Skip to content

chore(deps): bump jsonwebtoken from 10.4.0 to 11.0.0 - #26

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/jsonwebtoken-11.0.0
Open

chore(deps): bump jsonwebtoken from 10.4.0 to 11.0.0#26
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/jsonwebtoken-11.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps jsonwebtoken from 10.4.0 to 11.0.0.

Changelog

Sourced from jsonwebtoken's changelog.

11.0.0 (2026-07-24)

  • Add conversions between Algorithm and KeyAlgorithm
  • JWKs can now be created from DecodingKeys, creation from EncodingKey and DecodingKey now supports Ed25519 as well
  • JWKs with unknown key types are now deserializable
  • BREAKING: Algorithm, KeyAlgorithm, EllipticCurve and ThumbprintHash are now non_exhaustive
  • BREAKING: Jwk.thumbprint now returns a Result<_>
  • BREAKING: Header.extras is now a struct that allows for deserialization to any T
  • BREAKING: Implicit features resulting from optional crates have been removed
  • BREAKING: Validation.insecure_disable_signature_validation has been removed, use dangerous::insecure_decode instead
  • BREAKING: EncodingKey.inner has been renamed to as_bytes, try_get_hmac_secret has been removed
  • BREAKING: DecodingKey.as_bytes and try_get_hmac_secret have been removed, use try_get_as_bytes instead

Changes for CryptoProviders

  • When constructing HMAC signers, the algorithm family must now be verified on construction
  • JwkUtils has been renamed to KeyUtils
    • compute_digest now returns a Result<_>
    • extract_rsa_public_key_components has been renamed to rsa_pub_components_from_private_key
    • rsa_pub_components_from_public_key has been added
    • extract_ec_public_key_coordinates has been renamed to ec_pub_components_from_private_key
    • ed_pub_components_from_private_key has been added
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 9, 2026
@github-actions

github-actions Bot commented Aug 9, 2026

Copy link
Copy Markdown

Team Review

⚠️ Team review unavailable: all specialist agents failed.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/jsonwebtoken-11.0.0 branch from ca456d7 to f5aa6be Compare August 13, 2026 08:19
@dependabot
chore(deps): bump jsonwebtoken from 10.4.0 to 11.0.0
12bc9e5 
Bumps [jsonwebtoken](https://github.com/Keats/jsonwebtoken) from 10.4.0 to 11.0.0.
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v10.4.0...v11.0.0)

---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/jsonwebtoken-11.0.0 branch from f5aa6be to 12bc9e5 Compare August 13, 2026 10:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants