Skip to content

fix(deps): update rust crate jsonwebtoken to v11#626

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/jsonwebtoken-11.x
Jul 25, 2026
Merged

fix(deps): update rust crate jsonwebtoken to v11#626
renovate[bot] merged 1 commit into
mainfrom
renovate/jsonwebtoken-11.x

Conversation

@renovate

@renovate renovate Bot commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
jsonwebtoken dependencies major 10.3.011.0.0

Release Notes

Keats/jsonwebtoken (jsonwebtoken)

v11.0.0

Compare Source

  • Add conversions between Algorithm and KeyAlgorithm
  • JWKs can now be created from DecodingKeys, creation from EncodingKey and DecodingKey now supports Ed25519 as well
  • JWKs with unknown key types are now deserializable
  • BREAKING: Algorithm, KeyAlgorithm, EllipticCurve and ThumbprintHash are now non_exhaustive
  • BREAKING: Jwk.thumbprint now returns a Result<_>
  • BREAKING: Header.extras is now a struct that allows for deserialization to any T
  • BREAKING: Implicit features resulting from optional crates have been removed
  • BREAKING: Validation.insecure_disable_signature_validation has been removed, use dangerous::insecure_decode instead
  • BREAKING: EncodingKey.inner has been renamed to as_bytes, try_get_hmac_secret has been removed
  • BREAKING: DecodingKey.as_bytes and try_get_hmac_secret have been removed, use try_get_as_bytes instead
Changes for CryptoProviders
  • When constructing HMAC signers, the algorithm family must now be verified on construction
  • JwkUtils has been renamed to KeyUtils
    • compute_digest now returns a Result<_>
    • extract_rsa_public_key_components has been renamed to rsa_pub_components_from_private_key
    • rsa_pub_components_from_public_key has been added
    • extract_ec_public_key_coordinates has been renamed to ec_pub_components_from_private_key
    • ed_pub_components_from_private_key has been added

Configuration

📅 Schedule: (in timezone Europe/Zurich)

  • Branch creation
    • "after 9pm,before 6am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge (squash) July 25, 2026 00:34
@renovate
renovate Bot merged commit 4c50399 into main Jul 25, 2026
2 checks passed
@renovate
renovate Bot deleted the renovate/jsonwebtoken-11.x branch July 25, 2026 00:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

0 participants