fix(deps): Update module github.com/lestrrat-go/jwx/v2 to v3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/lestrrat-go/jwx/v2	v2.1.6 -> v3.0.8

---

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v2)

v3.0.8

Compare Source

What's Changed

• change from interface{} to any by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1417
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1418
• Introduce jwe lower level API (jwebb), and refactor a bunch of things. by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1419
• [jws/jwsbb] Add io.Reader for source of randomness by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1420
• Add package level doc for jwe by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1421
• Add jwsbb.HeaderParse by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1422

Full Changelog: lestrrat-go/jwx@v3.0.7...v3.0.8

v3.0.7

Compare Source

What's Changed

• Update examples by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1412
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1413
• Add error when signature could not be verified by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1414
• Add Header type for quick and dirty access to JWS headers by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1415
• Refactor jwsbb code by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1416

Full Changelog: lestrrat-go/jwx@v3.0.6...v3.0.7

v3.0.6

Compare Source

What's Changed

• Use shared constants for better legibility/greppability by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1398
• Rework pool objects by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1399
• Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 in /examples by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1395
• Add AppendEncode to the interface by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1400
• Upgrade option and blackmagic by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1401
• Add comparison benchmark by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1407
• Implement low-level API for jws, and incorporate it to JWT to achieve massive performance gains by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1408
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1409
• Rename comparison by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1410

Full Changelog: lestrrat-go/jwx@v3.0.5...v3.0.6

v3.0.5

Compare Source

What's Changed

• Revert "Improve performance (#​1391)" by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1397
• v3.0.4 has also been retracted on go.mod

Full Changelog: lestrrat-go/jwx@v3.0.4...v3.0.5

v3.0.4

Compare Source

v3.0.3

Compare Source

What's Changed

• Add more context to the errors by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1387
• Update httprc version by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1388

Full Changelog: lestrrat-go/jwx@v3.0.2...v3.0.3

v3.0.2

Compare Source

What's Changed

• Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1369
• Bump golang.org/x/crypto from 0.37.0 to 0.38.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1372
• Bump actions/setup-go from 5.4.0 to 5.5.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1373
• Add .deprecated field to algorithms in anticipation of future deprecations by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1374
• Add .deprecated field to algorithms in anticipation of future deprecations by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1376
• Add doc tweaks to #​1380 by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1383
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1384
• Use jwk interfaces for each key type rather than concrete types by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1381
• Implement Filter objects for container types by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1377
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1386
• Implement generic AsMap by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1385

Full Changelog: lestrrat-go/jwx@v3.0.1...v3.0.2

v3.0.1

Compare Source

What's Changed

Please read the Changes file and upgrade accordingly, especially if you are using the following combinations for JWE:

• DIRECT mode content encryption
• Using A256CBC_HS512
• With an erroneously created CEK of exactly 32-bytes.

---

• Bump actions/cache from 4.2.1 to 4.2.3 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1336
• Bump actions/checkout from 4.1.7 to 4.2.2 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1337
• Bump actions/setup-go from 5.0.2 to 5.4.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1338
• Update 02-jws.md by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1341
• Bump golang.org/x/crypto from 0.36.0 to 0.37.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1342
• Add the claim name to error messages produced by ClaimValueIs() by @​jmalloc in https://github.com/lestrrat-go/jwx/pull/1347
• Tweak comments generated by genwa under jwa directory by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1348
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1349
• Disable funcorder by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1351
• Update .golangci.yml by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1353
• Update github.com/lestrrat-go/blackmagic by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1352
• disable dependabot for develop/v1 branch by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1358
• jws: improve performance for SplitCompact/SplitCompactString by @​drakkan in https://github.com/lestrrat-go/jwx/pull/1360
• jwe: use strings.Cut in parseCompact by @​drakkan in https://github.com/lestrrat-go/jwx/pull/1362
• Update httprc to v3.0.0-beta2 by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1364
• Create SECURITY.md by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1365
• [v3] Explcitly check key sizes before passing to aes.NewCipher by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1367

New Contributors

• @​jmalloc made their first contribution in https://github.com/lestrrat-go/jwx/pull/1347

Full Changelog: lestrrat-go/jwx@v3.0.0...v3.0.1

v3.0.0

Compare Source

What's Changed

• Add support for RSA-OAEP-384 and RSA-OAEP-512 by @​Hannes-Kunnen in https://github.com/lestrrat-go/jwx/pull/1142
• fix: typos by @​maro114510 in https://github.com/lestrrat-go/jwx/pull/1145
• Update httprc to v1.0.6 by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1150
• Improve API for checking algorithm characteristics around symmetry by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1151
• Fix typos/mistakes/wording/links in documentation/comments by @​Hannes-Kunnen in https://github.com/lestrrat-go/jwx/pull/1152
• Apply changes from #​1156 to v2 by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1158
• Avoid problems on 32-bit systems by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1159
• Update minimum required go version to 1.20 by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1161
• Run CI with minimum go version 1.20 by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1162
• Bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1149
• Deprecate jws.WithHeaders by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1163
• Bump golang.org/x/crypto from 0.25.0 to 0.26.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1168
• Fix document of how to parse PEM via CLI by @​kg0r0 in https://github.com/lestrrat-go/jwx/pull/1174
• Wrap the errors from functions called within ParseRequest by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1176
• V3 modernize infra by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1180
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1181
• V3 dependabot by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1184
• Completely rework jwk.Cache using github.com/lestrrat-go/httprc/v3 by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1189
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1190
• Use import by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1191
• include an extra attribute in the trace log for debugging by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1192
• remove old references and unused files by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1193
• Bump golang.org/x/crypto from 0.26.0 to 0.27.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1185
• cleanup docs, options around cache by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1194
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1195
• fix docs by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1196
• Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1197
• Allow flexible key usage values by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1198
• Remove assert by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1200
• Convert jwa constants to function calls returning objects by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1203
• Mention RegisterKeyUsage by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1201
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1206
• Change accessors in jwk to return (T, bool) by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1207
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1211
• Bump golang.org/x/crypto from 0.27.0 to 0.28.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1210
• Change JWT accessors from returning T to returning (T, bool) by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1212
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1213
• update comments to include iat (#​1216) by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1217
• Rename the old WithMaxBufferSize option as previously warned by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1218
• Streamline errors by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1220
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1221
• allow passing context.Contex to jwe.Decrypt by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1222
• Remove non-applicable comment by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1224
• fix document by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1226
• Remove jws.WithHeaders by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1227
• tweak badge URL by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1228
• Add quid pro quo in README by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1225
• Update serialize.go by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1234
• Lint fix by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1235
• Bump golang.org/x/crypto from 0.28.0 to 0.29.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1231
• Change random big value to math.MaxInt by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1241
• Bump pozil/auto-assign-issue from 2.0.0 to 2.0.1 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1238
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1245
• Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1269
• Bump pozil/auto-assign-issue from 2.0.1 to 2.1.2 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1261
• Bump golang.org/x/crypto from 0.29.0 to 0.32.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1263
• Bump actions/stale from 9.0.0 to 9.1.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1272
• [v3] Fixes to work with go1.24 by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1299
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1300
• Bump pozil/auto-assign-issue from 2.1.2 to 2.2.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1279
• Develop v3 actions cache by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1303
• Bump golangci/golangci-lint-action from 6.2.0 to 6.5.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1290
• Bump github.com/decred/dcrd/dcrec/secp256k1/v4 from 4.3.0 to 4.4.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1293
• Bump golang.org/x/crypto from 0.32.0 to 0.34.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1297
• Bump golang.org/x/crypto from 0.34.0 to 0.35.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1307
• jws/jwe: split token into fixed number of parts by @​drakkan in https://github.com/lestrrat-go/jwx/pull/1308
• [jwk] Change ecdh importer/exporter by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1315
• Bump golang.org/x/crypto from 0.35.0 to 0.36.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1312
• Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1316
• Change default behavior around truncation of time fields by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1318
• Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1320
• Tweaks on #​1322 by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1323
• Bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 by @​dependabot in https://github.com/lestrrat-go/jwx/pull/1325
• Implement AWS ALB User Claims parser by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1328
• Add docs for WithBase64Encoder by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1329
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1330
• avoid internal module by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1331
• Clear key.Precomputed values before testing equality by @​lestrrat in https://github.com/lestrrat-go/jwx/pull/1333
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1332
• autodoc updates by @​github-actions in https://github.com/lestrrat-go/jwx/pull/1334

New Contributors

• @​Hannes-Kunnen made their first contribution in https://github.com/lestrrat-go/jwx/pull/1142
• @​maro114510 made their first contribution in https://github.com/lestrrat-go/jwx/pull/1145
• @​kg0r0 made their first contribution in https://github.com/lestrrat-go/jwx/pull/1174
• @​drakkan made their first contribution in https://github.com/lestrrat-go/jwx/pull/1308

Full Changelog: lestrrat-go/jwx@v2.1.0...v3.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/lestrrat-go/blackmagic	v1.0.3 -> v1.0.4

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[jas4711]

Finishing this would be great! In Debian this is blocking completion of opkssh migration. We are using this patch, but it is not completely working against 0.13.0 and I'm working on trying to complete it...