Skip to content

v0.31.0

Latest

Choose a tag to compare

@osanderson osanderson released this 19 Sep 15:35
Immutable release. Only release title and notes can be modified.
3049839

0.31.0 (2026-09-19)

⚠ BREAKING CHANGES

  • client.Config.RequireAuthorizationResponseIss (bool) is renamed to AuthorizationResponseIssPolicy (AuthorizationResponseIssPolicy) and is now required. Existing callers must set it explicitly: RequireAuthorizationResponseIss (matches former true) or TolerateAbsentAuthorizationResponseIss (matches former false/zero value).

Features

  • gate ClientKeySource/IssuerKeySource/ClientEncryptionKeySource behind KeySourceAssurance (54497b9)
  • require explicit AuthorizationResponseIssPolicy (ef83978)

Bug Fixes

  • bump Go toolchain to 1.26.6 for 6 stdlib CVEs (51804e2)