chore(deps): update module github.com/lestrrat-go/jwx/v2 to v3 #57

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

renovate wants to merge 1 commit into main from renovate/github.com-lestrrat-go-jwx-v2-3.x

Contributor

renovate bot commented Apr 1, 2025 •

edited

Loading

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/lestrrat-go/jwx/v2	`v2.1.4` -> `v3.0.8`

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v2)

`v3.0.8`

What's Changed

change from interface{} to any by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1417
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1418
Introduce jwe lower level API (jwebb), and refactor a bunch of things. by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1419
[jws/jwsbb] Add io.Reader for source of randomness by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1420
Add package level doc for jwe by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1421
Add jwsbb.HeaderParse by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1422

Full Changelog: lestrrat-go/jwx@v3.0.7...v3.0.8

`v3.0.7`

What's Changed

Update examples by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1412
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1413
Add error when signature could not be verified by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1414
Add Header type for quick and dirty access to JWS headers by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1415
Refactor jwsbb code by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1416

Full Changelog: lestrrat-go/jwx@v3.0.6...v3.0.7

`v3.0.6`

What's Changed

Use shared constants for better legibility/greppability by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1398
Rework pool objects by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1399
Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 in /examples by @dependabot in https://github.com/lestrrat-go/jwx/pull/1395
Add AppendEncode to the interface by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1400
Upgrade option and blackmagic by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1401
Add comparison benchmark by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1407
Implement low-level API for jws, and incorporate it to JWT to achieve massive performance gains by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1408
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1409
Rename comparison by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1410

Full Changelog: lestrrat-go/jwx@v3.0.5...v3.0.6

`v3.0.5`

What's Changed

Revert "Improve performance (#1391)" by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1397
v3.0.4 has also been retracted on go.mod

Full Changelog: lestrrat-go/jwx@v3.0.4...v3.0.5

`v3.0.4`

`v3.0.3`

What's Changed

Add more context to the errors by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1387
Update httprc version by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1388

Full Changelog: lestrrat-go/jwx@v3.0.2...v3.0.3

`v3.0.2`

What's Changed

Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1369
Bump golang.org/x/crypto from 0.37.0 to 0.38.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1372
Bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1373
Add .deprecated field to algorithms in anticipation of future deprecations by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1374
Add .deprecated field to algorithms in anticipation of future deprecations by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1376
Add doc tweaks to #1380 by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1383
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1384
Use jwk interfaces for each key type rather than concrete types by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1381
Implement Filter objects for container types by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1377
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1386
Implement generic AsMap by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1385

Full Changelog: lestrrat-go/jwx@v3.0.1...v3.0.2

`v3.0.1`

What's Changed

Please read the Changes file and upgrade accordingly, especially if you are using the following combinations for JWE:

DIRECT mode content encryption
Using A256CBC_HS512
With an erroneously created CEK of exactly 32-bytes.

Bump actions/cache from 4.2.1 to 4.2.3 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1336
Bump actions/checkout from 4.1.7 to 4.2.2 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1337
Bump actions/setup-go from 5.0.2 to 5.4.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1338
Update 02-jws.md by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1341
Bump golang.org/x/crypto from 0.36.0 to 0.37.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1342
Add the claim name to error messages produced by ClaimValueIs() by @jmalloc in https://github.com/lestrrat-go/jwx/pull/1347
Tweak comments generated by genwa under jwa directory by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1348
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1349
Disable funcorder by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1351
Update .golangci.yml by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1353
Update github.com/lestrrat-go/blackmagic by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1352
disable dependabot for develop/v1 branch by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1358
jws: improve performance for SplitCompact/SplitCompactString by @drakkan in https://github.com/lestrrat-go/jwx/pull/1360
jwe: use strings.Cut in parseCompact by @drakkan in https://github.com/lestrrat-go/jwx/pull/1362
Update httprc to v3.0.0-beta2 by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1364
Create SECURITY.md by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1365
[v3] Explcitly check key sizes before passing to aes.NewCipher by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1367

New Contributors

@jmalloc made their first contribution in https://github.com/lestrrat-go/jwx/pull/1347

Full Changelog: lestrrat-go/jwx@v3.0.0...v3.0.1

`v3.0.0`

What's Changed

Add support for RSA-OAEP-384 and RSA-OAEP-512 by @Hannes-Kunnen in https://github.com/lestrrat-go/jwx/pull/1142
fix: typos by @maro114510 in https://github.com/lestrrat-go/jwx/pull/1145
Update httprc to v1.0.6 by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1150
Improve API for checking algorithm characteristics around symmetry by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1151
Fix typos/mistakes/wording/links in documentation/comments by @Hannes-Kunnen in https://github.com/lestrrat-go/jwx/pull/1152
Apply changes from #1156 to v2 by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1158
Avoid problems on 32-bit systems by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1159
Update minimum required go version to 1.20 by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1161
Run CI with minimum go version 1.20 by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1162
Bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1149
Deprecate jws.WithHeaders by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1163
Bump golang.org/x/crypto from 0.25.0 to 0.26.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1168
Fix document of how to parse PEM via CLI by @kg0r0 in https://github.com/lestrrat-go/jwx/pull/1174
Wrap the errors from functions called within ParseRequest by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1176
V3 modernize infra by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1180
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1181
V3 dependabot by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1184
Completely rework jwk.Cache using github.com/lestrrat-go/httprc/v3 by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1189
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1190
Use import by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1191
include an extra attribute in the trace log for debugging by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1192
remove old references and unused files by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1193
Bump golang.org/x/crypto from 0.26.0 to 0.27.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1185
cleanup docs, options around cache by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1194
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1195
fix docs by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1196
Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1197
Allow flexible key usage values by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1198
Remove assert by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1200
Convert jwa constants to function calls returning objects by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1203
Mention RegisterKeyUsage by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1201
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1206
Change accessors in jwk to return (T, bool) by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1207
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1211
Bump golang.org/x/crypto from 0.27.0 to 0.28.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1210
Change JWT accessors from returning T to returning (T, bool) by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1212
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1213
update comments to include iat (#1216) by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1217
Rename the old WithMaxBufferSize option as previously warned by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1218
Streamline errors by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1220
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1221
allow passing context.Contex to jwe.Decrypt by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1222
Remove non-applicable comment by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1224
fix document by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1226
Remove jws.WithHeaders by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1227
tweak badge URL by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1228
Add quid pro quo in README by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1225
Update serialize.go by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1234
Lint fix by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1235
Bump golang.org/x/crypto from 0.28.0 to 0.29.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1231
Change random big value to math.MaxInt by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1241
Bump pozil/auto-assign-issue from 2.0.0 to 2.0.1 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1238
Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1245
Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1269
Bump pozil/auto-assign-issue from 2.0.1 to 2.1.2 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1261
Bump golang.org/x/crypto from 0.29.0 to 0.32.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1263
Bump actions/stale from 9.0.0 to 9.1.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1272
[v3] Fixes to work with go1.24 by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1299
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1300
Bump pozil/auto-assign-issue from 2.1.2 to 2.2.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1279
Develop v3 actions cache by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1303
Bump golangci/golangci-lint-action from 6.2.0 to 6.5.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1290
Bump github.com/decred/dcrd/dcrec/secp256k1/v4 from 4.3.0 to 4.4.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1293
Bump golang.org/x/crypto from 0.32.0 to 0.34.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1297
Bump golang.org/x/crypto from 0.34.0 to 0.35.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1307
jws/jwe: split token into fixed number of parts by @drakkan in https://github.com/lestrrat-go/jwx/pull/1308
[jwk] Change ecdh importer/exporter by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1315
Bump golang.org/x/crypto from 0.35.0 to 0.36.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1312
Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1316
Change default behavior around truncation of time fields by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1318
Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1320
Tweaks on #1322 by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1323
Bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1325
Implement AWS ALB User Claims parser by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1328
Add docs for WithBase64Encoder by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1329
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1330
avoid internal module by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1331
Clear key.Precomputed values before testing equality by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1333
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1332
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1334

New Contributors

@Hannes-Kunnen made their first contribution in https://github.com/lestrrat-go/jwx/pull/1142
@maro114510 made their first contribution in https://github.com/lestrrat-go/jwx/pull/1145
@kg0r0 made their first contribution in https://github.com/lestrrat-go/jwx/pull/1174
@drakkan made their first contribution in https://github.com/lestrrat-go/jwx/pull/1308

Full Changelog: lestrrat-go/jwx@v2.1.0...v3.0.0

`v2.1.6`

What's Changed

Please read the Changes file and upgrade accordingly, especially if you are using the following combinations for JWE:

DIRECT mode content encryption
Using A256CBC_HS512
With an erroneously created CEK of exactly 32-bytes.

jws: backport jws parsing ehancements by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1363
[v2] Backport #1367 by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1368

Full Changelog: lestrrat-go/jwx@v2.1.5...v2.1.6

`v2.1.5`

What's Changed

jws/jwe: split token into fixed number of parts (#1308) by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1309
Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1317
Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1319
Bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1327
Remove use of go1.22 in CI by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1356
v2: jws/jwe: split token into fixed number of parts (#1308) by @lestrrat in https://github.com/lestrrat-go/jwx/pull/1355
Bump github.com/lestrrat-go/blackmagic from 1.0.2 to 1.0.3 by @dependabot in https://github.com/lestrrat-go/jwx/pull/1354
autodoc updates by @github-actions in https://github.com/lestrrat-go/jwx/pull/1359

Full Changelog: lestrrat-go/jwx@v2.1.4...v2.1.5

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Contributor Author

renovate bot commented Apr 1, 2025 •

edited

Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: module github.com/lestrrat-go/jwx/[email protected] requires go >= 1.23.0; switching to go1.23.10
go: downloading go1.23.10 (linux/amd64)
go: download go1.23.10: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off

renovate bot force-pushed the renovate/github.com-lestrrat-go-jwx-v2-3.x branch from 3c13853 to 0a3334b Compare

April 29, 2025 15:40

renovate bot force-pushed the renovate/github.com-lestrrat-go-jwx-v2-3.x branch 3 times, most recently from 46c372a to bcfe877 Compare

June 11, 2025 04:00

renovate bot force-pushed the renovate/github.com-lestrrat-go-jwx-v2-3.x branch 2 times, most recently from df02f8a to 5411e0d Compare

June 16, 2025 05:59


          chore(deps): update module github.com/lestrrat-go/jwx/v2 to v3

a154fa4

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/github.com-lestrrat-go-jwx-v2-3.x branch from 5411e0d to a154fa4 Compare

June 27, 2025 12:57

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet