Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 15, 2025

Bumps github.com/lestrrat-go/jwx/v3 from 3.0.10 to 3.0.11.

Release notes

Sourced from github.com/lestrrat-go/jwx/v3's releases.

v3.0.11

What's Changed

New Contributors

Full Changelog: lestrrat-go/jwx@v3.0.10...v3.0.11

Changelog

Sourced from github.com/lestrrat-go/jwx/v3's changelog.

v3.0.11 14 Sep 2025

  • [jwk] Add (jwk.Cache).Shutdown() method that delegates to the httprc controller object, to shutdown the cache.
  • [jwk] Change timing of res.Body.Close() call
  • [jwe] Previously, ecdh.PrivateKey/ecdh.PublicKey were not properly handled when used for encryption, which has been fixed.
  • [jws/jwsbb] (EXPERIMENTAL/BREAKS COMPATIBILITY) Convert most functions into thin wrappers around functions from github.com/lestrrat-go/dsig package. As a related change, HAMCHashFuncFor/RSAHashFuncFor/ECDSAHashFuncFor/RSAPSSOptions have been removed or unexported. Users of this module should be using jwsbb.Sign() and jwsbb.Verify() instead of algorithm specific jwsbb.SignRSA()/jwsbb.VerifyRSA() and such. If you feel the need to use these functions, you should use github.com/lestrrat-go/dsig directly.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) from 3.0.10 to 3.0.11.
- [Release notes](https://github.com/lestrrat-go/jwx/releases)
- [Changelog](https://github.com/lestrrat-go/jwx/blob/develop/v3/Changes)
- [Commits](lestrrat-go/jwx@v3.0.10...v3.0.11)

---
updated-dependencies:
- dependency-name: github.com/lestrrat-go/jwx/v3
  dependency-version: 3.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 15, 2025
@codecov
Copy link

codecov bot commented Sep 15, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 44.64%. Comparing base (f2b6bc3) to head (dec16a6).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1885      +/-   ##
==========================================
+ Coverage   44.59%   44.64%   +0.04%     
==========================================
  Files         203      203              
  Lines       25864    25864              
==========================================
+ Hits        11534    11546      +12     
+ Misses      13428    13410      -18     
- Partials      902      908       +6     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dmjb dmjb merged commit 3689fab into main Sep 15, 2025
16 checks passed
@dmjb dmjb deleted the dependabot/go_modules/github.com/lestrrat-go/jwx/v3-3.0.11 branch September 15, 2025 08:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants