chore(deps): update module github.com/lestrrat-go/jwx/v3 to v3.1.1 (main)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/lestrrat-go/jwx/v3	indirect	patch	v3.1.0 -> v3.1.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)

v3.1.1

Compare Source

For more detailed release notes, see Changes.

What's Changed

• build(deps): bump pozil/auto-assign-issue from 2.2.0 to 2.2.1 by @​dependabot[bot] inhttps://github.com/lestrrat-go/jwx/pull/20455
• guard ecdsa coordinates against oversized big.Int by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2050
• reject jwe with conflicting alg in protected vs per-recipient by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2052
• fix AddressClaim.MarshalJSON for non-printable bytes by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2056
• jwt: only call ParseForm when WithFormKey is supplied by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2058
• jws: jkuProvider rejects fetched keys marked use=enc by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2060
• jwa: unify SignatureAlgorithm/KeyEncryption/ContentEncryption into one registry by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2066
• build(deps): bump pozil/auto-assign-issue from f245a91 to 7bf9d82 by @​dependabot[bot] inhttps://github.com/lestrrat-go/jwx/pull/20655
• cmd/jwx: warn on private-key-to-tty + reject keysize<=0 for oct by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2071
• jws: refuse "b64" header in VerifyCompactFast by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2081
• jws: VerifyCompactFast refusals match jws.VerifyError() class by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2083
• jws: name loose keySet options in fan-out verify error by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2085
• jws: honor RFC 7797 b64=false in Message.MarshalJSON by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2087
• jws: reject literal-JSON "protected" in general-form JWS by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2089
• jwt: ParseRequest: don't skip form body on chunked transfer by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2091
• jwt: pedantic mode enforces cty=JWT nested-envelope shape by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2094
• jwt: defensively reject missing claims in MaxDeltaIs / MinDeltaIs by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2099
• jwt: ParseInsecure: parse loop-local payload, not original input by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2097
• jws: Verify rejects b64=false without "b64" listed in "crit" by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2102
• jws: Sign auto-declares "b64" in "crit" when emitting b64=false by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2104
• jws: declare "b64" as typed bool header field by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2106
• jws: reject general-form JWS with top-level "header" sibling of "signatures" by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2108
• jws: typed sentinel for AlgorithmsForKey unclassifiable-key failures by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2110
• jws: VerifyMessage observes ctx cancellation between loop iterations by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2112
• jws: cleanup follow-ups from recent review (low-severity batch) by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2114
• jwe: DecryptMessage observes ctx cancellation between loop iterations by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2117
• jwe: parse and bound-check PBES2 p2c in int64 space; name the violated bound by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2119
• jwe: WithKey validates alg-vs-key shape at option-time by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2121
• jwe: compression cap error names "decompressed" payload, the option, and the size by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2123
• jwe: bound joined-error count and drop redundant outer Decrypt prefix by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2125
• jwe: keySetProvider surfaces per-key errors via errors.Join by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2127
• jwe: add WithDisabledKeyAlgorithms global policy hook by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2129
• jwe: document WithMaxDecompressBufferSize behavior at non-positive values by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2131
• jwk: stop duplicating JWK fields at JWKS top level on parse by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2133
• jwk: wrap ParseKey errors with ParseError sentinel by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2135
• jwk: stream the keys array with cap-before-allocate by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2137
• jwk: treat nil key from custom KeyParser as continue, not success by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2140
• jwk: fix phantom ContinueParseError refs and unmarshaler typo in docs by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2142
• Changes: draft v3.1.1 release notes by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/2155

Full Changelog: lestrrat-go/jwx@v3.1.0...v3.1.1

---

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.