For more detailed release notes, see Changes.
What's Changed
- build(deps): bump github/codeql-action from 4.37.9 to 4.38.0 by @dependabot[bot] in #2352
- build(deps): bump github/codeql-action from 4.38.0 to 4.38.2 by @dependabot[bot] in #2361
- build(deps): bump github.com/goccy/go-json from 0.10.6 to 0.11.0 by @dependabot[bot] in #2364
- build(deps): bump github.com/goccy/go-json from 0.11.0 to 0.11.2 by @dependabot[bot] in #2371
- [v3] keep trying jwe key providers after errors by @lestrrat in #2385
- [v3] allow empty jwe ciphertext in JSON form by @lestrrat in #2387
- [v3] write jwe unprotected header as JSON object by @lestrrat in #2389
- [v3] jwsbb: size SignBuffer per encoded part by @lestrrat in #2401
- [v3] jwe: find WithKeySet kid in protected header by @lestrrat in #2405
- [v3] jwt: honor NumericDate format precision by @lestrrat in #2410
- [v3] jwt: parse negative NumericDate values by @lestrrat in #2412
- [v3] jwt: parse decimal NumericDate values exactly by @lestrrat in #2414
- build(deps): bump github/codeql-action from 4.38.2 to 4.38.3 by @dependabot[bot] in #2419
- [v3] jws: sign only the transmitted header by @lestrrat in #2416
- [v3] jws: add opt-in WithAlgorithmMatch by @lestrrat in #2423
- build(deps): bump github/codeql-action from 4.38.3 to 4.39.0 by @dependabot[bot] in #2427
- use crypto/pbkdf2 and drop x/crypto by @lestrrat in #2431
- [v3] jws: add WithVerifiedSignature verify option by @lestrrat in #2436
- [v3] jwe: add WithDecryptedRecipient decrypt option by @lestrrat in #2440
- [v3] jws: fix crit and multi-signature docs by @lestrrat in #2437
- [v3] jwe: document per-recipient headers by @lestrrat in #2441
- [v3] jws: fix comment in header example by @lestrrat in #2447
- [v3] release v3.4.0 by @lestrrat in #2449
Full Changelog: v3.3.0...v3.4.0