From a9bfada163c7aabd4c2382014e9f373b0d992601 Mon Sep 17 00:00:00 2001
From: "oxide-renovate[bot]"
 <146848827+oxide-renovate[bot]@users.noreply.github.com>
Date: Wed, 16 Sep 2026 07:28:00 +0000
Subject: [PATCH] Update Rust crate jsonwebtoken to v11

---
 Cargo.lock | 4 ++--
 Cargo.toml | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 2197fcb..5cceefb 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1985,9 +1985,9 @@ dependencies = [
 
 [[package]]
 name = "jsonwebtoken"
-version = "10.4.0"
+version = "11.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eba32bfb4ffdeaca3e34431072faf01745c9b26d25504aa7a6cf5684334fc4fc"
+checksum = "881733cbc631fc9e472e24447ce32a64bedf2da498d6d8570b08edc87de71f65"
 dependencies = [
  "aws-lc-rs",
  "base64 0.22.1",
diff --git a/Cargo.toml b/Cargo.toml
index b2c1176..1f71a4f 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -36,7 +36,7 @@ http = "1"
 http-body-util = "0.1.5"
 hyper = "1.11.1"
 hyper-util = "0.1"
-jsonwebtoken = { version = "10.2", features = ["aws_lc_rs"] }
+jsonwebtoken = { version = "11.0", features = ["aws_lc_rs"] }
 metrics = "0.24.5"
 # Only the http-listener feature. The default set also pulls in push-gateway, which brings
 # hyper-rustls and a TLS provider along with it for a mode we do not use.