chore(deps): update rust crate jsonwebtoken to v11 #2

Merged

kitten merged 1 commit from renovate/jsonwebtoken-11.x into main

2026-07-26 23:27:51 +02:00

spacebot commented

2026-07-24 13:31:30 +02:00

Owner

This PR contains the following updates:

Package	Type	Update	Change
jsonwebtoken	dependencies	major	`10.4.0` → `11.0.0`

Release Notes

Keats/jsonwebtoken (jsonwebtoken)

`v11.0.0`

Compare Source

Add conversions between Algorithm and KeyAlgorithm
JWKs can now be created from DecodingKeys, creation from EncodingKey and DecodingKey now supports Ed25519 as well
JWKs with unknown key types are now deserializable
BREAKING: Algorithm, KeyAlgorithm, EllipticCurve and ThumbprintHash are now non_exhaustive
BREAKING: Jwk.thumbprint now returns a Result<_>
BREAKING: Header.extras is now a struct that allows for deserialization to any T
BREAKING: Implicit features resulting from optional crates have been removed
BREAKING: Validation.insecure_disable_signature_validation has been removed, use dangerous::insecure_decode instead
BREAKING: EncodingKey.inner has been renamed to as_bytes, try_get_hmac_secret has been removed
BREAKING: DecodingKey.as_bytes and try_get_hmac_secret have been removed, use try_get_as_bytes instead

Changes for `CryptoProvider`s

When constructing HMAC signers, the algorithm family must now be verified on construction
JwkUtils has been renamed to KeyUtils
- compute_digest now returns a Result<_>
- extract_rsa_public_key_components has been renamed to rsa_pub_components_from_private_key
- rsa_pub_components_from_public_key has been added
- extract_ec_public_key_coordinates has been renamed to ec_pub_components_from_private_key
- ed_pub_components_from_private_key has been added

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [jsonwebtoken](https://github.com/Keats/jsonwebtoken) | dependencies | major | `10.4.0` → `11.0.0` | --- ### Release Notes <details> <summary>Keats/jsonwebtoken (jsonwebtoken)</summary> ### [`v11.0.0`](https://github.com/Keats/jsonwebtoken/blob/HEAD/CHANGELOG.md#1100-2026-07-24) [Compare Source](https://github.com/Keats/jsonwebtoken/compare/v10.4.0...v11.0.0) - Add conversions between `Algorithm` and `KeyAlgorithm` - JWKs can now be created from `DecodingKey`s, creation from `EncodingKey` and `DecodingKey` now supports [`Ed25519`](https://github.com/Keats/jsonwebtoken/commit/Ed25519) as well - JWKs with unknown key types are now deserializable - BREAKING: `Algorithm`, `KeyAlgorithm`, `EllipticCurve` and `ThumbprintHash` are now `non_exhaustive` - BREAKING: `Jwk.thumbprint` now returns a `Result<_>` - BREAKING: `Header.extras` is now a struct that allows for deserialization to any `T` - BREAKING: Implicit features resulting from optional crates have been removed - BREAKING: `Validation.insecure_disable_signature_validation` has been removed, use `dangerous::insecure_decode` instead - BREAKING: `EncodingKey.inner` has been renamed to `as_bytes`, `try_get_hmac_secret` has been removed - BREAKING: `DecodingKey.as_bytes` and `try_get_hmac_secret` have been removed, use `try_get_as_bytes` instead ##### Changes for `CryptoProvider`s - When constructing HMAC signers, the algorithm family must now be verified on construction - `JwkUtils` has been renamed to `KeyUtils` - `compute_digest` now returns a `Result<_>` - `extract_rsa_public_key_components` has been renamed to `rsa_pub_components_from_private_key` - `rsa_pub_components_from_public_key` has been added - `extract_ec_public_key_coordinates` has been renamed to `ec_pub_components_from_private_key` - `ed_pub_components_from_private_key` has been added </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

spacebot added 1 commit

2026-07-24 13:31:30 +02:00

chore(deps): update rust crate jsonwebtoken to v11

Build and Test / kanzashi-cdn (push) Successful in 4m12s

Details

11db239abc