Version 1.6.0

Security release

This release fixes CVE-2026-84185, a low security issue that affects only very specific and uncommon uses of the JWS interface using a JWKSet.

What's Changed

• Fix an issue with parsing headers with 'kid' by @simo5 in #395
• Version 1.6.0 by @simo5 in #396

Full Changelog: v1.5.9...v1.6.0