Skip to content

Update module github.com/lestrrat-go/jwx/v3 to v3.3.0 - #6593

Merged
rdimitrov merged 1 commit into
mainfrom
renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-3.x
Sep 10, 2026
Merged

rdimitrov merged 1 commit into
mainfrom
renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-3.x

Conversation

@renovate

@renovate renovate Bot commented Sep 9, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/lestrrat-go/jwx/v3 v3.2.0 → v3.3.0 age confidence

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)

v3.3.0

Compare Source

Security fix for GHSA-4cf7-xm37-g63h.

Custom claim, header, and JWK field names are now JSON-escaped on output.
Previously a name was written between the quotes as is, so a name containing
" could close its own member and add members the application never set.
For example, calling Set with the name x":0,"admin produced a signed
token containing "admin":true. Every name now yields exactly one member,
and names that need no escaping serialize exactly as before.

See the Changes file for guidance on screening caller-supplied names.

Fixed in v4.5.0 and v3.3.0. v2, v1, and v0 are unmaintained and will not
receive a fix.

For more detailed release notes, see Changes.

What's Changed

Full Changelog: lestrrat-go/jwx@v3.2.0...v3.3.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from JAORMX as a code owner September 9, 2026 16:54
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Sep 9, 2026
@github-actions github-actions Bot added the size/XS Extra small PR: < 100 lines changed label Sep 9, 2026
@codecov

codecov Bot commented Sep 9, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.83%. Comparing base (1f87350) to head (728d2b1).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #6593      +/-   ##
==========================================
- Coverage   78.89%   78.83%   -0.06%     
==========================================
  Files         778      778              
  Lines       77598    77598              
==========================================
- Hits        61219    61176      -43     
- Misses      16374    16417      +43     
  Partials        5        5              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate
renovate Bot force-pushed the renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-3.x branch from e4899bd to b733984 Compare September 9, 2026 21:48
@github-actions github-actions Bot added size/XS Extra small PR: < 100 lines changed and removed size/XS Extra small PR: < 100 lines changed labels Sep 9, 2026
@renovate
renovate Bot force-pushed the renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-3.x branch from b733984 to 901b1b1 Compare September 9, 2026 22:19
@github-actions github-actions Bot added size/XS Extra small PR: < 100 lines changed and removed size/XS Extra small PR: < 100 lines changed labels Sep 9, 2026
@renovate
renovate Bot force-pushed the renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-3.x branch from 901b1b1 to 728d2b1 Compare September 10, 2026 08:14
@github-actions github-actions Bot added size/XS Extra small PR: < 100 lines changed and removed size/XS Extra small PR: < 100 lines changed labels Sep 10, 2026
@rdimitrov
rdimitrov merged commit ceaa034 into main Sep 10, 2026
43 checks passed
@rdimitrov
rdimitrov deleted the renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-3.x branch September 10, 2026 08:54
@github-actions github-actions Bot mentioned this pull request Sep 10, 2026
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file size/XS Extra small PR: < 100 lines changed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant