{"id":2237,"name":"github.com/MicahParks/jwkset","ecosystem":"go","repository_url":"https://github.com/MicahParks/jwkset","issues_count":29,"created_at":"2025-06-06T15:02:00.357Z","updated_at":"2025-06-06T15:02:00.357Z","purl":"pkg:golang/github.com/MicahParks/jwkset","metadata":{"id":5333109,"name":"github.com/MicahParks/jwkset","ecosystem":"go","description":"","homepage":"https://github.com/MicahParks/jwkset","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/MicahParks/jwkset","keywords_array":[],"namespace":"github.com/MicahParks","versions_count":43,"first_release_published_at":"2022-09-14T00:35:11.000Z","latest_release_published_at":"2025-05-19T21:46:21.000Z","latest_release_number":"v0.9.6","last_synced_at":"2025-05-26T01:06:51.864Z","created_at":"2022-10-18T02:24:18.102Z","updated_at":"2025-05-26T01:06:52.118Z","registry_url":"https://pkg.go.dev/github.com/MicahParks/jwkset","install_command":"go get github.com/MicahParks/jwkset","documentation_url":"https://pkg.go.dev/github.com/MicahParks/jwkset#section-documentation","metadata":{},"repo_metadata":{"uuid":"536354840","full_name":"MicahParks/jwkset","owner":"MicahParks","description":"A JWK Set implementation.","archived":false,"fork":false,"pushed_at":"2023-02-04T17:55:59.000Z","size":215,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2023-03-06T00:39:49.495Z","etag":null,"topics":["go","golang","jwk","jwks","jwks-endpoint","jwks-rsa","jwkset","rfc7517"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"logo_url":null,"metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null},"funding":{"github":"MicahParks"}},"created_at":"2022-09-14T00:26:09.000Z","updated_at":"2023-01-14T23:58:50.000Z","dependencies_parsed_at":"2023-02-18T18:31:30.723Z","dependency_job_id":null,"html_url":"https://github.com/MicahParks/jwkset","commit_stats":null,"repository_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MicahParks%2Fjwkset","tags_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MicahParks%2Fjwkset/tags","manifests_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MicahParks%2Fjwkset/manifests","owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/MicahParks","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":108921946,"host_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names"}},"repo_metadata_updated_at":"2023-03-22T07:33:14.117Z","dependent_packages_count":4,"downloads":null,"downloads_period":null,"dependent_repos_count":2,"rankings":{"downloads":null,"dependent_repos_count":3.5203901335783447,"dependent_packages_count":2.8366467090051795,"stargazers_count":19.166826529891058,"forks_count":18.72762335551225,"docker_downloads_count":1.433720707167594,"average":9.137041487030885},"purl":"pkg:golang/github.com/%21micah%21parks/jwkset","advisories":[{"uuid":"GSA_kwCzR0hTQS02NzVmLXJxMnItanc4Ms4ABDIp","url":"https://github.com/advisories/GHSA-675f-rq2r-jw82","title":"JWK Set's HTTP client only overwrites and appends JWK to local cache during refresh","description":"### Impact\nThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\n\nExample attack scenario:\n1. An attacker has stolen the private key for a key published in JWK Set.\n2. The publishers of that JWK Set remove that key from the JWK Set.\n3. Enough time has passed that the program using the auto-caching HTTP client found in `github.com/MicahParks/jwkset` v0.5.0-v0.5.21 has elapsed its `HTTPClientStorageOptions.RefreshInterval` duration, causing a refresh of the remote JWK Set.\n4. The attacker is signing content (such as JWTs) with the stolen private key and the system has no other forms of revocation.\n\n### Patches\nThe affected auto-caching HTTP client was added in version `v0.5.0` and fixed in `v0.6.0`. Upgrade to `v0.6.0` or later.\n\n### Workarounds\nThe only workaround would be to remove the provided auto-caching HTTP client and replace it with a custom implementation. This involves setting the `HTTPClientStorageOptions.RefreshInterval` to zero (or not specifying the value). Upgrade to `v0.6.0` is advised.\n\n### References\nPlease see the tracking issue on GitHub for additional details: https://github.com/MicahParks/jwkset/issues/40\n","origin":"UNSPECIFIED","severity":"LOW","published_at":"2025-01-09T17:23:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/MicahParks/jwkset/security/advisories/GHSA-675f-rq2r-jw82","https://github.com/MicahParks/jwkset/issues/40","https://github.com/MicahParks/jwkset/pull/41","https://nvd.nist.gov/vuln/detail/CVE-2025-22149","https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3","https://github.com/advisories/GHSA-675f-rq2r-jw82"],"source_kind":"github","identifiers":["GHSA-675f-rq2r-jw82","CVE-2025-22149"],"repository_url":"https://github.com/MicahParks/jwkset","blast_radius":0.0,"packages":[{"versions":[{"first_patched_version":"0.6.0","vulnerable_version_range":"\u003e= 0.5.0, \u003c= 0.5.21"}],"ecosystem":"go","package_name":"github.com/MicahParks/jwkset"}],"created_at":"2025-01-09T18:08:24.759Z","updated_at":"2025-01-09T19:29:15.000Z","epss_percentage":null,"epss_percentile":null}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/MicahParks/jwkset","docker_dependents_count":3,"docker_downloads_count":171,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/MicahParks/jwkset","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/MicahParks/jwkset/dependencies","status":null,"funding_links":["https://github.com/sponsors/MicahParks"],"critical":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FMicahParks%2Fjwkset/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FMicahParks%2Fjwkset/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FMicahParks%2Fjwkset/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FMicahParks%2Fjwkset/related_packages","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1882879,"maintainers_count":0,"namespaces_count":723926,"keywords_count":97872,"github":"golang","metadata":{"funded_packages_count":39346},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-06-06T05:22:27.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},"unique_repositories_count":13,"unique_repositories_count_past_30_days":1,"recent_issues":[{"uuid":"5095815164","node_id":"PR_kwDOSgCTBc78UOvL","number":3,"state":"closed","title":"chore(go): bump github.com/MicahParks/jwkset from 0.11.2 to 0.11.3 in the go-modules group","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-08-20T18:10:00.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-08T04:17:24.000Z","updated_at":"2026-08-20T18:10:01.000Z","time_to_close":1086756,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(go)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.11.2","new_version":"0.11.3","repository_url":"https://github.com/MicahParks/jwkset"}],"path":"the go-modules group","ecosystem":"go"},"body":"Bumps the go-modules group with 1 update: [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset).\n\nUpdates `github.com/MicahParks/jwkset` from 0.11.2 to 0.11.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.3\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to programmatically identify IANA prohibited algorithms.\u003c/p\u003e\n\u003cp\u003eThank you \u003ca href=\"https://github.com/saluc28\"\u003e\u003ccode\u003e@​saluc28\u003c/code\u003e\u003c/a\u003e for the contribution.\u003c/p\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/69\"\u003eMicahParks/jwkset#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/71\"\u003eMicahParks/jwkset#71\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/bc827281e12d522a53d803e5ca408dcbf807aaaa\"\u003e\u003ccode\u003ebc82728\u003c/code\u003e\u003c/a\u003e Small updates (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/67382ca561b29b11a166095f9599b993668e5d69\"\u003e\u003ccode\u003e67382ca\u003c/code\u003e\u003c/a\u003e Add ALG.Prohibited() to report prohibited algorithms (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.11.2...v0.11.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.11.2\u0026new-version=0.11.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/complynx/zitadeltg/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/complynx%2Fzitadeltg/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"},{"uuid":"2850390323","node_id":"PR_kwDODb-aPc6p5YEz","number":5023,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.10.0 to 0.11.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-09-23T07:36:45.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-22T17:19:14.000Z","updated_at":"2025-09-23T07:36:45.000Z","time_to_close":51451,"merged_at":"2025-09-23T07:36:45.000Z","merged_by":"aler9","closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.10.0 to 0.11.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to allow JWK Sets to be processed even if not every key is a supported type. An example of an unsupported key type would be \u003ccode\u003eEd448\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003ePlease see the new \u003ccode\u003eRequireSupportedKeys\u003c/code\u003e option on \u003ca href=\"https://pkg.go.dev/github.com/MicahParks/jwkset@v0.11.0#HTTPClientStorageOptions\"\u003e\u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/60\"\u003e#60\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0d285dedecd7ed02ddcfd6e9ff6c6c62747e8f7e\"\u003e\u003ccode\u003e0d285de\u003c/code\u003e\u003c/a\u003e Ignore unsupported keys (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.10.0\u0026new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/bluenviron/mediamtx/pull/5023","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bluenviron%2Fmediamtx/issues/5023","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5023/packages"},{"uuid":"2849975307","node_id":"PR_kwDONEBgR86p3ywL","number":47,"state":"closed","title":"build(deps): bump the main group with 3 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":["Serpentiel"],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-09-24T12:05:05.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-22T15:18:30.000Z","updated_at":"2025-09-24T12:05:05.000Z","time_to_close":161195,"merged_at":"2025-09-24T12:05:05.000Z","merged_by":"Serpentiel","closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"main","update_count":3,"packages":[{"name":"github.com/Azure/azure-sdk-for-go/sdk/azidentity","old_version":"1.11.0","new_version":"1.12.0","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/MicahParks/jwkset","old_version":"0.9.6","new_version":"0.11.0","repository_url":"https://github.com/MicahParks/jwkset"},{"name":"github.com/MicahParks/keyfunc/v3","old_version":"3.6.1","new_version":"3.6.2","repository_url":"https://github.com/MicahParks/keyfunc"}],"path":null,"ecosystem":"go"},"body":"Bumps the main group with 3 updates: [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go), [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) and [github.com/MicahParks/keyfunc/v3](https://github.com/MicahParks/keyfunc).\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.11.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/releases\"\u003egithub.com/Azure/azure-sdk-for-go/sdk/azidentity's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk/azidentity/v1.12.0\u003c/h2\u003e\n\u003ch2\u003e1.12.0 (2025-09-16)\u003c/h2\u003e\n\u003ch3\u003eFeatures Added\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eDefaultAzureCredentialOptions.RequireAzureTokenCredentials\u003c/code\u003e. \u003ccode\u003eNewDefaultAzureCredential\u003c/code\u003e returns an\nerror when this option is true and the environment variable \u003ccode\u003eAZURE_TOKEN_CREDENTIALS\u003c/code\u003e has no value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAzureDeveloperCLICredential\u003c/code\u003e no longer hangs when AZD_DEBUG is set\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eGetToken\u003c/code\u003e methods of \u003ccode\u003eAzureCLICredential\u003c/code\u003e and \u003ccode\u003eAzureDeveloperCLICredential\u003c/code\u003e return an error when\n\u003ccode\u003eTokenRequestOptions.Claims\u003c/code\u003e has a value because these credentials can't acquire a token in that\ncase. The error messages describe the action required to get a token.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esdk/internal/v1.11.2\u003c/h2\u003e\n\u003ch2\u003e1.11.2 (2025-07-30)\u003c/h2\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eerrorinfo.NonRetriable()\u003c/code\u003e doesn't wrap errors which are already \u003ccode\u003eNonRetriable\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/e58902b242459d7a4a42c8c0113937b26ac495af\"\u003e\u003ccode\u003ee58902b\u003c/code\u003e\u003c/a\u003e Prep azcore v1.12.0 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/23005\"\u003e#23005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/9ad32c5a2db85ef5f697e5d3376a73efaebd19ae\"\u003e\u003ccode\u003e9ad32c5\u003c/code\u003e\u003c/a\u003e Increment package version after release of internal (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/23004\"\u003e#23004\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/897e9035c566063952597bc3b470858e866c2a0b\"\u003e\u003ccode\u003e897e903\u003c/code\u003e\u003c/a\u003e Update ignore-links.txt (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/23003\"\u003e#23003\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ac7cc049bf63dc129ad246dbe21ac7a6ca42a578\"\u003e\u003ccode\u003eac7cc04\u003c/code\u003e\u003c/a\u003e [keyvault] fix test recording sanitizers (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22911\"\u003e#22911\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/276cf8c8e230d25d0872babca0a5965514760e19\"\u003e\u003ccode\u003e276cf8c\u003c/code\u003e\u003c/a\u003e update readme (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22971\"\u003e#22971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/5eb479f45a231f434b00411e57b17c53137d35ea\"\u003e\u003ccode\u003e5eb479f\u003c/code\u003e\u003c/a\u003e [azopenai] Updating hash to merged PR. (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22998\"\u003e#22998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/9c4f5c55f5439bcd7e3b5290fb31b2e145f2ebf8\"\u003e\u003ccode\u003e9c4f5c5\u003c/code\u003e\u003c/a\u003e Prepare sdk/internal v1.9.0 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22991\"\u003e#22991\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b407f56cbce00d7d3ff51ac864fd1d04a88a08a1\"\u003e\u003ccode\u003eb407f56\u003c/code\u003e\u003c/a\u003e Increment version for messaging/azwebpubsub releases (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22466\"\u003e#22466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/3af4c7ee716193b8e6755307ef1d27c041614752\"\u003e\u003ccode\u003e3af4c7e\u003c/code\u003e\u003c/a\u003e update mgmt live test (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22996\"\u003e#22996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b7d018ea5d4e2c59ef91f8b42d3307262bf3e81b\"\u003e\u003ccode\u003eb7d018e\u003c/code\u003e\u003c/a\u003e fix sdk/resourcemanager/internal module (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22994\"\u003e#22994\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.11.0...sdk/azcore/v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/MicahParks/jwkset` from 0.9.6 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to allow JWK Sets to be processed even if not every key is a supported type. An example of an unsupported key type would be \u003ccode\u003eEd448\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003ePlease see the new \u003ccode\u003eRequireSupportedKeys\u003c/code\u003e option on \u003ca href=\"https://pkg.go.dev/github.com/MicahParks/jwkset@v0.11.0#HTTPClientStorageOptions\"\u003e\u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/60\"\u003e#60\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to automatically extract the certificate's key usage in the \u003ccode\u003ejwkset\u003c/code\u003e CLI tool. This has not been added to the library or website yet.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/57\"\u003eMicahParks/jwkset#57\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/58\"\u003eMicahParks/jwkset#58\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCommits outside of pull requests (I will add branch protection now):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e7d65392db7e82185f777208a6d17625f9a867d60\u003c/li\u003e\n\u003cli\u003e6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0d285dedecd7ed02ddcfd6e9ff6c6c62747e8f7e\"\u003e\u003ccode\u003e0d285de\u003c/code\u003e\u003c/a\u003e Ignore unsupported keys (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\"\u003e\u003ccode\u003e6fab088\u003c/code\u003e\u003c/a\u003e Consolidate helper functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/7d65392db7e82185f777208a6d17625f9a867d60\"\u003e\u003ccode\u003e7d65392\u003c/code\u003e\u003c/a\u003e Change determineUse implementation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/57a5058644cd1a67d7089870330bba1a6adb8cc1\"\u003e\u003ccode\u003e57a5058\u003c/code\u003e\u003c/a\u003e Added support for 'use' attribute of JWK (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/58\"\u003e#58\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.6...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/MicahParks/keyfunc/v3` from 3.6.1 to 3.6.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/keyfunc/releases\"\u003egithub.com/MicahParks/keyfunc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eIgnore unsupported keys by default\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to ignore unsupported keys in a JWK Set by default.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/60\"\u003eMicahParks/jwkset#60\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/keyfunc/issues/143\"\u003e#143\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/61\"\u003eMicahParks/jwkset#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/keyfunc/commit/5e8bfb44c248329d64bf8360b13dce5b78d0e855\"\u003e\u003ccode\u003e5e8bfb4\u003c/code\u003e\u003c/a\u003e Upgrade jwkset for new default behavior (\u003ca href=\"https://redirect.github.com/MicahParks/keyfunc/issues/143\"\u003e#143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/keyfunc/commit/2245943d43ec0aab237005deaccde76ad515a190\"\u003e\u003ccode\u003e2245943\u003c/code\u003e\u003c/a\u003e Fix comment (\u003ca href=\"https://redirect.github.com/MicahParks/keyfunc/issues/142\"\u003e#142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/keyfunc/compare/v3.6.1...v3.6.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/AlphaSense-Engineering/privatecloud-cli/pull/47","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AlphaSense-Engineering%2Fprivatecloud-cli/issues/47","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/47/packages"},{"uuid":"3439698814","node_id":"PR_kwDODDNgWs6pxoov","number":879,"state":"open","title":"Bump github.com/MicahParks/jwkset from 0.7.0 to 0.11.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-22T08:13:39.000Z","updated_at":"2026-01-19T16:07:28.694Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.7.0","new_version":"0.11.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.7.0 to 0.11.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to allow JWK Sets to be processed even if not every key is a supported type. An example of an unsupported key type would be \u003ccode\u003eEd448\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003ePlease see the new \u003ccode\u003eRequireSupportedKeys\u003c/code\u003e option on \u003ca href=\"https://pkg.go.dev/github.com/MicahParks/jwkset@v0.11.0#HTTPClientStorageOptions\"\u003e\u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/60\"\u003e#60\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to automatically extract the certificate's key usage in the \u003ccode\u003ejwkset\u003c/code\u003e CLI tool. This has not been added to the library or website yet.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/57\"\u003eMicahParks/jwkset#57\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/58\"\u003eMicahParks/jwkset#58\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCommits outside of pull requests (I will add branch protection now):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e7d65392db7e82185f777208a6d17625f9a867d60\u003c/li\u003e\n\u003cli\u003e6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to add the \u003ccode\u003eStorage\u003c/code\u003e field back to the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure. It was removed in \u003ccode\u003ev0.6.0\u003c/code\u003e because I thought it was unused.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplementations of the \u003ccode\u003eStorage\u003c/code\u003e interface now require a \u003ccode\u003eKeyReplaceAll\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/48\"\u003eMicahParks/jwkset#48\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/49\"\u003eMicahParks/jwkset#49\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChange function parameter type\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to change a function parameter from type from \u003ccode\u003e*url.URL\u003c/code\u003e to \u003ccode\u003estring\u003c/code\u003e for convenience.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eNewStorageFromHTTP\u003c/code\u003e function accepts a \u003ccode\u003estring\u003c/code\u003e instead of a \u003ccode\u003e*url.URL\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0d285dedecd7ed02ddcfd6e9ff6c6c62747e8f7e\"\u003e\u003ccode\u003e0d285de\u003c/code\u003e\u003c/a\u003e Ignore unsupported keys (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\"\u003e\u003ccode\u003e6fab088\u003c/code\u003e\u003c/a\u003e Consolidate helper functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/7d65392db7e82185f777208a6d17625f9a867d60\"\u003e\u003ccode\u003e7d65392\u003c/code\u003e\u003c/a\u003e Change determineUse implementation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/57a5058644cd1a67d7089870330bba1a6adb8cc1\"\u003e\u003ccode\u003e57a5058\u003c/code\u003e\u003c/a\u003e Added support for 'use' attribute of JWK (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/58\"\u003e#58\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/12a0f9ad2963ce76285884d045c3b04be9a782f1\"\u003e\u003ccode\u003e12a0f9a\u003c/code\u003e\u003c/a\u003e Rename jwksettool to jwkset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3fae7f8d2043e4b3935203f473a96ef4d3c4a185\"\u003e\u003ccode\u003e3fae7f8\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/257dc6e8e0533c127ac60a0077e30dd9f6f41b55\"\u003e\u003ccode\u003e257dc6e\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/78c43ce97c48f36b04c06dcc0e288ef1058e1862\"\u003e\u003ccode\u003e78c43ce\u003c/code\u003e\u003c/a\u003e Retract current version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c60bb8a32250636d9f50d247d0b166a41c4b609f\"\u003e\u003ccode\u003ec60bb8a\u003c/code\u003e\u003c/a\u003e Fix typo\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.7.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.7.0\u0026new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/openshift-online/ocm-cli/pull/879","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/openshift-online%2Focm-cli/issues/879","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/879/packages"},{"uuid":"2847994034","node_id":"PR_kwDOOsyEjc6pwPCy","number":139,"state":"closed","title":"chore(deps): bump github.com/MicahParks/jwkset from 0.10.0 to 0.11.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-09-22T05:49:00.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-22T05:43:37.000Z","updated_at":"2025-09-22T05:49:00.000Z","time_to_close":323,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.10.0 to 0.11.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to allow JWK Sets to be processed even if not every key is a supported type. An example of an unsupported key type would be \u003ccode\u003eEd448\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003ePlease see the new \u003ccode\u003eRequireSupportedKeys\u003c/code\u003e option on \u003ca href=\"https://pkg.go.dev/github.com/MicahParks/jwkset@v0.11.0#HTTPClientStorageOptions\"\u003e\u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/60\"\u003e#60\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0d285dedecd7ed02ddcfd6e9ff6c6c62747e8f7e\"\u003e\u003ccode\u003e0d285de\u003c/code\u003e\u003c/a\u003e Ignore unsupported keys (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.10.0\u0026new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Twingate/kubernetes-access-gateway/pull/139","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Twingate%2Fkubernetes-access-gateway/issues/139","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/139/packages"},{"uuid":"2834111409","node_id":"PR_kwDOOUMNVM6o7Rux","number":20,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.8.0 to 0.10.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-09-22T19:24:16.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-16T19:18:24.000Z","updated_at":"2025-09-22T19:24:16.000Z","time_to_close":518752,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.8.0","new_version":"0.10.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.8.0 to 0.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to automatically extract the certificate's key usage in the \u003ccode\u003ejwkset\u003c/code\u003e CLI tool. This has not been added to the library or website yet.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/57\"\u003eMicahParks/jwkset#57\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/58\"\u003eMicahParks/jwkset#58\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCommits outside of pull requests (I will add branch protection now):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e7d65392db7e82185f777208a6d17625f9a867d60\u003c/li\u003e\n\u003cli\u003e6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to add the \u003ccode\u003eStorage\u003c/code\u003e field back to the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure. It was removed in \u003ccode\u003ev0.6.0\u003c/code\u003e because I thought it was unused.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplementations of the \u003ccode\u003eStorage\u003c/code\u003e interface now require a \u003ccode\u003eKeyReplaceAll\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/48\"\u003eMicahParks/jwkset#48\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/49\"\u003eMicahParks/jwkset#49\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\"\u003e\u003ccode\u003e6fab088\u003c/code\u003e\u003c/a\u003e Consolidate helper functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/7d65392db7e82185f777208a6d17625f9a867d60\"\u003e\u003ccode\u003e7d65392\u003c/code\u003e\u003c/a\u003e Change determineUse implementation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/57a5058644cd1a67d7089870330bba1a6adb8cc1\"\u003e\u003ccode\u003e57a5058\u003c/code\u003e\u003c/a\u003e Added support for 'use' attribute of JWK (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/58\"\u003e#58\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/12a0f9ad2963ce76285884d045c3b04be9a782f1\"\u003e\u003ccode\u003e12a0f9a\u003c/code\u003e\u003c/a\u003e Rename jwksettool to jwkset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3fae7f8d2043e4b3935203f473a96ef4d3c4a185\"\u003e\u003ccode\u003e3fae7f8\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/257dc6e8e0533c127ac60a0077e30dd9f6f41b55\"\u003e\u003ccode\u003e257dc6e\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/78c43ce97c48f36b04c06dcc0e288ef1058e1862\"\u003e\u003ccode\u003e78c43ce\u003c/code\u003e\u003c/a\u003e Retract current version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c60bb8a32250636d9f50d247d0b166a41c4b609f\"\u003e\u003ccode\u003ec60bb8a\u003c/code\u003e\u003c/a\u003e Fix typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/02655983e0afd7959aeae9c2b126d19ecabc80ea\"\u003e\u003ccode\u003e0265598\u003c/code\u003e\u003c/a\u003e Proper retraction (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/51\"\u003e#51\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.8.0...v0.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.8.0\u0026new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/ffrandy301gt/y/pull/20","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ffrandy301gt%2Fy/issues/20","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/20/packages"},{"uuid":"2833792986","node_id":"PR_kwDODb-aPc6o6D_a","number":4980,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.9.6 to 0.10.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-09-17T14:16:19.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-16T17:06:44.000Z","updated_at":"2025-09-17T14:16:19.000Z","time_to_close":76175,"merged_at":"2025-09-17T14:16:19.000Z","merged_by":"aler9","closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.6","new_version":"0.10.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.9.6 to 0.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to automatically extract the certificate's key usage in the \u003ccode\u003ejwkset\u003c/code\u003e CLI tool. This has not been added to the library or website yet.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/57\"\u003eMicahParks/jwkset#57\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/58\"\u003eMicahParks/jwkset#58\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCommits outside of pull requests (I will add branch protection now):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e7d65392db7e82185f777208a6d17625f9a867d60\u003c/li\u003e\n\u003cli\u003e6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\"\u003e\u003ccode\u003e6fab088\u003c/code\u003e\u003c/a\u003e Consolidate helper functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/7d65392db7e82185f777208a6d17625f9a867d60\"\u003e\u003ccode\u003e7d65392\u003c/code\u003e\u003c/a\u003e Change determineUse implementation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/57a5058644cd1a67d7089870330bba1a6adb8cc1\"\u003e\u003ccode\u003e57a5058\u003c/code\u003e\u003c/a\u003e Added support for 'use' attribute of JWK (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/58\"\u003e#58\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.6...v0.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.6\u0026new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/bluenviron/mediamtx/pull/4980","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bluenviron%2Fmediamtx/issues/4980","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4980/packages"},{"uuid":"2831477709","node_id":"PR_kwDOOsyEjc6oxOvN","number":136,"state":"closed","title":"chore(deps): bump github.com/MicahParks/jwkset from 0.9.6 to 0.10.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-09-16T05:29:56.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-16T05:22:48.000Z","updated_at":"2025-09-16T05:29:56.000Z","time_to_close":428,"merged_at":"2025-09-16T05:29:56.000Z","merged_by":"github-actions[bot]","closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.6","new_version":"0.10.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.9.6 to 0.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to automatically extract the certificate's key usage in the \u003ccode\u003ejwkset\u003c/code\u003e CLI tool. This has not been added to the library or website yet.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/57\"\u003eMicahParks/jwkset#57\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/58\"\u003eMicahParks/jwkset#58\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCommits outside of pull requests (I will add branch protection now):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e7d65392db7e82185f777208a6d17625f9a867d60\u003c/li\u003e\n\u003cli\u003e6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\"\u003e\u003ccode\u003e6fab088\u003c/code\u003e\u003c/a\u003e Consolidate helper functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/7d65392db7e82185f777208a6d17625f9a867d60\"\u003e\u003ccode\u003e7d65392\u003c/code\u003e\u003c/a\u003e Change determineUse implementation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/57a5058644cd1a67d7089870330bba1a6adb8cc1\"\u003e\u003ccode\u003e57a5058\u003c/code\u003e\u003c/a\u003e Added support for 'use' attribute of JWK (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/58\"\u003e#58\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.6...v0.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.6\u0026new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Twingate/kubernetes-access-gateway/pull/136","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Twingate%2Fkubernetes-access-gateway/issues/136","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/136/packages"},{"uuid":"2776781378","node_id":"PR_kwDOMss1XM6lglJC","number":181,"state":"closed","title":"deps(deps): bump the go_modules group with 7 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-09-18T06:59:49.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-08-27T00:17:01.000Z","updated_at":"2025-09-18T06:59:50.000Z","time_to_close":1924968,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps): bump","group_name":"go_modules","update_count":7,"packages":[{"name":"github.com/golang-jwt/jwt/v5","old_version":"5.2.1","new_version":"5.2.2","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"golang.org/x/oauth2","old_version":"0.25.0","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"github.com/MicahParks/jwkset","old_version":"0.5.19","new_version":"0.7.0","repository_url":"https://github.com/MicahParks/jwkset"},{"name":"github.com/go-jose/go-jose/v4","old_version":"4.0.2","new_version":"4.0.5","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.2.1","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"golang.org/x/crypto","old_version":"0.32.0","new_version":"0.35.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/net","old_version":"0.33.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"}],"path":null,"ecosystem":"go"},"body":"[//]: # (dependabot-start)\n⚠️  **Dependabot is rebasing this PR** ⚠️ \n\nRebasing might not happen immediately, so don't worry if this takes some time.\n\nNote: if you make any changes to this PR yourself, they will take precedence over the rebase.\n\n---\n\n[//]: # (dependabot-end)\n\nBumps the go_modules group with 7 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.1` | `5.2.2` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.25.0` | `0.27.0` |\n| [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) | `0.5.19` | `0.7.0` |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.0.2` | `4.0.5` |\n| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.2.1` | `2.4.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.32.0` | `0.35.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.33.0` | `0.38.0` |\n\nUpdates `github.com/golang-jwt/jwt/v5` from 5.2.1 to 5.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\u003c/a\u003e by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed some typos by \u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: add go1.22 to ci workflows by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/383\"\u003egolang-jwt/jwt#383\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 4 to 5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/387\"\u003egolang-jwt/jwt#387\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/389\"\u003egolang-jwt/jwt#389\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump ci tests to include go1.23 by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/405\"\u003egolang-jwt/jwt#405\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix jwt -show by \u003ca href=\"https://github.com/AlexanderYastrebov\"\u003e\u003ccode\u003e@​AlexanderYastrebov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/406\"\u003egolang-jwt/jwt#406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: typo by \u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate SECURITY.md by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/416\"\u003egolang-jwt/jwt#416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate \u003ccode\u003ejwt.Parse\u003c/code\u003e example to use \u003ccode\u003ejwt.WithValidMethods\u003c/code\u003e by \u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ehttps://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3\"\u003e\u003ccode\u003e0951d18\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c035977d9e11c351f4c05dfeae193923cbab49ee\"\u003e\u003ccode\u003ec035977\u003c/code\u003e\u003c/a\u003e Update Parse example to use WithValidMethods (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/425\"\u003e#425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/bc8bdca5cced1caa9787e4a1c313a3538544c877\"\u003e\u003ccode\u003ebc8bdca\u003c/code\u003e\u003c/a\u003e Update SECURITY.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/416\"\u003e#416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/5ec246c074b71790eec1f2e05b54daf6ec29ec5f\"\u003e\u003ccode\u003e5ec246c\u003c/code\u003e\u003c/a\u003e docs: typo (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/407\"\u003e#407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0123f1ad66cbc45013dbfba6eff0cd81472bfc12\"\u003e\u003ccode\u003e0123f1a\u003c/code\u003e\u003c/a\u003e Fix jwt -show (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/406\"\u003e#406\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/f961c72abd3b91442a9ab3d3e356bf547636e89b\"\u003e\u003ccode\u003ef961c72\u003c/code\u003e\u003c/a\u003e chore: bump ci tests to include go1.23 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/405\"\u003e#405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/62e504c2810b67f6b97313424411cfffb25e41b0\"\u003e\u003ccode\u003e62e504c\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 5 to 6 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/389\"\u003e#389\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/1a56dcf532089fc2bb723a3cb4076a4e45cb1c1a\"\u003e\u003ccode\u003e1a56dcf\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 4 to 5 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/387\"\u003e#387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c8043eab61f0ec5bdd924c1c30caf164a9bb2c66\"\u003e\u003ccode\u003ec8043ea\u003c/code\u003e\u003c/a\u003e build: add go1.22 to ci workflows (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/7c3f6dc56316e5e222a9df9612ec04243189a989\"\u003e\u003ccode\u003e7c3f6dc\u003c/code\u003e\u003c/a\u003e Update README.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/382\"\u003e#382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.25.0 to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.25.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/MicahParks/jwkset` from 0.5.19 to 0.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eFix potential race condition\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a potential race condition.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNo breaking API changes.\n\u003cul\u003e\n\u003cli\u003eAllow for JWK with the \u003ca href=\"https://datatracker.ietf.org/doc/html/rfc7517#section-4.5\"\u003esame\u003c/a\u003e Key ID \u003ccode\u003ekid\u003c/code\u003e to be present in the set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a bug pointed out by \u003ca href=\"https://github.com/rohitkoul\"\u003e\u003ccode\u003e@​rohitkoul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/7#discussion_r1907816656\"\u003eMicahParks/jwkset#7\u003c/a\u003e. There is a bug in the refresh goroutine related to key replacement.\u003c/p\u003e\n\u003cp\u003eThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\u003c/p\u003e\n\u003cp\u003eRegardless of this bug, please note that removing a key from a JWK Set does not equate to instant revocation for most use cases as it takes time for JWK Set updates to propagate to all clients.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved \u003ccode\u003eStorage\u003c/code\u003e field from the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/40\"\u003eMicahParks/jwkset#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/41\"\u003eMicahParks/jwkset#41\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c8d5ec73b1775084eb1e7861d8006ed96344992f\"\u003e\u003ccode\u003ec8d5ec7\u003c/code\u003e\u003c/a\u003e Prevent possible race condition (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3\"\u003e\u003ccode\u003e01db49a\u003c/code\u003e\u003c/a\u003e HTTP client only overwrites and appends JWK to local cache during refresh (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/41\"\u003e#41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/ce57ded280d99191ea54e3c4c5460c58207c3bbf\"\u003e\u003ccode\u003ece57ded\u003c/code\u003e\u003c/a\u003e Update go.mod\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/343575748f3587b06114abb82a3c997abfde07e9\"\u003e\u003ccode\u003e3435757\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/9a9c935b1821c128f8d54b0f2bec3206fcae9032\"\u003e\u003ccode\u003e9a9c935\u003c/code\u003e\u003c/a\u003e Expose ValidateOptions in HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0a74b0279c16a96447ea4e3b3391843a88cc8e84\"\u003e\u003ccode\u003e0a74b02\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.5.19...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.0.2 to 4.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDon't allow unbounded amounts of splits by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/167\"\u003ego-jose/go-jose#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eVarious other dependency updates, small fixes, and documentation updates in the full changelog\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tgeoghegan\"\u003e\u003ccode\u003e@​tgeoghegan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/161\"\u003ego-jose/go-jose#161\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 4.0.4\u003c/h2\u003e\n\u003ch1\u003eFixed\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eReverted \u0026quot;Allow unmarshalling JSONWebKeySets with unsupported key types\u0026quot; as a breaking change. See \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/136\"\u003e#136\u003c/a\u003e / \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/137\"\u003e#137\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eVersion 4.0.3\u003c/h2\u003e\n\u003ch2\u003eChanged\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow unmarshalling JSONWebKeySets with unsupported key types (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/130\"\u003e#130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument that OpaqueKeyEncrypter can't be implemented (for now) (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/129\"\u003e#129\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22\"\u003e\u003ccode\u003e99b346c\u003c/code\u003e\u003c/a\u003e Don't allow unbounded amounts of splits (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/167\"\u003e#167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/22811e77bac0d484ff060d5c4351b7e295df92fb\"\u003e\u003ccode\u003e22811e7\u003c/code\u003e\u003c/a\u003e Fix broken link in README.md (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/161\"\u003e#161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9dde8493b25c1b301ca97110f57c7774513f572c\"\u003e\u003ccode\u003e9dde849\u003c/code\u003e\u003c/a\u003e Remove CLA mentions from CONTRIBUTING.md (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/89172c5b51f2a7492b6fc2ea22d03777c4673bbe\"\u003e\u003ccode\u003e89172c5\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/158\"\u003e#158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ee05e015574c7d4c55b9a802e9637327d7d2606a\"\u003e\u003ccode\u003eee05e01\u003c/code\u003e\u003c/a\u003e Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/c0aef3ef5eaf5ad5fdfae9de426ebea91778f3e4\"\u003e\u003ccode\u003ec0aef3e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/fdc2ceb0bbe2a29c582edfe07ea914c8dacd7e1b\"\u003e\u003ccode\u003efdc2ceb\u003c/code\u003e\u003c/a\u003e Remove export disclaimer (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/10c69ef86e2b6997b25552aa391b48f1240cfe66\"\u003e\u003ccode\u003e10c69ef\u003c/code\u003e\u003c/a\u003e Short circuit return errors from \u003ccode\u003eJSONWebKey.UnmarshalJSON()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/141\"\u003e#141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/15bc4c2ac4575ad865f078390db61d44530f985d\"\u003e\u003ccode\u003e15bc4c2\u003c/code\u003e\u003c/a\u003e Update CHANGELOG for 4.0.4 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/138\"\u003e#138\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/f3534ca2c308b8394677f90d8ab3651be3a16e1c\"\u003e\u003ccode\u003ef3534ca\u003c/code\u003e\u003c/a\u003e Revert \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/130\"\u003e#130\u003c/a\u003e: JSONWebKeySet: ignore unsupported key types (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/137\"\u003e#137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.0.2...v4.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.32.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22\"\u003e\u003ccode\u003e7292932\u003c/code\u003e\u003c/a\u003e ssh: limit the size of the internal packet queue while waiting for KEX\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f66f74b0a406b5f6909183531ace593857f1646c\"\u003e\u003ccode\u003ef66f74b\u003c/code\u003e\u003c/a\u003e acme/autocert: check host policy before probing the cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b0784b7bfbe0b2c9a59afc1248ed3cb4b6652e85\"\u003e\u003ccode\u003eb0784b7\u003c/code\u003e\u003c/a\u003e x509roots/fallback: drop obsolete build constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/911360c8a4f464342b9fe7c23632be57fca87b20\"\u003e\u003ccode\u003e911360c\u003c/code\u003e\u003c/a\u003e all: bump golang.org/x/crypto dependencies of asm generators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/89ff08d67c4d79f9ac619aaf1f7388888798651f\"\u003e\u003ccode\u003e89ff08d\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e47973b1c1089f6c67ab89261f7aa067b3d611d2\"\u003e\u003ccode\u003ee47973b\u003c/code\u003e\u003c/a\u003e all: update certs for go1.24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9290511cd23ab9813a307b7f2615325e3ca98902\"\u003e\u003ccode\u003e9290511\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fa5273e461966728f91f33da62c0cf511a404c2a\"\u003e\u003ccode\u003efa5273e\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8ea4be81f0769fd5857e087083cbb6d3cb9f196\"\u003e\u003ccode\u003ea8ea4be\u003c/code\u003e\u003c/a\u003e ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/71d3a4cfdb0360795ce5f2d7041e01823fd22eb6\"\u003e\u003ccode\u003e71d3a4c\u003c/code\u003e\u003c/a\u003e acme: support challenges that require the ACME client to send a non-empty JSO...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.35.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.33.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.33.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SwissOpenEM/Ingestor/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/SwissOpenEM/Ingestor/pull/181","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SwissOpenEM%2FIngestor/issues/181","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/181/packages"},{"uuid":"3357470551","node_id":"PR_kwDOMss1XM6lgWi8","number":178,"state":"closed","title":"deps(deps): bump the go_modules group with 6 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-08-27T00:17:04.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-08-26T23:49:31.000Z","updated_at":"2025-08-27T00:17:04.000Z","time_to_close":1653,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps): bump","group_name":"go_modules","update_count":6,"packages":[{"name":"github.com/golang-jwt/jwt/v5","old_version":"5.2.1","new_version":"5.2.2","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"golang.org/x/oauth2","old_version":"0.25.0","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"github.com/MicahParks/jwkset","old_version":"0.5.19","new_version":"0.7.0","repository_url":"https://github.com/MicahParks/jwkset"},{"name":"github.com/go-jose/go-jose/v4","old_version":"4.0.2","new_version":"4.0.5","repository_url":"https://github.com/go-jose/go-jose"},{"name":"golang.org/x/crypto","old_version":"0.32.0","new_version":"0.35.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/net","old_version":"0.33.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.1` | `5.2.2` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.25.0` | `0.27.0` |\n| [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) | `0.5.19` | `0.7.0` |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.0.2` | `4.0.5` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.32.0` | `0.35.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.33.0` | `0.38.0` |\n\nUpdates `github.com/golang-jwt/jwt/v5` from 5.2.1 to 5.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\u003c/a\u003e by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed some typos by \u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: add go1.22 to ci workflows by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/383\"\u003egolang-jwt/jwt#383\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 4 to 5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/387\"\u003egolang-jwt/jwt#387\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/389\"\u003egolang-jwt/jwt#389\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump ci tests to include go1.23 by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/405\"\u003egolang-jwt/jwt#405\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix jwt -show by \u003ca href=\"https://github.com/AlexanderYastrebov\"\u003e\u003ccode\u003e@​AlexanderYastrebov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/406\"\u003egolang-jwt/jwt#406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: typo by \u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate SECURITY.md by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/416\"\u003egolang-jwt/jwt#416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate \u003ccode\u003ejwt.Parse\u003c/code\u003e example to use \u003ccode\u003ejwt.WithValidMethods\u003c/code\u003e by \u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ehttps://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3\"\u003e\u003ccode\u003e0951d18\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c035977d9e11c351f4c05dfeae193923cbab49ee\"\u003e\u003ccode\u003ec035977\u003c/code\u003e\u003c/a\u003e Update Parse example to use WithValidMethods (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/425\"\u003e#425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/bc8bdca5cced1caa9787e4a1c313a3538544c877\"\u003e\u003ccode\u003ebc8bdca\u003c/code\u003e\u003c/a\u003e Update SECURITY.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/416\"\u003e#416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/5ec246c074b71790eec1f2e05b54daf6ec29ec5f\"\u003e\u003ccode\u003e5ec246c\u003c/code\u003e\u003c/a\u003e docs: typo (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/407\"\u003e#407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0123f1ad66cbc45013dbfba6eff0cd81472bfc12\"\u003e\u003ccode\u003e0123f1a\u003c/code\u003e\u003c/a\u003e Fix jwt -show (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/406\"\u003e#406\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/f961c72abd3b91442a9ab3d3e356bf547636e89b\"\u003e\u003ccode\u003ef961c72\u003c/code\u003e\u003c/a\u003e chore: bump ci tests to include go1.23 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/405\"\u003e#405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/62e504c2810b67f6b97313424411cfffb25e41b0\"\u003e\u003ccode\u003e62e504c\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 5 to 6 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/389\"\u003e#389\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/1a56dcf532089fc2bb723a3cb4076a4e45cb1c1a\"\u003e\u003ccode\u003e1a56dcf\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 4 to 5 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/387\"\u003e#387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c8043eab61f0ec5bdd924c1c30caf164a9bb2c66\"\u003e\u003ccode\u003ec8043ea\u003c/code\u003e\u003c/a\u003e build: add go1.22 to ci workflows (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/7c3f6dc56316e5e222a9df9612ec04243189a989\"\u003e\u003ccode\u003e7c3f6dc\u003c/code\u003e\u003c/a\u003e Update README.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/382\"\u003e#382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.25.0 to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.25.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/MicahParks/jwkset` from 0.5.19 to 0.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eFix potential race condition\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a potential race condition.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNo breaking API changes.\n\u003cul\u003e\n\u003cli\u003eAllow for JWK with the \u003ca href=\"https://datatracker.ietf.org/doc/html/rfc7517#section-4.5\"\u003esame\u003c/a\u003e Key ID \u003ccode\u003ekid\u003c/code\u003e to be present in the set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a bug pointed out by \u003ca href=\"https://github.com/rohitkoul\"\u003e\u003ccode\u003e@​rohitkoul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/7#discussion_r1907816656\"\u003eMicahParks/jwkset#7\u003c/a\u003e. There is a bug in the refresh goroutine related to key replacement.\u003c/p\u003e\n\u003cp\u003eThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\u003c/p\u003e\n\u003cp\u003eRegardless of this bug, please note that removing a key from a JWK Set does not equate to instant revocation for most use cases as it takes time for JWK Set updates to propagate to all clients.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved \u003ccode\u003eStorage\u003c/code\u003e field from the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/40\"\u003eMicahParks/jwkset#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/41\"\u003eMicahParks/jwkset#41\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c8d5ec73b1775084eb1e7861d8006ed96344992f\"\u003e\u003ccode\u003ec8d5ec7\u003c/code\u003e\u003c/a\u003e Prevent possible race condition (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3\"\u003e\u003ccode\u003e01db49a\u003c/code\u003e\u003c/a\u003e HTTP client only overwrites and appends JWK to local cache during refresh (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/41\"\u003e#41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/ce57ded280d99191ea54e3c4c5460c58207c3bbf\"\u003e\u003ccode\u003ece57ded\u003c/code\u003e\u003c/a\u003e Update go.mod\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/343575748f3587b06114abb82a3c997abfde07e9\"\u003e\u003ccode\u003e3435757\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/9a9c935b1821c128f8d54b0f2bec3206fcae9032\"\u003e\u003ccode\u003e9a9c935\u003c/code\u003e\u003c/a\u003e Expose ValidateOptions in HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0a74b0279c16a96447ea4e3b3391843a88cc8e84\"\u003e\u003ccode\u003e0a74b02\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.5.19...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.0.2 to 4.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDon't allow unbounded amounts of splits by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/167\"\u003ego-jose/go-jose#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eVarious other dependency updates, small fixes, and documentation updates in the full changelog\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tgeoghegan\"\u003e\u003ccode\u003e@​tgeoghegan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/161\"\u003ego-jose/go-jose#161\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 4.0.4\u003c/h2\u003e\n\u003ch1\u003eFixed\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eReverted \u0026quot;Allow unmarshalling JSONWebKeySets with unsupported key types\u0026quot; as a breaking change. See \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/136\"\u003e#136\u003c/a\u003e / \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/137\"\u003e#137\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eVersion 4.0.3\u003c/h2\u003e\n\u003ch2\u003eChanged\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow unmarshalling JSONWebKeySets with unsupported key types (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/130\"\u003e#130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument that OpaqueKeyEncrypter can't be implemented (for now) (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/129\"\u003e#129\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22\"\u003e\u003ccode\u003e99b346c\u003c/code\u003e\u003c/a\u003e Don't allow unbounded amounts of splits (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/167\"\u003e#167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/22811e77bac0d484ff060d5c4351b7e295df92fb\"\u003e\u003ccode\u003e22811e7\u003c/code\u003e\u003c/a\u003e Fix broken link in README.md (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/161\"\u003e#161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9dde8493b25c1b301ca97110f57c7774513f572c\"\u003e\u003ccode\u003e9dde849\u003c/code\u003e\u003c/a\u003e Remove CLA mentions from CONTRIBUTING.md (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/89172c5b51f2a7492b6fc2ea22d03777c4673bbe\"\u003e\u003ccode\u003e89172c5\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/158\"\u003e#158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ee05e015574c7d4c55b9a802e9637327d7d2606a\"\u003e\u003ccode\u003eee05e01\u003c/code\u003e\u003c/a\u003e Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/c0aef3ef5eaf5ad5fdfae9de426ebea91778f3e4\"\u003e\u003ccode\u003ec0aef3e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/fdc2ceb0bbe2a29c582edfe07ea914c8dacd7e1b\"\u003e\u003ccode\u003efdc2ceb\u003c/code\u003e\u003c/a\u003e Remove export disclaimer (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/10c69ef86e2b6997b25552aa391b48f1240cfe66\"\u003e\u003ccode\u003e10c69ef\u003c/code\u003e\u003c/a\u003e Short circuit return errors from \u003ccode\u003eJSONWebKey.UnmarshalJSON()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/141\"\u003e#141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/15bc4c2ac4575ad865f078390db61d44530f985d\"\u003e\u003ccode\u003e15bc4c2\u003c/code\u003e\u003c/a\u003e Update CHANGELOG for 4.0.4 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/138\"\u003e#138\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/f3534ca2c308b8394677f90d8ab3651be3a16e1c\"\u003e\u003ccode\u003ef3534ca\u003c/code\u003e\u003c/a\u003e Revert \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/130\"\u003e#130\u003c/a\u003e: JSONWebKeySet: ignore unsupported key types (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/137\"\u003e#137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.0.2...v4.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.32.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22\"\u003e\u003ccode\u003e7292932\u003c/code\u003e\u003c/a\u003e ssh: limit the size of the internal packet queue while waiting for KEX\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f66f74b0a406b5f6909183531ace593857f1646c\"\u003e\u003ccode\u003ef66f74b\u003c/code\u003e\u003c/a\u003e acme/autocert: check host policy before probing the cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b0784b7bfbe0b2c9a59afc1248ed3cb4b6652e85\"\u003e\u003ccode\u003eb0784b7\u003c/code\u003e\u003c/a\u003e x509roots/fallback: drop obsolete build constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/911360c8a4f464342b9fe7c23632be57fca87b20\"\u003e\u003ccode\u003e911360c\u003c/code\u003e\u003c/a\u003e all: bump golang.org/x/crypto dependencies of asm generators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/89ff08d67c4d79f9ac619aaf1f7388888798651f\"\u003e\u003ccode\u003e89ff08d\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e47973b1c1089f6c67ab89261f7aa067b3d611d2\"\u003e\u003ccode\u003ee47973b\u003c/code\u003e\u003c/a\u003e all: update certs for go1.24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9290511cd23ab9813a307b7f2615325e3ca98902\"\u003e\u003ccode\u003e9290511\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fa5273e461966728f91f33da62c0cf511a404c2a\"\u003e\u003ccode\u003efa5273e\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8ea4be81f0769fd5857e087083cbb6d3cb9f196\"\u003e\u003ccode\u003ea8ea4be\u003c/code\u003e\u003c/a\u003e ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/71d3a4cfdb0360795ce5f2d7041e01823fd22eb6\"\u003e\u003ccode\u003e71d3a4c\u003c/code\u003e\u003c/a\u003e acme: support challenges that require the ACME client to send a non-empty JSO...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.35.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.33.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.33.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SwissOpenEM/Ingestor/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/SwissOpenEM/Ingestor/pull/178","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SwissOpenEM%2FIngestor/issues/178","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/178/packages"},{"uuid":"3219136123","node_id":"PR_kwDOLw1hkc6eS6WS","number":6,"state":"open","title":"Bump github.com/MicahParks/jwkset from 0.5.17 to 0.7.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-07-10T12:20:09.000Z","updated_at":"2025-07-10T14:08:13.043Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.5.17","new_version":"0.7.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.5.17 to 0.7.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eFix potential race condition\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a potential race condition.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNo breaking API changes.\n\u003cul\u003e\n\u003cli\u003eAllow for JWK with the \u003ca href=\"https://datatracker.ietf.org/doc/html/rfc7517#section-4.5\"\u003esame\u003c/a\u003e Key ID \u003ccode\u003ekid\u003c/code\u003e to be present in the set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a bug pointed out by \u003ca href=\"https://github.com/rohitkoul\"\u003e\u003ccode\u003e@​rohitkoul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/7#discussion_r1907816656\"\u003eMicahParks/jwkset#7\u003c/a\u003e. There is a bug in the refresh goroutine related to key replacement.\u003c/p\u003e\n\u003cp\u003eThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\u003c/p\u003e\n\u003cp\u003eRegardless of this bug, please note that removing a key from a JWK Set does not equate to instant revocation for most use cases as it takes time for JWK Set updates to propagate to all clients.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved \u003ccode\u003eStorage\u003c/code\u003e field from the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/40\"\u003eMicahParks/jwkset#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/41\"\u003eMicahParks/jwkset#41\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c8d5ec73b1775084eb1e7861d8006ed96344992f\"\u003e\u003ccode\u003ec8d5ec7\u003c/code\u003e\u003c/a\u003e Prevent possible race condition (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3\"\u003e\u003ccode\u003e01db49a\u003c/code\u003e\u003c/a\u003e HTTP client only overwrites and appends JWK to local cache during refresh (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/41\"\u003e#41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/ce57ded280d99191ea54e3c4c5460c58207c3bbf\"\u003e\u003ccode\u003ece57ded\u003c/code\u003e\u003c/a\u003e Update go.mod\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/343575748f3587b06114abb82a3c997abfde07e9\"\u003e\u003ccode\u003e3435757\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/9a9c935b1821c128f8d54b0f2bec3206fcae9032\"\u003e\u003ccode\u003e9a9c935\u003c/code\u003e\u003c/a\u003e Expose ValidateOptions in HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0a74b0279c16a96447ea4e3b3391843a88cc8e84\"\u003e\u003ccode\u003e0a74b02\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/d5640eb9b951c38b977450b0c3038104c53cefb8\"\u003e\u003ccode\u003ed5640eb\u003c/code\u003e\u003c/a\u003e Improve certificate thumbprint check (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/37\"\u003e#37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/00771507f16ef5908cb45e9df0175b3e37042391\"\u003e\u003ccode\u003e0077150\u003c/code\u003e\u003c/a\u003e Add ca certs back into Docker image (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/17cffe8f981baa871c229e91248ccebc2ed691ee\"\u003e\u003ccode\u003e17cffe8\u003c/code\u003e\u003c/a\u003e Makes the final image more secure (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c725950efa92e1ba00c073fae431fb45b13d25e1\"\u003e\u003ccode\u003ec725950\u003c/code\u003e\u003c/a\u003e fix return of httpStorage in NewStorageFromHTTP (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/30\"\u003e#30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.5.17...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.5.17\u0026new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/kinde-oss/kinde-go/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/kinde-oss/kinde-go/pull/6","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kinde-oss%2Fkinde-go/issues/6","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6/packages"},{"uuid":"3170112513","node_id":"PR_kwDOPAwERM6bxKZA","number":2,"state":"closed","title":"Bump github.com/MicahParks/jwkset from 0.5.4 to 0.7.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-06-24T04:34:38.000Z","author_association":"NONE","state_reason":null,"created_at":"2025-06-24T03:31:52.000Z","updated_at":"2025-06-24T04:34:38.000Z","time_to_close":3766,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.5.4","new_version":"0.7.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.5.4 to 0.7.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eFix potential race condition\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a potential race condition.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNo breaking API changes.\n\u003cul\u003e\n\u003cli\u003eAllow for JWK with the \u003ca href=\"https://datatracker.ietf.org/doc/html/rfc7517#section-4.5\"\u003esame\u003c/a\u003e Key ID \u003ccode\u003ekid\u003c/code\u003e to be present in the set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a bug pointed out by \u003ca href=\"https://github.com/rohitkoul\"\u003e\u003ccode\u003e@​rohitkoul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/7#discussion_r1907816656\"\u003eMicahParks/jwkset#7\u003c/a\u003e. There is a bug in the refresh goroutine related to key replacement.\u003c/p\u003e\n\u003cp\u003eThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\u003c/p\u003e\n\u003cp\u003eRegardless of this bug, please note that removing a key from a JWK Set does not equate to instant revocation for most use cases as it takes time for JWK Set updates to propagate to all clients.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved \u003ccode\u003eStorage\u003c/code\u003e field from the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/40\"\u003eMicahParks/jwkset#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/41\"\u003eMicahParks/jwkset#41\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eLess strict validation\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to use less strict validation for JWK. This will allow users to work with non-RFC compliant JWK Sets for small padding mistakes.\u003c/p\u003e\n\u003cp\u003eTwo padding related reasons for this are:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eMandatory leading padding for ECDSA JWK parameters.\u003c/li\u003e\n\u003cli\u003eA common mistake adding leading padding to RSA JWK parameter \u0026quot;n\u0026quot;.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003eFor padding specifically, this project is only comparing integers after they are parsed from Base64 raw URL encoding by default. To turn on strict validation, there will be a new field on jwkset.ValidateOptions named StrictPadding.\u003c/p\u003e\n\u003cp\u003eAn example for \u003ccode\u003e1\u003c/code\u003e would be a bug in this project were mandatory leading padding was absent: \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/18\"\u003eMicahParks/jwkset#18\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eAn example for \u003ccode\u003e2\u003c/code\u003e would be a Firebase service that was reported to be incompatible with this project: \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/23\"\u003eMicahParks/jwkset#23\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/23\"\u003eMicahParks/jwkset#23\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/20\"\u003eMicahParks/jwkset#20\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/18\"\u003eMicahParks/jwkset#18\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/24\"\u003eMicahParks/jwkset#24\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.5.13\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to correctly pad EC JWK parameters with leading zeros where required by RFC 7518.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c8d5ec73b1775084eb1e7861d8006ed96344992f\"\u003e\u003ccode\u003ec8d5ec7\u003c/code\u003e\u003c/a\u003e Prevent possible race condition (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3\"\u003e\u003ccode\u003e01db49a\u003c/code\u003e\u003c/a\u003e HTTP client only overwrites and appends JWK to local cache during refresh (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/41\"\u003e#41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/ce57ded280d99191ea54e3c4c5460c58207c3bbf\"\u003e\u003ccode\u003ece57ded\u003c/code\u003e\u003c/a\u003e Update go.mod\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/343575748f3587b06114abb82a3c997abfde07e9\"\u003e\u003ccode\u003e3435757\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/9a9c935b1821c128f8d54b0f2bec3206fcae9032\"\u003e\u003ccode\u003e9a9c935\u003c/code\u003e\u003c/a\u003e Expose ValidateOptions in HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0a74b0279c16a96447ea4e3b3391843a88cc8e84\"\u003e\u003ccode\u003e0a74b02\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/d5640eb9b951c38b977450b0c3038104c53cefb8\"\u003e\u003ccode\u003ed5640eb\u003c/code\u003e\u003c/a\u003e Improve certificate thumbprint check (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/37\"\u003e#37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/00771507f16ef5908cb45e9df0175b3e37042391\"\u003e\u003ccode\u003e0077150\u003c/code\u003e\u003c/a\u003e Add ca certs back into Docker image (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/17cffe8f981baa871c229e91248ccebc2ed691ee\"\u003e\u003ccode\u003e17cffe8\u003c/code\u003e\u003c/a\u003e Makes the final image more secure (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c725950efa92e1ba00c073fae431fb45b13d25e1\"\u003e\u003ccode\u003ec725950\u003c/code\u003e\u003c/a\u003e fix return of httpStorage in NewStorageFromHTTP (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/30\"\u003e#30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.5.4...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.5.4\u0026new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/andrewheberle/jwks-to-pem/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/andrewheberle/jwks-to-pem/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/andrewheberle%2Fjwks-to-pem/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"},{"uuid":"3123720365","node_id":"PR_kwDOOsyEjc6ZVdUv","number":21,"state":"closed","title":"chore(deps): bump github.com/MicahParks/jwkset from 0.8.0 to 0.9.6","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-06-06T16:10:04.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-06-06T05:46:05.000Z","updated_at":"2025-06-06T16:10:14.000Z","time_to_close":37439,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.8.0","new_version":"0.9.6"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.8.0 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to add the \u003ccode\u003eStorage\u003c/code\u003e field back to the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure. It was removed in \u003ccode\u003ev0.6.0\u003c/code\u003e because I thought it was unused.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplementations of the \u003ccode\u003eStorage\u003c/code\u003e interface now require a \u003ccode\u003eKeyReplaceAll\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/48\"\u003eMicahParks/jwkset#48\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/49\"\u003eMicahParks/jwkset#49\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/12a0f9ad2963ce76285884d045c3b04be9a782f1\"\u003e\u003ccode\u003e12a0f9a\u003c/code\u003e\u003c/a\u003e Rename jwksettool to jwkset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3fae7f8d2043e4b3935203f473a96ef4d3c4a185\"\u003e\u003ccode\u003e3fae7f8\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/257dc6e8e0533c127ac60a0077e30dd9f6f41b55\"\u003e\u003ccode\u003e257dc6e\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/78c43ce97c48f36b04c06dcc0e288ef1058e1862\"\u003e\u003ccode\u003e78c43ce\u003c/code\u003e\u003c/a\u003e Retract current version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c60bb8a32250636d9f50d247d0b166a41c4b609f\"\u003e\u003ccode\u003ec60bb8a\u003c/code\u003e\u003c/a\u003e Fix typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/02655983e0afd7959aeae9c2b126d19ecabc80ea\"\u003e\u003ccode\u003e0265598\u003c/code\u003e\u003c/a\u003e Proper retraction (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/51\"\u003e#51\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/fa0fbd5e0855620c6ca1a98cc54ebe2625039751\"\u003e\u003ccode\u003efa0fbd5\u003c/code\u003e\u003c/a\u003e Storage field on HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/49\"\u003e#49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/df24421c392b897ed5c2f2882786cd2d0c226a13\"\u003e\u003ccode\u003edf24421\u003c/code\u003e\u003c/a\u003e Remove JCP from README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3ccc86a581e8dd5d697dc2b307a41dadc6c61db8\"\u003e\u003ccode\u003e3ccc86a\u003c/code\u003e\u003c/a\u003e Update deps\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.8.0...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.8.0\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Twingate/kubernetes-access-gateway/pull/21","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Twingate%2Fkubernetes-access-gateway/issues/21","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/21/packages"},{"uuid":"2559805524","node_id":"PR_kwDODDNgWs6Yk4hU","number":786,"state":"closed","title":"Bump github.com/MicahParks/jwkset from 0.7.0 to 0.9.6","user":"dependabot[bot]","labels":["dependencies","go","needs-ok-to-test"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2025-09-22T08:13:41.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-06-02T08:47:28.000Z","updated_at":"2025-09-22T08:13:41.000Z","time_to_close":9674773,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.7.0","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.7.0 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to add the \u003ccode\u003eStorage\u003c/code\u003e field back to the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure. It was removed in \u003ccode\u003ev0.6.0\u003c/code\u003e because I thought it was unused.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplementations of the \u003ccode\u003eStorage\u003c/code\u003e interface now require a \u003ccode\u003eKeyReplaceAll\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/48\"\u003eMicahParks/jwkset#48\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/49\"\u003eMicahParks/jwkset#49\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChange function parameter type\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to change a function parameter from type from \u003ccode\u003e*url.URL\u003c/code\u003e to \u003ccode\u003estring\u003c/code\u003e for convenience.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eNewStorageFromHTTP\u003c/code\u003e function accepts a \u003ccode\u003estring\u003c/code\u003e instead of a \u003ccode\u003e*url.URL\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/43\"\u003eMicahParks/jwkset#43\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/44\"\u003eMicahParks/jwkset#44\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/12a0f9ad2963ce76285884d045c3b04be9a782f1\"\u003e\u003ccode\u003e12a0f9a\u003c/code\u003e\u003c/a\u003e Rename jwksettool to jwkset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3fae7f8d2043e4b3935203f473a96ef4d3c4a185\"\u003e\u003ccode\u003e3fae7f8\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/257dc6e8e0533c127ac60a0077e30dd9f6f41b55\"\u003e\u003ccode\u003e257dc6e\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/78c43ce97c48f36b04c06dcc0e288ef1058e1862\"\u003e\u003ccode\u003e78c43ce\u003c/code\u003e\u003c/a\u003e Retract current version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c60bb8a32250636d9f50d247d0b166a41c4b609f\"\u003e\u003ccode\u003ec60bb8a\u003c/code\u003e\u003c/a\u003e Fix typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/02655983e0afd7959aeae9c2b126d19ecabc80ea\"\u003e\u003ccode\u003e0265598\u003c/code\u003e\u003c/a\u003e Proper retraction (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/51\"\u003e#51\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/fa0fbd5e0855620c6ca1a98cc54ebe2625039751\"\u003e\u003ccode\u003efa0fbd5\u003c/code\u003e\u003c/a\u003e Storage field on HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/49\"\u003e#49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/df24421c392b897ed5c2f2882786cd2d0c226a13\"\u003e\u003ccode\u003edf24421\u003c/code\u003e\u003c/a\u003e Remove JCP from README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3ccc86a581e8dd5d697dc2b307a41dadc6c61db8\"\u003e\u003ccode\u003e3ccc86a\u003c/code\u003e\u003c/a\u003e Update deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.7.0...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.7.0\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/openshift-online/ocm-cli/pull/786","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/openshift-online%2Focm-cli/issues/786","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/786/packages"},{"uuid":"2558506243","node_id":"PR_kwDOOBKipM6Yf7UD","number":62,"state":"open","title":"Bump github.com/MicahParks/jwkset from 0.9.5 to 0.9.6","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-06-01T19:05:53.000Z","updated_at":"2025-06-01T19:05:53.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.5","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.9.5 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.5...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.5\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mattermost/mattermost-plugin-msteams-devsecops/pull/62","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-msteams-devsecops/issues/62","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/62/packages"},{"uuid":"2558092544","node_id":"PR_kwDOGAOCS86YeWUA","number":144,"state":"open","title":"build(deps): bump github.com/MicahParks/jwkset from 0.9.5 to 0.9.6","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-06-01T12:22:59.000Z","updated_at":"2025-06-01T12:23:00.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.5","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.9.5 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.5...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.5\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/sot-tech/mochi/pull/144","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sot-tech%2Fmochi/issues/144","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/144/packages"},{"uuid":"3101634813","node_id":"PR_kwDOMylxWs6YMTqm","number":7,"state":"open","title":"Bump the go_modules group across 3 directories with 6 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-05-29T22:38:58.000Z","updated_at":"2025-06-05T12:09:20.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":6,"packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.5.18","new_version":"0.7.0","repository_url":"https://github.com/MicahParks/jwkset"},{"name":"github.com/golang-jwt/jwt/v5","old_version":"5.2.1","new_version":"5.2.2","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"github.com/blevesearch/bleve/v2","old_version":"2.4.1","new_version":"2.5.1","repository_url":"https://github.com/blevesearch/bleve"},{"name":"github.com/redis/go-redis/v9","old_version":"9.6.0","new_version":"9.6.3","repository_url":"https://github.com/redis/go-redis"},{"name":"golang.org/x/crypto","old_version":"0.25.0","new_version":"0.35.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/net","old_version":"0.27.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) | `0.5.18` | `0.7.0` |\n| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.1` | `5.2.2` |\n| [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) | `2.4.1` | `2.5.1` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.6.0` | `9.6.3` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.25.0` | `0.35.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.27.0` | `0.38.0` |\n\nBumps the go_modules group with 2 updates in the /build directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 2 updates in the /client directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [golang.org/x/net](https://github.com/golang/net).\n\nUpdates `github.com/MicahParks/jwkset` from 0.5.18 to 0.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eFix potential race condition\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a potential race condition.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNo breaking API changes.\n\u003cul\u003e\n\u003cli\u003eAllow for JWK with the \u003ca href=\"https://datatracker.ietf.org/doc/html/rfc7517#section-4.5\"\u003esame\u003c/a\u003e Key ID \u003ccode\u003ekid\u003c/code\u003e to be present in the set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a bug pointed out by \u003ca href=\"https://github.com/rohitkoul\"\u003e\u003ccode\u003e@​rohitkoul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/7#discussion_r1907816656\"\u003eMicahParks/jwkset#7\u003c/a\u003e. There is a bug in the refresh goroutine related to key replacement.\u003c/p\u003e\n\u003cp\u003eThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\u003c/p\u003e\n\u003cp\u003eRegardless of this bug, please note that removing a key from a JWK Set does not equate to instant revocation for most use cases as it takes time for JWK Set updates to propagate to all clients.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved \u003ccode\u003eStorage\u003c/code\u003e field from the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/40\"\u003eMicahParks/jwkset#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/41\"\u003eMicahParks/jwkset#41\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c8d5ec73b1775084eb1e7861d8006ed96344992f\"\u003e\u003ccode\u003ec8d5ec7\u003c/code\u003e\u003c/a\u003e Prevent possible race condition (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3\"\u003e\u003ccode\u003e01db49a\u003c/code\u003e\u003c/a\u003e HTTP client only overwrites and appends JWK to local cache during refresh (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/41\"\u003e#41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/ce57ded280d99191ea54e3c4c5460c58207c3bbf\"\u003e\u003ccode\u003ece57ded\u003c/code\u003e\u003c/a\u003e Update go.mod\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/343575748f3587b06114abb82a3c997abfde07e9\"\u003e\u003ccode\u003e3435757\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/9a9c935b1821c128f8d54b0f2bec3206fcae9032\"\u003e\u003ccode\u003e9a9c935\u003c/code\u003e\u003c/a\u003e Expose ValidateOptions in HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0a74b0279c16a96447ea4e3b3391843a88cc8e84\"\u003e\u003ccode\u003e0a74b02\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/d5640eb9b951c38b977450b0c3038104c53cefb8\"\u003e\u003ccode\u003ed5640eb\u003c/code\u003e\u003c/a\u003e Improve certificate thumbprint check (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/37\"\u003e#37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/00771507f16ef5908cb45e9df0175b3e37042391\"\u003e\u003ccode\u003e0077150\u003c/code\u003e\u003c/a\u003e Add ca certs back into Docker image (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/17cffe8f981baa871c229e91248ccebc2ed691ee\"\u003e\u003ccode\u003e17cffe8\u003c/code\u003e\u003c/a\u003e Makes the final image more secure (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.5.18...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang-jwt/jwt/v5` from 5.2.1 to 5.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\u003c/a\u003e by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed some typos by \u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: add go1.22 to ci workflows by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/383\"\u003egolang-jwt/jwt#383\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 4 to 5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/387\"\u003egolang-jwt/jwt#387\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/389\"\u003egolang-jwt/jwt#389\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump ci tests to include go1.23 by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/405\"\u003egolang-jwt/jwt#405\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix jwt -show by \u003ca href=\"https://github.com/AlexanderYastrebov\"\u003e\u003ccode\u003e@​AlexanderYastrebov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/406\"\u003egolang-jwt/jwt#406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: typo by \u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate SECURITY.md by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/416\"\u003egolang-jwt/jwt#416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate \u003ccode\u003ejwt.Parse\u003c/code\u003e example to use \u003ccode\u003ejwt.WithValidMethods\u003c/code\u003e by \u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ehttps://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3\"\u003e\u003ccode\u003e0951d18\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c035977d9e11c351f4c05dfeae193923cbab49ee\"\u003e\u003ccode\u003ec035977\u003c/code\u003e\u003c/a\u003e Update Parse example to use WithValidMethods (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/425\"\u003e#425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/bc8bdca5cced1caa9787e4a1c313a3538544c877\"\u003e\u003ccode\u003ebc8bdca\u003c/code\u003e\u003c/a\u003e Update SECURITY.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/416\"\u003e#416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/5ec246c074b71790eec1f2e05b54daf6ec29ec5f\"\u003e\u003ccode\u003e5ec246c\u003c/code\u003e\u003c/a\u003e docs: typo (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/407\"\u003e#407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0123f1ad66cbc45013dbfba6eff0cd81472bfc12\"\u003e\u003ccode\u003e0123f1a\u003c/code\u003e\u003c/a\u003e Fix jwt -show (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/406\"\u003e#406\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/f961c72abd3b91442a9ab3d3e356bf547636e89b\"\u003e\u003ccode\u003ef961c72\u003c/code\u003e\u003c/a\u003e chore: bump ci tests to include go1.23 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/405\"\u003e#405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/62e504c2810b67f6b97313424411cfffb25e41b0\"\u003e\u003ccode\u003e62e504c\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 5 to 6 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/389\"\u003e#389\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/1a56dcf532089fc2bb723a3cb4076a4e45cb1c1a\"\u003e\u003ccode\u003e1a56dcf\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 4 to 5 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/387\"\u003e#387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c8043eab61f0ec5bdd924c1c30caf164a9bb2c66\"\u003e\u003ccode\u003ec8043ea\u003c/code\u003e\u003c/a\u003e build: add go1.22 to ci workflows (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/7c3f6dc56316e5e222a9df9612ec04243189a989\"\u003e\u003ccode\u003e7c3f6dc\u003c/code\u003e\u003c/a\u003e Update README.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/382\"\u003e#382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/blevesearch/bleve/v2` from 2.4.1 to 2.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/blevesearch/bleve/releases\"\u003egithub.com/blevesearch/bleve/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.5.1\u003c/h2\u003e\n\u003ch5\u003eBug Fixes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eFix bolt snapshot when concurrent persister is in use (not ON by default), with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2178\"\u003eblevesearch/bleve#2178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNo partial failures allowed during \u0026quot;pre search\u0026quot; - applicable to synonyms, filtered vector search - \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2179\"\u003eblevesearch/bleve#2179\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsuring latest snapshot is persisted within bolt to avoid any chance of data loss (in parlance with \u003ccode\u003enum_snapshots_to_keep\u003c/code\u003e, rollback support) - \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2183\"\u003eblevesearch/bleve#2183\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2186\"\u003eblevesearch/bleve#2186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRecalculation of bm25 metrics upon every request can cause slowness, fixed with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2180\"\u003eblevesearch/bleve#2180\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixes around a tracked \u0026quot;pre search metric\u0026quot;, \u003ccode\u003eknn\u003c/code\u003e filter query validation and a bad situation with synonyms if legacy zap versions used, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2188\"\u003eblevesearch/bleve#2188\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2191\"\u003eblevesearch/bleve#2191\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2192\"\u003eblevesearch/bleve#2192\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eImprovements\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade forked version of golang/geo in use for \u003ccode\u003egeopoint\u003c/code\u003e and \u003ccode\u003egeoshape\u003c/code\u003e data to the latest available\u003c/li\u003e\n\u003cli\u003eEnhanced geoshape support over:\n\u003cul\u003e\n\u003cli\u003epoint/multipoint, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/18\"\u003eblevesearch/geo#18\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003elinestring/multilineString, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/19\"\u003eblevesearch/geo#19\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epolygon/multipolygon, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/20\"\u003eblevesearch/geo#20\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecircle, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/25\"\u003eblevesearch/geo#25\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eenvelope, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/21\"\u003eblevesearch/geo#21\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eCircles can be included within geometry collections with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2195\"\u003eblevesearch/bleve#2195\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/27\"\u003eblevesearch/geo#27\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eMilestone\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/milestone/26\"\u003ev2.5.1\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.5.0\u003c/h2\u003e\n\u003ch5\u003eBug Fixes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eExact hits to score higher than fuzzy hits, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2056\"\u003eblevesearch/bleve#2056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix boosting during hybrid search that involves text + nearest neighbor, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2127\"\u003eblevesearch/bleve#2127\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAddressed bug in IP field handling while highlighting, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2142\"\u003eblevesearch/bleve#2142\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGraceful error handling within registry, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2151\"\u003eblevesearch/bleve#2151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ehttp/\u003c/code\u003e package (meant for demo purposes) removed from repository to remove vulnerability - \u003ca href=\"https://github.com/blevesearch/bleve/security/advisories/GHSA-9w9f-6mg8-jp7w\"\u003eCVE-2022-31022\u003c/a\u003e, relocated to within \u003ca href=\"https://github.com/blevesearch/bleve-explorer\"\u003ehttps://github.com/blevesearch/bleve-explorer\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeo radius queries will now advertise distances (within sort values) in readable format, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2137\"\u003eblevesearch/bleve#2137\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eImprovements\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eVector search requires \u003ccode\u003efaiss\u003c/code\u003e dynamic library to be built from \u003ca href=\"https://github.com/blevesearch/faiss/tree/352484e0fc9d1f8f46737841efe5f26e0f383f71\"\u003eblevesearch/faiss@352484e\u003c/a\u003e which is a modified version of \u003ca href=\"https://github.com/facebookresearch/faiss/releases/tag/v1.10.0\"\u003ev1.10.0\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport for \u003cstrong\u003eBM25 scoring\u003c/strong\u003e, see: \u003ca href=\"https://github.com/blevesearch/bleve/blob/v2.5.0/docs/scoring.md#bm25\"\u003escoring.md\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport for \u003cstrong\u003esynonyms' search\u003c/strong\u003e, see: \u003ca href=\"https://github.com/blevesearch/bleve/blob/v2.5.0/docs/synonyms.md\"\u003esynonyms.md\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSignificant performance improvements in pre-filtered vector search\u003c/strong\u003e, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2169\"\u003eblevesearch/bleve#2169\u003c/a\u003e + dependent changes\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauto\u003c/code\u003e fuzziness detection with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2060\"\u003eblevesearch/bleve#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbility to affect ingestion/drain rate by tuning persister workers with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2100\"\u003eblevesearch/bleve#2100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional config in merge policy for improved merger behavior, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2134\"\u003eblevesearch/bleve#2134\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeo improvements: footprint reduction for polygons, better validation and graceful error handling, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2162\"\u003eblevesearch/bleve#2162\u003c/a\u003e + \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2158\"\u003eblevesearch/bleve#2158\u003c/a\u003e + \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2165\"\u003eblevesearch/bleve#2165\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade to RoaringBitmap/roaring@v2.4.5, etcd.io/bbolt@v1.4.0\u003c/li\u003e\n\u003cli\u003eMore metrics\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eMilestone\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/milestone/24\"\u003ev2.5.0\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.4.4\u003c/h2\u003e\n\u003ch5\u003eBug Fixes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eIdentified root cause for \u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/1662\"\u003eblevesearch/bleve#1662\u003c/a\u003e to be recycling of TermFieldReaders that was causing illegal/incorrect access of several in-memory structures in certain scenarios. We've gone ahead and disabled this feature with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2117\"\u003eblevesearch/bleve#2117\u003c/a\u003e + \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2121\"\u003eblevesearch/bleve#2121\u003c/a\u003e . Will work towards re-enabling in the near future once we've ironed out the several associated wrinkles.\u003c/li\u003e\n\u003cli\u003eIntroduced a guard rail with \u003ca href=\"https://redirect.github.com/blevesearch/zapx/pull/282\"\u003eblevesearch/zapx#282\u003c/a\u003e while performing vector search queries with pre-filtering to avoid hitting a panic when qualified docs do not hold valid vector fields.\u003c/li\u003e\n\u003cli\u003eFixed an issue while applying \u003ccode\u003eivf_max_codes_pct\u003c/code\u003e in vector search requests involving pre-filtering which can cause reduction in recall - \u003ca href=\"https://redirect.github.com/blevesearch/go-faiss/pull/40\"\u003eblevesearch/go-faiss#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/26b5d47132aae7a155c089823e2dc2d3e4f84b01\"\u003e\u003ccode\u003e26b5d47\u003c/code\u003e\u003c/a\u003e Update faiss version requirement for bleve releases (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2196\"\u003e#2196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/f3fca747666500b5604e660d8be5c556c634b9bc\"\u003e\u003ccode\u003ef3fca74\u003c/code\u003e\u003c/a\u003e MB-66517: Include Circle Support within Geometry Collections (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2195\"\u003e#2195\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/fcc58fc0424d2abfe5336af152e42827714ee72c\"\u003e\u003ccode\u003efcc58fc\u003c/code\u003e\u003c/a\u003e MB-66210: Upgrading Geo to v0.2.2 (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2194\"\u003e#2194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/fadc13fb4bfcadd56b41af53cfabe59dc03b3c46\"\u003e\u003ccode\u003efadc13f\u003c/code\u003e\u003c/a\u003e Update GO toolchain to latest on 1.23, workflows (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2193\"\u003e#2193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/a9550d966b390e11cab19cf1cb1b938d62dd4e3f\"\u003e\u003ccode\u003ea9550d9\u003c/code\u003e\u003c/a\u003e Fix: Prevent infinite loop in synonym search with legacy (\u003ccode\u003e\u0026lt;v16\u003c/code\u003e) segment plu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/ca6975ec8a9eec0f9013559b4a6aed524b1e4362\"\u003e\u003ccode\u003eca6975e\u003c/code\u003e\u003c/a\u003e Bug Fix: Validate KNN Filter Queries (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2191\"\u003e#2191\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/3535a08249d8bb4ff345375df3c8452409d1aad3\"\u003e\u003ccode\u003e3535a08\u003c/code\u003e\u003c/a\u003e Bug Fix: Prevent Indexing of \u003ccode\u003evector\u003c/code\u003e and \u003ccode\u003egeoshape\u003c/code\u003e fields when \u003ccode\u003eIndex\u003c/code\u003e opti...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/8a928049eeb4b8d181176000ccfd56f75ee8b08c\"\u003e\u003ccode\u003e8a92804\u003c/code\u003e\u003c/a\u003e fix: golangci-lint findings, fifth delivery (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2184\"\u003e#2184\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/decc98c41f5a4ea1d7f9fbb362365545027e6716\"\u003e\u003ccode\u003edecc98c\u003c/code\u003e\u003c/a\u003e MB-59633: Upgrade zapx (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2189\"\u003e#2189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/404e188eafe7badc4b327038add95371a3688dd8\"\u003e\u003ccode\u003e404e188\u003c/code\u003e\u003c/a\u003e Fix: Increment \u003ccode\u003esearches\u003c/code\u003e stat correctly during presearch phase (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/blevesearch/bleve/compare/v2.4.1...v2.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/redis/go-redis/v9` from 9.6.0 to 9.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/releases\"\u003egithub.com/redis/go-redis/v9's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev9.6.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: handle network error on SETINFO (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3295\"\u003e#3295\u003c/a\u003e)  (\u003ca href=\"https://github.com/redis/go-redis/security/advisories/GHSA-92cp-5422-2mw7\"\u003eCVE-2025-29923\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.6.2...v9.6.3\"\u003ehttps://github.com/redis/go-redis/compare/v9.6.2...v9.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e9.6.2\u003c/h2\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed bug with broken TLS sessions (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3145\"\u003e#3145\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eContributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/vladvildanov\"\u003e\u003ccode\u003e@​vladvildanov\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/rentziass\"\u003e\u003ccode\u003e@​rentziass\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e9.6.1\u003c/h2\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003ch2\u003e9.6\u003c/h2\u003e\n\u003cp\u003eThis release contains all new features from version 9.6.\u003c/p\u003e\n\u003ch3\u003e🚀 New Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport Hash-field expiration commands (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/2991\"\u003e#2991\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport Hash-field expiration commands in Pipeline \u0026amp; Fix HExpire HExpireWithArgs expiration (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3038\"\u003e#3038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport NOVALUES parameter for HSCAN (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/2925\"\u003e#2925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdded test case for CLIENT KILL with MAXAGE option (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/2971\"\u003e#2971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for XREAD last entry (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3005\"\u003e#3005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReduce the type assertion of CheckConn (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3066\"\u003e#3066\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e9.6.1\u003c/h2\u003e\n\u003cp\u003eIn addition minor changes were performed to retract version 9.5.3 and 9.5.4 that were released accidentally.\u003c/p\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eChange CI to 7.4.0-RC2 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3070\"\u003e#3070\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🎁 Package Distribution\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRetract versions 9.5.3 and 9.5.4 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3069\"\u003e#3069\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eContributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/3aaa9771ea8d2b764fd2ef4a60d7894d44e0fd3e\"\u003e\u003ccode\u003e3aaa977\u003c/code\u003e\u003c/a\u003e fix lint configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/aacc9ca7d2fd5963cddc72256978ce484ffde909\"\u003e\u003ccode\u003eaacc9ca\u003c/code\u003e\u003c/a\u003e bump version to 9.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/80360270283514fb271892dd525cc7ede19e8830\"\u003e\u003ccode\u003e8036027\u003c/code\u003e\u003c/a\u003e fix: handle network error on SETINFO (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3295\"\u003e#3295\u003c/a\u003e) (CVE-2025-29923)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/2a6c4c29ff79fba19795703b3ca9ee3646a2b65d\"\u003e\u003ccode\u003e2a6c4c2\u003c/code\u003e\u003c/a\u003e Updated packages versions (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3153\"\u003e#3153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/90c7274b0176d849a42e7739adca4ae3717a277c\"\u003e\u003ccode\u003e90c7274\u003c/code\u003e\u003c/a\u003e Backport \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3138\"\u003e#3138\u003c/a\u003e to v9.6 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3145\"\u003e#3145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/c3610cde42ad05854fa05e312d4b34cf1a809cc2\"\u003e\u003ccode\u003ec3610cd\u003c/code\u003e\u003c/a\u003e cp retracts and bump version to 9.6.1 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3069\"\u003e#3069\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/b0b94e79e07ac153ac2813266f0ac5d3e5bfb76c\"\u003e\u003ccode\u003eb0b94e7\u003c/code\u003e\u003c/a\u003e Change CI to 7.4.0-RC2 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3070\"\u003e#3070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/redis/go-redis/compare/v9.6.0...v9.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.25.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22\"\u003e\u003ccode\u003e7292932\u003c/code\u003e\u003c/a\u003e ssh: limit the size of the internal packet queue while waiting for KEX\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f66f74b0a406b5f6909183531ace593857f1646c\"\u003e\u003ccode\u003ef66f74b\u003c/code\u003e\u003c/a\u003e acme/autocert: check host policy before probing the cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b0784b7bfbe0b2c9a59afc1248ed3cb4b6652e85\"\u003e\u003ccode\u003eb0784b7\u003c/code\u003e\u003c/a\u003e x509roots/fallback: drop obsolete build constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/911360c8a4f464342b9fe7c23632be57fca87b20\"\u003e\u003ccode\u003e911360c\u003c/code\u003e\u003c/a\u003e all: bump golang.org/x/crypto dependencies of asm generators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/89ff08d67c4d79f9ac619aaf1f7388888798651f\"\u003e\u003ccode\u003e89ff08d\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e47973b1c1089f6c67ab89261f7aa067b3d611d2\"\u003e\u003ccode\u003ee47973b\u003c/code\u003e\u003c/a\u003e all: update certs for go1.24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9290511cd23ab9813a307b7f2615325e3ca98902\"\u003e\u003ccode\u003e9290511\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fa5273e461966728f91f33da62c0cf511a404c2a\"\u003e\u003ccode\u003efa5273e\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8ea4be81f0769fd5857e087083cbb6d3cb9f196\"\u003e\u003ccode\u003ea8ea4be\u003c/code\u003e\u003c/a\u003e ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/71d3a4cfdb0360795ce5f2d7041e01823fd22eb6\"\u003e\u003ccode\u003e71d3a4c\u003c/code\u003e\u003c/a\u003e acme: support challenges that require the ACME client to send a non-empty JSO...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.25.0...v0.35.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.27.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.27.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.25.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22\"\u003e\u003ccode\u003e7292932\u003c/code\u003e\u003c/a\u003e ssh: limit the size of the internal packet queue while waiting for KEX\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f66f74b0a406b5f6909183531ace593857f1646c\"\u003e\u003ccode\u003ef66f74b\u003c/code\u003e\u003c/a\u003e acme/autocert: check host policy before probing the cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b0784b7bfbe0b2c9a59afc1248ed3cb4b6652e85\"\u003e\u003ccode\u003eb0784b7\u003c/code\u003e\u003c/a\u003e x509roots/fallback: drop obsolete build constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/911360c8a4f464342b9fe7c23632be57fca87b20\"\u003e\u003ccode\u003e911360c\u003c/code\u003e\u003c/a\u003e all: bump golang.org/x/crypto dependencies of asm generators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/89ff08d67c4d79f9ac619aaf1f7388888798651f\"\u003e\u003ccode\u003e89ff08d\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e47973b1c1089f6c67ab89261f7aa067b3d611d2\"\u003e\u003ccode\u003ee47973b\u003c/code\u003e\u003c/a\u003e all: update certs for go1.24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9290511cd23ab9813a307b7f2615325e3ca98902\"\u003e\u003ccode\u003e9290511\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fa5273e461966728f91f33da62c0cf511a404c2a\"\u003e\u003ccode\u003efa5273e\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8ea4be81f0769fd5857e087083cbb6d3cb9f196\"\u003e\u003ccode\u003ea8ea4be\u003c/code\u003e\u003c/a\u003e ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/71d3a4cfdb0360795ce5f2d7041e01823fd22eb6\"\u003e\u003ccode\u003e71d3a4c\u003c/code\u003e\u003c/a\u003e acme: support challenges that require the ACME client to send a non-empty JSO...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.25.0...v0.35.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.27.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.27.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.25.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22\"\u003e\u003ccode\u003e7292932\u003c/code\u003e\u003c/a\u003e ssh: limit the size of the internal packet queue while waiting for KEX\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f66f74b0a406b5f6909183531ace593857f1646c\"\u003e\u003ccode\u003ef66f74b\u003c/code\u003e\u003c/a\u003e acme/autocert: check host policy before probing the cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b0784b7bfbe0b2c9a59afc1248ed3cb4b6652e85\"\u003e\u003ccode\u003eb0784b7\u003c/code\u003e\u003c/a\u003e x509roots/fallback: drop obsolete build constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/911360c8a4f464342b9fe7c23632be57fca87b20\"\u003e\u003ccode\u003e911360c\u003c/code\u003e\u003c/a\u003e all: bump golang.org/x/crypto dependencies of asm generators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/89ff08d67c4d79f9ac619aaf1f7388888798651f\"\u003e\u003ccode\u003e89ff08d\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e47973b1c1089f6c67ab89261f7aa067b3d611d2\"\u003e\u003ccode\u003ee47973b\u003c/code\u003e\u003c/a\u003e all: update certs for go1.24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9290511cd23ab9813a307b7f2615325e3ca98902\"\u003e\u003ccode\u003e9290511\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fa5273e461966728f91f33da62c0cf511a404c2a\"\u003e\u003ccode\u003efa5273e\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8ea4be81f0769fd5857e087083cbb6d3cb9f196\"\u003e\u003ccode\u003ea8ea4be\u003c/code\u003e\u003c/a\u003e ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/71d3a4cfdb0360795ce5f2d7041e01823fd22eb6\"\u003e\u003ccode\u003e71d3a4c\u003c/code\u003e\u003c/a\u003e acme: support challenges that require the ACME client to send a non-empty JSO...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.25.0...v0.35.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.27.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.27.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/offsoc/mattermost-plugin-playbooks/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/offsoc/mattermost-plugin-playbooks/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/offsoc%2Fmattermost-plugin-playbooks/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"},{"uuid":"2544387187","node_id":"PR_kwDONEBgR86XqERz","number":33,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.9.5 to 0.9.6 in the main group","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":["Serpentiel"],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-05-26T15:39:35.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-05-26T15:32:54.000Z","updated_at":"2025-05-26T15:39:35.000Z","time_to_close":401,"merged_at":"2025-05-26T15:39:35.000Z","merged_by":"Serpentiel","closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.5","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":"the main group","ecosystem":"go"},"body":"Bumps the main group with 1 update: [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset).\n\nUpdates `github.com/MicahParks/jwkset` from 0.9.5 to 0.9.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.5...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.5\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/AlphaSense-Engineering/privatecloud-cli/pull/33","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AlphaSense-Engineering%2Fprivatecloud-cli/issues/33","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/33/packages"},{"uuid":"2532485194","node_id":"PR_kwDOOUMNVM6W8qhK","number":9,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.8.0 to 0.9.6","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-09-16T19:18:27.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-05-20T19:48:48.000Z","updated_at":"2025-09-16T19:18:27.000Z","time_to_close":10279779,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.8.0","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.8.0 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to add the \u003ccode\u003eStorage\u003c/code\u003e field back to the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure. It was removed in \u003ccode\u003ev0.6.0\u003c/code\u003e because I thought it was unused.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplementations of the \u003ccode\u003eStorage\u003c/code\u003e interface now require a \u003ccode\u003eKeyReplaceAll\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/48\"\u003eMicahParks/jwkset#48\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/49\"\u003eMicahParks/jwkset#49\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/12a0f9ad2963ce76285884d045c3b04be9a782f1\"\u003e\u003ccode\u003e12a0f9a\u003c/code\u003e\u003c/a\u003e Rename jwksettool to jwkset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3fae7f8d2043e4b3935203f473a96ef4d3c4a185\"\u003e\u003ccode\u003e3fae7f8\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/257dc6e8e0533c127ac60a0077e30dd9f6f41b55\"\u003e\u003ccode\u003e257dc6e\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/78c43ce97c48f36b04c06dcc0e288ef1058e1862\"\u003e\u003ccode\u003e78c43ce\u003c/code\u003e\u003c/a\u003e Retract current version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c60bb8a32250636d9f50d247d0b166a41c4b609f\"\u003e\u003ccode\u003ec60bb8a\u003c/code\u003e\u003c/a\u003e Fix typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/02655983e0afd7959aeae9c2b126d19ecabc80ea\"\u003e\u003ccode\u003e0265598\u003c/code\u003e\u003c/a\u003e Proper retraction (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/51\"\u003e#51\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/fa0fbd5e0855620c6ca1a98cc54ebe2625039751\"\u003e\u003ccode\u003efa0fbd5\u003c/code\u003e\u003c/a\u003e Storage field on HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/49\"\u003e#49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/df24421c392b897ed5c2f2882786cd2d0c226a13\"\u003e\u003ccode\u003edf24421\u003c/code\u003e\u003c/a\u003e Remove JCP from README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3ccc86a581e8dd5d697dc2b307a41dadc6c61db8\"\u003e\u003ccode\u003e3ccc86a\u003c/code\u003e\u003c/a\u003e Update deps\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.8.0...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.8.0\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/ffrandy301gt/y/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ffrandy301gt%2Fy/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"},{"uuid":"2532185307","node_id":"PR_kwDODb-aPc6W7hTb","number":4542,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.9.5 to 0.9.6","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-05-21T08:19:57.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-05-20T17:23:04.000Z","updated_at":"2025-05-21T08:19:58.000Z","time_to_close":53813,"merged_at":"2025-05-21T08:19:57.000Z","merged_by":"aler9","closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.5","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.9.5 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.5...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.5\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/bluenviron/mediamtx/pull/4542","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bluenviron%2Fmediamtx/issues/4542","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4542/packages"}],"issue_packages":[{"old_version":"0.11.2","new_version":"0.11.3","update_type":"patch","path":"the go-modules group","pr_created_at":"2026-08-08T04:17:24.000Z","version_change":"0.11.2 → 0.11.3","issue":{"uuid":"5095815164","node_id":"PR_kwDOSgCTBc78UOvL","number":3,"state":"closed","title":"chore(go): bump github.com/MicahParks/jwkset from 0.11.2 to 0.11.3 in the go-modules group","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-08-20T18:10:00.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-08T04:17:24.000Z","updated_at":"2026-08-20T18:10:01.000Z","time_to_close":1086756,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(go)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.11.2","new_version":"0.11.3","repository_url":"https://github.com/MicahParks/jwkset"}],"path":"the go-modules group","ecosystem":"go"},"body":"Bumps the go-modules group with 1 update: [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset).\n\nUpdates `github.com/MicahParks/jwkset` from 0.11.2 to 0.11.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.3\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to programmatically identify IANA prohibited algorithms.\u003c/p\u003e\n\u003cp\u003eThank you \u003ca href=\"https://github.com/saluc28\"\u003e\u003ccode\u003e@​saluc28\u003c/code\u003e\u003c/a\u003e for the contribution.\u003c/p\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/69\"\u003eMicahParks/jwkset#69\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/71\"\u003eMicahParks/jwkset#71\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/bc827281e12d522a53d803e5ca408dcbf807aaaa\"\u003e\u003ccode\u003ebc82728\u003c/code\u003e\u003c/a\u003e Small updates (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/71\"\u003e#71\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/67382ca561b29b11a166095f9599b993668e5d69\"\u003e\u003ccode\u003e67382ca\u003c/code\u003e\u003c/a\u003e Add ALG.Prohibited() to report prohibited algorithms (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/69\"\u003e#69\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.11.2...v0.11.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.11.2\u0026new-version=0.11.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/complynx/zitadeltg/pull/3","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/complynx%2Fzitadeltg/issues/3","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/3/packages"}},{"old_version":"0.10.0","new_version":"0.11.0","update_type":"minor","path":null,"pr_created_at":"2025-09-22T17:19:14.000Z","version_change":"0.10.0 → 0.11.0","issue":{"uuid":"2850390323","node_id":"PR_kwDODb-aPc6p5YEz","number":5023,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.10.0 to 0.11.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-09-23T07:36:45.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-22T17:19:14.000Z","updated_at":"2025-09-23T07:36:45.000Z","time_to_close":51451,"merged_at":"2025-09-23T07:36:45.000Z","merged_by":"aler9","closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.10.0 to 0.11.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to allow JWK Sets to be processed even if not every key is a supported type. An example of an unsupported key type would be \u003ccode\u003eEd448\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003ePlease see the new \u003ccode\u003eRequireSupportedKeys\u003c/code\u003e option on \u003ca href=\"https://pkg.go.dev/github.com/MicahParks/jwkset@v0.11.0#HTTPClientStorageOptions\"\u003e\u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/60\"\u003e#60\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0d285dedecd7ed02ddcfd6e9ff6c6c62747e8f7e\"\u003e\u003ccode\u003e0d285de\u003c/code\u003e\u003c/a\u003e Ignore unsupported keys (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.10.0\u0026new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/bluenviron/mediamtx/pull/5023","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bluenviron%2Fmediamtx/issues/5023","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5023/packages"}},{"old_version":"0.9.6","new_version":"0.11.0","update_type":"minor","path":null,"pr_created_at":"2025-09-22T15:18:30.000Z","version_change":"0.9.6 → 0.11.0","issue":{"uuid":"2849975307","node_id":"PR_kwDONEBgR86p3ywL","number":47,"state":"closed","title":"build(deps): bump the main group with 3 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":["Serpentiel"],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-09-24T12:05:05.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-22T15:18:30.000Z","updated_at":"2025-09-24T12:05:05.000Z","time_to_close":161195,"merged_at":"2025-09-24T12:05:05.000Z","merged_by":"Serpentiel","closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"main","update_count":3,"packages":[{"name":"github.com/Azure/azure-sdk-for-go/sdk/azidentity","old_version":"1.11.0","new_version":"1.12.0","repository_url":"https://github.com/Azure/azure-sdk-for-go"},{"name":"github.com/MicahParks/jwkset","old_version":"0.9.6","new_version":"0.11.0","repository_url":"https://github.com/MicahParks/jwkset"},{"name":"github.com/MicahParks/keyfunc/v3","old_version":"3.6.1","new_version":"3.6.2","repository_url":"https://github.com/MicahParks/keyfunc"}],"path":null,"ecosystem":"go"},"body":"Bumps the main group with 3 updates: [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go), [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) and [github.com/MicahParks/keyfunc/v3](https://github.com/MicahParks/keyfunc).\n\nUpdates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.11.0 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/releases\"\u003egithub.com/Azure/azure-sdk-for-go/sdk/azidentity's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003esdk/azidentity/v1.12.0\u003c/h2\u003e\n\u003ch2\u003e1.12.0 (2025-09-16)\u003c/h2\u003e\n\u003ch3\u003eFeatures Added\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdded \u003ccode\u003eDefaultAzureCredentialOptions.RequireAzureTokenCredentials\u003c/code\u003e. \u003ccode\u003eNewDefaultAzureCredential\u003c/code\u003e returns an\nerror when this option is true and the environment variable \u003ccode\u003eAZURE_TOKEN_CREDENTIALS\u003c/code\u003e has no value.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eAzureDeveloperCLICredential\u003c/code\u003e no longer hangs when AZD_DEBUG is set\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eGetToken\u003c/code\u003e methods of \u003ccode\u003eAzureCLICredential\u003c/code\u003e and \u003ccode\u003eAzureDeveloperCLICredential\u003c/code\u003e return an error when\n\u003ccode\u003eTokenRequestOptions.Claims\u003c/code\u003e has a value because these credentials can't acquire a token in that\ncase. The error messages describe the action required to get a token.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003esdk/internal/v1.11.2\u003c/h2\u003e\n\u003ch2\u003e1.11.2 (2025-07-30)\u003c/h2\u003e\n\u003ch3\u003eOther Changes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eerrorinfo.NonRetriable()\u003c/code\u003e doesn't wrap errors which are already \u003ccode\u003eNonRetriable\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/e58902b242459d7a4a42c8c0113937b26ac495af\"\u003e\u003ccode\u003ee58902b\u003c/code\u003e\u003c/a\u003e Prep azcore v1.12.0 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/23005\"\u003e#23005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/9ad32c5a2db85ef5f697e5d3376a73efaebd19ae\"\u003e\u003ccode\u003e9ad32c5\u003c/code\u003e\u003c/a\u003e Increment package version after release of internal (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/23004\"\u003e#23004\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/897e9035c566063952597bc3b470858e866c2a0b\"\u003e\u003ccode\u003e897e903\u003c/code\u003e\u003c/a\u003e Update ignore-links.txt (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/23003\"\u003e#23003\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/ac7cc049bf63dc129ad246dbe21ac7a6ca42a578\"\u003e\u003ccode\u003eac7cc04\u003c/code\u003e\u003c/a\u003e [keyvault] fix test recording sanitizers (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22911\"\u003e#22911\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/276cf8c8e230d25d0872babca0a5965514760e19\"\u003e\u003ccode\u003e276cf8c\u003c/code\u003e\u003c/a\u003e update readme (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22971\"\u003e#22971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/5eb479f45a231f434b00411e57b17c53137d35ea\"\u003e\u003ccode\u003e5eb479f\u003c/code\u003e\u003c/a\u003e [azopenai] Updating hash to merged PR. (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22998\"\u003e#22998\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/9c4f5c55f5439bcd7e3b5290fb31b2e145f2ebf8\"\u003e\u003ccode\u003e9c4f5c5\u003c/code\u003e\u003c/a\u003e Prepare sdk/internal v1.9.0 for release (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22991\"\u003e#22991\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b407f56cbce00d7d3ff51ac864fd1d04a88a08a1\"\u003e\u003ccode\u003eb407f56\u003c/code\u003e\u003c/a\u003e Increment version for messaging/azwebpubsub releases (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22466\"\u003e#22466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/3af4c7ee716193b8e6755307ef1d27c041614752\"\u003e\u003ccode\u003e3af4c7e\u003c/code\u003e\u003c/a\u003e update mgmt live test (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22996\"\u003e#22996\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Azure/azure-sdk-for-go/commit/b7d018ea5d4e2c59ef91f8b42d3307262bf3e81b\"\u003e\u003ccode\u003eb7d018e\u003c/code\u003e\u003c/a\u003e fix sdk/resourcemanager/internal module (\u003ca href=\"https://redirect.github.com/Azure/azure-sdk-for-go/issues/22994\"\u003e#22994\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.11.0...sdk/azcore/v1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/MicahParks/jwkset` from 0.9.6 to 0.11.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to allow JWK Sets to be processed even if not every key is a supported type. An example of an unsupported key type would be \u003ccode\u003eEd448\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003ePlease see the new \u003ccode\u003eRequireSupportedKeys\u003c/code\u003e option on \u003ca href=\"https://pkg.go.dev/github.com/MicahParks/jwkset@v0.11.0#HTTPClientStorageOptions\"\u003e\u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/60\"\u003e#60\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to automatically extract the certificate's key usage in the \u003ccode\u003ejwkset\u003c/code\u003e CLI tool. This has not been added to the library or website yet.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/57\"\u003eMicahParks/jwkset#57\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/58\"\u003eMicahParks/jwkset#58\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCommits outside of pull requests (I will add branch protection now):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e7d65392db7e82185f777208a6d17625f9a867d60\u003c/li\u003e\n\u003cli\u003e6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0d285dedecd7ed02ddcfd6e9ff6c6c62747e8f7e\"\u003e\u003ccode\u003e0d285de\u003c/code\u003e\u003c/a\u003e Ignore unsupported keys (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\"\u003e\u003ccode\u003e6fab088\u003c/code\u003e\u003c/a\u003e Consolidate helper functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/7d65392db7e82185f777208a6d17625f9a867d60\"\u003e\u003ccode\u003e7d65392\u003c/code\u003e\u003c/a\u003e Change determineUse implementation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/57a5058644cd1a67d7089870330bba1a6adb8cc1\"\u003e\u003ccode\u003e57a5058\u003c/code\u003e\u003c/a\u003e Added support for 'use' attribute of JWK (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/58\"\u003e#58\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.6...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/MicahParks/keyfunc/v3` from 3.6.1 to 3.6.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/keyfunc/releases\"\u003egithub.com/MicahParks/keyfunc/v3's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eIgnore unsupported keys by default\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to ignore unsupported keys in a JWK Set by default.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/60\"\u003eMicahParks/jwkset#60\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/keyfunc/issues/143\"\u003e#143\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/61\"\u003eMicahParks/jwkset#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/keyfunc/commit/5e8bfb44c248329d64bf8360b13dce5b78d0e855\"\u003e\u003ccode\u003e5e8bfb4\u003c/code\u003e\u003c/a\u003e Upgrade jwkset for new default behavior (\u003ca href=\"https://redirect.github.com/MicahParks/keyfunc/issues/143\"\u003e#143\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/keyfunc/commit/2245943d43ec0aab237005deaccde76ad515a190\"\u003e\u003ccode\u003e2245943\u003c/code\u003e\u003c/a\u003e Fix comment (\u003ca href=\"https://redirect.github.com/MicahParks/keyfunc/issues/142\"\u003e#142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/keyfunc/compare/v3.6.1...v3.6.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/AlphaSense-Engineering/privatecloud-cli/pull/47","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AlphaSense-Engineering%2Fprivatecloud-cli/issues/47","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/47/packages"}},{"old_version":"0.7.0","new_version":"0.11.0","update_type":"minor","path":null,"pr_created_at":"2025-09-22T08:13:39.000Z","version_change":"0.7.0 → 0.11.0","issue":{"uuid":"3439698814","node_id":"PR_kwDODDNgWs6pxoov","number":879,"state":"open","title":"Bump github.com/MicahParks/jwkset from 0.7.0 to 0.11.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":null,"author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-22T08:13:39.000Z","updated_at":"2026-01-19T16:07:28.694Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.7.0","new_version":"0.11.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.7.0 to 0.11.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to allow JWK Sets to be processed even if not every key is a supported type. An example of an unsupported key type would be \u003ccode\u003eEd448\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003ePlease see the new \u003ccode\u003eRequireSupportedKeys\u003c/code\u003e option on \u003ca href=\"https://pkg.go.dev/github.com/MicahParks/jwkset@v0.11.0#HTTPClientStorageOptions\"\u003e\u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/60\"\u003e#60\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to automatically extract the certificate's key usage in the \u003ccode\u003ejwkset\u003c/code\u003e CLI tool. This has not been added to the library or website yet.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/57\"\u003eMicahParks/jwkset#57\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/58\"\u003eMicahParks/jwkset#58\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCommits outside of pull requests (I will add branch protection now):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e7d65392db7e82185f777208a6d17625f9a867d60\u003c/li\u003e\n\u003cli\u003e6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to add the \u003ccode\u003eStorage\u003c/code\u003e field back to the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure. It was removed in \u003ccode\u003ev0.6.0\u003c/code\u003e because I thought it was unused.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplementations of the \u003ccode\u003eStorage\u003c/code\u003e interface now require a \u003ccode\u003eKeyReplaceAll\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/48\"\u003eMicahParks/jwkset#48\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/49\"\u003eMicahParks/jwkset#49\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChange function parameter type\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to change a function parameter from type from \u003ccode\u003e*url.URL\u003c/code\u003e to \u003ccode\u003estring\u003c/code\u003e for convenience.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eNewStorageFromHTTP\u003c/code\u003e function accepts a \u003ccode\u003estring\u003c/code\u003e instead of a \u003ccode\u003e*url.URL\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0d285dedecd7ed02ddcfd6e9ff6c6c62747e8f7e\"\u003e\u003ccode\u003e0d285de\u003c/code\u003e\u003c/a\u003e Ignore unsupported keys (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\"\u003e\u003ccode\u003e6fab088\u003c/code\u003e\u003c/a\u003e Consolidate helper functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/7d65392db7e82185f777208a6d17625f9a867d60\"\u003e\u003ccode\u003e7d65392\u003c/code\u003e\u003c/a\u003e Change determineUse implementation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/57a5058644cd1a67d7089870330bba1a6adb8cc1\"\u003e\u003ccode\u003e57a5058\u003c/code\u003e\u003c/a\u003e Added support for 'use' attribute of JWK (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/58\"\u003e#58\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/12a0f9ad2963ce76285884d045c3b04be9a782f1\"\u003e\u003ccode\u003e12a0f9a\u003c/code\u003e\u003c/a\u003e Rename jwksettool to jwkset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3fae7f8d2043e4b3935203f473a96ef4d3c4a185\"\u003e\u003ccode\u003e3fae7f8\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/257dc6e8e0533c127ac60a0077e30dd9f6f41b55\"\u003e\u003ccode\u003e257dc6e\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/78c43ce97c48f36b04c06dcc0e288ef1058e1862\"\u003e\u003ccode\u003e78c43ce\u003c/code\u003e\u003c/a\u003e Retract current version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c60bb8a32250636d9f50d247d0b166a41c4b609f\"\u003e\u003ccode\u003ec60bb8a\u003c/code\u003e\u003c/a\u003e Fix typo\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.7.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.7.0\u0026new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/openshift-online/ocm-cli/pull/879","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/openshift-online%2Focm-cli/issues/879","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/879/packages"}},{"old_version":"0.10.0","new_version":"0.11.0","update_type":"minor","path":null,"pr_created_at":"2025-09-22T05:43:37.000Z","version_change":"0.10.0 → 0.11.0","issue":{"uuid":"2847994034","node_id":"PR_kwDOOsyEjc6pwPCy","number":139,"state":"closed","title":"chore(deps): bump github.com/MicahParks/jwkset from 0.10.0 to 0.11.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-09-22T05:49:00.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-22T05:43:37.000Z","updated_at":"2025-09-22T05:49:00.000Z","time_to_close":323,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.10.0","new_version":"0.11.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.10.0 to 0.11.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.11.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to allow JWK Sets to be processed even if not every key is a supported type. An example of an unsupported key type would be \u003ccode\u003eEd448\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003ePlease see the new \u003ccode\u003eRequireSupportedKeys\u003c/code\u003e option on \u003ca href=\"https://pkg.go.dev/github.com/MicahParks/jwkset@v0.11.0#HTTPClientStorageOptions\"\u003e\u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e\u003c/a\u003e.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/60\"\u003e#60\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0d285dedecd7ed02ddcfd6e9ff6c6c62747e8f7e\"\u003e\u003ccode\u003e0d285de\u003c/code\u003e\u003c/a\u003e Ignore unsupported keys (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/61\"\u003e#61\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.10.0...v0.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.10.0\u0026new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Twingate/kubernetes-access-gateway/pull/139","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Twingate%2Fkubernetes-access-gateway/issues/139","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/139/packages"}},{"old_version":"0.8.0","new_version":"0.10.0","update_type":"minor","path":null,"pr_created_at":"2025-09-16T19:18:24.000Z","version_change":"0.8.0 → 0.10.0","issue":{"uuid":"2834111409","node_id":"PR_kwDOOUMNVM6o7Rux","number":20,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.8.0 to 0.10.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-09-22T19:24:16.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-16T19:18:24.000Z","updated_at":"2025-09-22T19:24:16.000Z","time_to_close":518752,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.8.0","new_version":"0.10.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.8.0 to 0.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to automatically extract the certificate's key usage in the \u003ccode\u003ejwkset\u003c/code\u003e CLI tool. This has not been added to the library or website yet.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/57\"\u003eMicahParks/jwkset#57\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/58\"\u003eMicahParks/jwkset#58\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCommits outside of pull requests (I will add branch protection now):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e7d65392db7e82185f777208a6d17625f9a867d60\u003c/li\u003e\n\u003cli\u003e6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to add the \u003ccode\u003eStorage\u003c/code\u003e field back to the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure. It was removed in \u003ccode\u003ev0.6.0\u003c/code\u003e because I thought it was unused.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplementations of the \u003ccode\u003eStorage\u003c/code\u003e interface now require a \u003ccode\u003eKeyReplaceAll\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/48\"\u003eMicahParks/jwkset#48\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/49\"\u003eMicahParks/jwkset#49\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\"\u003e\u003ccode\u003e6fab088\u003c/code\u003e\u003c/a\u003e Consolidate helper functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/7d65392db7e82185f777208a6d17625f9a867d60\"\u003e\u003ccode\u003e7d65392\u003c/code\u003e\u003c/a\u003e Change determineUse implementation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/57a5058644cd1a67d7089870330bba1a6adb8cc1\"\u003e\u003ccode\u003e57a5058\u003c/code\u003e\u003c/a\u003e Added support for 'use' attribute of JWK (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/58\"\u003e#58\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/12a0f9ad2963ce76285884d045c3b04be9a782f1\"\u003e\u003ccode\u003e12a0f9a\u003c/code\u003e\u003c/a\u003e Rename jwksettool to jwkset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3fae7f8d2043e4b3935203f473a96ef4d3c4a185\"\u003e\u003ccode\u003e3fae7f8\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/257dc6e8e0533c127ac60a0077e30dd9f6f41b55\"\u003e\u003ccode\u003e257dc6e\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/78c43ce97c48f36b04c06dcc0e288ef1058e1862\"\u003e\u003ccode\u003e78c43ce\u003c/code\u003e\u003c/a\u003e Retract current version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c60bb8a32250636d9f50d247d0b166a41c4b609f\"\u003e\u003ccode\u003ec60bb8a\u003c/code\u003e\u003c/a\u003e Fix typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/02655983e0afd7959aeae9c2b126d19ecabc80ea\"\u003e\u003ccode\u003e0265598\u003c/code\u003e\u003c/a\u003e Proper retraction (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/51\"\u003e#51\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.8.0...v0.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.8.0\u0026new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/ffrandy301gt/y/pull/20","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ffrandy301gt%2Fy/issues/20","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/20/packages"}},{"old_version":"0.9.6","new_version":"0.10.0","update_type":"minor","path":null,"pr_created_at":"2025-09-16T17:06:44.000Z","version_change":"0.9.6 → 0.10.0","issue":{"uuid":"2833792986","node_id":"PR_kwDODb-aPc6o6D_a","number":4980,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.9.6 to 0.10.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-09-17T14:16:19.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-16T17:06:44.000Z","updated_at":"2025-09-17T14:16:19.000Z","time_to_close":76175,"merged_at":"2025-09-17T14:16:19.000Z","merged_by":"aler9","closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.6","new_version":"0.10.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.9.6 to 0.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to automatically extract the certificate's key usage in the \u003ccode\u003ejwkset\u003c/code\u003e CLI tool. This has not been added to the library or website yet.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/57\"\u003eMicahParks/jwkset#57\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/58\"\u003eMicahParks/jwkset#58\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCommits outside of pull requests (I will add branch protection now):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e7d65392db7e82185f777208a6d17625f9a867d60\u003c/li\u003e\n\u003cli\u003e6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\"\u003e\u003ccode\u003e6fab088\u003c/code\u003e\u003c/a\u003e Consolidate helper functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/7d65392db7e82185f777208a6d17625f9a867d60\"\u003e\u003ccode\u003e7d65392\u003c/code\u003e\u003c/a\u003e Change determineUse implementation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/57a5058644cd1a67d7089870330bba1a6adb8cc1\"\u003e\u003ccode\u003e57a5058\u003c/code\u003e\u003c/a\u003e Added support for 'use' attribute of JWK (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/58\"\u003e#58\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.6...v0.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.6\u0026new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/bluenviron/mediamtx/pull/4980","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bluenviron%2Fmediamtx/issues/4980","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4980/packages"}},{"old_version":"0.9.6","new_version":"0.10.0","update_type":"minor","path":null,"pr_created_at":"2025-09-16T05:22:48.000Z","version_change":"0.9.6 → 0.10.0","issue":{"uuid":"2831477709","node_id":"PR_kwDOOsyEjc6oxOvN","number":136,"state":"closed","title":"chore(deps): bump github.com/MicahParks/jwkset from 0.9.6 to 0.10.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-09-16T05:29:56.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-09-16T05:22:48.000Z","updated_at":"2025-09-16T05:29:56.000Z","time_to_close":428,"merged_at":"2025-09-16T05:29:56.000Z","merged_by":"github-actions[bot]","closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.6","new_version":"0.10.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.9.6 to 0.10.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.10.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to automatically extract the certificate's key usage in the \u003ccode\u003ejwkset\u003c/code\u003e CLI tool. This has not been added to the library or website yet.\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/57\"\u003eMicahParks/jwkset#57\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/58\"\u003eMicahParks/jwkset#58\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eCommits outside of pull requests (I will add branch protection now):\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e7d65392db7e82185f777208a6d17625f9a867d60\u003c/li\u003e\n\u003cli\u003e6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/6fab0883c2b99c6b53222d74e40bcef7ea1c4ba9\"\u003e\u003ccode\u003e6fab088\u003c/code\u003e\u003c/a\u003e Consolidate helper functions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/7d65392db7e82185f777208a6d17625f9a867d60\"\u003e\u003ccode\u003e7d65392\u003c/code\u003e\u003c/a\u003e Change determineUse implementation\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/57a5058644cd1a67d7089870330bba1a6adb8cc1\"\u003e\u003ccode\u003e57a5058\u003c/code\u003e\u003c/a\u003e Added support for 'use' attribute of JWK (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/58\"\u003e#58\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.6...v0.10.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.6\u0026new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Twingate/kubernetes-access-gateway/pull/136","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Twingate%2Fkubernetes-access-gateway/issues/136","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/136/packages"}},{"old_version":"0.5.19","new_version":"0.7.0","update_type":"minor","path":null,"pr_created_at":"2025-08-27T00:17:01.000Z","version_change":"0.5.19 → 0.7.0","issue":{"uuid":"2776781378","node_id":"PR_kwDOMss1XM6lglJC","number":181,"state":"closed","title":"deps(deps): bump the go_modules group with 7 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-09-18T06:59:49.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-08-27T00:17:01.000Z","updated_at":"2025-09-18T06:59:50.000Z","time_to_close":1924968,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps): bump","group_name":"go_modules","update_count":7,"packages":[{"name":"github.com/golang-jwt/jwt/v5","old_version":"5.2.1","new_version":"5.2.2","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"golang.org/x/oauth2","old_version":"0.25.0","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"github.com/MicahParks/jwkset","old_version":"0.5.19","new_version":"0.7.0","repository_url":"https://github.com/MicahParks/jwkset"},{"name":"github.com/go-jose/go-jose/v4","old_version":"4.0.2","new_version":"4.0.5","repository_url":"https://github.com/go-jose/go-jose"},{"name":"github.com/go-viper/mapstructure/v2","old_version":"2.2.1","new_version":"2.4.0","repository_url":"https://github.com/go-viper/mapstructure"},{"name":"golang.org/x/crypto","old_version":"0.32.0","new_version":"0.35.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/net","old_version":"0.33.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"}],"path":null,"ecosystem":"go"},"body":"[//]: # (dependabot-start)\n⚠️  **Dependabot is rebasing this PR** ⚠️ \n\nRebasing might not happen immediately, so don't worry if this takes some time.\n\nNote: if you make any changes to this PR yourself, they will take precedence over the rebase.\n\n---\n\n[//]: # (dependabot-end)\n\nBumps the go_modules group with 7 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.1` | `5.2.2` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.25.0` | `0.27.0` |\n| [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) | `0.5.19` | `0.7.0` |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.0.2` | `4.0.5` |\n| [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.2.1` | `2.4.0` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.32.0` | `0.35.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.33.0` | `0.38.0` |\n\nUpdates `github.com/golang-jwt/jwt/v5` from 5.2.1 to 5.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\u003c/a\u003e by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed some typos by \u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: add go1.22 to ci workflows by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/383\"\u003egolang-jwt/jwt#383\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 4 to 5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/387\"\u003egolang-jwt/jwt#387\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/389\"\u003egolang-jwt/jwt#389\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump ci tests to include go1.23 by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/405\"\u003egolang-jwt/jwt#405\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix jwt -show by \u003ca href=\"https://github.com/AlexanderYastrebov\"\u003e\u003ccode\u003e@​AlexanderYastrebov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/406\"\u003egolang-jwt/jwt#406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: typo by \u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate SECURITY.md by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/416\"\u003egolang-jwt/jwt#416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate \u003ccode\u003ejwt.Parse\u003c/code\u003e example to use \u003ccode\u003ejwt.WithValidMethods\u003c/code\u003e by \u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ehttps://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3\"\u003e\u003ccode\u003e0951d18\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c035977d9e11c351f4c05dfeae193923cbab49ee\"\u003e\u003ccode\u003ec035977\u003c/code\u003e\u003c/a\u003e Update Parse example to use WithValidMethods (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/425\"\u003e#425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/bc8bdca5cced1caa9787e4a1c313a3538544c877\"\u003e\u003ccode\u003ebc8bdca\u003c/code\u003e\u003c/a\u003e Update SECURITY.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/416\"\u003e#416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/5ec246c074b71790eec1f2e05b54daf6ec29ec5f\"\u003e\u003ccode\u003e5ec246c\u003c/code\u003e\u003c/a\u003e docs: typo (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/407\"\u003e#407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0123f1ad66cbc45013dbfba6eff0cd81472bfc12\"\u003e\u003ccode\u003e0123f1a\u003c/code\u003e\u003c/a\u003e Fix jwt -show (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/406\"\u003e#406\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/f961c72abd3b91442a9ab3d3e356bf547636e89b\"\u003e\u003ccode\u003ef961c72\u003c/code\u003e\u003c/a\u003e chore: bump ci tests to include go1.23 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/405\"\u003e#405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/62e504c2810b67f6b97313424411cfffb25e41b0\"\u003e\u003ccode\u003e62e504c\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 5 to 6 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/389\"\u003e#389\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/1a56dcf532089fc2bb723a3cb4076a4e45cb1c1a\"\u003e\u003ccode\u003e1a56dcf\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 4 to 5 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/387\"\u003e#387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c8043eab61f0ec5bdd924c1c30caf164a9bb2c66\"\u003e\u003ccode\u003ec8043ea\u003c/code\u003e\u003c/a\u003e build: add go1.22 to ci workflows (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/7c3f6dc56316e5e222a9df9612ec04243189a989\"\u003e\u003ccode\u003e7c3f6dc\u003c/code\u003e\u003c/a\u003e Update README.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/382\"\u003e#382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.25.0 to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.25.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/MicahParks/jwkset` from 0.5.19 to 0.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eFix potential race condition\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a potential race condition.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNo breaking API changes.\n\u003cul\u003e\n\u003cli\u003eAllow for JWK with the \u003ca href=\"https://datatracker.ietf.org/doc/html/rfc7517#section-4.5\"\u003esame\u003c/a\u003e Key ID \u003ccode\u003ekid\u003c/code\u003e to be present in the set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a bug pointed out by \u003ca href=\"https://github.com/rohitkoul\"\u003e\u003ccode\u003e@​rohitkoul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/7#discussion_r1907816656\"\u003eMicahParks/jwkset#7\u003c/a\u003e. There is a bug in the refresh goroutine related to key replacement.\u003c/p\u003e\n\u003cp\u003eThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\u003c/p\u003e\n\u003cp\u003eRegardless of this bug, please note that removing a key from a JWK Set does not equate to instant revocation for most use cases as it takes time for JWK Set updates to propagate to all clients.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved \u003ccode\u003eStorage\u003c/code\u003e field from the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/40\"\u003eMicahParks/jwkset#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/41\"\u003eMicahParks/jwkset#41\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c8d5ec73b1775084eb1e7861d8006ed96344992f\"\u003e\u003ccode\u003ec8d5ec7\u003c/code\u003e\u003c/a\u003e Prevent possible race condition (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3\"\u003e\u003ccode\u003e01db49a\u003c/code\u003e\u003c/a\u003e HTTP client only overwrites and appends JWK to local cache during refresh (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/41\"\u003e#41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/ce57ded280d99191ea54e3c4c5460c58207c3bbf\"\u003e\u003ccode\u003ece57ded\u003c/code\u003e\u003c/a\u003e Update go.mod\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/343575748f3587b06114abb82a3c997abfde07e9\"\u003e\u003ccode\u003e3435757\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/9a9c935b1821c128f8d54b0f2bec3206fcae9032\"\u003e\u003ccode\u003e9a9c935\u003c/code\u003e\u003c/a\u003e Expose ValidateOptions in HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0a74b0279c16a96447ea4e3b3391843a88cc8e84\"\u003e\u003ccode\u003e0a74b02\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.5.19...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.0.2 to 4.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDon't allow unbounded amounts of splits by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/167\"\u003ego-jose/go-jose#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eVarious other dependency updates, small fixes, and documentation updates in the full changelog\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tgeoghegan\"\u003e\u003ccode\u003e@​tgeoghegan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/161\"\u003ego-jose/go-jose#161\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 4.0.4\u003c/h2\u003e\n\u003ch1\u003eFixed\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eReverted \u0026quot;Allow unmarshalling JSONWebKeySets with unsupported key types\u0026quot; as a breaking change. See \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/136\"\u003e#136\u003c/a\u003e / \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/137\"\u003e#137\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eVersion 4.0.3\u003c/h2\u003e\n\u003ch2\u003eChanged\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow unmarshalling JSONWebKeySets with unsupported key types (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/130\"\u003e#130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument that OpaqueKeyEncrypter can't be implemented (for now) (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/129\"\u003e#129\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22\"\u003e\u003ccode\u003e99b346c\u003c/code\u003e\u003c/a\u003e Don't allow unbounded amounts of splits (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/167\"\u003e#167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/22811e77bac0d484ff060d5c4351b7e295df92fb\"\u003e\u003ccode\u003e22811e7\u003c/code\u003e\u003c/a\u003e Fix broken link in README.md (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/161\"\u003e#161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9dde8493b25c1b301ca97110f57c7774513f572c\"\u003e\u003ccode\u003e9dde849\u003c/code\u003e\u003c/a\u003e Remove CLA mentions from CONTRIBUTING.md (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/89172c5b51f2a7492b6fc2ea22d03777c4673bbe\"\u003e\u003ccode\u003e89172c5\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/158\"\u003e#158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ee05e015574c7d4c55b9a802e9637327d7d2606a\"\u003e\u003ccode\u003eee05e01\u003c/code\u003e\u003c/a\u003e Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/c0aef3ef5eaf5ad5fdfae9de426ebea91778f3e4\"\u003e\u003ccode\u003ec0aef3e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/fdc2ceb0bbe2a29c582edfe07ea914c8dacd7e1b\"\u003e\u003ccode\u003efdc2ceb\u003c/code\u003e\u003c/a\u003e Remove export disclaimer (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/10c69ef86e2b6997b25552aa391b48f1240cfe66\"\u003e\u003ccode\u003e10c69ef\u003c/code\u003e\u003c/a\u003e Short circuit return errors from \u003ccode\u003eJSONWebKey.UnmarshalJSON()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/141\"\u003e#141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/15bc4c2ac4575ad865f078390db61d44530f985d\"\u003e\u003ccode\u003e15bc4c2\u003c/code\u003e\u003c/a\u003e Update CHANGELOG for 4.0.4 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/138\"\u003e#138\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/f3534ca2c308b8394677f90d8ab3651be3a16e1c\"\u003e\u003ccode\u003ef3534ca\u003c/code\u003e\u003c/a\u003e Revert \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/130\"\u003e#130\u003c/a\u003e: JSONWebKeySet: ignore unsupported key types (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/137\"\u003e#137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.0.2...v4.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-viper/mapstructure/v2` from 2.2.1 to 2.4.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-viper/mapstructure/releases\"\u003egithub.com/go-viper/mapstructure/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.4.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003erefactor: replace interface{} with any by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/115\"\u003ego-viper/mapstructure#115\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.29.0 to 3.29.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e[bot] in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/114\"\u003ego-viper/mapstructure#114\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeneric tests by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/118\"\u003ego-viper/mapstructure#118\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix godoc reference link in README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/107\"\u003ego-viper/mapstructure#107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add StringToTimeLocationHookFunc to convert strings to *time.Location by \u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add back previous StringToSlice as a weak function by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/119\"\u003ego-viper/mapstructure#119\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ErfanMomeniii\"\u003e\u003ccode\u003e@​ErfanMomeniii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/117\"\u003ego-viper/mapstructure#117\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev2.3.0\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.1.7 to 4.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/46\"\u003ego-viper/mapstructure#46\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/47\"\u003ego-viper/mapstructure#47\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e[enhancement] Add check for \u003ccode\u003ereflect.Value\u003c/code\u003e in \u003ccode\u003eComposeDecodeHookFunc\u003c/code\u003e by \u003ca href=\"https://github.com/mahadzaryab1\"\u003e\u003ccode\u003e@​mahadzaryab1\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/52\"\u003ego-viper/mapstructure#52\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/51\"\u003ego-viper/mapstructure#51\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/checkout from 4.2.0 to 4.2.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/50\"\u003ego-viper/mapstructure#50\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/55\"\u003ego-viper/mapstructure#55\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.2.0 to 5.3.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/58\"\u003ego-viper/mapstructure#58\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eci: add Go 1.24 to the test matrix by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/74\"\u003ego-viper/mapstructure#74\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/72\"\u003ego-viper/mapstructure#72\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/76\"\u003ego-viper/mapstructure#76\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.3.0 to 5.4.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/78\"\u003ego-viper/mapstructure#78\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add decode hook for netip.Prefix by \u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdates by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/86\"\u003ego-viper/mapstructure#86\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/87\"\u003ego-viper/mapstructure#87\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/93\"\u003ego-viper/mapstructure#93\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/92\"\u003ego-viper/mapstructure#92\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.17 to 3.28.19 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/97\"\u003ego-viper/mapstructure#97\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/96\"\u003ego-viper/mapstructure#96\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate README.md by \u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdd omitzero tag. by \u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUse error structs instead of duplicated strings by \u003ca href=\"https://github.com/m1k1o\"\u003e\u003ccode\u003e@​m1k1o\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/102\"\u003ego-viper/mapstructure#102\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump github/codeql-action from 3.28.19 to 3.29.0 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/101\"\u003ego-viper/mapstructure#101\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003efeat: add common error interface by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/105\"\u003ego-viper/mapstructure#105\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eupdate linter by \u003ca href=\"https://github.com/sagikazarmark\"\u003e\u003ccode\u003e@​sagikazarmark\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/106\"\u003ego-viper/mapstructure#106\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFeature allow unset pointer by \u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tklauser\"\u003e\u003ccode\u003e@​tklauser\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/85\"\u003ego-viper/mapstructure#85\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/peczenyj\"\u003e\u003ccode\u003e@​peczenyj\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/90\"\u003ego-viper/mapstructure#90\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Crystalix007\"\u003e\u003ccode\u003e@​Crystalix007\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/98\"\u003ego-viper/mapstructure#98\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/rostislaved\"\u003e\u003ccode\u003e@​rostislaved\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/pull/80\"\u003ego-viper/mapstructure#80\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\"\u003ehttps://github.com/go-viper/mapstructure/compare/v2.2.1...v2.3.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b9794a5f0e73d425210d6614ed833067029155f5\"\u003e\u003ccode\u003eb9794a5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/119\"\u003e#119\u003c/a\u003e from go-viper/string-to-weak-slice\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17cdcb0741054e2a33938adf6bd1f2a5c0aa8f30\"\u003e\u003ccode\u003e17cdcb0\u003c/code\u003e\u003c/a\u003e feat: add back previous StringToSlice as a weak function\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/3caca3614c3ab2c5b5d359c44fdcd72058887b19\"\u003e\u003ccode\u003e3caca36\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/117\"\u003e#117\u003c/a\u003e from ErfanMomeniii/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/9a861bc115f2b54ed4e494662f29c172d9ef046a\"\u003e\u003ccode\u003e9a861bc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/107\"\u003e#107\u003c/a\u003e from peczenyj/patch-2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/86ed5b59da0615fb8c3a413f401cdf0231f1234c\"\u003e\u003ccode\u003e86ed5b5\u003c/code\u003e\u003c/a\u003e refactor: update\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/ace5b4e8b3dec99468ffa9498e42fb09d177b0a6\"\u003e\u003ccode\u003eace5b4e\u003c/code\u003e\u003c/a\u003e chore: add interface any linter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/1a4f1aef38bfa8549762aaf42c7c18a5d268e76e\"\u003e\u003ccode\u003e1a4f1ae\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/go-viper/mapstructure/issues/118\"\u003e#118\u003c/a\u003e from go-viper/generic-tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/a2689090ed4348033c36724d866faf1f911a9f63\"\u003e\u003ccode\u003ea268909\u003c/code\u003e\u003c/a\u003e fix: lint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/17f1fd44eb7606b109c9bb017c0a1c6d3e93b5cd\"\u003e\u003ccode\u003e17f1fd4\u003c/code\u003e\u003c/a\u003e test: add more comments\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-viper/mapstructure/commit/b48c8566836bf291bfee2b217d51fc36e8e61f6f\"\u003e\u003ccode\u003eb48c856\u003c/code\u003e\u003c/a\u003e test: expand tests\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-viper/mapstructure/compare/v2.2.1...v2.4.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.32.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22\"\u003e\u003ccode\u003e7292932\u003c/code\u003e\u003c/a\u003e ssh: limit the size of the internal packet queue while waiting for KEX\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f66f74b0a406b5f6909183531ace593857f1646c\"\u003e\u003ccode\u003ef66f74b\u003c/code\u003e\u003c/a\u003e acme/autocert: check host policy before probing the cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b0784b7bfbe0b2c9a59afc1248ed3cb4b6652e85\"\u003e\u003ccode\u003eb0784b7\u003c/code\u003e\u003c/a\u003e x509roots/fallback: drop obsolete build constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/911360c8a4f464342b9fe7c23632be57fca87b20\"\u003e\u003ccode\u003e911360c\u003c/code\u003e\u003c/a\u003e all: bump golang.org/x/crypto dependencies of asm generators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/89ff08d67c4d79f9ac619aaf1f7388888798651f\"\u003e\u003ccode\u003e89ff08d\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e47973b1c1089f6c67ab89261f7aa067b3d611d2\"\u003e\u003ccode\u003ee47973b\u003c/code\u003e\u003c/a\u003e all: update certs for go1.24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9290511cd23ab9813a307b7f2615325e3ca98902\"\u003e\u003ccode\u003e9290511\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fa5273e461966728f91f33da62c0cf511a404c2a\"\u003e\u003ccode\u003efa5273e\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8ea4be81f0769fd5857e087083cbb6d3cb9f196\"\u003e\u003ccode\u003ea8ea4be\u003c/code\u003e\u003c/a\u003e ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/71d3a4cfdb0360795ce5f2d7041e01823fd22eb6\"\u003e\u003ccode\u003e71d3a4c\u003c/code\u003e\u003c/a\u003e acme: support challenges that require the ACME client to send a non-empty JSO...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.35.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.33.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.33.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SwissOpenEM/Ingestor/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/SwissOpenEM/Ingestor/pull/181","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SwissOpenEM%2FIngestor/issues/181","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/181/packages"}},{"old_version":"0.5.19","new_version":"0.7.0","update_type":"minor","path":null,"pr_created_at":"2025-08-26T23:49:31.000Z","version_change":"0.5.19 → 0.7.0","issue":{"uuid":"3357470551","node_id":"PR_kwDOMss1XM6lgWi8","number":178,"state":"closed","title":"deps(deps): bump the go_modules group with 6 updates","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-08-27T00:17:04.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-08-26T23:49:31.000Z","updated_at":"2025-08-27T00:17:04.000Z","time_to_close":1653,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps): bump","group_name":"go_modules","update_count":6,"packages":[{"name":"github.com/golang-jwt/jwt/v5","old_version":"5.2.1","new_version":"5.2.2","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"golang.org/x/oauth2","old_version":"0.25.0","new_version":"0.27.0","repository_url":"https://github.com/golang/oauth2"},{"name":"github.com/MicahParks/jwkset","old_version":"0.5.19","new_version":"0.7.0","repository_url":"https://github.com/MicahParks/jwkset"},{"name":"github.com/go-jose/go-jose/v4","old_version":"4.0.2","new_version":"4.0.5","repository_url":"https://github.com/go-jose/go-jose"},{"name":"golang.org/x/crypto","old_version":"0.32.0","new_version":"0.35.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/net","old_version":"0.33.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.1` | `5.2.2` |\n| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.25.0` | `0.27.0` |\n| [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) | `0.5.19` | `0.7.0` |\n| [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.0.2` | `4.0.5` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.32.0` | `0.35.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.33.0` | `0.38.0` |\n\nUpdates `github.com/golang-jwt/jwt/v5` from 5.2.1 to 5.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\u003c/a\u003e by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed some typos by \u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: add go1.22 to ci workflows by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/383\"\u003egolang-jwt/jwt#383\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 4 to 5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/387\"\u003egolang-jwt/jwt#387\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/389\"\u003egolang-jwt/jwt#389\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump ci tests to include go1.23 by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/405\"\u003egolang-jwt/jwt#405\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix jwt -show by \u003ca href=\"https://github.com/AlexanderYastrebov\"\u003e\u003ccode\u003e@​AlexanderYastrebov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/406\"\u003egolang-jwt/jwt#406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: typo by \u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate SECURITY.md by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/416\"\u003egolang-jwt/jwt#416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate \u003ccode\u003ejwt.Parse\u003c/code\u003e example to use \u003ccode\u003ejwt.WithValidMethods\u003c/code\u003e by \u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ehttps://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3\"\u003e\u003ccode\u003e0951d18\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c035977d9e11c351f4c05dfeae193923cbab49ee\"\u003e\u003ccode\u003ec035977\u003c/code\u003e\u003c/a\u003e Update Parse example to use WithValidMethods (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/425\"\u003e#425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/bc8bdca5cced1caa9787e4a1c313a3538544c877\"\u003e\u003ccode\u003ebc8bdca\u003c/code\u003e\u003c/a\u003e Update SECURITY.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/416\"\u003e#416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/5ec246c074b71790eec1f2e05b54daf6ec29ec5f\"\u003e\u003ccode\u003e5ec246c\u003c/code\u003e\u003c/a\u003e docs: typo (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/407\"\u003e#407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0123f1ad66cbc45013dbfba6eff0cd81472bfc12\"\u003e\u003ccode\u003e0123f1a\u003c/code\u003e\u003c/a\u003e Fix jwt -show (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/406\"\u003e#406\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/f961c72abd3b91442a9ab3d3e356bf547636e89b\"\u003e\u003ccode\u003ef961c72\u003c/code\u003e\u003c/a\u003e chore: bump ci tests to include go1.23 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/405\"\u003e#405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/62e504c2810b67f6b97313424411cfffb25e41b0\"\u003e\u003ccode\u003e62e504c\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 5 to 6 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/389\"\u003e#389\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/1a56dcf532089fc2bb723a3cb4076a4e45cb1c1a\"\u003e\u003ccode\u003e1a56dcf\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 4 to 5 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/387\"\u003e#387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c8043eab61f0ec5bdd924c1c30caf164a9bb2c66\"\u003e\u003ccode\u003ec8043ea\u003c/code\u003e\u003c/a\u003e build: add go1.22 to ci workflows (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/7c3f6dc56316e5e222a9df9612ec04243189a989\"\u003e\u003ccode\u003e7c3f6dc\u003c/code\u003e\u003c/a\u003e Update README.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/382\"\u003e#382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/oauth2` from 0.25.0 to 0.27.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3\"\u003e\u003ccode\u003e681b4d8\u003c/code\u003e\u003c/a\u003e jws: split token into fixed number of parts\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502\"\u003e\u003ccode\u003e3f78298\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac\"\u003e\u003ccode\u003e109dabf\u003c/code\u003e\u003c/a\u003e endpoints: add links/provider for Discord\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47\"\u003e\u003ccode\u003eac571fa\u003c/code\u003e\u003c/a\u003e oauth2: fix docs for Config.DeviceAuth\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2\"\u003e\u003ccode\u003e314ee5b\u003c/code\u003e\u003c/a\u003e endpoints: add patreon endpoint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec\"\u003e\u003ccode\u003eb9c813b\u003c/code\u003e\u003c/a\u003e google: add warning about externally-provided credentials\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/oauth2/compare/v0.25.0...v0.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/MicahParks/jwkset` from 0.5.19 to 0.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eFix potential race condition\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a potential race condition.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNo breaking API changes.\n\u003cul\u003e\n\u003cli\u003eAllow for JWK with the \u003ca href=\"https://datatracker.ietf.org/doc/html/rfc7517#section-4.5\"\u003esame\u003c/a\u003e Key ID \u003ccode\u003ekid\u003c/code\u003e to be present in the set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a bug pointed out by \u003ca href=\"https://github.com/rohitkoul\"\u003e\u003ccode\u003e@​rohitkoul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/7#discussion_r1907816656\"\u003eMicahParks/jwkset#7\u003c/a\u003e. There is a bug in the refresh goroutine related to key replacement.\u003c/p\u003e\n\u003cp\u003eThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\u003c/p\u003e\n\u003cp\u003eRegardless of this bug, please note that removing a key from a JWK Set does not equate to instant revocation for most use cases as it takes time for JWK Set updates to propagate to all clients.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved \u003ccode\u003eStorage\u003c/code\u003e field from the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/40\"\u003eMicahParks/jwkset#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/41\"\u003eMicahParks/jwkset#41\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c8d5ec73b1775084eb1e7861d8006ed96344992f\"\u003e\u003ccode\u003ec8d5ec7\u003c/code\u003e\u003c/a\u003e Prevent possible race condition (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3\"\u003e\u003ccode\u003e01db49a\u003c/code\u003e\u003c/a\u003e HTTP client only overwrites and appends JWK to local cache during refresh (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/41\"\u003e#41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/ce57ded280d99191ea54e3c4c5460c58207c3bbf\"\u003e\u003ccode\u003ece57ded\u003c/code\u003e\u003c/a\u003e Update go.mod\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/343575748f3587b06114abb82a3c997abfde07e9\"\u003e\u003ccode\u003e3435757\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/9a9c935b1821c128f8d54b0f2bec3206fcae9032\"\u003e\u003ccode\u003e9a9c935\u003c/code\u003e\u003c/a\u003e Expose ValidateOptions in HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0a74b0279c16a96447ea4e3b3391843a88cc8e84\"\u003e\u003ccode\u003e0a74b02\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.5.19...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/go-jose/go-jose/v4` from 4.0.2 to 4.0.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/go-jose/go-jose/releases\"\u003egithub.com/go-jose/go-jose/v4's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.0.5\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDon't allow unbounded amounts of splits by \u003ca href=\"https://github.com/mcpherrinm\"\u003e\u003ccode\u003e@​mcpherrinm\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/167\"\u003ego-jose/go-jose#167\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFixes \u003ca href=\"https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78\"\u003ehttps://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eVarious other dependency updates, small fixes, and documentation updates in the full changelog\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tgeoghegan\"\u003e\u003ccode\u003e@​tgeoghegan\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/go-jose/go-jose/pull/161\"\u003ego-jose/go-jose#161\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5\"\u003ehttps://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003eVersion 4.0.4\u003c/h2\u003e\n\u003ch1\u003eFixed\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eReverted \u0026quot;Allow unmarshalling JSONWebKeySets with unsupported key types\u0026quot; as a breaking change. See \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/136\"\u003e#136\u003c/a\u003e / \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/137\"\u003e#137\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eVersion 4.0.3\u003c/h2\u003e\n\u003ch2\u003eChanged\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow unmarshalling JSONWebKeySets with unsupported key types (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/130\"\u003e#130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDocument that OpaqueKeyEncrypter can't be implemented (for now) (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/129\"\u003e#129\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDependency updates\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22\"\u003e\u003ccode\u003e99b346c\u003c/code\u003e\u003c/a\u003e Don't allow unbounded amounts of splits (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/167\"\u003e#167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/22811e77bac0d484ff060d5c4351b7e295df92fb\"\u003e\u003ccode\u003e22811e7\u003c/code\u003e\u003c/a\u003e Fix broken link in README.md (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/161\"\u003e#161\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/9dde8493b25c1b301ca97110f57c7774513f572c\"\u003e\u003ccode\u003e9dde849\u003c/code\u003e\u003c/a\u003e Remove CLA mentions from CONTRIBUTING.md (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/160\"\u003e#160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/89172c5b51f2a7492b6fc2ea22d03777c4673bbe\"\u003e\u003ccode\u003e89172c5\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/158\"\u003e#158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/ee05e015574c7d4c55b9a802e9637327d7d2606a\"\u003e\u003ccode\u003eee05e01\u003c/code\u003e\u003c/a\u003e Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/157\"\u003e#157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/c0aef3ef5eaf5ad5fdfae9de426ebea91778f3e4\"\u003e\u003ccode\u003ec0aef3e\u003c/code\u003e\u003c/a\u003e Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/156\"\u003e#156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/fdc2ceb0bbe2a29c582edfe07ea914c8dacd7e1b\"\u003e\u003ccode\u003efdc2ceb\u003c/code\u003e\u003c/a\u003e Remove export disclaimer (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/146\"\u003e#146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/10c69ef86e2b6997b25552aa391b48f1240cfe66\"\u003e\u003ccode\u003e10c69ef\u003c/code\u003e\u003c/a\u003e Short circuit return errors from \u003ccode\u003eJSONWebKey.UnmarshalJSON()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/141\"\u003e#141\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/15bc4c2ac4575ad865f078390db61d44530f985d\"\u003e\u003ccode\u003e15bc4c2\u003c/code\u003e\u003c/a\u003e Update CHANGELOG for 4.0.4 (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/138\"\u003e#138\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/go-jose/go-jose/commit/f3534ca2c308b8394677f90d8ab3651be3a16e1c\"\u003e\u003ccode\u003ef3534ca\u003c/code\u003e\u003c/a\u003e Revert \u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/130\"\u003e#130\u003c/a\u003e: JSONWebKeySet: ignore unsupported key types (\u003ca href=\"https://redirect.github.com/go-jose/go-jose/issues/137\"\u003e#137\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/go-jose/go-jose/compare/v4.0.2...v4.0.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.32.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22\"\u003e\u003ccode\u003e7292932\u003c/code\u003e\u003c/a\u003e ssh: limit the size of the internal packet queue while waiting for KEX\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f66f74b0a406b5f6909183531ace593857f1646c\"\u003e\u003ccode\u003ef66f74b\u003c/code\u003e\u003c/a\u003e acme/autocert: check host policy before probing the cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b0784b7bfbe0b2c9a59afc1248ed3cb4b6652e85\"\u003e\u003ccode\u003eb0784b7\u003c/code\u003e\u003c/a\u003e x509roots/fallback: drop obsolete build constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/911360c8a4f464342b9fe7c23632be57fca87b20\"\u003e\u003ccode\u003e911360c\u003c/code\u003e\u003c/a\u003e all: bump golang.org/x/crypto dependencies of asm generators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/89ff08d67c4d79f9ac619aaf1f7388888798651f\"\u003e\u003ccode\u003e89ff08d\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e47973b1c1089f6c67ab89261f7aa067b3d611d2\"\u003e\u003ccode\u003ee47973b\u003c/code\u003e\u003c/a\u003e all: update certs for go1.24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9290511cd23ab9813a307b7f2615325e3ca98902\"\u003e\u003ccode\u003e9290511\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fa5273e461966728f91f33da62c0cf511a404c2a\"\u003e\u003ccode\u003efa5273e\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8ea4be81f0769fd5857e087083cbb6d3cb9f196\"\u003e\u003ccode\u003ea8ea4be\u003c/code\u003e\u003c/a\u003e ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/71d3a4cfdb0360795ce5f2d7041e01823fd22eb6\"\u003e\u003ccode\u003e71d3a4c\u003c/code\u003e\u003c/a\u003e acme: support challenges that require the ACME client to send a non-empty JSO...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang/crypto/compare/v0.32.0...v0.35.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.33.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.33.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/SwissOpenEM/Ingestor/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/SwissOpenEM/Ingestor/pull/178","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/SwissOpenEM%2FIngestor/issues/178","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/178/packages"}},{"old_version":"0.5.17","new_version":"0.7.0","update_type":"minor","path":null,"pr_created_at":"2025-07-10T12:20:09.000Z","version_change":"0.5.17 → 0.7.0","issue":{"uuid":"3219136123","node_id":"PR_kwDOLw1hkc6eS6WS","number":6,"state":"open","title":"Bump github.com/MicahParks/jwkset from 0.5.17 to 0.7.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-07-10T12:20:09.000Z","updated_at":"2025-07-10T14:08:13.043Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.5.17","new_version":"0.7.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.5.17 to 0.7.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eFix potential race condition\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a potential race condition.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNo breaking API changes.\n\u003cul\u003e\n\u003cli\u003eAllow for JWK with the \u003ca href=\"https://datatracker.ietf.org/doc/html/rfc7517#section-4.5\"\u003esame\u003c/a\u003e Key ID \u003ccode\u003ekid\u003c/code\u003e to be present in the set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a bug pointed out by \u003ca href=\"https://github.com/rohitkoul\"\u003e\u003ccode\u003e@​rohitkoul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/7#discussion_r1907816656\"\u003eMicahParks/jwkset#7\u003c/a\u003e. There is a bug in the refresh goroutine related to key replacement.\u003c/p\u003e\n\u003cp\u003eThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\u003c/p\u003e\n\u003cp\u003eRegardless of this bug, please note that removing a key from a JWK Set does not equate to instant revocation for most use cases as it takes time for JWK Set updates to propagate to all clients.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved \u003ccode\u003eStorage\u003c/code\u003e field from the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/40\"\u003eMicahParks/jwkset#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/41\"\u003eMicahParks/jwkset#41\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c8d5ec73b1775084eb1e7861d8006ed96344992f\"\u003e\u003ccode\u003ec8d5ec7\u003c/code\u003e\u003c/a\u003e Prevent possible race condition (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3\"\u003e\u003ccode\u003e01db49a\u003c/code\u003e\u003c/a\u003e HTTP client only overwrites and appends JWK to local cache during refresh (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/41\"\u003e#41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/ce57ded280d99191ea54e3c4c5460c58207c3bbf\"\u003e\u003ccode\u003ece57ded\u003c/code\u003e\u003c/a\u003e Update go.mod\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/343575748f3587b06114abb82a3c997abfde07e9\"\u003e\u003ccode\u003e3435757\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/9a9c935b1821c128f8d54b0f2bec3206fcae9032\"\u003e\u003ccode\u003e9a9c935\u003c/code\u003e\u003c/a\u003e Expose ValidateOptions in HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0a74b0279c16a96447ea4e3b3391843a88cc8e84\"\u003e\u003ccode\u003e0a74b02\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/d5640eb9b951c38b977450b0c3038104c53cefb8\"\u003e\u003ccode\u003ed5640eb\u003c/code\u003e\u003c/a\u003e Improve certificate thumbprint check (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/37\"\u003e#37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/00771507f16ef5908cb45e9df0175b3e37042391\"\u003e\u003ccode\u003e0077150\u003c/code\u003e\u003c/a\u003e Add ca certs back into Docker image (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/17cffe8f981baa871c229e91248ccebc2ed691ee\"\u003e\u003ccode\u003e17cffe8\u003c/code\u003e\u003c/a\u003e Makes the final image more secure (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c725950efa92e1ba00c073fae431fb45b13d25e1\"\u003e\u003ccode\u003ec725950\u003c/code\u003e\u003c/a\u003e fix return of httpStorage in NewStorageFromHTTP (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/30\"\u003e#30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.5.17...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.5.17\u0026new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/kinde-oss/kinde-go/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/kinde-oss/kinde-go/pull/6","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/kinde-oss%2Fkinde-go/issues/6","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/6/packages"}},{"old_version":"0.5.4","new_version":"0.7.0","update_type":"minor","path":null,"pr_created_at":"2025-06-24T03:31:52.000Z","version_change":"0.5.4 → 0.7.0","issue":{"uuid":"3170112513","node_id":"PR_kwDOPAwERM6bxKZA","number":2,"state":"closed","title":"Bump github.com/MicahParks/jwkset from 0.5.4 to 0.7.0","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-06-24T04:34:38.000Z","author_association":"NONE","state_reason":null,"created_at":"2025-06-24T03:31:52.000Z","updated_at":"2025-06-24T04:34:38.000Z","time_to_close":3766,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.5.4","new_version":"0.7.0","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.5.4 to 0.7.0.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eFix potential race condition\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a potential race condition.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNo breaking API changes.\n\u003cul\u003e\n\u003cli\u003eAllow for JWK with the \u003ca href=\"https://datatracker.ietf.org/doc/html/rfc7517#section-4.5\"\u003esame\u003c/a\u003e Key ID \u003ccode\u003ekid\u003c/code\u003e to be present in the set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a bug pointed out by \u003ca href=\"https://github.com/rohitkoul\"\u003e\u003ccode\u003e@​rohitkoul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/7#discussion_r1907816656\"\u003eMicahParks/jwkset#7\u003c/a\u003e. There is a bug in the refresh goroutine related to key replacement.\u003c/p\u003e\n\u003cp\u003eThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\u003c/p\u003e\n\u003cp\u003eRegardless of this bug, please note that removing a key from a JWK Set does not equate to instant revocation for most use cases as it takes time for JWK Set updates to propagate to all clients.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved \u003ccode\u003eStorage\u003c/code\u003e field from the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/40\"\u003eMicahParks/jwkset#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/41\"\u003eMicahParks/jwkset#41\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eLess strict validation\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to use less strict validation for JWK. This will allow users to work with non-RFC compliant JWK Sets for small padding mistakes.\u003c/p\u003e\n\u003cp\u003eTwo padding related reasons for this are:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eMandatory leading padding for ECDSA JWK parameters.\u003c/li\u003e\n\u003cli\u003eA common mistake adding leading padding to RSA JWK parameter \u0026quot;n\u0026quot;.\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003eFor padding specifically, this project is only comparing integers after they are parsed from Base64 raw URL encoding by default. To turn on strict validation, there will be a new field on jwkset.ValidateOptions named StrictPadding.\u003c/p\u003e\n\u003cp\u003eAn example for \u003ccode\u003e1\u003c/code\u003e would be a bug in this project were mandatory leading padding was absent: \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/18\"\u003eMicahParks/jwkset#18\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eAn example for \u003ccode\u003e2\u003c/code\u003e would be a Firebase service that was reported to be incompatible with this project: \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/23\"\u003eMicahParks/jwkset#23\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/23\"\u003eMicahParks/jwkset#23\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/20\"\u003eMicahParks/jwkset#20\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/18\"\u003eMicahParks/jwkset#18\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/24\"\u003eMicahParks/jwkset#24\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.5.13\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to correctly pad EC JWK parameters with leading zeros where required by RFC 7518.\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c8d5ec73b1775084eb1e7861d8006ed96344992f\"\u003e\u003ccode\u003ec8d5ec7\u003c/code\u003e\u003c/a\u003e Prevent possible race condition (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3\"\u003e\u003ccode\u003e01db49a\u003c/code\u003e\u003c/a\u003e HTTP client only overwrites and appends JWK to local cache during refresh (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/41\"\u003e#41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/ce57ded280d99191ea54e3c4c5460c58207c3bbf\"\u003e\u003ccode\u003ece57ded\u003c/code\u003e\u003c/a\u003e Update go.mod\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/343575748f3587b06114abb82a3c997abfde07e9\"\u003e\u003ccode\u003e3435757\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/9a9c935b1821c128f8d54b0f2bec3206fcae9032\"\u003e\u003ccode\u003e9a9c935\u003c/code\u003e\u003c/a\u003e Expose ValidateOptions in HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0a74b0279c16a96447ea4e3b3391843a88cc8e84\"\u003e\u003ccode\u003e0a74b02\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/d5640eb9b951c38b977450b0c3038104c53cefb8\"\u003e\u003ccode\u003ed5640eb\u003c/code\u003e\u003c/a\u003e Improve certificate thumbprint check (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/37\"\u003e#37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/00771507f16ef5908cb45e9df0175b3e37042391\"\u003e\u003ccode\u003e0077150\u003c/code\u003e\u003c/a\u003e Add ca certs back into Docker image (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/17cffe8f981baa871c229e91248ccebc2ed691ee\"\u003e\u003ccode\u003e17cffe8\u003c/code\u003e\u003c/a\u003e Makes the final image more secure (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c725950efa92e1ba00c073fae431fb45b13d25e1\"\u003e\u003ccode\u003ec725950\u003c/code\u003e\u003c/a\u003e fix return of httpStorage in NewStorageFromHTTP (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/30\"\u003e#30\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.5.4...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.5.4\u0026new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/andrewheberle/jwks-to-pem/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/andrewheberle/jwks-to-pem/pull/2","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/andrewheberle%2Fjwks-to-pem/issues/2","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/2/packages"}},{"old_version":"0.8.0","new_version":"0.9.6","update_type":"minor","path":null,"pr_created_at":"2025-06-06T05:46:05.000Z","version_change":"0.8.0 → 0.9.6","issue":{"uuid":"3123720365","node_id":"PR_kwDOOsyEjc6ZVdUv","number":21,"state":"closed","title":"chore(deps): bump github.com/MicahParks/jwkset from 0.8.0 to 0.9.6","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-06-06T16:10:04.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-06-06T05:46:05.000Z","updated_at":"2025-06-06T16:10:14.000Z","time_to_close":37439,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.8.0","new_version":"0.9.6"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.8.0 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to add the \u003ccode\u003eStorage\u003c/code\u003e field back to the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure. It was removed in \u003ccode\u003ev0.6.0\u003c/code\u003e because I thought it was unused.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplementations of the \u003ccode\u003eStorage\u003c/code\u003e interface now require a \u003ccode\u003eKeyReplaceAll\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/48\"\u003eMicahParks/jwkset#48\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/49\"\u003eMicahParks/jwkset#49\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/12a0f9ad2963ce76285884d045c3b04be9a782f1\"\u003e\u003ccode\u003e12a0f9a\u003c/code\u003e\u003c/a\u003e Rename jwksettool to jwkset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3fae7f8d2043e4b3935203f473a96ef4d3c4a185\"\u003e\u003ccode\u003e3fae7f8\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/257dc6e8e0533c127ac60a0077e30dd9f6f41b55\"\u003e\u003ccode\u003e257dc6e\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/78c43ce97c48f36b04c06dcc0e288ef1058e1862\"\u003e\u003ccode\u003e78c43ce\u003c/code\u003e\u003c/a\u003e Retract current version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c60bb8a32250636d9f50d247d0b166a41c4b609f\"\u003e\u003ccode\u003ec60bb8a\u003c/code\u003e\u003c/a\u003e Fix typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/02655983e0afd7959aeae9c2b126d19ecabc80ea\"\u003e\u003ccode\u003e0265598\u003c/code\u003e\u003c/a\u003e Proper retraction (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/51\"\u003e#51\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/fa0fbd5e0855620c6ca1a98cc54ebe2625039751\"\u003e\u003ccode\u003efa0fbd5\u003c/code\u003e\u003c/a\u003e Storage field on HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/49\"\u003e#49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/df24421c392b897ed5c2f2882786cd2d0c226a13\"\u003e\u003ccode\u003edf24421\u003c/code\u003e\u003c/a\u003e Remove JCP from README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3ccc86a581e8dd5d697dc2b307a41dadc6c61db8\"\u003e\u003ccode\u003e3ccc86a\u003c/code\u003e\u003c/a\u003e Update deps\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.8.0...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.8.0\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/Twingate/kubernetes-access-gateway/pull/21","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Twingate%2Fkubernetes-access-gateway/issues/21","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/21/packages"}},{"old_version":"0.7.0","new_version":"0.9.6","update_type":"minor","path":null,"pr_created_at":"2025-06-02T08:47:28.000Z","version_change":"0.7.0 → 0.9.6","issue":{"uuid":"2559805524","node_id":"PR_kwDODDNgWs6Yk4hU","number":786,"state":"closed","title":"Bump github.com/MicahParks/jwkset from 0.7.0 to 0.9.6","user":"dependabot[bot]","labels":["dependencies","go","needs-ok-to-test"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2025-09-22T08:13:41.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-06-02T08:47:28.000Z","updated_at":"2025-09-22T08:13:41.000Z","time_to_close":9674773,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.7.0","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.7.0 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to add the \u003ccode\u003eStorage\u003c/code\u003e field back to the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure. It was removed in \u003ccode\u003ev0.6.0\u003c/code\u003e because I thought it was unused.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplementations of the \u003ccode\u003eStorage\u003c/code\u003e interface now require a \u003ccode\u003eKeyReplaceAll\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/48\"\u003eMicahParks/jwkset#48\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/49\"\u003eMicahParks/jwkset#49\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eChange function parameter type\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to change a function parameter from type from \u003ccode\u003e*url.URL\u003c/code\u003e to \u003ccode\u003estring\u003c/code\u003e for convenience.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe \u003ccode\u003eNewStorageFromHTTP\u003c/code\u003e function accepts a \u003ccode\u003estring\u003c/code\u003e instead of a \u003ccode\u003e*url.URL\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/43\"\u003eMicahParks/jwkset#43\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/44\"\u003eMicahParks/jwkset#44\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/12a0f9ad2963ce76285884d045c3b04be9a782f1\"\u003e\u003ccode\u003e12a0f9a\u003c/code\u003e\u003c/a\u003e Rename jwksettool to jwkset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3fae7f8d2043e4b3935203f473a96ef4d3c4a185\"\u003e\u003ccode\u003e3fae7f8\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/257dc6e8e0533c127ac60a0077e30dd9f6f41b55\"\u003e\u003ccode\u003e257dc6e\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/78c43ce97c48f36b04c06dcc0e288ef1058e1862\"\u003e\u003ccode\u003e78c43ce\u003c/code\u003e\u003c/a\u003e Retract current version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c60bb8a32250636d9f50d247d0b166a41c4b609f\"\u003e\u003ccode\u003ec60bb8a\u003c/code\u003e\u003c/a\u003e Fix typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/02655983e0afd7959aeae9c2b126d19ecabc80ea\"\u003e\u003ccode\u003e0265598\u003c/code\u003e\u003c/a\u003e Proper retraction (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/51\"\u003e#51\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/fa0fbd5e0855620c6ca1a98cc54ebe2625039751\"\u003e\u003ccode\u003efa0fbd5\u003c/code\u003e\u003c/a\u003e Storage field on HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/49\"\u003e#49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/df24421c392b897ed5c2f2882786cd2d0c226a13\"\u003e\u003ccode\u003edf24421\u003c/code\u003e\u003c/a\u003e Remove JCP from README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3ccc86a581e8dd5d697dc2b307a41dadc6c61db8\"\u003e\u003ccode\u003e3ccc86a\u003c/code\u003e\u003c/a\u003e Update deps\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.7.0...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.7.0\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/openshift-online/ocm-cli/pull/786","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/openshift-online%2Focm-cli/issues/786","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/786/packages"}},{"old_version":"0.9.5","new_version":"0.9.6","update_type":"patch","path":null,"pr_created_at":"2025-06-01T19:05:53.000Z","version_change":"0.9.5 → 0.9.6","issue":{"uuid":"2558506243","node_id":"PR_kwDOOBKipM6Yf7UD","number":62,"state":"open","title":"Bump github.com/MicahParks/jwkset from 0.9.5 to 0.9.6","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":null,"author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-06-01T19:05:53.000Z","updated_at":"2025-06-01T19:05:53.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.5","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.9.5 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.5...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.5\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mattermost/mattermost-plugin-msteams-devsecops/pull/62","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattermost%2Fmattermost-plugin-msteams-devsecops/issues/62","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/62/packages"}},{"old_version":"0.9.5","new_version":"0.9.6","update_type":"patch","path":null,"pr_created_at":"2025-06-01T12:22:59.000Z","version_change":"0.9.5 → 0.9.6","issue":{"uuid":"2558092544","node_id":"PR_kwDOGAOCS86YeWUA","number":144,"state":"open","title":"build(deps): bump github.com/MicahParks/jwkset from 0.9.5 to 0.9.6","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-06-01T12:22:59.000Z","updated_at":"2025-06-01T12:23:00.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.5","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.9.5 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.5...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.5\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/sot-tech/mochi/pull/144","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/sot-tech%2Fmochi/issues/144","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/144/packages"}},{"old_version":"0.5.18","new_version":"0.7.0","update_type":"minor","path":null,"pr_created_at":"2025-05-29T22:38:58.000Z","version_change":"0.5.18 → 0.7.0","issue":{"uuid":"3101634813","node_id":"PR_kwDOMylxWs6YMTqm","number":7,"state":"open","title":"Bump the go_modules group across 3 directories with 6 updates","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":"NONE","state_reason":null,"created_at":"2025-05-29T22:38:58.000Z","updated_at":"2025-06-05T12:09:20.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"go_modules","update_count":6,"packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.5.18","new_version":"0.7.0","repository_url":"https://github.com/MicahParks/jwkset"},{"name":"github.com/golang-jwt/jwt/v5","old_version":"5.2.1","new_version":"5.2.2","repository_url":"https://github.com/golang-jwt/jwt"},{"name":"github.com/blevesearch/bleve/v2","old_version":"2.4.1","new_version":"2.5.1","repository_url":"https://github.com/blevesearch/bleve"},{"name":"github.com/redis/go-redis/v9","old_version":"9.6.0","new_version":"9.6.3","repository_url":"https://github.com/redis/go-redis"},{"name":"golang.org/x/crypto","old_version":"0.25.0","new_version":"0.35.0","repository_url":"https://github.com/golang/crypto"},{"name":"golang.org/x/net","old_version":"0.27.0","new_version":"0.38.0","repository_url":"https://github.com/golang/net"}],"path":null,"ecosystem":"go"},"body":"Bumps the go_modules group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) | `0.5.18` | `0.7.0` |\n| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.1` | `5.2.2` |\n| [github.com/blevesearch/bleve/v2](https://github.com/blevesearch/bleve) | `2.4.1` | `2.5.1` |\n| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.6.0` | `9.6.3` |\n| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.25.0` | `0.35.0` |\n| [golang.org/x/net](https://github.com/golang/net) | `0.27.0` | `0.38.0` |\n\nBumps the go_modules group with 2 updates in the /build directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [golang.org/x/net](https://github.com/golang/net).\nBumps the go_modules group with 2 updates in the /client directory: [golang.org/x/crypto](https://github.com/golang/crypto) and [golang.org/x/net](https://github.com/golang/net).\n\nUpdates `github.com/MicahParks/jwkset` from 0.5.18 to 0.7.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003eFix potential race condition\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a potential race condition.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eNo breaking API changes.\n\u003cul\u003e\n\u003cli\u003eAllow for JWK with the \u003ca href=\"https://datatracker.ietf.org/doc/html/rfc7517#section-4.5\"\u003esame\u003c/a\u003e Key ID \u003ccode\u003ekid\u003c/code\u003e to be present in the set.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to fix a bug pointed out by \u003ca href=\"https://github.com/rohitkoul\"\u003e\u003ccode\u003e@​rohitkoul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/7#discussion_r1907816656\"\u003eMicahParks/jwkset#7\u003c/a\u003e. There is a bug in the refresh goroutine related to key replacement.\u003c/p\u003e\n\u003cp\u003eThe project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes the remote JWK Set. The current behavior is to overwrite or append. This is a security issue for use cases that utilize the provided auto-caching HTTP client and where key removal from a JWK Set is equivalent to revocation.\u003c/p\u003e\n\u003cp\u003eRegardless of this bug, please note that removing a key from a JWK Set does not equate to instant revocation for most use cases as it takes time for JWK Set updates to propagate to all clients.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved \u003ccode\u003eStorage\u003c/code\u003e field from the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/40\"\u003eMicahParks/jwkset#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/41\"\u003eMicahParks/jwkset#41\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c8d5ec73b1775084eb1e7861d8006ed96344992f\"\u003e\u003ccode\u003ec8d5ec7\u003c/code\u003e\u003c/a\u003e Prevent possible race condition (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/01db49a90f7f20c7fb39a699a2f19a7a5f379ed3\"\u003e\u003ccode\u003e01db49a\u003c/code\u003e\u003c/a\u003e HTTP client only overwrites and appends JWK to local cache during refresh (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/41\"\u003e#41\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/ce57ded280d99191ea54e3c4c5460c58207c3bbf\"\u003e\u003ccode\u003ece57ded\u003c/code\u003e\u003c/a\u003e Update go.mod\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/343575748f3587b06114abb82a3c997abfde07e9\"\u003e\u003ccode\u003e3435757\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/9a9c935b1821c128f8d54b0f2bec3206fcae9032\"\u003e\u003ccode\u003e9a9c935\u003c/code\u003e\u003c/a\u003e Expose ValidateOptions in HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/38\"\u003e#38\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/0a74b0279c16a96447ea4e3b3391843a88cc8e84\"\u003e\u003ccode\u003e0a74b02\u003c/code\u003e\u003c/a\u003e Update website deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/d5640eb9b951c38b977450b0c3038104c53cefb8\"\u003e\u003ccode\u003ed5640eb\u003c/code\u003e\u003c/a\u003e Improve certificate thumbprint check (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/37\"\u003e#37\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/00771507f16ef5908cb45e9df0175b3e37042391\"\u003e\u003ccode\u003e0077150\u003c/code\u003e\u003c/a\u003e Add ca certs back into Docker image (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/35\"\u003e#35\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/17cffe8f981baa871c229e91248ccebc2ed691ee\"\u003e\u003ccode\u003e17cffe8\u003c/code\u003e\u003c/a\u003e Makes the final image more secure (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/34\"\u003e#34\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.5.18...v0.7.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/golang-jwt/jwt/v5` from 5.2.1 to 5.2.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/golang-jwt/jwt/releases\"\u003egithub.com/golang-jwt/jwt/v5's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev5.2.2\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed \u003ca href=\"https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\"\u003ehttps://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp\u003c/a\u003e by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixed some typos by \u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ebuild: add go1.22 to ci workflows by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/383\"\u003egolang-jwt/jwt#383\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 4 to 5 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/387\"\u003egolang-jwt/jwt#387\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eBump golangci/golangci-lint-action from 5 to 6 by \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/389\"\u003egolang-jwt/jwt#389\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003echore: bump ci tests to include go1.23 by \u003ca href=\"https://github.com/mfridman\"\u003e\u003ccode\u003e@​mfridman\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/405\"\u003egolang-jwt/jwt#405\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix jwt -show by \u003ca href=\"https://github.com/AlexanderYastrebov\"\u003e\u003ccode\u003e@​AlexanderYastrebov\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/406\"\u003egolang-jwt/jwt#406\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003edocs: typo by \u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate SECURITY.md by \u003ca href=\"https://github.com/oxisto\"\u003e\u003ccode\u003e@​oxisto\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/416\"\u003egolang-jwt/jwt#416\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate \u003ccode\u003ejwt.Parse\u003c/code\u003e example to use \u003ccode\u003ejwt.WithValidMethods\u003c/code\u003e by \u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Ashikpaul\"\u003e\u003ccode\u003e@​Ashikpaul\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/382\"\u003egolang-jwt/jwt#382\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/kvii\"\u003e\u003ccode\u003e@​kvii\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/407\"\u003egolang-jwt/jwt#407\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mattt\"\u003e\u003ccode\u003e@​mattt\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/golang-jwt/jwt/pull/425\"\u003egolang-jwt/jwt#425\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ehttps://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3\"\u003e\u003ccode\u003e0951d18\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c035977d9e11c351f4c05dfeae193923cbab49ee\"\u003e\u003ccode\u003ec035977\u003c/code\u003e\u003c/a\u003e Update Parse example to use WithValidMethods (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/425\"\u003e#425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/bc8bdca5cced1caa9787e4a1c313a3538544c877\"\u003e\u003ccode\u003ebc8bdca\u003c/code\u003e\u003c/a\u003e Update SECURITY.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/416\"\u003e#416\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/5ec246c074b71790eec1f2e05b54daf6ec29ec5f\"\u003e\u003ccode\u003e5ec246c\u003c/code\u003e\u003c/a\u003e docs: typo (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/407\"\u003e#407\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/0123f1ad66cbc45013dbfba6eff0cd81472bfc12\"\u003e\u003ccode\u003e0123f1a\u003c/code\u003e\u003c/a\u003e Fix jwt -show (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/406\"\u003e#406\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/f961c72abd3b91442a9ab3d3e356bf547636e89b\"\u003e\u003ccode\u003ef961c72\u003c/code\u003e\u003c/a\u003e chore: bump ci tests to include go1.23 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/405\"\u003e#405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/62e504c2810b67f6b97313424411cfffb25e41b0\"\u003e\u003ccode\u003e62e504c\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 5 to 6 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/389\"\u003e#389\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/1a56dcf532089fc2bb723a3cb4076a4e45cb1c1a\"\u003e\u003ccode\u003e1a56dcf\u003c/code\u003e\u003c/a\u003e Bump golangci/golangci-lint-action from 4 to 5 (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/387\"\u003e#387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/c8043eab61f0ec5bdd924c1c30caf164a9bb2c66\"\u003e\u003ccode\u003ec8043ea\u003c/code\u003e\u003c/a\u003e build: add go1.22 to ci workflows (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/383\"\u003e#383\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang-jwt/jwt/commit/7c3f6dc56316e5e222a9df9612ec04243189a989\"\u003e\u003ccode\u003e7c3f6dc\u003c/code\u003e\u003c/a\u003e Update README.md (\u003ca href=\"https://redirect.github.com/golang-jwt/jwt/issues/382\"\u003e#382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/blevesearch/bleve/v2` from 2.4.1 to 2.5.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/blevesearch/bleve/releases\"\u003egithub.com/blevesearch/bleve/v2's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.5.1\u003c/h2\u003e\n\u003ch5\u003eBug Fixes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eFix bolt snapshot when concurrent persister is in use (not ON by default), with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2178\"\u003eblevesearch/bleve#2178\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eNo partial failures allowed during \u0026quot;pre search\u0026quot; - applicable to synonyms, filtered vector search - \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2179\"\u003eblevesearch/bleve#2179\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eEnsuring latest snapshot is persisted within bolt to avoid any chance of data loss (in parlance with \u003ccode\u003enum_snapshots_to_keep\u003c/code\u003e, rollback support) - \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2183\"\u003eblevesearch/bleve#2183\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2186\"\u003eblevesearch/bleve#2186\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRecalculation of bm25 metrics upon every request can cause slowness, fixed with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2180\"\u003eblevesearch/bleve#2180\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFixes around a tracked \u0026quot;pre search metric\u0026quot;, \u003ccode\u003eknn\u003c/code\u003e filter query validation and a bad situation with synonyms if legacy zap versions used, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2188\"\u003eblevesearch/bleve#2188\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2191\"\u003eblevesearch/bleve#2191\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2192\"\u003eblevesearch/bleve#2192\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eImprovements\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade forked version of golang/geo in use for \u003ccode\u003egeopoint\u003c/code\u003e and \u003ccode\u003egeoshape\u003c/code\u003e data to the latest available\u003c/li\u003e\n\u003cli\u003eEnhanced geoshape support over:\n\u003cul\u003e\n\u003cli\u003epoint/multipoint, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/18\"\u003eblevesearch/geo#18\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003elinestring/multilineString, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/19\"\u003eblevesearch/geo#19\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003epolygon/multipolygon, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/20\"\u003eblevesearch/geo#20\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003ecircle, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/25\"\u003eblevesearch/geo#25\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eenvelope, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/21\"\u003eblevesearch/geo#21\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eCircles can be included within geometry collections with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2195\"\u003eblevesearch/bleve#2195\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/blevesearch/geo/pull/27\"\u003eblevesearch/geo#27\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eMilestone\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/milestone/26\"\u003ev2.5.1\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.5.0\u003c/h2\u003e\n\u003ch5\u003eBug Fixes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eExact hits to score higher than fuzzy hits, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2056\"\u003eblevesearch/bleve#2056\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eFix boosting during hybrid search that involves text + nearest neighbor, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2127\"\u003eblevesearch/bleve#2127\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAddressed bug in IP field handling while highlighting, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2142\"\u003eblevesearch/bleve#2142\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGraceful error handling within registry, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2151\"\u003eblevesearch/bleve#2151\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ehttp/\u003c/code\u003e package (meant for demo purposes) removed from repository to remove vulnerability - \u003ca href=\"https://github.com/blevesearch/bleve/security/advisories/GHSA-9w9f-6mg8-jp7w\"\u003eCVE-2022-31022\u003c/a\u003e, relocated to within \u003ca href=\"https://github.com/blevesearch/bleve-explorer\"\u003ehttps://github.com/blevesearch/bleve-explorer\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeo radius queries will now advertise distances (within sort values) in readable format, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2137\"\u003eblevesearch/bleve#2137\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eImprovements\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eVector search requires \u003ccode\u003efaiss\u003c/code\u003e dynamic library to be built from \u003ca href=\"https://github.com/blevesearch/faiss/tree/352484e0fc9d1f8f46737841efe5f26e0f383f71\"\u003eblevesearch/faiss@352484e\u003c/a\u003e which is a modified version of \u003ca href=\"https://github.com/facebookresearch/faiss/releases/tag/v1.10.0\"\u003ev1.10.0\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport for \u003cstrong\u003eBM25 scoring\u003c/strong\u003e, see: \u003ca href=\"https://github.com/blevesearch/bleve/blob/v2.5.0/docs/scoring.md#bm25\"\u003escoring.md\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eSupport for \u003cstrong\u003esynonyms' search\u003c/strong\u003e, see: \u003ca href=\"https://github.com/blevesearch/bleve/blob/v2.5.0/docs/synonyms.md\"\u003esynonyms.md\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSignificant performance improvements in pre-filtered vector search\u003c/strong\u003e, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2169\"\u003eblevesearch/bleve#2169\u003c/a\u003e + dependent changes\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eauto\u003c/code\u003e fuzziness detection with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2060\"\u003eblevesearch/bleve#2060\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAbility to affect ingestion/drain rate by tuning persister workers with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2100\"\u003eblevesearch/bleve#2100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional config in merge policy for improved merger behavior, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2134\"\u003eblevesearch/bleve#2134\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eGeo improvements: footprint reduction for polygons, better validation and graceful error handling, with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2162\"\u003eblevesearch/bleve#2162\u003c/a\u003e + \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2158\"\u003eblevesearch/bleve#2158\u003c/a\u003e + \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2165\"\u003eblevesearch/bleve#2165\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpgrade to RoaringBitmap/roaring@v2.4.5, etcd.io/bbolt@v1.4.0\u003c/li\u003e\n\u003cli\u003eMore metrics\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch5\u003eMilestone\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/milestone/24\"\u003ev2.5.0\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.4.4\u003c/h2\u003e\n\u003ch5\u003eBug Fixes\u003c/h5\u003e\n\u003cul\u003e\n\u003cli\u003eIdentified root cause for \u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/1662\"\u003eblevesearch/bleve#1662\u003c/a\u003e to be recycling of TermFieldReaders that was causing illegal/incorrect access of several in-memory structures in certain scenarios. We've gone ahead and disabled this feature with \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2117\"\u003eblevesearch/bleve#2117\u003c/a\u003e + \u003ca href=\"https://redirect.github.com/blevesearch/bleve/pull/2121\"\u003eblevesearch/bleve#2121\u003c/a\u003e . Will work towards re-enabling in the near future once we've ironed out the several associated wrinkles.\u003c/li\u003e\n\u003cli\u003eIntroduced a guard rail with \u003ca href=\"https://redirect.github.com/blevesearch/zapx/pull/282\"\u003eblevesearch/zapx#282\u003c/a\u003e while performing vector search queries with pre-filtering to avoid hitting a panic when qualified docs do not hold valid vector fields.\u003c/li\u003e\n\u003cli\u003eFixed an issue while applying \u003ccode\u003eivf_max_codes_pct\u003c/code\u003e in vector search requests involving pre-filtering which can cause reduction in recall - \u003ca href=\"https://redirect.github.com/blevesearch/go-faiss/pull/40\"\u003eblevesearch/go-faiss#40\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/26b5d47132aae7a155c089823e2dc2d3e4f84b01\"\u003e\u003ccode\u003e26b5d47\u003c/code\u003e\u003c/a\u003e Update faiss version requirement for bleve releases (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2196\"\u003e#2196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/f3fca747666500b5604e660d8be5c556c634b9bc\"\u003e\u003ccode\u003ef3fca74\u003c/code\u003e\u003c/a\u003e MB-66517: Include Circle Support within Geometry Collections (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2195\"\u003e#2195\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/fcc58fc0424d2abfe5336af152e42827714ee72c\"\u003e\u003ccode\u003efcc58fc\u003c/code\u003e\u003c/a\u003e MB-66210: Upgrading Geo to v0.2.2 (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2194\"\u003e#2194\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/fadc13fb4bfcadd56b41af53cfabe59dc03b3c46\"\u003e\u003ccode\u003efadc13f\u003c/code\u003e\u003c/a\u003e Update GO toolchain to latest on 1.23, workflows (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2193\"\u003e#2193\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/a9550d966b390e11cab19cf1cb1b938d62dd4e3f\"\u003e\u003ccode\u003ea9550d9\u003c/code\u003e\u003c/a\u003e Fix: Prevent infinite loop in synonym search with legacy (\u003ccode\u003e\u0026lt;v16\u003c/code\u003e) segment plu...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/ca6975ec8a9eec0f9013559b4a6aed524b1e4362\"\u003e\u003ccode\u003eca6975e\u003c/code\u003e\u003c/a\u003e Bug Fix: Validate KNN Filter Queries (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2191\"\u003e#2191\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/3535a08249d8bb4ff345375df3c8452409d1aad3\"\u003e\u003ccode\u003e3535a08\u003c/code\u003e\u003c/a\u003e Bug Fix: Prevent Indexing of \u003ccode\u003evector\u003c/code\u003e and \u003ccode\u003egeoshape\u003c/code\u003e fields when \u003ccode\u003eIndex\u003c/code\u003e opti...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/8a928049eeb4b8d181176000ccfd56f75ee8b08c\"\u003e\u003ccode\u003e8a92804\u003c/code\u003e\u003c/a\u003e fix: golangci-lint findings, fifth delivery (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2184\"\u003e#2184\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/decc98c41f5a4ea1d7f9fbb362365545027e6716\"\u003e\u003ccode\u003edecc98c\u003c/code\u003e\u003c/a\u003e MB-59633: Upgrade zapx (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2189\"\u003e#2189\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blevesearch/bleve/commit/404e188eafe7badc4b327038add95371a3688dd8\"\u003e\u003ccode\u003e404e188\u003c/code\u003e\u003c/a\u003e Fix: Increment \u003ccode\u003esearches\u003c/code\u003e stat correctly during presearch phase (\u003ca href=\"https://redirect.github.com/blevesearch/bleve/issues/2188\"\u003e#2188\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/blevesearch/bleve/compare/v2.4.1...v2.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `github.com/redis/go-redis/v9` from 9.6.0 to 9.6.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/redis/go-redis/releases\"\u003egithub.com/redis/go-redis/v9's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev9.6.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: handle network error on SETINFO (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3295\"\u003e#3295\u003c/a\u003e)  (\u003ca href=\"https://github.com/redis/go-redis/security/advisories/GHSA-92cp-5422-2mw7\"\u003eCVE-2025-29923\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/redis/go-redis/compare/v9.6.2...v9.6.3\"\u003ehttps://github.com/redis/go-redis/compare/v9.6.2...v9.6.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e9.6.2\u003c/h2\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed bug with broken TLS sessions (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3145\"\u003e#3145\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eContributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/ofekshenawa\"\u003e\u003ccode\u003e@​ofekshenawa\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/vladvildanov\"\u003e\u003ccode\u003e@​vladvildanov\u003c/code\u003e\u003c/a\u003e \u003ca href=\"https://github.com/rentziass\"\u003e\u003ccode\u003e@​rentziass\u003c/code\u003e\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003e9.6.1\u003c/h2\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003ch2\u003e9.6\u003c/h2\u003e\n\u003cp\u003eThis release contains all new features from version 9.6.\u003c/p\u003e\n\u003ch3\u003e🚀 New Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport Hash-field expiration commands (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/2991\"\u003e#2991\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport Hash-field expiration commands in Pipeline \u0026amp; Fix HExpire HExpireWithArgs expiration (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3038\"\u003e#3038\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSupport NOVALUES parameter for HSCAN (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/2925\"\u003e#2925\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdded test case for CLIENT KILL with MAXAGE option (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/2971\"\u003e#2971\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd support for XREAD last entry (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3005\"\u003e#3005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReduce the type assertion of CheckConn (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3066\"\u003e#3066\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e9.6.1\u003c/h2\u003e\n\u003cp\u003eIn addition minor changes were performed to retract version 9.5.3 and 9.5.4 that were released accidentally.\u003c/p\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eChange CI to 7.4.0-RC2 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3070\"\u003e#3070\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🎁 Package Distribution\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRetract versions 9.5.3 and 9.5.4 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3069\"\u003e#3069\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eContributors\u003c/h2\u003e\n\u003cp\u003eWe'd like to thank all the contributors who worked on this release!\u003c/p\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/3aaa9771ea8d2b764fd2ef4a60d7894d44e0fd3e\"\u003e\u003ccode\u003e3aaa977\u003c/code\u003e\u003c/a\u003e fix lint configuration\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/aacc9ca7d2fd5963cddc72256978ce484ffde909\"\u003e\u003ccode\u003eaacc9ca\u003c/code\u003e\u003c/a\u003e bump version to 9.6.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/80360270283514fb271892dd525cc7ede19e8830\"\u003e\u003ccode\u003e8036027\u003c/code\u003e\u003c/a\u003e fix: handle network error on SETINFO (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3295\"\u003e#3295\u003c/a\u003e) (CVE-2025-29923)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/2a6c4c29ff79fba19795703b3ca9ee3646a2b65d\"\u003e\u003ccode\u003e2a6c4c2\u003c/code\u003e\u003c/a\u003e Updated packages versions (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3153\"\u003e#3153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/90c7274b0176d849a42e7739adca4ae3717a277c\"\u003e\u003ccode\u003e90c7274\u003c/code\u003e\u003c/a\u003e Backport \u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3138\"\u003e#3138\u003c/a\u003e to v9.6 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3145\"\u003e#3145\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/c3610cde42ad05854fa05e312d4b34cf1a809cc2\"\u003e\u003ccode\u003ec3610cd\u003c/code\u003e\u003c/a\u003e cp retracts and bump version to 9.6.1 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3069\"\u003e#3069\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/redis/go-redis/commit/b0b94e79e07ac153ac2813266f0ac5d3e5bfb76c\"\u003e\u003ccode\u003eb0b94e7\u003c/code\u003e\u003c/a\u003e Change CI to 7.4.0-RC2 (\u003ca href=\"https://redirect.github.com/redis/go-redis/issues/3070\"\u003e#3070\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/redis/go-redis/compare/v9.6.0...v9.6.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.25.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22\"\u003e\u003ccode\u003e7292932\u003c/code\u003e\u003c/a\u003e ssh: limit the size of the internal packet queue while waiting for KEX\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f66f74b0a406b5f6909183531ace593857f1646c\"\u003e\u003ccode\u003ef66f74b\u003c/code\u003e\u003c/a\u003e acme/autocert: check host policy before probing the cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b0784b7bfbe0b2c9a59afc1248ed3cb4b6652e85\"\u003e\u003ccode\u003eb0784b7\u003c/code\u003e\u003c/a\u003e x509roots/fallback: drop obsolete build constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/911360c8a4f464342b9fe7c23632be57fca87b20\"\u003e\u003ccode\u003e911360c\u003c/code\u003e\u003c/a\u003e all: bump golang.org/x/crypto dependencies of asm generators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/89ff08d67c4d79f9ac619aaf1f7388888798651f\"\u003e\u003ccode\u003e89ff08d\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e47973b1c1089f6c67ab89261f7aa067b3d611d2\"\u003e\u003ccode\u003ee47973b\u003c/code\u003e\u003c/a\u003e all: update certs for go1.24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9290511cd23ab9813a307b7f2615325e3ca98902\"\u003e\u003ccode\u003e9290511\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fa5273e461966728f91f33da62c0cf511a404c2a\"\u003e\u003ccode\u003efa5273e\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8ea4be81f0769fd5857e087083cbb6d3cb9f196\"\u003e\u003ccode\u003ea8ea4be\u003c/code\u003e\u003c/a\u003e ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/71d3a4cfdb0360795ce5f2d7041e01823fd22eb6\"\u003e\u003ccode\u003e71d3a4c\u003c/code\u003e\u003c/a\u003e acme: support challenges that require the ACME client to send a non-empty JSO...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.25.0...v0.35.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.27.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.27.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.25.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22\"\u003e\u003ccode\u003e7292932\u003c/code\u003e\u003c/a\u003e ssh: limit the size of the internal packet queue while waiting for KEX\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f66f74b0a406b5f6909183531ace593857f1646c\"\u003e\u003ccode\u003ef66f74b\u003c/code\u003e\u003c/a\u003e acme/autocert: check host policy before probing the cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b0784b7bfbe0b2c9a59afc1248ed3cb4b6652e85\"\u003e\u003ccode\u003eb0784b7\u003c/code\u003e\u003c/a\u003e x509roots/fallback: drop obsolete build constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/911360c8a4f464342b9fe7c23632be57fca87b20\"\u003e\u003ccode\u003e911360c\u003c/code\u003e\u003c/a\u003e all: bump golang.org/x/crypto dependencies of asm generators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/89ff08d67c4d79f9ac619aaf1f7388888798651f\"\u003e\u003ccode\u003e89ff08d\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e47973b1c1089f6c67ab89261f7aa067b3d611d2\"\u003e\u003ccode\u003ee47973b\u003c/code\u003e\u003c/a\u003e all: update certs for go1.24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9290511cd23ab9813a307b7f2615325e3ca98902\"\u003e\u003ccode\u003e9290511\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fa5273e461966728f91f33da62c0cf511a404c2a\"\u003e\u003ccode\u003efa5273e\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8ea4be81f0769fd5857e087083cbb6d3cb9f196\"\u003e\u003ccode\u003ea8ea4be\u003c/code\u003e\u003c/a\u003e ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/71d3a4cfdb0360795ce5f2d7041e01823fd22eb6\"\u003e\u003ccode\u003e71d3a4c\u003c/code\u003e\u003c/a\u003e acme: support challenges that require the ACME client to send a non-empty JSO...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.25.0...v0.35.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.27.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.27.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/crypto` from 0.25.0 to 0.35.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22\"\u003e\u003ccode\u003e7292932\u003c/code\u003e\u003c/a\u003e ssh: limit the size of the internal packet queue while waiting for KEX\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/f66f74b0a406b5f6909183531ace593857f1646c\"\u003e\u003ccode\u003ef66f74b\u003c/code\u003e\u003c/a\u003e acme/autocert: check host policy before probing the cache\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/b0784b7bfbe0b2c9a59afc1248ed3cb4b6652e85\"\u003e\u003ccode\u003eb0784b7\u003c/code\u003e\u003c/a\u003e x509roots/fallback: drop obsolete build constraint\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/911360c8a4f464342b9fe7c23632be57fca87b20\"\u003e\u003ccode\u003e911360c\u003c/code\u003e\u003c/a\u003e all: bump golang.org/x/crypto dependencies of asm generators\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/89ff08d67c4d79f9ac619aaf1f7388888798651f\"\u003e\u003ccode\u003e89ff08d\u003c/code\u003e\u003c/a\u003e all: upgrade go directive to at least 1.23.0 [generated]\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/e47973b1c1089f6c67ab89261f7aa067b3d611d2\"\u003e\u003ccode\u003ee47973b\u003c/code\u003e\u003c/a\u003e all: update certs for go1.24\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/9290511cd23ab9813a307b7f2615325e3ca98902\"\u003e\u003ccode\u003e9290511\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/fa5273e461966728f91f33da62c0cf511a404c2a\"\u003e\u003ccode\u003efa5273e\u003c/code\u003e\u003c/a\u003e x509roots/fallback: update bundle\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/a8ea4be81f0769fd5857e087083cbb6d3cb9f196\"\u003e\u003ccode\u003ea8ea4be\u003c/code\u003e\u003c/a\u003e ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/crypto/commit/71d3a4cfdb0360795ce5f2d7041e01823fd22eb6\"\u003e\u003ccode\u003e71d3a4c\u003c/code\u003e\u003c/a\u003e acme: support challenges that require the ACME client to send a non-empty JSO...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/crypto/compare/v0.25.0...v0.35.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `golang.org/x/net` from 0.27.0 to 0.38.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9\"\u003e\u003ccode\u003ee1fcd82\u003c/code\u003e\u003c/a\u003e html: properly handle trailing solidus in unquoted attribute value in foreign...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/ebed060e8f30f20235f74808c22125fd86b15edd\"\u003e\u003ccode\u003eebed060\u003c/code\u003e\u003c/a\u003e internal/http3: fix build of tests with GOEXPERIMENT=nosynctest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/1f1fa29e0a46fffe18c43a9da8daa5a0b180dfa9\"\u003e\u003ccode\u003e1f1fa29\u003c/code\u003e\u003c/a\u003e publicsuffix: regenerate table\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/12150816f701c912a32a376754ab28dd3878833a\"\u003e\u003ccode\u003e1215081\u003c/code\u003e\u003c/a\u003e http2: improve error when server sends HTTP/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/312450e473eae9f9e6173ad895c80bc5ea2f79ad\"\u003e\u003ccode\u003e312450e\u003c/code\u003e\u003c/a\u003e html: ensure \u0026lt;search\u0026gt; tag closes \u0026lt;p\u0026gt; and update tests\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/09731f9bf919b00b344c763894cd1920b3d96d90\"\u003e\u003ccode\u003e09731f9\u003c/code\u003e\u003c/a\u003e http2: improve handling of lost PING in Server\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/55989e24b972a90ab99308fdc7ea1fb58a96fef1\"\u003e\u003ccode\u003e55989e2\u003c/code\u003e\u003c/a\u003e http2/h2c: use ResponseController for hijacking connections\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/2914f46773171f4fa13e276df1135bafef677801\"\u003e\u003ccode\u003e2914f46\u003c/code\u003e\u003c/a\u003e websocket: re-recommend gorilla/websocket\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/99b3ae0643f9a2f9d820fcbba5f9e4c83b23bd48\"\u003e\u003ccode\u003e99b3ae0\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/golang/net/commit/85d1d54551b68719346cb9fec24b911da4e452a1\"\u003e\u003ccode\u003e85d1d54\u003c/code\u003e\u003c/a\u003e go.mod: update golang.org/x dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/golang/net/compare/v0.27.0...v0.38.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/offsoc/mattermost-plugin-playbooks/network/alerts).\n\n\u003c/details\u003e","html_url":"https://github.com/offsoc/mattermost-plugin-playbooks/pull/7","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/offsoc%2Fmattermost-plugin-playbooks/issues/7","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/7/packages"}},{"old_version":"0.9.5","new_version":"0.9.6","update_type":"patch","path":"the main group","pr_created_at":"2025-05-26T15:32:54.000Z","version_change":"0.9.5 → 0.9.6","issue":{"uuid":"2544387187","node_id":"PR_kwDONEBgR86XqERz","number":33,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.9.5 to 0.9.6 in the main group","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":["Serpentiel"],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-05-26T15:39:35.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-05-26T15:32:54.000Z","updated_at":"2025-05-26T15:39:35.000Z","time_to_close":401,"merged_at":"2025-05-26T15:39:35.000Z","merged_by":"Serpentiel","closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.5","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":"the main group","ecosystem":"go"},"body":"Bumps the main group with 1 update: [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset).\n\nUpdates `github.com/MicahParks/jwkset` from 0.9.5 to 0.9.6\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.5...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.5\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/AlphaSense-Engineering/privatecloud-cli/pull/33","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AlphaSense-Engineering%2Fprivatecloud-cli/issues/33","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/33/packages"}},{"old_version":"0.8.0","new_version":"0.9.6","update_type":"minor","path":null,"pr_created_at":"2025-05-20T19:48:48.000Z","version_change":"0.8.0 → 0.9.6","issue":{"uuid":"2532485194","node_id":"PR_kwDOOUMNVM6W8qhK","number":9,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.8.0 to 0.9.6","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2025-09-16T19:18:27.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-05-20T19:48:48.000Z","updated_at":"2025-09-16T19:18:27.000Z","time_to_close":10279779,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.8.0","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.8.0 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to add the \u003ccode\u003eStorage\u003c/code\u003e field back to the \u003ccode\u003eHTTPClientStorageOptions\u003c/code\u003e data structure. It was removed in \u003ccode\u003ev0.6.0\u003c/code\u003e because I thought it was unused.\u003c/p\u003e\n\u003cp\u003eBreaking changes:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplementations of the \u003ccode\u003eStorage\u003c/code\u003e interface now require a \u003ccode\u003eKeyReplaceAll\u003c/code\u003e method.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/48\"\u003eMicahParks/jwkset#48\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/49\"\u003eMicahParks/jwkset#49\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/12a0f9ad2963ce76285884d045c3b04be9a782f1\"\u003e\u003ccode\u003e12a0f9a\u003c/code\u003e\u003c/a\u003e Rename jwksettool to jwkset\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3fae7f8d2043e4b3935203f473a96ef4d3c4a185\"\u003e\u003ccode\u003e3fae7f8\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/257dc6e8e0533c127ac60a0077e30dd9f6f41b55\"\u003e\u003ccode\u003e257dc6e\u003c/code\u003e\u003c/a\u003e Rename tool\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/78c43ce97c48f36b04c06dcc0e288ef1058e1862\"\u003e\u003ccode\u003e78c43ce\u003c/code\u003e\u003c/a\u003e Retract current version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/c60bb8a32250636d9f50d247d0b166a41c4b609f\"\u003e\u003ccode\u003ec60bb8a\u003c/code\u003e\u003c/a\u003e Fix typo\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/02655983e0afd7959aeae9c2b126d19ecabc80ea\"\u003e\u003ccode\u003e0265598\u003c/code\u003e\u003c/a\u003e Proper retraction (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/51\"\u003e#51\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/fa0fbd5e0855620c6ca1a98cc54ebe2625039751\"\u003e\u003ccode\u003efa0fbd5\u003c/code\u003e\u003c/a\u003e Storage field on HTTPClientStorageOptions (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/49\"\u003e#49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/df24421c392b897ed5c2f2882786cd2d0c226a13\"\u003e\u003ccode\u003edf24421\u003c/code\u003e\u003c/a\u003e Remove JCP from README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3ccc86a581e8dd5d697dc2b307a41dadc6c61db8\"\u003e\u003ccode\u003e3ccc86a\u003c/code\u003e\u003c/a\u003e Update deps\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.8.0...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.8.0\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/ffrandy301gt/y/pull/9","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/ffrandy301gt%2Fy/issues/9","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/9/packages"}},{"old_version":"0.9.5","new_version":"0.9.6","update_type":"patch","path":null,"pr_created_at":"2025-05-20T17:23:04.000Z","version_change":"0.9.5 → 0.9.6","issue":{"uuid":"2532185307","node_id":"PR_kwDODb-aPc6W7hTb","number":4542,"state":"closed","title":"build(deps): bump github.com/MicahParks/jwkset from 0.9.5 to 0.9.6","user":"dependabot[bot]","labels":["dependencies","go"],"assignees":[],"locked":false,"comments_count":0,"pull_request":true,"closed_at":"2025-05-21T08:19:57.000Z","author_association":"CONTRIBUTOR","state_reason":null,"created_at":"2025-05-20T17:23:04.000Z","updated_at":"2025-05-21T08:19:58.000Z","time_to_close":53813,"merged_at":"2025-05-21T08:19:57.000Z","merged_by":"aler9","closed_by":null,"dependency_metadata":{"prefix":"build(deps)","packages":[{"name":"github.com/MicahParks/jwkset","old_version":"0.9.5","new_version":"0.9.6","repository_url":"https://github.com/MicahParks/jwkset"}],"path":null,"ecosystem":"go"},"body":"Bumps [github.com/MicahParks/jwkset](https://github.com/MicahParks/jwkset) from 0.9.5 to 0.9.6.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/MicahParks/jwkset/releases\"\u003egithub.com/MicahParks/jwkset's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.6\u003c/h2\u003e\n\u003cp\u003eThe purpose of this release is to have a more complete implementation of the strict padding toggle feature. There should no longer be an error when comparing Base64 URL encoded integers with their Base64 raw URL equivalents when strict padding is off.\u003c/p\u003e\n\u003cp\u003eReleavant issues:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/52\"\u003eMicahParks/jwkset#52\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eRelevant pull requests:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/pull/53\"\u003eMicahParks/jwkset#53\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/MicahParks/jwkset/commit/3835d6db7bad553e8bad7f505e5007b948bcbf07\"\u003e\u003ccode\u003e3835d6d\u003c/code\u003e\u003c/a\u003e Consider strict padding in cmpBase64Int (\u003ca href=\"https://redirect.github.com/MicahParks/jwkset/issues/53\"\u003e#53\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/MicahParks/jwkset/compare/v0.9.5...v0.9.6\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/MicahParks/jwkset\u0026package-manager=go_modules\u0026previous-version=0.9.5\u0026new-version=0.9.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/bluenviron/mediamtx/pull/4542","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/bluenviron%2Fmediamtx/issues/4542","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/4542/packages"}}]}