v3.4.0

For more detailed release notes, see Changes.

What's Changed

• build(deps): bump github/codeql-action from 4.37.9 to 4.38.0 by @dependabot[bot] in #2352
• build(deps): bump github/codeql-action from 4.38.0 to 4.38.2 by @dependabot[bot] in #2361
• build(deps): bump github.com/goccy/go-json from 0.10.6 to 0.11.0 by @dependabot[bot] in #2364
• build(deps): bump github.com/goccy/go-json from 0.11.0 to 0.11.2 by @dependabot[bot] in #2371
• [v3] keep trying jwe key providers after errors by @lestrrat in #2385
• [v3] allow empty jwe ciphertext in JSON form by @lestrrat in #2387
• [v3] write jwe unprotected header as JSON object by @lestrrat in #2389
• [v3] jwsbb: size SignBuffer per encoded part by @lestrrat in #2401
• [v3] jwe: find WithKeySet kid in protected header by @lestrrat in #2405
• [v3] jwt: honor NumericDate format precision by @lestrrat in #2410
• [v3] jwt: parse negative NumericDate values by @lestrrat in #2412
• [v3] jwt: parse decimal NumericDate values exactly by @lestrrat in #2414
• build(deps): bump github/codeql-action from 4.38.2 to 4.38.3 by @dependabot[bot] in #2419
• [v3] jws: sign only the transmitted header by @lestrrat in #2416
• [v3] jws: add opt-in WithAlgorithmMatch by @lestrrat in #2423
• build(deps): bump github/codeql-action from 4.38.3 to 4.39.0 by @dependabot[bot] in #2427
• use crypto/pbkdf2 and drop x/crypto by @lestrrat in #2431
• [v3] jws: add WithVerifiedSignature verify option by @lestrrat in #2436
• [v3] jwe: add WithDecryptedRecipient decrypt option by @lestrrat in #2440
• [v3] jws: fix crit and multi-signature docs by @lestrrat in #2437
• [v3] jwe: document per-recipient headers by @lestrrat in #2441
• [v3] jws: fix comment in header example by @lestrrat in #2447
• [v3] release v3.4.0 by @lestrrat in #2449

Full Changelog: v3.3.0...v3.4.0