fix(deps): update module github.com/lestrrat-go/jwx/v3 to v3.2.0 #46

2026-07-27T20:08:34+07:00

Renovate-Clanker commented

2026-07-27 20:08:34 +07:00

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/lestrrat-go/jwx/v3	`v3.1.1` → `v3.2.0`

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)

`v3.2.0`

Compare Source

For more detailed release notes, see Changes.

What's Changed

build(deps): bump github.com/lestrrat-go/dsig from 1.2.1 to 1.3.0 by @dependabot[bot] in #2043
build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 by @dependabot[bot] in #2159
build(deps): bump actions/stale from 10.2.0 to 10.3.0 by @dependabot[bot] in #2174
build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #2179
build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @dependabot[bot] in #2180
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #2184
bump httprc to v3.0.6 by @lestrrat in #2189
autodoc updates by @github-actions[bot] in #2190
build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in #2192
build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #2226
build(deps): bump actions/cache from 5.0.5 to 6.0.0 by @dependabot[bot] in #2231
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #2230
build(deps): bump actions/cache from 6.0.0 to 6.1.0 by @dependabot[bot] in #2238
build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #2242
fix misspellings in code comments by @lestrrat in #2249
build(deps): bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in #2254
build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #2250
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #2258
build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #2261
bump x/crypto to v0.54.0 in codegen modules by @lestrrat in #2266
[v3] retain unparseable JWK set keys, opt-in by @lestrrat in #2265
[v3] fix per-call reject-dup-kid override by @lestrrat in #2270
[v3] test jwe rejects UnsupportedKey placeholder by @lestrrat in #2272
[v3] doc: recommend retain mode for third-party JWK sets as PQC rolls out by @lestrrat in #2274
fix jwe JSON AAD serialization by @lestrrat in #2276
add JWE authenticated data option by @lestrrat in #2278

Full Changelog: https://github.com/lestrrat-go/jwx/compare/v3.1.1...v3.2.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lestrrat-go/jwx/v3](https://github.com/lestrrat-go/jwx) | `v3.1.1` → `v3.2.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2flestrrat-go%2fjwx%2fv3/v3.2.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2flestrrat-go%2fjwx%2fv3/v3.1.1/v3.2.0?slim=true) | --- ### Release Notes <details> <summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)</summary> ### [`v3.2.0`](https://github.com/lestrrat-go/jwx/releases/tag/v3.2.0) [Compare Source](https://github.com/lestrrat-go/jwx/compare/v3.1.1...v3.2.0) For more detailed release notes, see [Changes](https://github.com/lestrrat-go/jwx/blob/v3.2.0/Changes). #### What's Changed - build(deps): bump github.com/lestrrat-go/dsig from 1.2.1 to 1.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2043](https://github.com/lestrrat-go/jwx/pull/2043) - build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2159](https://github.com/lestrrat-go/jwx/pull/2159) - build(deps): bump actions/stale from 10.2.0 to 10.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2174](https://github.com/lestrrat-go/jwx/pull/2174) - build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2179](https://github.com/lestrrat-go/jwx/pull/2179) - build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2180](https://github.com/lestrrat-go/jwx/pull/2180) - build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#2184](https://github.com/lestrrat-go/jwx/pull/2184) - bump httprc to v3.0.6 by [@lestrrat](https://github.com/lestrrat) in [#2189](https://github.com/lestrrat-go/jwx/pull/2189) - autodoc updates by [@github-actions](https://github.com/github-actions)\[bot] in [#2190](https://github.com/lestrrat-go/jwx/pull/2190) - build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2192](https://github.com/lestrrat-go/jwx/pull/2192) - build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2226](https://github.com/lestrrat-go/jwx/pull/2226) - build(deps): bump actions/cache from 5.0.5 to 6.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2231](https://github.com/lestrrat-go/jwx/pull/2231) - build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2230](https://github.com/lestrrat-go/jwx/pull/2230) - build(deps): bump actions/cache from 6.0.0 to 6.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2238](https://github.com/lestrrat-go/jwx/pull/2238) - build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2242](https://github.com/lestrrat-go/jwx/pull/2242) - fix misspellings in code comments by [@lestrrat](https://github.com/lestrrat) in [#2249](https://github.com/lestrrat-go/jwx/pull/2249) - build(deps): bump actions/stale from 10.3.0 to 10.4.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2254](https://github.com/lestrrat-go/jwx/pull/2254) - build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2250](https://github.com/lestrrat-go/jwx/pull/2250) - build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2258](https://github.com/lestrrat-go/jwx/pull/2258) - build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2261](https://github.com/lestrrat-go/jwx/pull/2261) - bump x/crypto to v0.54.0 in codegen modules by [@lestrrat](https://github.com/lestrrat) in [#2266](https://github.com/lestrrat-go/jwx/pull/2266) - \[v3] retain unparseable JWK set keys, opt-in by [@lestrrat](https://github.com/lestrrat) in [#2265](https://github.com/lestrrat-go/jwx/pull/2265) - \[v3] fix per-call reject-dup-kid override by [@lestrrat](https://github.com/lestrrat) in [#2270](https://github.com/lestrrat-go/jwx/pull/2270) - \[v3] test jwe rejects UnsupportedKey placeholder by [@lestrrat](https://github.com/lestrrat) in [#2272](https://github.com/lestrrat-go/jwx/pull/2272) - \[v3] doc: recommend retain mode for third-party JWK sets as PQC rolls out by [@lestrrat](https://github.com/lestrrat) in [#2274](https://github.com/lestrrat-go/jwx/pull/2274) - fix jwe JSON AAD serialization by [@lestrrat](https://github.com/lestrrat) in [#2276](https://github.com/lestrrat-go/jwx/pull/2276) - add JWE authenticated data option by [@lestrrat](https://github.com/lestrrat) in [#2278](https://github.com/lestrrat-go/jwx/pull/2278) **Full Changelog**: <https://github.com/lestrrat-go/jwx/compare/v3.1.1...v3.2.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

Renovate-Clanker added 1 commit 2026-07-27 20:08:35 +07:00

fix(deps): update module github.com/lestrrat-go/jwx/v3 to v3.2.0 dcc3007f14

Renovate-Clanker scheduled this pull request to auto merge when all checks succeed 2026-07-27 20:08:35 +07:00

Renovate-Clanker commented

2026-07-27 20:08:36 +07:00

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

5 additional dependencies were updated

Details:

Package	Change
`github.com/lestrrat-go/dsig`	`v1.2.1` -> `v1.3.0`
`golang.org/x/crypto`	`v0.50.0` -> `v0.54.0`
`golang.org/x/net`	`v0.53.0` -> `v0.56.0`
`golang.org/x/sys`	`v0.43.0` -> `v0.47.0`
`golang.org/x/text`	`v0.36.0` -> `v0.40.0`

### ℹ️ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 5 additional dependencies were updated Details: | **Package** | **Change** | | :---------------------------- | :--------------------- | | `github.com/lestrrat-go/dsig` | `v1.2.1` -> `v1.3.0` | | `golang.org/x/crypto` | `v0.50.0` -> `v0.54.0` | | `golang.org/x/net` | `v0.53.0` -> `v0.56.0` | | `golang.org/x/sys` | `v0.43.0` -> `v0.47.0` | | `golang.org/x/text` | `v0.36.0` -> `v0.40.0` |

Renovate-Clanker merged commit 728105cdae into main

2026-07-27 20:08:37 +07:00

Renovate-Clanker deleted branch renovate/github.com-lestrrat-go-jwx-v3-3.x

2026-07-27 20:08:37 +07:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: bagas/tunnel-please-controller#46