fix(deps): update module github.com/micahparks/keyfunc/v2 to v3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/MicahParks/keyfunc/v2	v2.1.0 -> v3.7.0

---

Release Notes

MicahParks/keyfunc (github.com/MicahParks/keyfunc/v2)

v3.7.0: Expose HTTP client as an option

Compare Source

The purpose of this release is to expose an option to override the *http.DefaultClient.

Relevant pull requests:

• #​146

v3.6.2: Ignore unsupported keys by default

Compare Source

The purpose of this release is to ignore unsupported keys in a JWK Set by default.

Relevant issues:

• MicahParks/jwkset#60

Relevant pull requests:

• #​143
• MicahParks/jwkset#61

v3.6.1: HTTPTimeout override

Compare Source

The purpose of this release is to expose the HTTPTimeout override.

This modified the HTTP client behavior in the jwkset project.

Relevant pull requests:

• #​141

v3.6.0

Compare Source

v3.5.0: Return all when no key ID

Compare Source

The purpose of this release is to return all keys for JWT for signature verification when the token has no key ID, kid, header. This is enabled by the jwt.VerificationKeySet feature.

This should allow use cases that do not use the without the kid to use this project.

Relevant issues:

• #​127
• #​138

Relevant pull requests:

• #​140

v3.4.0: Override defaults

Compare Source

The purpose of this release is to add the NewDefaultOverrideCtx function, which allows for defaults to be overridden.

Package users should now be able to turn JWK Set validation off as well as change other default behaviors.

Relevant issues:

• #​126

Relevant pull requests:

• #​137

v3.3.11

Compare Source

v3.3.10

Compare Source

v3.3.9

Compare Source

v3.3.8

Compare Source

v3.3.7

Compare Source

v3.3.6

Compare Source

v3.3.5

Compare Source

v3.3.4

Compare Source

v3.3.3

Compare Source

v3.3.2: Allow for user provided ctx during parse

Compare Source

The purpose of this release is to add a new method, .KeyfuncCtx.

This new method accepts a context.Context, then returns a jwt.Keyfunc. This user provided context.Context is used during JWK lookup in the github.com/MicahParks/jwkset package when parsing JWTs. Passing a request scoped context allows the JWT parsing and JWK retrieval to cancel according to the given context.Context behavior instead of the default context.Context, which was provided at keyfunc.Keyfunc initialization.

In practice, this is used to prevent situations where many JWTs with kid not in a remote JWK Set are attempting to be parsed over a long period of time.

Relevant issues:

• MicahParks/jwkset#26

Relevant pull requests:

• #​118
• #​119
• #​120
• #​121

v3.3.1

Compare Source

v3.3.0

Compare Source

v3.2.9

Compare Source

v3.2.8

Compare Source

v3.2.7

Compare Source

v3.2.6

Compare Source

v3.2.5

Compare Source

v3.2.4

Compare Source

v3.2.3: Wrap errors where appropriate

Compare Source

The purpose of this pull request is to wrap errors with errors.Join where appropriate.

Relevant issues:

• #​103

Relevant pull requests:

• #​104

v3.1.2: X.509 Thumbprint bug fix

Compare Source

JWK Sets have two X.509 thumbprint parameters that are optional. A bug in github.com/MicahParks/jwkset made these parameters required in circumstances that affect the keyfunc project. This release updates this dependency to the latest version.

Thank you, @​joshkaplinsky, for reporting this bug!

Please see the below release for details:
https://github.com/MicahParks/jwkset/releases/tag/v0.5.5

v3.1.1

Compare Source

v3.1.0

Compare Source

v3.0.0: V3 simplify API by using github.com/MicahParks/jwkset

Compare Source

This upgrade removes most of the code in this repository and outsources JWK and JWK Set related code to the updated github.com/MicahParks/jwkset package. The exported assets from the keyfunc project has been vastly reduced as well, with the intention of making it easier to use for the majority of use cases.

[!NOTE]
A superset of features from V1 and V2 is available.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/golang-jwt/jwt/v5	v5.2.1 -> v5.2.2