Bump jwt from 2.10.2 to 3.1.2

[dependabot]

Bumps jwt from 2.10.2 to 3.1.2.

Changelog

Sourced from jwt's changelog.

v3.1.2 (2025-06-28)

Full Changelog

Fixes and enhancements:

• Avoid using the same digest across calls in JWT::JWA::Ecdsa and JWT::JWA::Rsa #697
• Fix signing with a EC JWK #699 (@​anakinj)

v3.1.1 (2025-06-24)

Full Changelog

Fixes and enhancements:

• Require the algorithm to be provided when signing and verifying tokens using JWKs #695 (@​anakinj)

v3.1.0 (2025-06-23)

Full Changelog

Features:

• Add support for x5t header parameter for X.509 certificate thumbprint verification #669 (@​hieuk09)
• Raise an error if the ECDSA signing or verification key is not an instance of OpenSSL::PKey::EC #688 (@​anakinj)
• Allow OpenSSL::PKey::EC::Point to be used as the verification key in ECDSA #689 (@​anakinj)
• Require claims to have been verified before accessing the JWT::EncodedToken#payload #690 (@​anakinj)
• Support signing and verifying tokens using a JWK #692 (@​anakinj)

v3.0.0 (2025-06-14)

Full Changelog

Breaking changes:

• Require token signature to be verified before accessing payload #648 (@​anakinj)
• Drop support for the HS512256 algorithm #650 (@​anakinj)
• Remove deprecated claim verification methods #654 (@​anakinj)
• Remove dependency to rbnacl #655 (@​anakinj)
• Support only stricter base64 decoding (RFC 4648) #658 (@​anakinj)
• Custom algorithms are required to include JWT::JWA::SigningAlgorithm #660 (@​anakinj)
• Require RSA keys to be at least 2048 bits #661 (@​anakinj)
• Base64 encode and decode the k value for HMAC JWKs #662 (@​anakinj)

Take a look at the upgrade guide for more details.

Features:

• JWT::EncodedToken#verify! method that bundles signature and claim validation #647 (@​anakinj)
• Do not override the alg header if already given #659 (@​anakinj)

... (truncated)

Commits

• bbe7ae3 Version 3.1.2 (#700)
• 205a58d Fix signing with EC JWK (#699)
• 7231ef5 Avoid using the same digest across calls (#697)
• 9524614 Re-enable Truffleruby on the CI (#698)
• ad4fc04 Prepare next iteration
• 50c01e0 Prepare 3.1.1
• b45219d Do not automatically trust the JWA in the JWK (#695)
• 5c4fb4c Prepare next iteration (#694)
• 646febe Fix date for 3.1.0
• a93b803 Prepare release of 3.1.0 (#693)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.