Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 17, 2022

Bumps gopkg.in/square/go-jose.v2 from 2.3.1 to 2.6.0.

Release notes

Sourced from gopkg.in/square/go-jose.v2's releases.

Version 2.6.0

Last release from the v2 branch, includes various changes and bug fixes.

For future releases please see v3 at: http://github.com/go-jose/go-jose

Version 2.5.1

Bug Fixes

  • Fix parsing and validation of x5t and x5t#S256 headers for JWK (h/t @​mangas) (#305).

Version 2.5.0

New Features

  • Add support for x5u, x5t, and x5t#S256 headers for JWK (#242).
  • Add support for RFC 7638 canonical kid for JWK (#269).

Bug Fixes

  • Add error checking in jose-util to avoid nil referencing (#250).
  • Documentation improvements (#274, #280, #289).

Version 2.4.1

Bug Fixes

  • Fixes a bug introduced in v2.4.0 that could cause a panic on invalid inputs (#282).
  • Improves performance of parsing payloads with a lot of whitespace (#279).

Version 2.4.0

New Features

  • Add support for the b64 header parameter (#230).
  • Add functions to handle detached signatures (#234).
  • Expose an interface for opaque key encryption/decryption (#261, #257).

Bug Fixes

  • Fixes a issue with ECDSA on P-521, whereby the generated shared secret derived for encryption was computed incorrectly (#267, #245).
  • Fixes salt length for new RSA-PSS messages to be equal to the hash length, as required by RFC 3447 (#232).
  • Don't include the kid header in a JWT if the key id is an empty string (#227).
Commits
  • a10ff54 Fix EC thumbprint template
  • c9ac459 Merge pull request #338 from kelsin/v2
  • 7d610ab Merge pull request #341 from leobrines/v2
  • a5c7eec Merge pull request #352 from narg95/unmarshal_number_to_int64
  • cdfc35f provide int64 for whole numbers in scientific notation
  • 4312686 add support to unmarshal int64 into interface{}
  • df70637 Merge pull request #348 from adeinega/patch-1
  • 953691b Mnr typos in opaque.go
  • 5503409 Merge pull request #347 from adeinega/typos
  • 2726092 Update shared.go
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [gopkg.in/square/go-jose.v2](https://github.com/square/go-jose) from 2.3.1 to 2.6.0.
- [Release notes](https://github.com/square/go-jose/releases)
- [Commits](square/go-jose@v2.3.1...v2.6.0)

---
updated-dependencies:
- dependency-name: gopkg.in/square/go-jose.v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 17, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jan 17, 2022

The following labels could not be found: approved, lgtm, ok-to-test, go.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant