Skip to content

Conversation

@thaJeztah
Copy link
Member

  • remove Go 1.23 support
  • removes dependency on golang.org/x/crypto
  • reject JWS with an unprotected critical b64 header

full diff: go-jose/go-jose@v4.1.2...v4.1.3

- What I did

- How I did it

- How to verify it

- Human readable description for the release notes

- A picture of a cute animal (not mandatory but encouraged)

@codecov-commenter
Copy link

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@thaJeztah thaJeztah marked this pull request as ready for review November 5, 2025 06:38
@thaJeztah thaJeztah marked this pull request as draft November 5, 2025 07:27
@thaJeztah
Copy link
Member Author

Moved to draft until #6624 is merged.

- remove Go 1.23 support
- removes dependency on golang.org/x/crypto
- reject JWS with an unprotected critical b64 header

full diff: go-jose/go-jose@v4.1.2...v4.1.3

Signed-off-by: Sebastiaan van Stijn <[email protected]>
@thaJeztah thaJeztah marked this pull request as ready for review November 5, 2025 11:12
@vvoland vvoland merged commit 38d271a into docker:master Nov 5, 2025
91 checks passed
@thaJeztah thaJeztah deleted the bump_jose branch November 5, 2025 11:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants