fix(deps): update module github.com/lestrrat-go/jwx/v4 to v4.2.0 #385

2026-07-27T10:01:25Z

renovate commented

2026-07-27 10:01:25 +00:00

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/lestrrat-go/jwx/v4	`v4.1.0` → `v4.2.0`

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v4)

`v4.2.0`

Compare Source

For more detailed release notes, see Changes.

What's Changed

docs: point jwkcache references to jwkfetch by @lestrrat in #2245
chore: bump golangci-lint-action to 9.3.0 + sync action versions by @lestrrat in #2246
fix misspellings in code comments by @lestrrat in #2248
build(deps): bump golang.org/x/crypto from 0.49.0 to 0.52.0 in /internal/jwxcodegen by @dependabot[bot] in #2256
build(deps): bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in #2255
build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #2252
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #2259
build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #2262
[v4] retain unparseable JWKS entries as UnsupportedKey by @lestrrat in #2264
fix CodeQL autobuild for encoding/json/v2 by @lestrrat in #2268
[v4] let per-call WithRejectDuplicateKID override global by @lestrrat in #2269
[v4] test jwe rejects UnsupportedKey placeholders by @lestrrat in #2271
[v4] doc: warn that global strict JWK set parsing breaks on PQC keys by @lestrrat in #2273

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v4.1.0...v4.2.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lestrrat-go/jwx/v4](https://github.com/lestrrat-go/jwx) | `v4.1.0` → `v4.2.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2flestrrat-go%2fjwx%2fv4/v4.2.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2flestrrat-go%2fjwx%2fv4/v4.1.0/v4.2.0?slim=true) | --- ### Release Notes <details> <summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v4)</summary> ### [`v4.2.0`](https://github.com/lestrrat-go/jwx/releases/tag/v4.2.0) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v4.1.0...v4.2.0) For more detailed release notes, see [Changes](https://github.com/lestrrat-go/jwx/blob/v4.2.0/Changes). #### What's Changed - docs: point jwkcache references to jwkfetch by [@lestrrat](https://github.com/lestrrat) in [#2245](https://github.com/lestrrat-go/jwx/pull/2245) - chore: bump golangci-lint-action to 9.3.0 + sync action versions by [@lestrrat](https://github.com/lestrrat) in [#2246](https://github.com/lestrrat-go/jwx/pull/2246) - fix misspellings in code comments by [@lestrrat](https://github.com/lestrrat) in [#2248](https://github.com/lestrrat-go/jwx/pull/2248) - build(deps): bump golang.org/x/crypto from 0.49.0 to 0.52.0 in /internal/jwxcodegen by [@dependabot](https://github.com/dependabot)\[bot] in [#2256](https://github.com/lestrrat-go/jwx/pull/2256) - build(deps): bump actions/stale from 10.3.0 to 10.4.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2255](https://github.com/lestrrat-go/jwx/pull/2255) - build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2252](https://github.com/lestrrat-go/jwx/pull/2252) - build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2259](https://github.com/lestrrat-go/jwx/pull/2259) - build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2262](https://github.com/lestrrat-go/jwx/pull/2262) - \[v4] retain unparseable JWKS entries as UnsupportedKey by [@lestrrat](https://github.com/lestrrat) in [#2264](https://github.com/lestrrat-go/jwx/pull/2264) - fix CodeQL autobuild for encoding/json/v2 by [@lestrrat](https://github.com/lestrrat) in [#2268](https://github.com/lestrrat-go/jwx/pull/2268) - \[v4] let per-call WithRejectDuplicateKID override global by [@lestrrat](https://github.com/lestrrat) in [#2269](https://github.com/lestrrat-go/jwx/pull/2269) - \[v4] test jwe rejects UnsupportedKey placeholders by [@lestrrat](https://github.com/lestrrat) in [#2271](https://github.com/lestrrat-go/jwx/pull/2271) - \[v4] doc: warn that global strict JWK set parsing breaks on PQC keys by [@lestrrat](https://github.com/lestrrat) in [#2273](https://github.com/lestrrat-go/jwx/pull/2273) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v4.1.0...v4.2.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate added 1 commit 2026-07-27 10:01:26 +00:00

fix(deps): update module github.com/lestrrat-go/jwx/v4 to v4.2.0

auth0mock / build (push) Skipped

renovate/stability-days Updates have met minimum release age requirement

Details

auth0mock / build (pull_request) Successful in 56s

Details

6c4d724634

renovate scheduled this pull request to auto merge when all checks succeed 2026-07-27 10:01:27 +00:00

renovate merged commit a2c3c83db4 into main

2026-07-27 10:05:35 +00:00

renovate deleted branch renovate/github.com-lestrrat-go-jwx-v4-4.x