levior/cli
Watch
12
0
Fork
You've already forked cli
 0
Code Issues 1 Pull requests Projects Releases 30 Packages Wiki Activity Actions

Update dependency jose to v6 #23

Merged
simlau merged 1 commit from renovate/jose-6.x into main 2026-10-28 21:13:56 +00:00
Conversation 0 Commits 1 Files changed 2 +3 -3
renovate-bot commented 2026-10-26 18:15:30 +00:00
Member
Copy link

This PR contains the following updates:

Package Change Age Confidence
jose ^5.9.0 → ^6.0.0 age confidence

Release Notes

panva/jose (jose)

v6.2.13

Compare Source

Refactor
  • align terminology with JOSE specifications (bafcb74)
  • preserve underlying error causes (724ba24), closes #​908

v6.2.12

Compare Source

Documentation
  • clarify and shorten public API guidance (be62530)
Refactor
  • simplify JWS and JWE operation cores (92e9640)
Performance
  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Compare Source

Documentation
  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)
Refactor
  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)

v6.2.10

Compare Source

Fixes
  • jose: consume serialization members once (9bee285)
  • jose: reject empty protected and JWE AAD members (8da4145)
  • jose: validate serialized header values (b711d8f)
  • jwe: conceal invalid decrypted CEK lengths (41fafe0)
  • jwe: enforce AES-GCM tag boundaries (9a5b744)
  • jwe: validate explicit encryption parameters (7a02697)
  • jwk: accept empty octet-sequence keys (3f871e7)
  • jwk: normalize key resolution inputs (f54ee7b)
  • jwks: enforce verification key metadata (f9ba510)
  • jwks: order overlapping remote reloads (9a1a913)
  • jwks: reject invalid remote duration values (7bdb9e5)
  • jwk: validate ext and key_ops parameters (4d91c37)
  • jws: reject mixed payload encoding modes (dc69713)
  • jws: validate unencoded payload strings (541f282)
  • jwt: enforce explicit verification policies (b347182)
  • jwt: prevent replacing protected headers (ae07d09)
  • jwt: reject invalid duration inputs (282f9aa)
  • jwt: validate builder claim values (ea03f83)
  • jwt: validate unsecured protected headers (230c14e)
  • key: validate generation and import options (15d880e)
  • reject mixed b64 modes for empty General JWS payloads (61a2ef7)
  • x509: reject DER truncated past its outer length (d8db9f6)
Documentation
  • jwks: correct cache timestamp units (01a44d9)
Refactor
  • jose: share binary input validation (eedb124)
  • jose: share compact token processing internals (85e30ed)
  • jwe: consolidate CBC decryption failures (1ee6f61)
  • jwe: specialize compact processing (a998927)
  • jwe: streamline single-recipient encryption (290aaa6)
  • jwks: compact JWK Set shape validation (930c7df), references Array#every
  • jwks: compact local key selection (4cb5ae5)
  • jwks: compact remote resolver state (ef5eaf4)
  • jws: specialize compact processing (021abf4)
  • jwt: compact claim validation helpers (f390683)
  • jwt: consolidate replicated claim checks (7dd5591)
  • jwt: share producer claim state (52ba159)
  • key: compact JWK algorithm selection (a6b29da)
  • key: compact secret length parsing (cc03be8)

v6.2.9

Compare Source

Fixes
  • reject a JWE whose generated Key Management Parameters collide (6ed19a6)
  • types: undeprecate PBES2 p2c parameter (33bf832)

v6.2.8

Compare Source

Fixes
  • enforce a single recipient when decrypting dir and ECDH-ES (505c383)
  • reject a non-string "alg" in EmbeddedJWK (714f870)
Refactor
  • index the JWS and JWE registries without a wrapper (925f3bb)
  • name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Compare Source

Fixes
  • require own JOSE properties for presence checks (90ab09c)
Refactor

v6.2.6

Compare Source

Fixes
  • types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Compare Source

Fixes
  • compare claim values for falsy validation options (eb86956)
  • forward key management parameters for a single JWE recipient (2d4f801)
  • handle a zero-length JWE additional authenticated data (16ca398)
  • reject a generateKeyPair crv option the algorithm does not imply (76364e9)
  • reject an unencoded payload in the JWS Compact Serialization (01d053f)
  • reject characters outside the Base64URL alphabet (0ebb971), references #​879
  • reject duplicate "crit" values when producing (31d60e1)
  • reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
  • reject truncated ASN.1 key data (7a16c66)
  • surface non-ASCII token segments as JOSE errors (194fe11)
  • types: correct JWK and CryptoKey types (62a196d)
  • types: correct key resolver and JWT header types (e95f8c4)
  • validate the clockTolerance and currentDate options are finite (ab2f18d)
Documentation
  • correct subpaths and API documentation (2daec38)
  • document consumer-supplied type parameters (9e9f66c)
  • stop claiming the JWK "use" parameter is used during import (47a07b2)
  • update CHANGELOG.md (fc51bf5)
Refactor
  • assert key shape and type from the entry (971057e)
  • avoid 32-bit truncation of the AES-CBC-HMAC AAD bit length (1c8c6e9)
  • correct swapped JWE unprotected header type error messages (894c498)
  • describe each JWS algorithm once (7375028)
  • discriminate a key once (0b59a69)
  • fold single-consumer modules into their consumers (c2f0ca3)
  • generate and import keys from the entry (da69b68)
  • keep JWE out of the JWKS and embedded-JWK paths (241dd48)
  • keep JWS and JWE out of each other's bundles (2a98564)
  • parse a Protected Header in one place (30f72af)
  • resolve the content encryption algorithm once (98b50ab)
  • tighten key property checks (fe0dc3b)
  • types: add discriminated JOSE error types (f7f764e)
  • types: add JOSE identifier unions and JWK narrowing (2a20f49)
  • types: improve key and result inference (cb25e77)
  • types: trim published declaration comments (544f179)
  • unify base64 decode errors (3a91833)
  • validate each token once rather than once per layer (bbdae09)
  • write each algorithm identifier once (73d83b5)

v6.2.4

Compare Source

Documentation
  • update README.md and SECURITY.md to reflect passed EOL dates (2a84032)
Refactor
  • normalize JWK export members from runtime quirks (386a3eb)

v6.2.3

Compare Source

Refactor
  • cleanly reject invalid PBES2 p2c (0cdb851)

v6.2.2

Compare Source

Fixes
  • reject failed decompression with JWEInvalid error (043b181)

v6.2.1

Compare Source

Refactor
  • align terminology with JOSE specifications (bafcb74)
  • preserve underlying error causes (724ba24), closes #​908

v6.2.0

Compare Source

Features
  • re-introduce JWE "zip" (Compression Algorithm) Header Parameter support (b13b446)
Documentation
  • clarify return of general jws and jwe (56682b4)

v6.1.3

Compare Source

Refactor
  • avoid export * as for google closure's compiler sake (6303d98), closes #​832

v6.1.2

Compare Source

Refactor

v6.1.1

Compare Source

Documentation
  • add link to RFC9864 (767edde)
  • link to ML-DSA for JOSE (ed4252c)
  • remove mention of Edge Runtime from the readme (94fdde7)
  • update README.md (25098ef)
Refactor
  • eliminate named exports in the source code (f6ae30d)
  • expose setKeyManagementParameters also on a GeneralEncrypt Recipient (16e6b23)
  • faster path for symmetric key checks (a44c2ec)
  • improve en/decoding overheads (daee426)

v6.1.0

Compare Source

Features
  • support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)
  • support for the ML-DSA PQC Algorithm Identifiers (25ddce4)

v6.0.13

Compare Source

Refactor
  • more readability in ecdhes.ts (84da9de)
  • update asn1.ts helpers (b4f8fb3)

v6.0.12

Compare Source

Documentation
  • add known caveats to customFetch (02e1f1e)
  • mention the apu/apv parameter names in setKeyManagementParameters (6274d5a)
  • update compact setKeyManagementParameters (2f44381)
  • use GitHub Flavored Markdown for notes and warnings (f6b4ffc)
Refactor
  • createPublicKey is not a constructor (61ded78)
  • update asn1.ts helper functions (b2b611c)

v6.0.11

Compare Source

Fixes
  • typ checking edge-cases when it contains a slash (/) character (31e4baf)

v6.0.10

Compare Source

Refactor
  • removed unused claims methods (74719cf)
  • reorganize jwt claim set utils (1f12d88)

v6.0.9

Compare Source

Documentation
  • add more symbol document, ignore ts-private fields (8b73687)
  • bump typedoc (6163a8b)
  • drop cdnjs links in README (a910038)
  • drop denoland/x links in README and add jsr (3662b9e)
  • fix key export links from docs/README.md (c8edfc2)
Refactor
  • always assume structuredClone is present (f7898a9)
  • hide internal private fields and drop ProduceJWT inheritance (ab18881)
  • less objects when JWE JWT Replicated Header Parameters are used (c763a0e)

v6.0.8

Compare Source

Fixes
  • export [customFetch] symbol from the default entrypoint (1615614), closes #​762

v6.0.7

Compare Source

Documentation
  • improve generate key/secret and import function descriptions (cd06359)
Fixes
  • use [customFetch] when provided to createRemoteJWKSet (35f6509), closes #​760

v6.0.6

Compare Source

Refactor
Documentation
  • add various exported symbol descriptions (3b8ff71)
  • add various exported symbol descriptions (fc4e7da)
  • add various exported symbol descriptions (74f02c8)
  • update base64url function descriptions (03d72c8)

v6.0.5

Compare Source

Refactor
Documentation
  • add various exported symbol descriptions (f52c2ff)

v6.0.4

Compare Source

Refactor
  • optimize base64 with tc39/proposal-arraybuffer-base64 (8a0da69), closes #​752
  • update getSPKI to use crypto.createPublicKey when available (92392a0), closes #​752
  • use Double HMAC pattern for AES-CBC tag comparison (f3ba4c7), closes #​752

v6.0.3

Compare Source

Documentation
  • remove root module tag so that README.md shows up on jsr.io (ee70698)

v6.0.2

Compare Source

Documentation
  • add module tags to all entrypoints (a5687aa)

v6.0.1

Compare Source

Refactor
  • more readability in ecdhes.ts (84da9de)
  • update asn1.ts helpers (b4f8fb3)

v6.0.0

Compare Source

⚠ BREAKING CHANGES
  • The PEMImportOptions type interface is renamed to KeyImportOptions.
  • all builds and bundles now use ES2022 as target
  • createRemoteJWKSet now uses fetch, because of that its Node.js only options.agent property has been removed and new fetch-related options were added
  • drop support for Ed448 and X448
  • drop support for JWK key_ops and CryptoKey usages "(un)wrapKey" and "deriveKey"
  • resolved keys returned as part of verify/decrypt operations (when get key functions are used) are always normalized to either Uint8Array / CryptoKey depending on what's more efficient for the executed operation
  • Key "Type" Generics are removed
  • CJS-style require is now only possible when require(esm) support is present in the Node.js runtime
  • private KeyObject instances can no longer be used for verify operations
  • private KeyObject instances can no longer be used for encryption operations
  • generateSecret, generateKeyPair, importPKCS8, importSPKI, importJWK, and importX509 now yield a CryptoKey instead of a KeyObject in Node.js
  • drop support for Node.js 18.x and earlier
  • runtime-specific npm releases (jose-browser-runtime, jose-node-cjs-runtime, and jose-node-esm-runtime) are no longer maintained or supported
  • removed secp256k1 JWS support
  • removed deprecated experimental APIs
  • removed RSA1_5 JWE support
Features
  • enable CryptoKey and KeyObject inputs in JWK thumbprint functions (6fc9c44)
  • JSON Web Key is now an allowed input everywhere (ebda967)
Refactor
  • always use infered CryptoKey (c4abaa2)
  • backport the Ed25519 JWS Algorithm Identifier support (7a94cb9)
  • drop support for Ed448 and X448 (2fae1c4)
  • drop support for JWK key_ops and CryptoKey usages "(un)wrapKey" and "deriveKey" (ef918be)
  • ensure export functions continue to work with KeyObject inputs (28e9e68)
  • hardcode the cryptoRuntime export since it is now always WebCryptoAPI (e00f273)
  • JWK import extractable default for public keys is now true (64dcebe)
  • PEM import extractable default for public keys is now true (4e9f114)
  • removed deprecated APIs (5352083)
  • removed secp256k1 JWS support (e2b58a5)
  • restructure src/lib and src/runtime now that runtime is fixed (9b236ce)
  • target is now ES2022 everywhere (aa590d5)
  • update importJWK args to align with other import functions (355a2dd)
  • WebCryptoAPI is now the only crypto used (161de46)

Configuration

📅 Schedule: (in timezone Europe/Copenhagen)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [jose](https://github.com/panva/jose) | [`^5.9.0` → `^6.0.0`](https://renovatebot.com/diffs/npm/jose/5.10.0/6.2.13) | ![age](https://developer.mend.io/api/mc/badges/age/npm/jose/6.2.13?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/jose/5.10.0/6.2.13?slim=true) | --- ### Release Notes <details> <summary>panva/jose (jose)</summary> ### [`v6.2.13`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#6213-2026-10-20) [Compare Source](https://github.com/panva/jose/compare/v6.2.12...v6.2.13) ##### Refactor - align terminology with JOSE specifications ([bafcb74](https://github.com/panva/jose/commit/bafcb74f5fc070f4f5fd48b12c8bb90af832385e)) - preserve underlying error causes ([724ba24](https://github.com/panva/jose/commit/724ba24b5aaa205000ff33f0a5a393879fd77758)), closes [#&#8203;908](https://github.com/panva/jose/issues/908) ### [`v6.2.12`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#6212-2026-09-05) [Compare Source](https://github.com/panva/jose/compare/v6.2.11...v6.2.12) ##### Documentation - clarify and shorten public API guidance ([be62530](https://github.com/panva/jose/commit/be62530328431519950a2b6a09ccd1c7de8a38f9)) ##### Refactor - simplify JWS and JWE operation cores ([92e9640](https://github.com/panva/jose/commit/92e9640290085dd37c152aeb7c4d5b22e9df96ab)) ##### Performance - avoid copying AES-GCM output ([6925d43](https://github.com/panva/jose/commit/6925d43e05c7d05b0c801fda9eb1835bb8d334ef)) - deduplicate pending jwks key imports ([bf5138b](https://github.com/panva/jose/commit/bf5138b12bf9f8b7dc18f4b26ad1b7395e7e5dd6)) - encode single-signature JWS input once ([7bc9a33](https://github.com/panva/jose/commit/7bc9a3380a7436197bb5d6b377ca232094541c5c)) - normalize General JWE shared headers once ([78637bd](https://github.com/panva/jose/commit/78637bd28031869df8a01cbcd82273c115860e35)) - normalize jwks selection metadata once ([fd3ae3f](https://github.com/panva/jose/commit/fd3ae3f06efd4760df2631f1b0a08eb4fc448efd)) - use native encoding for larger ASCII strings ([b23a6f3](https://github.com/panva/jose/commit/b23a6f378b26e960900761c244a5f383af22dddc)) ### [`v6.2.11`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#6211-2026-09-04) [Compare Source](https://github.com/panva/jose/compare/v6.2.10...v6.2.11) ##### Documentation - render subpath indexes as tables ([94589ee](https://github.com/panva/jose/commit/94589ee9efe6cf257a133765d753bbe8d55f6ed3)) - shorten API index descriptions ([681482f](https://github.com/panva/jose/commit/681482fcca7577c6a4b8df61c992f195f6e6ac1b)) ##### Refactor - model JWE key management modes ([e01dda6](https://github.com/panva/jose/commit/e01dda65d5d272c8dd44710d0c70673c1530038e)) - **types:** reduce declaration repetition ([55b970f](https://github.com/panva/jose/commit/55b970fc08c9082041f40473470ee0fe0e8b0087)) ### [`v6.2.10`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#6210-2026-08-21) [Compare Source](https://github.com/panva/jose/compare/v6.2.9...v6.2.10) ##### Fixes - **jose:** consume serialization members once ([9bee285](https://github.com/panva/jose/commit/9bee285a6bc356b495c29ae0a5e70b24e723568e)) - **jose:** reject empty protected and JWE AAD members ([8da4145](https://github.com/panva/jose/commit/8da41453dce79967c6e3f47a787039a7f94de8fe)) - **jose:** validate serialized header values ([b711d8f](https://github.com/panva/jose/commit/b711d8fe223e3e85520d6c822d7a417cd872b718)) - **jwe:** conceal invalid decrypted CEK lengths ([41fafe0](https://github.com/panva/jose/commit/41fafe035a62d85f4b313e166100004dd09b111f)) - **jwe:** enforce AES-GCM tag boundaries ([9a5b744](https://github.com/panva/jose/commit/9a5b74454bf145a106312d519efe95b8a9b53a87)) - **jwe:** validate explicit encryption parameters ([7a02697](https://github.com/panva/jose/commit/7a02697126e40757ed9e02ae786ec9a2b180aa5c)) - **jwk:** accept empty octet-sequence keys ([3f871e7](https://github.com/panva/jose/commit/3f871e7859c1ce51d1afcbfeff92c354b8e96dd9)) - **jwk:** normalize key resolution inputs ([f54ee7b](https://github.com/panva/jose/commit/f54ee7bad8e21c975606bc5e47b352921ac0d890)) - **jwks:** enforce verification key metadata ([f9ba510](https://github.com/panva/jose/commit/f9ba5101383154147780da7acf1aabc705f75aaf)) - **jwks:** order overlapping remote reloads ([9a1a913](https://github.com/panva/jose/commit/9a1a913983aa44d065a423692a92148b2a6a36c3)) - **jwks:** reject invalid remote duration values ([7bdb9e5](https://github.com/panva/jose/commit/7bdb9e56e6a74b833af582532c6fff5bc727ec1c)) - **jwk:** validate ext and key_ops parameters ([4d91c37](https://github.com/panva/jose/commit/4d91c37fdd36241785cb172774fa017bb8854458)) - **jws:** reject mixed payload encoding modes ([dc69713](https://github.com/panva/jose/commit/dc69713081a55a3d6955dd1d8c2cf184905febad)) - **jws:** validate unencoded payload strings ([541f282](https://github.com/panva/jose/commit/541f28234442c5cbfc5f843a95ccd18a721f3697)) - **jwt:** enforce explicit verification policies ([b347182](https://github.com/panva/jose/commit/b3471826b02589656eaf71843671922644cc60e2)) - **jwt:** prevent replacing protected headers ([ae07d09](https://github.com/panva/jose/commit/ae07d09bcbac91825e27cde9989b603af3495263)) - **jwt:** reject invalid duration inputs ([282f9aa](https://github.com/panva/jose/commit/282f9aaa496e57f55417bca15e13c369b3f242fb)) - **jwt:** validate builder claim values ([ea03f83](https://github.com/panva/jose/commit/ea03f83d607fcaee6fc0778c8a4d40a2bbd75c9e)) - **jwt:** validate unsecured protected headers ([230c14e](https://github.com/panva/jose/commit/230c14e7a148f168912a4b9c21daff935f07722c)) - **key:** validate generation and import options ([15d880e](https://github.com/panva/jose/commit/15d880e112777991cc9d38e0af255cc762c79884)) - reject mixed b64 modes for empty General JWS payloads ([61a2ef7](https://github.com/panva/jose/commit/61a2ef7bc405580073152b52e39287149b247dfe)) - **x509:** reject DER truncated past its outer length ([d8db9f6](https://github.com/panva/jose/commit/d8db9f6dd751ecb852cd492f62d19d299b4fa1fe)) ##### Documentation - **jwks:** correct cache timestamp units ([01a44d9](https://github.com/panva/jose/commit/01a44d918abd25a93259ada4f89e83bb2ff130c6)) ##### Refactor - **jose:** share binary input validation ([eedb124](https://github.com/panva/jose/commit/eedb124fe2a719305f579a3e444f6ce74abbc681)) - **jose:** share compact token processing internals ([85e30ed](https://github.com/panva/jose/commit/85e30ed91ead6c10f19a500f14a49dc97875f2e2)) - **jwe:** consolidate CBC decryption failures ([1ee6f61](https://github.com/panva/jose/commit/1ee6f61cda63174c55c915687e34893b7c40de33)) - **jwe:** specialize compact processing ([a998927](https://github.com/panva/jose/commit/a998927cbd2faa8e1cdad36f97a86ebff13d0a5b)) - **jwe:** streamline single-recipient encryption ([290aaa6](https://github.com/panva/jose/commit/290aaa60f14a8362024f1e23fb2659cebb3471be)) - **jwks:** compact JWK Set shape validation ([930c7df](https://github.com/panva/jose/commit/930c7dfc7979feb83ed2d1420dd627c42c5f44c4)), references [Array#every](https://github.com/panva/jose/issues/every) - **jwks:** compact local key selection ([4cb5ae5](https://github.com/panva/jose/commit/4cb5ae59ac4fae2cb4cfadcdba868be8203a58d4)) - **jwks:** compact remote resolver state ([ef5eaf4](https://github.com/panva/jose/commit/ef5eaf405f7d07b61c1d52104af24bdc22ac1a52)) - **jws:** specialize compact processing ([021abf4](https://github.com/panva/jose/commit/021abf48774ef3921738cc7ea9f9705d488cae90)) - **jwt:** compact claim validation helpers ([f390683](https://github.com/panva/jose/commit/f39068383f8bd0db43c476b7447440c4a8406a5d)) - **jwt:** consolidate replicated claim checks ([7dd5591](https://github.com/panva/jose/commit/7dd559118bc76303f888cd61a0356556580c9273)) - **jwt:** share producer claim state ([52ba159](https://github.com/panva/jose/commit/52ba1592cb7fe9e1995bd4c8230e3a5da56230c7)) - **key:** compact JWK algorithm selection ([a6b29da](https://github.com/panva/jose/commit/a6b29da1b8d4ed0f1f19f39d2684be44ce05aad0)) - **key:** compact secret length parsing ([cc03be8](https://github.com/panva/jose/commit/cc03be885053160abc64fd90224fc8d0fa9edd0b)) ### [`v6.2.9`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#629-2026-08-15) [Compare Source](https://github.com/panva/jose/compare/v6.2.8...v6.2.9) ##### Fixes - reject a JWE whose generated Key Management Parameters collide ([6ed19a6](https://github.com/panva/jose/commit/6ed19a6a9798a7d55a647958b4ee816c4b77627d)) - **types:** undeprecate PBES2 p2c parameter ([33bf832](https://github.com/panva/jose/commit/33bf832986d21cce0336b27441e3588499a70d67)) ### [`v6.2.8`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#628-2026-08-03) [Compare Source](https://github.com/panva/jose/compare/v6.2.7...v6.2.8) ##### Fixes - enforce a single recipient when decrypting dir and ECDH-ES ([505c383](https://github.com/panva/jose/commit/505c3833ecae19807e32ad7be50ff4677d31bcad)) - reject a non-string "alg" in EmbeddedJWK ([714f870](https://github.com/panva/jose/commit/714f8704347ccee8b3d0007e028b6e3f546b443c)) ##### Refactor - index the JWS and JWE registries without a wrapper ([925f3bb](https://github.com/panva/jose/commit/925f3bbbee4b8d5e335774ffbf6ec086e71c3a05)) - name the "alg" source in unsupported algorithm failures ([1500459](https://github.com/panva/jose/commit/1500459c6ffce48fb486c15cb213d24064a26673)) ### [`v6.2.7`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#627-2026-08-01) [Compare Source](https://github.com/panva/jose/compare/v6.2.6...v6.2.7) ##### Fixes - require own JOSE properties for presence checks ([90ab09c](https://github.com/panva/jose/commit/90ab09c461c9bc82fd24af269616be0907a28bc5)) ##### Refactor - reduce bundle size ([767d7f1](https://github.com/panva/jose/commit/767d7f12d025ce54e74f3d38fde3571cc23de5f6)) ### [`v6.2.6`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#626-2026-07-31) [Compare Source](https://github.com/panva/jose/compare/v6.2.5...v6.2.6) ##### Fixes - **types:** accept host CryptoKey declarations ([b48a15b](https://github.com/panva/jose/commit/b48a15b39696f49c61136b1d4c40d33585f5df97)) ### [`v6.2.5`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#625-2026-07-29) [Compare Source](https://github.com/panva/jose/compare/v6.2.4...v6.2.5) ##### Fixes - compare claim values for falsy validation options ([eb86956](https://github.com/panva/jose/commit/eb8695699c75f36c736fb8159a7c7b525be5f6ff)) - forward key management parameters for a single JWE recipient ([2d4f801](https://github.com/panva/jose/commit/2d4f8014e027a1e1ace82bdc864fd0f9b5c66248)) - handle a zero-length JWE additional authenticated data ([16ca398](https://github.com/panva/jose/commit/16ca398103c4ab1527c6c6c51621fd963545bd7e)) - reject a generateKeyPair crv option the algorithm does not imply ([76364e9](https://github.com/panva/jose/commit/76364e9f15f2a7d1c2ff0c260e1e2960cf51e620)) - reject an unencoded payload in the JWS Compact Serialization ([01d053f](https://github.com/panva/jose/commit/01d053f3b02f3627396d4f70686a58f35cf09862)) - reject characters outside the Base64URL alphabet ([0ebb971](https://github.com/panva/jose/commit/0ebb97158a6eed960ec4d5450abd28336b3c20a4)), references [#&#8203;879](https://github.com/panva/jose/issues/879) - reject duplicate "crit" values when producing ([31d60e1](https://github.com/panva/jose/commit/31d60e1542141ddecf5b0b87bc894c4bc7e58b1d)) - reject invalid UTF-8 in JOSE Headers and JWT Claims Sets ([5df3fed](https://github.com/panva/jose/commit/5df3fedcc06d4c52815ec9d0cccc51b508a8291c)) - reject truncated ASN.1 key data ([7a16c66](https://github.com/panva/jose/commit/7a16c66b9f1a48bcc2aae572da38ed06396a5181)) - surface non-ASCII token segments as JOSE errors ([194fe11](https://github.com/panva/jose/commit/194fe11450d6501d0c2141a50e60886157d3f393)) - **types:** correct JWK and CryptoKey types ([62a196d](https://github.com/panva/jose/commit/62a196dc8e6582dc6edd20eab31c6c44b745f996)) - **types:** correct key resolver and JWT header types ([e95f8c4](https://github.com/panva/jose/commit/e95f8c4086cbb81321497cc7d4b78fa5e88312b6)) - validate the clockTolerance and currentDate options are finite ([ab2f18d](https://github.com/panva/jose/commit/ab2f18dad46a98ecae3f3ac5b2aae9c839fb9388)) ##### Documentation - correct subpaths and API documentation ([2daec38](https://github.com/panva/jose/commit/2daec382964be1976d5985e0413a56633becdd74)) - document consumer-supplied type parameters ([9e9f66c](https://github.com/panva/jose/commit/9e9f66c86bdf0f4b4ccd1e4b7b84cc85ac9c7883)) - stop claiming the JWK "use" parameter is used during import ([47a07b2](https://github.com/panva/jose/commit/47a07b2f95c1b2ecf0308c04f35d4b482689568e)) - update CHANGELOG.md ([fc51bf5](https://github.com/panva/jose/commit/fc51bf56f9f752aaed7d31c60a45e89f24e30d00)) ##### Refactor - assert key shape and type from the entry ([971057e](https://github.com/panva/jose/commit/971057e088e130343beecfdbade4a602c79e6f09)) - avoid 32-bit truncation of the AES-CBC-HMAC AAD bit length ([1c8c6e9](https://github.com/panva/jose/commit/1c8c6e9b42bf70c68c356e69148678bb6ca90b7b)) - correct swapped JWE unprotected header type error messages ([894c498](https://github.com/panva/jose/commit/894c4983f8da6b19bd74129c5f94406dc39bdd90)) - describe each JWS algorithm once ([7375028](https://github.com/panva/jose/commit/737502819bc4b390b48581bb44adabc98ef738df)) - discriminate a key once ([0b59a69](https://github.com/panva/jose/commit/0b59a69f078fca85b5e0d04ac0daa6fd4355f004)) - fold single-consumer modules into their consumers ([c2f0ca3](https://github.com/panva/jose/commit/c2f0ca308e965ae2c13207ffa0651aa7638b8eb8)) - generate and import keys from the entry ([da69b68](https://github.com/panva/jose/commit/da69b681c5aae66d5b3977467d54f43e3bbca3b3)) - keep JWE out of the JWKS and embedded-JWK paths ([241dd48](https://github.com/panva/jose/commit/241dd4880128d85a4c7dd92c1f18b1837be251e4)) - keep JWS and JWE out of each other's bundles ([2a98564](https://github.com/panva/jose/commit/2a98564a5a85c8bff895a3c7dfd367ac83145e74)) - parse a Protected Header in one place ([30f72af](https://github.com/panva/jose/commit/30f72affd239a79b35056e7e90f750b059fb9071)) - resolve the content encryption algorithm once ([98b50ab](https://github.com/panva/jose/commit/98b50ab5c3658f864c3fa04738f9dee4d2550df1)) - tighten key property checks ([fe0dc3b](https://github.com/panva/jose/commit/fe0dc3ba0db73866f9f67485185ef6540445072d)) - **types:** add discriminated JOSE error types ([f7f764e](https://github.com/panva/jose/commit/f7f764e34922d871a25ac3d280905cadaa33a89c)) - **types:** add JOSE identifier unions and JWK narrowing ([2a20f49](https://github.com/panva/jose/commit/2a20f491c20fc18a5c6357b5445076e374cf2523)) - **types:** improve key and result inference ([cb25e77](https://github.com/panva/jose/commit/cb25e77e67ac4b2410b19ed527803c36b89f4fa5)) - **types:** trim published declaration comments ([544f179](https://github.com/panva/jose/commit/544f179668ae632c47b2c33c0908dc1c8381fce6)) - unify base64 decode errors ([3a91833](https://github.com/panva/jose/commit/3a918336051e7b60122327af62baf16b19f4e1d7)) - validate each token once rather than once per layer ([bbdae09](https://github.com/panva/jose/commit/bbdae094ca0acaabf33688f56971991d07523714)) - write each algorithm identifier once ([73d83b5](https://github.com/panva/jose/commit/73d83b5854a797eb6cac8e3d4c8481a9d0207830)) ### [`v6.2.4`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#624-2026-07-21) [Compare Source](https://github.com/panva/jose/compare/v6.2.3...v6.2.4) ##### Documentation - update README.md and SECURITY.md to reflect passed EOL dates ([2a84032](https://github.com/panva/jose/commit/2a840328fa119b46183b95199b0a6082a445d983)) ##### Refactor - normalize JWK export members from runtime quirks ([386a3eb](https://github.com/panva/jose/commit/386a3eb03ceadbd2c0e9626bdcb4ec66eccd7558)) ### [`v6.2.3`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#623-2026-04-27) [Compare Source](https://github.com/panva/jose/compare/v6.2.2...v6.2.3) ##### Refactor - cleanly reject invalid PBES2 p2c ([0cdb851](https://github.com/panva/jose/commit/0cdb851ca597635cac3da7a855342549fbe67a8d)) ### [`v6.2.2`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#622-2026-03-18) [Compare Source](https://github.com/panva/jose/compare/v6.2.1...v6.2.2) ##### Fixes - reject failed decompression with JWEInvalid error ([043b181](https://github.com/panva/jose/commit/043b181a96ee55d92b9ff1ee94e11be36e258ee4)) ### [`v6.2.1`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#6213-2026-10-20) [Compare Source](https://github.com/panva/jose/compare/v6.2.0...v6.2.1) ##### Refactor - align terminology with JOSE specifications ([bafcb74](https://github.com/panva/jose/commit/bafcb74f5fc070f4f5fd48b12c8bb90af832385e)) - preserve underlying error causes ([724ba24](https://github.com/panva/jose/commit/724ba24b5aaa205000ff33f0a5a393879fd77758)), closes [#&#8203;908](https://github.com/panva/jose/issues/908) ### [`v6.2.0`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#620-2026-03-05) [Compare Source](https://github.com/panva/jose/compare/v6.1.3...v6.2.0) ##### Features - re-introduce JWE "zip" (Compression Algorithm) Header Parameter support ([b13b446](https://github.com/panva/jose/commit/b13b44688baeaf078259379c61f42569f5d63ab5)) ##### Documentation - clarify return of general jws and jwe ([56682b4](https://github.com/panva/jose/commit/56682b4608eacafb7bcd6b63713d6434e0e6ad66)) ### [`v6.1.3`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#613-2025-12-02) [Compare Source](https://github.com/panva/jose/compare/v6.1.2...v6.1.3) ##### Refactor - avoid export \* as for google closure's compiler sake ([6303d98](https://github.com/panva/jose/commit/6303d98efba00c9a3f8f3e814c85ac6e6944b11c)), closes [#&#8203;832](https://github.com/panva/jose/issues/832) ### [`v6.1.2`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#612-2025-11-15) [Compare Source](https://github.com/panva/jose/compare/v6.1.1...v6.1.2) ##### Refactor - fallback to checking instanceof for CryptoKey ([901cd90](https://github.com/panva/jose/commit/901cd908f325265c39f8af1f1505138e0a689f94)), closes [#&#8203;765](https://github.com/panva/jose/issues/765) [#&#8203;803](https://github.com/panva/jose/issues/803) [#&#8203;821](https://github.com/panva/jose/issues/821) [#&#8203;827](https://github.com/panva/jose/issues/827) [#&#8203;828](https://github.com/panva/jose/issues/828) ### [`v6.1.1`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#611-2025-11-09) [Compare Source](https://github.com/panva/jose/compare/v6.1.0...v6.1.1) ##### Documentation - add link to RFC9864 ([767edde](https://github.com/panva/jose/commit/767edde5bde07c60e2c1b1db365ad234a9ae5195)) - link to ML-DSA for JOSE ([ed4252c](https://github.com/panva/jose/commit/ed4252ca8ed084e734a53b214f62e3da11c39857)) - remove mention of Edge Runtime from the readme ([94fdde7](https://github.com/panva/jose/commit/94fdde702498f5e94ec3307f85f120f43a527590)) - update README.md ([25098ef](https://github.com/panva/jose/commit/25098ef7518be732bbef3ea6ed87b0d61a85f581)) ##### Refactor - eliminate named exports in the source code ([f6ae30d](https://github.com/panva/jose/commit/f6ae30d5d86c376269ffa853f62e403d13d4f610)) - expose setKeyManagementParameters also on a GeneralEncrypt Recipient ([16e6b23](https://github.com/panva/jose/commit/16e6b230ee29662c599c556b91a2c367f0fa088c)) - faster path for symmetric key checks ([a44c2ec](https://github.com/panva/jose/commit/a44c2ec6351fb639816846ec8b23f5f084a3d9fb)) - improve en/decoding overheads ([daee426](https://github.com/panva/jose/commit/daee4265c9ab218acbcdb1d7b10c3c728447240b)) ### [`v6.1.0`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#610-2025-08-27) [Compare Source](https://github.com/panva/jose/compare/v6.0.13...v6.1.0) ##### Features - support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri ([cf2092a](https://github.com/panva/jose/commit/cf2092a2b51c9fb67049e96ee22d551ad34c0b2c)) - support for the ML-DSA PQC Algorithm Identifiers ([25ddce4](https://github.com/panva/jose/commit/25ddce491ba3968e8802db5913e49a52224246be)) ### [`v6.0.13`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#6013-2025-08-21) [Compare Source](https://github.com/panva/jose/compare/v6.0.12...v6.0.13) ##### Refactor - more readability in ecdhes.ts ([84da9de](https://github.com/panva/jose/commit/84da9decd8b2f266a343a507b6b79197f2da11e8)) - update asn1.ts helpers ([b4f8fb3](https://github.com/panva/jose/commit/b4f8fb372689b5b38074aa45c9921a6a997a9142)) ### [`v6.0.12`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#6012-2025-07-15) [Compare Source](https://github.com/panva/jose/compare/v6.0.11...v6.0.12) ##### Documentation - add known caveats to customFetch ([02e1f1e](https://github.com/panva/jose/commit/02e1f1e87c764885121590aa2af80c831a9320ab)) - mention the apu/apv parameter names in setKeyManagementParameters ([6274d5a](https://github.com/panva/jose/commit/6274d5abca3d3882d3d722415f064fee5c44d0e4)) - update compact setKeyManagementParameters ([2f44381](https://github.com/panva/jose/commit/2f44381b6b0e30cf538ea2edb0d42b76a61de1f8)) - use GitHub Flavored Markdown for notes and warnings ([f6b4ffc](https://github.com/panva/jose/commit/f6b4ffcd82d9645d9b818ece09a09b5a636b69c9)) ##### Refactor - createPublicKey is not a constructor ([61ded78](https://github.com/panva/jose/commit/61ded787150c6ae13eeb65b6680f857d6657465f)) - update asn1.ts helper functions ([b2b611c](https://github.com/panva/jose/commit/b2b611c426eeed3c40c3a1423d8a02dd46f3f7e8)) ### [`v6.0.11`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#6011-2025-05-05) [Compare Source](https://github.com/panva/jose/compare/v6.0.10...v6.0.11) ##### Fixes - typ checking edge-cases when it contains a slash (/) character ([31e4baf](https://github.com/panva/jose/commit/31e4bafc0a908cac044bbe34c7024f4eac9c974f)) ### [`v6.0.10`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#6010-2025-03-12) [Compare Source](https://github.com/panva/jose/compare/v6.0.9...v6.0.10) ##### Refactor - removed unused claims methods ([74719cf](https://github.com/panva/jose/commit/74719cfcfba1920b87740245da08bb70b68e7cd1)) - reorganize jwt claim set utils ([1f12d88](https://github.com/panva/jose/commit/1f12d88ee8cfa328126934a7020396f9a8dd8932)) ### [`v6.0.9`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#609-2025-03-11) [Compare Source](https://github.com/panva/jose/compare/v6.0.8...v6.0.9) ##### Documentation - add more symbol document, ignore ts-private fields ([8b73687](https://github.com/panva/jose/commit/8b73687595a7ca608aa1b78870b6b165ad5249f2)) - bump typedoc ([6163a8b](https://github.com/panva/jose/commit/6163a8b6a773100ed31d207b598db1259a7e13a8)) - drop cdnjs links in README ([a910038](https://github.com/panva/jose/commit/a9100383ab16cb62c375401fac08a77f3c6c528d)) - drop denoland/x links in README and add jsr ([3662b9e](https://github.com/panva/jose/commit/3662b9ec44403bd501fc895bea4ded623d23e7e1)) - fix key export links from docs/README.md ([c8edfc2](https://github.com/panva/jose/commit/c8edfc29416d3339f6c78fdc42bdfdfadaa5cf7e)) ##### Refactor - always assume structuredClone is present ([f7898a9](https://github.com/panva/jose/commit/f7898a9487508684dbbeba990e0cc96d344b1ff6)) - hide internal private fields and drop ProduceJWT inheritance ([ab18881](https://github.com/panva/jose/commit/ab18881a57524897aec300c9bf7bbd73d9e3447c)) - less objects when JWE JWT Replicated Header Parameters are used ([c763a0e](https://github.com/panva/jose/commit/c763a0e373b0e814dc4705dd2eb7daa614eae43a)) ### [`v6.0.8`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#608-2025-02-26) [Compare Source](https://github.com/panva/jose/compare/v6.0.7...v6.0.8) ##### Fixes - export \[customFetch] symbol from the default entrypoint ([1615614](https://github.com/panva/jose/commit/1615614964b4a66ac888f470bad94b6dee7009bc)), closes [#&#8203;762](https://github.com/panva/jose/issues/762) ### [`v6.0.7`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#607-2025-02-25) [Compare Source](https://github.com/panva/jose/compare/v6.0.6...v6.0.7) ##### Documentation - improve generate key/secret and import function descriptions ([cd06359](https://github.com/panva/jose/commit/cd06359597a3b8e5c30892142f3d750eded2fbce)) ##### Fixes - use \[customFetch] when provided to createRemoteJWKSet ([35f6509](https://github.com/panva/jose/commit/35f6509ff45927d9f55f3b5c09f96f459e60136a)), closes [#&#8203;760](https://github.com/panva/jose/issues/760) ### [`v6.0.6`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#606-2025-02-23) [Compare Source](https://github.com/panva/jose/compare/v6.0.5...v6.0.6) ##### Refactor - move base64url around ([e1350ef](https://github.com/panva/jose/commit/e1350eff8786b92eead82258dc2d5b9db128b523)) ##### Documentation - add various exported symbol descriptions ([3b8ff71](https://github.com/panva/jose/commit/3b8ff717ad2054c1c50f72bcc866f08cd672b49d)) - add various exported symbol descriptions ([fc4e7da](https://github.com/panva/jose/commit/fc4e7dab4c7021d5d2f23a55de93c9ed35b79cef)) - add various exported symbol descriptions ([74f02c8](https://github.com/panva/jose/commit/74f02c833e057ab419173be7b8b8140eddcfc19f)) - update base64url function descriptions ([03d72c8](https://github.com/panva/jose/commit/03d72c8a5578bd442190724ca05994b0856432d5)) ### [`v6.0.5`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#605-2025-02-23) [Compare Source](https://github.com/panva/jose/compare/v6.0.4...v6.0.5) ##### Refactor - **types:** make JWKParameters.kty compatible with [@&#8203;types/node](https://github.com/types/node) and [@&#8203;types/web](https://github.com/types/web) ([bb6ccfe](https://github.com/panva/jose/commit/bb6ccfed3efd5c84c540c2a1f621b9d2951f2b84)) ##### Documentation - add various exported symbol descriptions ([f52c2ff](https://github.com/panva/jose/commit/f52c2ff0c3edbe30b32a4c9858199bfbc9f9367e)) ### [`v6.0.4`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#604-2025-02-22) [Compare Source](https://github.com/panva/jose/compare/v6.0.3...v6.0.4) ##### Refactor - optimize base64 with tc39/proposal-arraybuffer-base64 ([8a0da69](https://github.com/panva/jose/commit/8a0da6968ec2813ced80962e847a89676ef9e8af)), closes [#&#8203;752](https://github.com/panva/jose/issues/752) - update getSPKI to use crypto.createPublicKey when available ([92392a0](https://github.com/panva/jose/commit/92392a0aa278ecf419a8b0b6a984c72d071125ad)), closes [#&#8203;752](https://github.com/panva/jose/issues/752) - use Double HMAC pattern for AES-CBC tag comparison ([f3ba4c7](https://github.com/panva/jose/commit/f3ba4c715f3ff5baef624bbb62771398de488166)), closes [#&#8203;752](https://github.com/panva/jose/issues/752) ### [`v6.0.3`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#603-2025-02-22) [Compare Source](https://github.com/panva/jose/compare/v6.0.2...v6.0.3) ##### Documentation - remove root module tag so that README.md shows up on jsr.io ([ee70698](https://github.com/panva/jose/commit/ee7069818b6a3bc6df7aa7ab8060a90299ef0c9a)) ### [`v6.0.2`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#602-2025-02-22) [Compare Source](https://github.com/panva/jose/compare/v6.0.1...v6.0.2) ##### Documentation - add module tags to all entrypoints ([a5687aa](https://github.com/panva/jose/commit/a5687aaed475ba113dd01d8fddf95f5911c17d0f)) ### [`v6.0.1`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#6013-2025-08-21) [Compare Source](https://github.com/panva/jose/compare/v6.0.0...v6.0.1) ##### Refactor - more readability in ecdhes.ts ([84da9de](https://github.com/panva/jose/commit/84da9decd8b2f266a343a507b6b79197f2da11e8)) - update asn1.ts helpers ([b4f8fb3](https://github.com/panva/jose/commit/b4f8fb372689b5b38074aa45c9921a6a997a9142)) ### [`v6.0.0`](https://github.com/panva/jose/blob/HEAD/CHANGELOG.md#600-2025-02-22) [Compare Source](https://github.com/panva/jose/compare/v5.10.0...v6.0.0) ##### ⚠ BREAKING CHANGES - The PEMImportOptions type interface is renamed to KeyImportOptions. - all builds and bundles now use ES2022 as target - createRemoteJWKSet now uses fetch, because of that its Node.js only options.agent property has been removed and new fetch-related options were added - drop support for Ed448 and X448 - drop support for JWK key_ops and CryptoKey usages "(un)wrapKey" and "deriveKey" - resolved keys returned as part of verify/decrypt operations (when get key functions are used) are always normalized to either Uint8Array / CryptoKey depending on what's more efficient for the executed operation - Key "Type" Generics are removed - CJS-style require is now only possible when require(esm) support is present in the Node.js runtime - private KeyObject instances can no longer be used for verify operations - private KeyObject instances can no longer be used for encryption operations - generateSecret, generateKeyPair, importPKCS8, importSPKI, importJWK, and importX509 now yield a CryptoKey instead of a KeyObject in Node.js - drop support for Node.js 18.x and earlier - runtime-specific npm releases (jose-browser-runtime, jose-node-cjs-runtime, and jose-node-esm-runtime) are no longer maintained or supported - removed secp256k1 JWS support - removed deprecated experimental APIs - removed RSA1_5 JWE support ##### Features - enable CryptoKey and KeyObject inputs in JWK thumbprint functions ([6fc9c44](https://github.com/panva/jose/commit/6fc9c4461a1fa39b363185e866bd686044ee30c6)) - JSON Web Key is now an allowed input everywhere ([ebda967](https://github.com/panva/jose/commit/ebda9674e9daf9b9d09568cf17b1a23d9cf20a60)) ##### Refactor - always use infered CryptoKey ([c4abaa2](https://github.com/panva/jose/commit/c4abaa265ef56b517f868cf49db4ed8975446465)) - backport the [`Ed25519`](https://github.com/panva/jose/commit/Ed25519) JWS Algorithm Identifier support ([7a94cb9](https://github.com/panva/jose/commit/7a94cb997af94ae2db61efbeb271e0555afc62d8)) - drop support for Ed448 and X448 ([2fae1c4](https://github.com/panva/jose/commit/2fae1c447b621fb5dbdb1896c29c3a0772f26f44)) - drop support for JWK key_ops and CryptoKey usages "(un)wrapKey" and "deriveKey" ([ef918be](https://github.com/panva/jose/commit/ef918be8bab1b8dc5ec30b026d85da8ce7e0b062)) - ensure export functions continue to work with KeyObject inputs ([28e9e68](https://github.com/panva/jose/commit/28e9e684bbe15a1fa40631465b9688fdf1cecf0e)) - hardcode the cryptoRuntime export since it is now always WebCryptoAPI ([e00f273](https://github.com/panva/jose/commit/e00f2737fdc7b44b3c9d8c581460617d64152ce2)) - JWK import extractable default for public keys is now true ([64dcebe](https://github.com/panva/jose/commit/64dcebef368851863d11c3718f10bdbb1f0102c7)) - PEM import extractable default for public keys is now true ([4e9f114](https://github.com/panva/jose/commit/4e9f1143c7c31176e55d2e75aea96ead16db4107)) - removed deprecated APIs ([5352083](https://github.com/panva/jose/commit/5352083dc603f8f71acd34d969842be1881f3b19)) - removed secp256k1 JWS support ([e2b58a5](https://github.com/panva/jose/commit/e2b58a5ca50a40559451179cdd15f62be831eda2)) - restructure src/lib and src/runtime now that runtime is fixed ([9b236ce](https://github.com/panva/jose/commit/9b236cec4e66a588d0e7f27039a08a51db5abc49)) - target is now ES2022 everywhere ([aa590d5](https://github.com/panva/jose/commit/aa590d569f7eff948f96e4e8210843668777c724)) - update importJWK args to align with other import functions ([355a2dd](https://github.com/panva/jose/commit/355a2dd33a2466245f2872014110c9a1c0257c16)) - WebCryptoAPI is now the only crypto used ([161de46](https://github.com/panva/jose/commit/161de466a29d90a1129e671ed3a23be556c77f27)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Copenhagen) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE4NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
fix(deps): update dependency jose to v6
Some checks failed
renovate/artifacts Artifact file update failure
ci / test (pull_request) Failing after 7s
Details
ci / image (pull_request) Has been skipped
Details
ci / release (pull_request) Has been skipped
Details
ci / image-build (pull_request) Failing after 9s
Details
e032b66da6
renovate-bot changed title from fix(deps): update dependency jose to v6 to Update dependency jose to v6 2026-10-27 07:15:27 +00:00
renovate-bot force-pushed renovate/jose-6.x from e032b66da6
Some checks failed
renovate/artifacts Artifact file update failure
ci / test (pull_request) Failing after 7s
Details
ci / image (pull_request) Has been skipped
Details
ci / release (pull_request) Has been skipped
Details
ci / image-build (pull_request) Failing after 9s
Details
to ecd0f9fbf3
All checks were successful
ci / image-build (pull_request) Successful in 18s
Details
ci / test (pull_request) Successful in 1m15s
Details
ci / image (pull_request) Has been skipped
Details
ci / release (pull_request) Has been skipped
Details
2026-10-28 21:00:18 +00:00 Compare
simlau force-pushed renovate/jose-6.x from ecd0f9fbf3
All checks were successful
ci / image-build (pull_request) Successful in 18s
Details
ci / test (pull_request) Successful in 1m15s
Details
ci / image (pull_request) Has been skipped
Details
ci / release (pull_request) Has been skipped
Details
to 62e34ded21
All checks were successful
ci / image-build (pull_request) Successful in 7s
Details
ci / test (pull_request) Successful in 41s
Details
ci / image (pull_request) Has been skipped
Details
ci / release (pull_request) Has been skipped
Details
ci / image-build (push) Has been skipped
Details
ci / test (push) Successful in 32s
Details
ci / release (push) Successful in 24s
Details
ci / image (push) Successful in 29s
Details
2026-10-28 21:13:13 +00:00 Compare
simlau scheduled this pull request to auto merge when all checks succeed 2026-10-28 21:13:34 +00:00
simlau merged commit 62e34ded21 into main 2026-10-28 21:13:56 +00:00
simlau deleted branch renovate/jose-6.x 2026-10-28 21:13:56 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
agent:scotland-yard
Hand this issue to Scotland Yard (Paperclip)

No labels
agent:scotland-yard
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
levior/cli!23
No description provided.