Skip to content

Update module github.com/lestrrat-go/jwx/v3 to v4 - #6626

Merged
ChrisJBurns merged 2 commits into
mainfrom
renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-4.x
Sep 16, 2026
Merged

Update module github.com/lestrrat-go/jwx/v3 to v4#6626
ChrisJBurns merged 2 commits into
mainfrom
renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-4.x

Conversation

@renovate

@renovate renovate Bot commented Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/lestrrat-go/jwx/v3 v3.3.0 → v4.5.0 age confidence

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v3)

v4.5.0

Compare Source

Security fix for GHSA-4cf7-xm37-g63h.

Custom claim, header, and JWK field names are now JSON-escaped on output.
Previously a name was written between the quotes as is, so a name containing
" could close its own member and add members the application never set.
For example, calling Set with the name x":0,"admin produced a signed
token containing "admin":true. Every name now yields exactly one member,
and names that need no escaping serialize exactly as before. A name that is
not valid UTF-8 now fails serialization instead of being written raw.

See the Changes file for guidance on screening caller-supplied names.

Fixed in v4.5.0 and v3.3.0. v2, v1, and v0 are unmaintained and will not
receive a fix.

For more detailed release notes, see Changes.

What's Changed

Full Changelog: lestrrat-go/jwx@v4.4.0...v4.5.0

v4.4.0

Compare Source

For more detailed release notes, see Changes.

What's Changed

Full Changelog: lestrrat-go/jwx@v4.3.0...v4.4.0

v4.3.0

Compare Source

For more detailed release notes, see Changes.

What's Changed

New Contributors

Full Changelog: lestrrat-go/jwx@v4.2.0...v4.3.0

v4.2.0

Compare Source

For more detailed release notes, see Changes.

What's Changed

Full Changelog: lestrrat-go/jwx@v4.1.0...v4.2.0

v4.1.0

Compare Source

For more detailed release notes, see Changes.

What's Changed

Full Changelog: lestrrat-go/jwx@v4.0.2...v4.1.0

v4.0.2

Compare Source

For more detailed release notes, see Changes.

What's Changed

Full Changelog: lestrrat-go/jwx@v4.0.1...v4.0.2

v4.0.1

Compare Source

What's Changed

Full Changelog: lestrrat-go/jwx@v4.0.0...v4.0.1

v4.0.0

Compare Source

Changes

v4 has many incompatibilities with v3. To see the full list of differences between
v3 and v4, please read the Changes-v4.md file. Coding Agents should read MIGRATION-v4.md

v4.0.0 - 19 Apr 2026

  • Initial v4 release. Major features:
    • Lighter: Core / Companion module separation. Less dependencies in core.
    • Faster: Use of generics and other optimizations make v4 2x~3x faster than before.
    • Quantum-Ready: ML-KEM and ML-DSA, HPKE (+Hybrid) are supported through companion modules.
  • See Changes-v4.md for a full set of Changes since v3.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Sep 10, 2026
@renovate
renovate Bot requested a review from JAORMX as a code owner September 10, 2026 08:15
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Sep 10, 2026
@github-actions github-actions Bot added the size/XS Extra small PR: < 100 lines changed label Sep 10, 2026
@codecov

codecov Bot commented Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.06%. Comparing base (c262106) to head (3ee3e82).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #6626      +/-   ##
==========================================
- Coverage   79.06%   79.06%   -0.01%     
==========================================
  Files         785      785              
  Lines       78272    78299      +27     
==========================================
+ Hits        61888    61907      +19     
- Misses      16379    16387       +8     
  Partials        5        5

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

rdimitrov
rdimitrov previously approved these changes Sep 10, 2026
View reviewed changes
@renovate
renovate Bot force-pushed the renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-4.x branch from 7ff9bb3 to 959d186 Compare September 10, 2026 08:55
@github-actions github-actions Bot added size/XS Extra small PR: < 100 lines changed and removed size/XS Extra small PR: < 100 lines changed labels Sep 10, 2026
@renovate
renovate Bot force-pushed the renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-4.x branch from 959d186 to efab9c9 Compare September 11, 2026 18:03
@github-actions github-actions Bot added size/XS Extra small PR: < 100 lines changed and removed size/XS Extra small PR: < 100 lines changed labels Sep 11, 2026
@renovate

renovate Bot commented Sep 14, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@rdimitrov
rdimitrov force-pushed the renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-4.x branch from 2e4a344 to 3ee3e82 Compare September 14, 2026 21:07
@github-actions github-actions Bot added size/S Small PR: 100-299 lines changed and removed size/XS Extra small PR: < 100 lines changed labels Sep 14, 2026
@ChrisJBurns
ChrisJBurns merged commit 17e6c73 into main Sep 16, 2026
78 of 79 checks passed
@ChrisJBurns
ChrisJBurns deleted the renovate/github.laiyagushi.com-lestrrat-go-jwx-v3-4.x branch September 16, 2026 14:09
@github-actions github-actions Bot mentioned this pull request Sep 18, 2026
Merged
2 tasks
@rdimitrov rdimitrov mentioned this pull request Sep 19, 2026
Merged
10 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ChrisJBurns ChrisJBurns ChrisJBurns approved these changes
@rdimitrov rdimitrov rdimitrov left review comments
@JAORMX JAORMX Awaiting requested review from JAORMX JAORMX is a code owner
@amirejaz amirejaz Awaiting requested review from amirejaz amirejaz is a code owner
@jhrozek jhrozek Awaiting requested review from jhrozek jhrozek is a code owner
@tgrunnagle tgrunnagle Awaiting requested review from tgrunnagle tgrunnagle is a code owner
@jerm-dro jerm-dro Awaiting requested review from jerm-dro jerm-dro is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file size/S Small PR: 100-299 lines changed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@rdimitrov @ChrisJBurns