build(deps): bump the go-modules group with 3 updates

[dependabot]

Bumps the go-modules group with 3 updates: github.com/golang-jwt/jwt/v5, github.com/golang-module/carbon/v2 and golang.org/x/crypto.

Updates github.com/golang-jwt/jwt/v5 from 5.0.0 to 5.1.0

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.1.0

What's Changed

• Using jwt's native ErrInvalidType instead of json.UnsupportedTypeError by @​oxisto in golang-jwt/jwt#316
• Fix typos in comments and test names by @​alexandear in golang-jwt/jwt#317
• Format: add whitespaces, remove empty lines by @​alexandear in golang-jwt/jwt#319
• Refactor example: use io.ReadAll instead of io.Copy by @​alexandear in golang-jwt/jwt#320
• Refactor code by using switch instead of if-else by @​alexandear in golang-jwt/jwt#318
• A quick way to validate token string by @​dcalsky in golang-jwt/jwt#302
• Refactor: remove unnecessary []byte conversion to string by @​alexandear in golang-jwt/jwt#330
• Refactor: compare strings with strings.EqualFold by @​alexandear in golang-jwt/jwt#329
• Avoid use of json.NewDecoder by @​craigpastro in golang-jwt/jwt#313
• Update ParseUnverified godoc by @​duhaesbaert in golang-jwt/jwt#341
• Update ci workflows (add go1.21) by @​mfridman in golang-jwt/jwt#345
• Bump actions/checkout from 3 to 4 by @​dependabot in golang-jwt/jwt#346
• Key rotation with VerificationKeySet by @​mfridman in golang-jwt/jwt#344
• Add explicit ClaimsValidator implementation check for custom claims by @​epelc in golang-jwt/jwt#343
• feat: allow making exp claim required by @​tareksha in golang-jwt/jwt#351
• Add error handling to examples by @​craigpastro in golang-jwt/jwt#312

New Contributors

• @​alexandear made their first contribution in golang-jwt/jwt#317
• @​dcalsky made their first contribution in golang-jwt/jwt#302
• @​craigpastro made their first contribution in golang-jwt/jwt#313
• @​duhaesbaert made their first contribution in golang-jwt/jwt#341
• @​epelc made their first contribution in golang-jwt/jwt#343
• @​tareksha made their first contribution in golang-jwt/jwt#351

Full Changelog: golang-jwt/jwt@v5.0.0...v5.1.0

Commits

• c776b83 Add error handling to examples (#312)
• 908d356 feat: allow making exp claim required (#351)
• 0cb4fa1 docs: fix comment in KeyFunc
• c80de55 Add explicit ClaimsValidator implementation check for custom claims (#343)
• 1e76606 Key rotation with VerificationKeySet (#344)
• 1691aa9 Bump actions/checkout from 3 to 4 (#346)
• 27ff2f3 Update ci workflows (add go1.21) (#345)
• 6879d2c Update ParseUnverified godoc (#341)
• 78e25d6 Avoid use of json.NewDecoder (#313)
• 8aa5d6c Refactor to use strings.EqualFold (#329)
• Additional commits viewable in compare view

Updates github.com/golang-module/carbon/v2 from 2.2.12 to 2.2.13

Release notes

Sourced from github.com/golang-module/carbon/v2's releases.

v2.2.13

• Fix translation error in lang/fr.json and lang/jp.json files
• Fix bug in IsZero method #194
• Add IsDST method
• Add Closest and Farthest methods
• Rename from modifier.go to boundary.go, modifier_test.go to boundary_test.go

Commits

• 87dbd56 Add description about Closest and Farthest methods
• e04fb0e Add description about Closest and Farthest methods
• 0dd0acf Add Closest and Farthest methods
• 3534059 Fix translation error about now
• f9169b2 Rename from modifier_test.go to boundary_test.go
• 07314b5 Rename from modifier.go to boundary.go
• 7a04491 Add comment
• 0b0458f Fix spelling errors in now
• b1a41ee Fix spelling errors in months
• 04939db Add description of IsDST method
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.14.0 to 0.15.0

Commits

• eb61739 ssh: allow to configure public key auth algorithms on the server side
• 42c83ff ssh: try harder to detect incorrect passwords for legacy PEM encryption
• e668aa9 go.mod: update golang.org/x dependencies
• df0bc9e chacha20poly1305: guard PSHUFB usage with GOAMD64_v2
• 74c2ba9 crypto/hkdf: remove useless call to Reset
• cf8dcb0 ssh: add test case against ssh CLI
• 4f30245 x509roots: catch the zero-roots case when generating the bundle
• 1d57292 x509roots: check HTTP response status code and media type
• 8779cbd all: update go directive to 1.18
• 2aeefc3 ssh: add support for SSH_AGENT_CONSTRAIN_EXTENSION with id 255
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

📢 Thoughts on this report? Let us know!

[devhaozi]

@dependabot squash and merge