Immutable
release. Only release title and notes can be modified.
0.31.0 (2026-09-19)
⚠ BREAKING CHANGES
- client.Config.RequireAuthorizationResponseIss (bool) is renamed to AuthorizationResponseIssPolicy (AuthorizationResponseIssPolicy) and is now required. Existing callers must set it explicitly: RequireAuthorizationResponseIss (matches former true) or TolerateAbsentAuthorizationResponseIss (matches former false/zero value).
Features
- gate ClientKeySource/IssuerKeySource/ClientEncryptionKeySource behind KeySourceAssurance (54497b9)
- require explicit AuthorizationResponseIssPolicy (ef83978)
Bug Fixes
- bump Go toolchain to 1.26.6 for 6 stdlib CVEs (51804e2)