Skip to content

chore(deps): bump jwks-rsa from 3.2.2 to 4.0.1#1544

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/jwks-rsa-4.0.1
Open

chore(deps): bump jwks-rsa from 3.2.2 to 4.0.1#1544
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/jwks-rsa-4.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 26, 2026

Copy link
Copy Markdown
Contributor

Bumps jwks-rsa from 3.2.2 to 4.0.1.

Release notes

Sourced from jwks-rsa's releases.

v4.0.1

Changed

v4.0.0

⚠️ BREAKING CHANGES

Changelog

Sourced from jwks-rsa's changelog.

v4.0.1 (2026-03-02)

Full Changelog

Changed

v4.0.0 (2026-02-27)

Full Changelog

⚠️ BREAKING CHANGES

  • Drops support for Node 14, 16, and 18. The minimum supported Node versions are now 20.19.0, 22.12.0, and 23.0.0.
  • Drops support for the ES256K algorithm (secp256k1 curve). Keys using ES256K will be ignored. Users must transition to a supported curve (e.g., ES256/P-256) or handle legacy keys externally.
  • Relies on Node's native require(esm) support - Loading ECMAScript modules using require(). Non-standard module runtimes such as Jest (uses vm.Script) that do not support this feature may fail while loading ESM. See #493 for details.
  • feat: upgrade jose dependency to v6 #486 (cschetan77)
  • chore: upgrade minimum Node.js runtime to 20.19.0 #485 (cschetan77)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 26, 2026
Bumps [jwks-rsa](https://github.com/auth0/node-jwks-rsa) from 3.2.2 to 4.0.1.
- [Release notes](https://github.com/auth0/node-jwks-rsa/releases)
- [Changelog](https://github.com/auth0/node-jwks-rsa/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jwks-rsa@v3.2.2...v4.0.1)

---
updated-dependencies:
- dependency-name: jwks-rsa
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/jwks-rsa-4.0.1 branch from 8afc3ad to b531ff7 Compare April 10, 2026 15:49
@github-actions

Copy link
Copy Markdown

This pull request has been identified as stale because it has gone 30 days with no activity.
The pull request will be closed in 10 days. If this is incorrect, simply comment on the PR, remove the label, or merge the PR.
Reminder, once a PR is approved, and checks have passed, you can merge it yourself.

@github-actions github-actions Bot added the Stale label May 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code Stale

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants