Skip to content

build(deps): bump jsonwebtoken from 10.4.0 to 11.1.0 in /server - #208

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/server/jsonwebtoken-11.1.0
Open

build(deps): bump jsonwebtoken from 10.4.0 to 11.1.0 in /server#208
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/server/jsonwebtoken-11.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps jsonwebtoken from 10.4.0 to 11.1.0.

Changelog

Sourced from jsonwebtoken's changelog.

11.1.0 (2026-09-16)

  • Add dangerous::insecure_decode_claims

11.0.0 (2026-07-24)

  • Add conversions between Algorithm and KeyAlgorithm
  • JWKs can now be created from DecodingKeys, creation from EncodingKey and DecodingKey now supports Ed25519 as well
  • JWKs with unknown key types are now deserializable
  • BREAKING: Algorithm, KeyAlgorithm, EllipticCurve and ThumbprintHash are now non_exhaustive
  • BREAKING: Jwk.thumbprint now returns a Result<_>
  • BREAKING: Header.extras is now a struct that allows for deserialization to any T
  • BREAKING: Implicit features resulting from optional crates have been removed
  • BREAKING: Validation.insecure_disable_signature_validation has been removed, use dangerous::insecure_decode instead
  • BREAKING: EncodingKey.inner has been renamed to as_bytes, try_get_hmac_secret has been removed
  • BREAKING: DecodingKey.as_bytes and try_get_hmac_secret have been removed, use try_get_as_bytes instead

Changes for CryptoProviders

  • When constructing HMAC signers, the algorithm family must now be verified on construction
  • JwkUtils has been renamed to KeyUtils
    • compute_digest now returns a Result<_>
    • extract_rsa_public_key_components has been renamed to rsa_pub_components_from_private_key
    • rsa_pub_components_from_public_key has been added
    • extract_ec_public_key_coordinates has been renamed to ec_pub_components_from_private_key
    • ed_pub_components_from_private_key has been added
Commits

@dependabot dependabot Bot added dependencies Dependency updates rust Rust server/desktop changes labels Oct 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/server/jsonwebtoken-11.1.0 branch from 84ebbdd to 7dc6137 Compare October 21, 2026 17:26
@dependabot
build(deps): bump jsonwebtoken from 10.4.0 to 11.1.0 in /server
a8b2a3a 
Bumps [jsonwebtoken](https://github.com/Keats/jsonwebtoken) from 10.4.0 to 11.1.0.
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v10.4.0...v11.1.0)

---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-version: 11.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump jsonwebtoken from 10.4.0 to 11.1.0 in /server build(deps): bump jsonwebtoken from 10.4.0 to 11.1.0 in /server Oct 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/server/jsonwebtoken-11.1.0 branch from 7dc6137 to a8b2a3a Compare October 24, 2026 14:15

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency updates rust Rust server/desktop changes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants