162](https://github.com/lestrrat-go/jwx/pull/1162) - Bump golang.org/x/crypto from 0.24.0 to 0.25.0 by [@dependabot](https://github.com/dependabot) in [#1149](https://github.com/lestrrat-go/jwx/pull/1149) - Deprecate jws.WithHeaders by [@lestrrat](https://github.com/lestrrat) in [#1163](https://github.com/lestrrat-go/jwx/pull/1163) - Bump golang.org/x/crypto from 0.25.0 to 0.26.0 by [@dependabot](https://github.com/dependabot) in [#1168](https://github.com/lestrrat-go/jwx/pull/1168) - Fix document of how to parse PEM via CLI by [@kg0r0](https://github.com/kg0r0) in [#1174](https://github.com/lestrrat-go/jwx/pull/1174) - Wrap the errors from functions called within ParseRequest by [@lestrrat](https://github.com/lestrrat) in [#1176](https://github.com/lestrrat-go/jwx/pull/1176) - V3 modernize infra by [@lestrrat](https://github.com/lestrrat) in [#1180](https://github.com/lestrrat-go/jwx/pull/1180) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1181](https://github.com/lestrrat-go/jwx/pull/1181) - V3 dependabot by [@lestrrat](https://github.com/lestrrat) in [#1184](https://github.com/lestrrat-go/jwx/pull/1184) - Completely rework jwk.Cache using github.com/lestrrat-go/httprc/v3 by [@lestrrat](https://github.com/lestrrat) in [#1189](https://github.com/lestrrat-go/jwx/pull/1189) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1190](https://github.com/lestrrat-go/jwx/pull/1190) - Use import by [@lestrrat](https://github.com/lestrrat) in [#1191](https://github.com/lestrrat-go/jwx/pull/1191) - include an extra attribute in the trace log for debugging by [@lestrrat](https://github.com/lestrrat) in [#1192](https://github.com/lestrrat-go/jwx/pull/1192) - remove old references and unused files by [@lestrrat](https://github.com/lestrrat) in [#1193](https://github.com/lestrrat-go/jwx/pull/1193) - Bump golang.org/x/crypto from 0.26.0 to 0.27.0 by [@dependabot](https://github.com/dependabot) in [#1185](https://github.com/lestrrat-go/jwx/pull/1185) - cleanup docs, options around cache by [@lestrrat](https://github.com/lestrrat) in [#1194](https://github.com/lestrrat-go/jwx/pull/1194) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1195](https://github.com/lestrrat-go/jwx/pull/1195) - fix docs by [@lestrrat](https://github.com/lestrrat) in [#1196](https://github.com/lestrrat-go/jwx/pull/1196) - Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by [@dependabot](https://github.com/dependabot) in [#1197](https://github.com/lestrrat-go/jwx/pull/1197) - Allow flexible key usage values by [@lestrrat](https://github.com/lestrrat) in [#1198](https://github.com/lestrrat-go/jwx/pull/1198) - Remove assert by [@lestrrat](https://github.com/lestrrat) in [#1200](https://github.com/lestrrat-go/jwx/pull/1200) - Convert jwa constants to function calls returning objects by [@lestrrat](https://github.com/lestrrat) in [#1203](https://github.com/lestrrat-go/jwx/pull/1203) - Mention RegisterKeyUsage by [@lestrrat](https://github.com/lestrrat) in [#1201](https://github.com/lestrrat-go/jwx/pull/1201) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1206](https://github.com/lestrrat-go/jwx/pull/1206) - Change accessors in jwk to return (T, bool) by [@lestrrat](https://github.com/lestrrat) in [#1207](https://github.com/lestrrat-go/jwx/pull/1207) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1211](https://github.com/lestrrat-go/jwx/pull/1211) - Bump golang.org/x/crypto from 0.27.0 to 0.28.0 by [@dependabot](https://github.com/dependabot) in [#1210](https://github.com/lestrrat-go/jwx/pull/1210) - Change JWT accessors from returning T to returning (T, bool) by [@lestrrat](https://github.com/lestrrat) in [#1212](https://github.com/lestrrat-go/jwx/pull/1212) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1213](https://github.com/lestrrat-go/jwx/pull/1213) - update comments to include iat ([#1216](https://github.com/lestrrat-go/jwx/issues/1216)) by [@lestrrat](https://github.com/lestrrat) in [#1217](https://github.com/lestrrat-go/jwx/pull/1217) - Rename the old WithMaxBufferSize option as previously warned by [@lestrrat](https://github.com/lestrrat) in [#1218](https://github.com/lestrrat-go/jwx/pull/1218) - Streamline errors by [@lestrrat](https://github.com/lestrrat) in [#1220](https://github.com/lestrrat-go/jwx/pull/1220) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1221](https://github.com/lestrrat-go/jwx/pull/1221) - allow passing context.Contex to jwe.Decrypt by [@lestrrat](https://github.com/lestrrat) in [#1222](https://github.com/lestrrat-go/jwx/pull/1222) - Remove non-applicable comment by [@lestrrat](https://github.com/lestrrat) in [#1224](https://github.com/lestrrat-go/jwx/pull/1224) - fix document by [@lestrrat](https://github.com/lestrrat) in [#1226](https://github.com/lestrrat-go/jwx/pull/1226) - Remove jws.WithHeaders by [@lestrrat](https://github.com/lestrrat) in [#1227](https://github.com/lestrrat-go/jwx/pull/1227) - tweak badge URL by [@lestrrat](https://github.com/lestrrat) in [#1228](https://github.com/lestrrat-go/jwx/pull/1228) - Add quid pro quo in README by [@lestrrat](https://github.com/lestrrat) in [#1225](https://github.com/lestrrat-go/jwx/pull/1225) - Update serialize.go by [@lestrrat](https://github.com/lestrrat) in [#1234](https://github.com/lestrrat-go/jwx/pull/1234) - Lint fix by [@lestrrat](https://github.com/lestrrat) in [#1235](https://github.com/lestrrat-go/jwx/pull/1235) - Bump golang.org/x/crypto from 0.28.0 to 0.29.0 by [@dependabot](https://github.com/dependabot) in [#1231](https://github.com/lestrrat-go/jwx/pull/1231) - Change random big value to math.MaxInt by [@lestrrat](https://github.com/lestrrat) in [#1241](https://github.com/lestrrat-go/jwx/pull/1241) - Bump pozil/auto-assign-issue from 2.0.0 to 2.0.1 by [@dependabot](https://github.com/dependabot) in [#1238](https://github.com/lestrrat-go/jwx/pull/1238) - Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by [@dependabot](https://github.com/dependabot) in [#1245](https://github.com/lestrrat-go/jwx/pull/1245) - Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 by [@dependabot](https://github.com/dependabot) in [#1269](https://github.com/lestrrat-go/jwx/pull/1269) - Bump pozil/auto-assign-issue from 2.0.1 to 2.1.2 by [@dependabot](https://github.com/dependabot) in [#1261](https://github.com/lestrrat-go/jwx/pull/1261) - Bump golang.org/x/crypto from 0.29.0 to 0.32.0 by [@dependabot](https://github.com/dependabot) in [#1263](https://github.com/lestrrat-go/jwx/pull/1263) - Bump actions/stale from 9.0.0 to 9.1.0 by [@dependabot](https://github.com/dependabot) in [#1272](https://github.com/lestrrat-go/jwx/pull/1272) - \[v3] Fixes to work with go1.24 by [@lestrrat](https://github.com/lestrrat) in [#1299](https://github.com/lestrrat-go/jwx/pull/1299) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1300](https://github.com/lestrrat-go/jwx/pull/1300) - Bump pozil/auto-assign-issue from 2.1.2 to 2.2.0 by [@dependabot](https://github.com/dependabot) in [#1279](https://github.com/lestrrat-go/jwx/pull/1279) - Develop v3 actions cache by [@lestrrat](https://github.com/lestrrat) in [#1303](https://github.com/lestrrat-go/jwx/pull/1303) - Bump golangci/golangci-lint-action from 6.2.0 to 6.5.0 by [@dependabot](https://github.com/dependabot) in [#1290](https://github.com/lestrrat-go/jwx/pull/1290) - Bump github.com/decred/dcrd/dcrec/secp256k1/v4 from 4.3.0 to 4.4.0 by [@dependabot](https://github.com/dependabot) in [#1293](https://github.com/lestrrat-go/jwx/pull/1293) - Bump golang.org/x/crypto from 0.32.0 to 0.34.0 by [@dependabot](https://github.com/dependabot) in [#1297](https://github.com/lestrrat-go/jwx/pull/1297) - Bump golang.org/x/crypto from 0.34.0 to 0.35.0 by [@dependabot](https://github.com/dependabot) in [#1307](https://github.com/lestrrat-go/jwx/pull/1307) - jws/jwe: split token into fixed number of parts by [@drakkan](https://github.com/drakkan) in [#1308](https://github.com/lestrrat-go/jwx/pull/1308) - \[jwk] Change ecdh importer/exporter by [@lestrrat](https://github.com/lestrrat) in [#1315](https://github.com/lestrrat-go/jwx/pull/1315) - Bump golang.org/x/crypto from 0.35.0 to 0.36.0 by [@dependabot](https://github.com/dependabot) in [#1312](https://github.com/lestrrat-go/jwx/pull/1312) - Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by [@dependabot](https://github.com/dependabot) in [#1316](https://github.com/lestrrat-go/jwx/pull/1316) - Change default behavior around truncation of time fields by [@lestrrat](https://github.com/lestrrat) in [#1318](https://github.com/lestrrat-go/jwx/pull/1318) - Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by [@dependabot](https://github.com/dependabot) in [#1320](https://github.com/lestrrat-go/jwx/pull/1320) - Tweaks on [#1322](https://github.com/lestrrat-go/jwx/issues/1322) by [@lestrrat](https://github.com/lestrrat) in [#1323](https://github.com/lestrrat-go/jwx/pull/1323) - Bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 by [@dependabot](https://github.com/dependabot) in [#1325](https://github.com/lestrrat-go/jwx/pull/1325) - Implement AWS ALB User Claims parser by [@lestrrat](https://github.com/lestrrat) in [#1328](https://github.com/lestrrat-go/jwx/pull/1328) - Add docs for WithBase64Encoder by [@lestrrat](https://github.com/lestrrat) in [#1329](https://github.com/lestrrat-go/jwx/pull/1329) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1330](https://github.com/lestrrat-go/jwx/pull/1330) - avoid internal module by [@lestrrat](https://github.com/lestrrat) in [#1331](https://github.com/lestrrat-go/jwx/pull/1331) - Clear key.Precomputed values before testing equality by [@lestrrat](https://github.com/lestrrat) in [#1333](https://github.com/lestrrat-go/jwx/pull/1333) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1332](https://github.com/lestrrat-go/jwx/pull/1332) - autodoc updates by [@github-actions](https://github.com/github-actions) in [#1334](https://github.com/lestrrat-go/jwx/pull/1334) #### New Contributors - [@Hannes-Kunnen](https://github.com/Hannes-Kunnen) made their first contribution in [#1142](https://github.com/lestrrat-go/jwx/pull/1142) - [@maro114510](https://github.com/maro114510) made their first contribution in [#1145](https://github.com/lestrrat-go/jwx/pull/1145) - [@kg0r0](https://github.com/kg0r0) made their first contribution in [#1174](https://github.com/lestrrat-go/jwx/pull/1174) - [@drakkan](https://github.com/drakkan) made their first contribution in [#1308](https://github.com/lestrrat-go/jwx/pull/1308) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v2.1.0...v3.0.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

group_2759636_bot_1c34751f7eccad09e089ac15ee7bd902 commented

2025-12-29 16:04:32 +00:00

(Migrated from gitlab.com)

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24` -> `1.24.0`
`github.com/lestrrat-go/blackmagic`	`v1.0.3` -> `v1.0.4`
`github.com/lestrrat-go/httpcc`	`v1.0.1` -> `v1.0.1`
`github.com/segmentio/asm`	`v1.2.0` -> `v1.2.1`

### ℹ️ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 3 additional dependencies were updated - The `go` directive was updated for compatibility reasons Details: | **Package** | **Change** | | :---------------------------------- | :------------------- | | `go` | `1.24` -> `1.24.0` | | `github.com/lestrrat-go/blackmagic` | `v1.0.3` -> `v1.0.4` | | `github.com/lestrrat-go/httpcc` | `v1.0.1` -> `v1.0.1` | | `github.com/segmentio/asm` | `v1.2.0` -> `v1.2.1` |

group_2759636_bot_1c34751f7eccad09e089ac15ee7bd902 commented

2025-12-29 16:04:37 +00:00

(Migrated from gitlab.com)

mentioned in issue #5

argoyle commented

2025-12-29 16:15:17 +00:00

(Migrated from gitlab.com)

added 3 commits

13c0543d...c951b8b2 - 2 commits from branch main
058c8182 - fix(deps): update module github.com/lestrrat-go/jwx/v2 to v3

Compare with previous version

added 3 commits <ul><li>13c0543d...c951b8b2 - 2 commits from branch <code>main</code></li><li>058c8182 - fix(deps): update module github.com/lestrrat-go/jwx/v2 to v3</li></ul> [Compare with previous version](/unboundsoftware/auth0mock/-/merge_requests/222/diffs?diff_id=1612055463&start_sha=13c0543d4e0cb9775ca91f0d3969f61096bb529b)

argoyle (Migrated from gitlab.com) scheduled this pull request to auto merge when all checks succeed 2025-12-29 16:16:02 +00:00

argoyle (Migrated from gitlab.com) merged commit 84f3ce58b4 into main

2025-12-29 16:16:42 +00:00

argoyle commented

2025-12-29 16:16:43 +00:00

(Migrated from gitlab.com)

mentioned in commit 84f3ce58b4

mentioned in commit 84f3ce58b45cde125f6a939e4955afde139bc718

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unboundsoftware/auth0mock#227