fix(deps): update module github.com/lestrrat-go/jwx/v3 to v3.4.0 - autoclosed #10

Closed

renovate-bot wants to merge 1 commit from renovate/go-dependencies into master

pull from: renovate/go-dependencies

merge into: molo:master

molo:master

molo:graphql

molo:pagination-rest

Conversation 1 Commits 1 Files changed 2 +7 -3

renovate-bot commented 2026-10-24 11:01:58 +02:00

Collaborator

Copy link

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/lestrrat-go/jwx/v3	v3.3.0 → v3.4.0

---

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)

v3.4.0

Compare Source

For more detailed release notes, see Changes.

What's Changed

• build(deps): bump github/codeql-action from 4.37.9 to 4.38.0 by @​dependabot[bot] in #​2352
• build(deps): bump github/codeql-action from 4.38.0 to 4.38.2 by @​dependabot[bot] in #​2361
• build(deps): bump github.com/goccy/go-json from 0.10.6 to 0.11.0 by @​dependabot[bot] in #​2364
• build(deps): bump github.com/goccy/go-json from 0.11.0 to 0.11.2 by @​dependabot[bot] in #​2371
• [v3] keep trying jwe key providers after errors by @​lestrrat in #​2385
• [v3] allow empty jwe ciphertext in JSON form by @​lestrrat in #​2387
• [v3] write jwe unprotected header as JSON object by @​lestrrat in #​2389
• [v3] jwsbb: size SignBuffer per encoded part by @​lestrrat in #​2401
• [v3] jwe: find WithKeySet kid in protected header by @​lestrrat in #​2405
• [v3] jwt: honor NumericDate format precision by @​lestrrat in #​2410
• [v3] jwt: parse negative NumericDate values by @​lestrrat in #​2412
• [v3] jwt: parse decimal NumericDate values exactly by @​lestrrat in #​2414
• build(deps): bump github/codeql-action from 4.38.2 to 4.38.3 by @​dependabot[bot] in #​2419
• [v3] jws: sign only the transmitted header by @​lestrrat in #​2416
• [v3] jws: add opt-in WithAlgorithmMatch by @​lestrrat in #​2423
• build(deps): bump github/codeql-action from 4.38.3 to 4.39.0 by @​dependabot[bot] in #​2427
• use crypto/pbkdf2 and drop x/crypto by @​lestrrat in #​2431
• [v3] jws: add WithVerifiedSignature verify option by @​lestrrat in #​2436
• [v3] jwe: add WithDecryptedRecipient decrypt option by @​lestrrat in #​2440
• [v3] jws: fix crit and multi-signature docs by @​lestrrat in #​2437
• [v3] jwe: document per-recipient headers by @​lestrrat in #​2441
• [v3] jws: fix comment in header example by @​lestrrat in #​2447
• [v3] release v3.4.0 by @​lestrrat in #​2449

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.3.0...v3.4.0

---

Configuration

📅 Schedule: (in timezone Europe/Warsaw)

• Branch creation
  • Between 09:00 AM and 10:59 PM (* 9-22 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) | `v3.3.0` → `v3.4.0` |  |  | --- ### Release Notes <details> <summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)</summary> ### [`v3.4.0`](https://github.com/lestrrat-go/jwx/releases/tag/v3.4.0) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.3.0...v3.4.0) For more detailed release notes, see [Changes](https://github.com/lestrrat-go/jwx/blob/v3.4.0/Changes). #### What's Changed - build(deps): bump github/codeql-action from 4.37.9 to 4.38.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2352](https://github.com/lestrrat-go/jwx/pull/2352) - build(deps): bump github/codeql-action from 4.38.0 to 4.38.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2361](https://github.com/lestrrat-go/jwx/pull/2361) - build(deps): bump github.com/goccy/go-json from 0.10.6 to 0.11.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2364](https://github.com/lestrrat-go/jwx/pull/2364) - build(deps): bump github.com/goccy/go-json from 0.11.0 to 0.11.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2371](https://github.com/lestrrat-go/jwx/pull/2371) - \[v3] keep trying jwe key providers after errors by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2385](https://github.com/lestrrat-go/jwx/pull/2385) - \[v3] allow empty jwe ciphertext in JSON form by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2387](https://github.com/lestrrat-go/jwx/pull/2387) - \[v3] write jwe unprotected header as JSON object by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2389](https://github.com/lestrrat-go/jwx/pull/2389) - \[v3] jwsbb: size SignBuffer per encoded part by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2401](https://github.com/lestrrat-go/jwx/pull/2401) - \[v3] jwe: find WithKeySet kid in protected header by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2405](https://github.com/lestrrat-go/jwx/pull/2405) - \[v3] jwt: honor NumericDate format precision by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2410](https://github.com/lestrrat-go/jwx/pull/2410) - \[v3] jwt: parse negative NumericDate values by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2412](https://github.com/lestrrat-go/jwx/pull/2412) - \[v3] jwt: parse decimal NumericDate values exactly by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2414](https://github.com/lestrrat-go/jwx/pull/2414) - build(deps): bump github/codeql-action from 4.38.2 to 4.38.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2419](https://github.com/lestrrat-go/jwx/pull/2419) - \[v3] jws: sign only the transmitted header by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2416](https://github.com/lestrrat-go/jwx/pull/2416) - \[v3] jws: add opt-in WithAlgorithmMatch by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2423](https://github.com/lestrrat-go/jwx/pull/2423) - build(deps): bump github/codeql-action from 4.38.3 to 4.39.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2427](https://github.com/lestrrat-go/jwx/pull/2427) - use crypto/pbkdf2 and drop x/crypto by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2431](https://github.com/lestrrat-go/jwx/pull/2431) - \[v3] jws: add WithVerifiedSignature verify option by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2436](https://github.com/lestrrat-go/jwx/pull/2436) - \[v3] jwe: add WithDecryptedRecipient decrypt option by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2440](https://github.com/lestrrat-go/jwx/pull/2440) - \[v3] jws: fix crit and multi-signature docs by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2437](https://github.com/lestrrat-go/jwx/pull/2437) - \[v3] jwe: document per-recipient headers by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2441](https://github.com/lestrrat-go/jwx/pull/2441) - \[v3] jws: fix comment in header example by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2447](https://github.com/lestrrat-go/jwx/pull/2447) - \[v3] release v3.4.0 by [@&#8203;lestrrat](https://github.com/lestrrat) in [#&#8203;2449](https://github.com/lestrrat-go/jwx/pull/2449) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.3.0...v3.4.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Warsaw) - Branch creation - Between 09:00 AM and 10:59 PM (`* 9-22 * * *`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC44MS4wIiwidXBkYXRlZEluVmVyIjoiNDQuODEuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->

renovate-bot added 1 commit 2026-10-24 11:01:58 +02:00

fix(deps): update module github.com/lestrrat-go/jwx/v3 to v3.4.0 25798cef9e

renovate-bot commented 2026-10-24 11:01:58 +02:00

Author

Collaborator

Copy link

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=1 day

Details:

Package	Change
github.com/goccy/go-json	v0.10.6 -> v0.11.2

### ℹ️ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 1 additional dependency was updated Due to Go's usage of [Minimal Version Selection (MVS)](https://go.dev/ref/mod#minimal-version-selection), these packages have been updated to the minimum version available, so will still abide by `minimumReleaseAge=1 day` Details: | **Package** | **Change** | | :------------------------- | :--------------------- | | `github.com/goccy/go-json` | `v0.10.6` -> `v0.11.2` |

renovate-bot changed title from fix(deps): update module github.com/lestrrat-go/jwx/v3 to v3.4.0 to fix(deps): update module github.com/lestrrat-go/jwx/v3 to v3.4.0 - autoclosed 2026-10-24 12:01:59 +02:00

renovate-bot closed this pull request 2026-10-24 12:01:59 +02:00

Some checks failed

Hide checks

renovate/stability-days Updates have met minimum release age requirement

Details

/ test (push) Failing after 49s

Details

/ build (push) Successful in 38s

Details

/ test (pull_request) Failing after 48s

Details

/ build (pull_request) Successful in 38s

Details

/ push-backend (push) Has been skipped

Details

/ push-migration (push) Has been skipped

Details

/ push-backend (pull_request) Has been skipped

Details

/ push-migration (pull_request) Has been skipped

Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

molo/backend!10

No description provided.