What's Changed
- Add ML-DSA post-quantum signature support (RFC 9964) by @rjeffman in #384
- Support fully specified algorithms per RFC 9864 by @rjeffman in #389
- Skip unknown kty in JWKSet import per RFC 7517 §5 by @rjeffman in #388
- Reject non-empty encrypted key in bare ECDH-ES by @simo5 in #391
- Limit dot splits during JWE and JWS parsing by @simo5 in #392
- Version 1.5.9 by @simo5 in #393
Security Fixes
CVE-2026-80179
New Contributors
Full Changelog: v1.5.8...v1.5.9