What's Changed
- docs: add jwxfilter to extension modules doc by @lestrrat in #2041
- autodoc updates by @github-actions[bot] in #2042
- docs: fix broken v3-to-v4.yaml link in Changes-v4.md by @lestrrat in #2048
- guard ecdsa coordinates against oversized big.Int by @lestrrat in #2049
- reject jwe with conflicting alg in protected vs per-recipient by @lestrrat in #2051
- autodoc updates by @github-actions[bot] in #2053
- docs: document PrivateClaims concurrency contract by @lestrrat in #2055
- fix AddressClaim.MarshalJSON for non-printable bytes by @lestrrat in #2054
- jwt: only call ParseForm when WithFormKey is supplied by @lestrrat in #2057
- jws: jkuProvider rejects fetched keys marked use=enc by @lestrrat in #2059
- jwk: refuse RegisterKeyImporter for built-in raw key types by @lestrrat in #2061
- jwa: unify SignatureAlgorithm/KeyEncryption/ContentEncryption into one registry by @lestrrat in #2062
- docs: jwkbb X509 registry is a privileged extension point by @lestrrat in #2067
- docs(internals): record Settings unknown-option handling as design intent by @lestrrat in #2068
- cmd/jwx: warn on private-key-to-tty + reject keysize<=0 for oct by @lestrrat in #2070
- autodoc updates by @github-actions[bot] in #2069
- fix jwxmigrate install path in MIGRATION.md by @lestrrat in #2076
Full Changelog: v4.0.0...v4.0.1