Skip to content

Bump jwt from 2.8.1 to 2.10.3#547

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/jwt-2.10.3
Open

Bump jwt from 2.8.1 to 2.10.3#547
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bundler/jwt-2.10.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown
Contributor

Bumps jwt from 2.8.1 to 2.10.3.

Changelog

Sourced from jwt's changelog.

Changelog

v3.2.1 (NEXT)

Full Changelog

Features:

  • Your contribution here

Fixes and enhancements:

  • Fix rejection of unknown algorithms from JWKs for RFC compliance and pquip #728

v3.2.0 (2026-05-13)

Full Changelog

Features:

  • Add enforce_hmac_key_length configuration option #716 - (@​304)

Fixes and enhancements:

v3.1.2 (2025-06-28)

Full Changelog

Fixes and enhancements:

  • Avoid using the same digest across calls in JWT::JWA::Ecdsa and JWT::JWA::Rsa #697
  • Fix signing with a EC JWK #699 (@​anakinj)

v3.1.1 (2025-06-24)

Full Changelog

Fixes and enhancements:

  • Require the algorithm to be provided when signing and verifying tokens using JWKs #695 (@​anakinj)

v3.1.0 (2025-06-23)

Full Changelog

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code labels Jun 2, 2026
@dependabot dependabot Bot changed the title Bump jwt from 2.7.0 to 2.10.3 Bump jwt from 2.8.1 to 2.10.3 Jun 6, 2026
Bumps [jwt](https://github.com/jwt/ruby-jwt) from 2.8.1 to 2.10.3.
- [Release notes](https://github.com/jwt/ruby-jwt/releases)
- [Changelog](https://github.com/jwt/ruby-jwt/blob/main/CHANGELOG.md)
- [Commits](jwt/ruby-jwt@v2.8.1...v2.10.3)

---
updated-dependencies:
- dependency-name: jwt
  dependency-version: 2.10.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/jwt-2.10.3 branch from 60a7e0c to f8c9400 Compare June 6, 2026 02:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update Ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants