v4.1.0

Added

• feat: add cacheMaxAgeFallback and onStaleCacheFallback for graceful JWKS degradation during outages #502 (cschetan77)

v4.0.1

Changed

• chore: update lru-memoizer to v3 #476 (isidrok)

v4.0.0

⚠️ BREAKING CHANGES

• feat: upgrade jose dependency to v6 #486 (cschetan77)
• chore: upgrade minimum Node.js runtime to 20.19.0 #485 (cschetan77)

v3.2.2

Fixed

• fix: jwksUri should be optional when custom fetcher is provided #477 (cschetan77)

v3.2.1

Added

• docs: Add Ask DeepWiki badge to README #445 (arpit-jn)

Fixed

• fix: Migrate to WHATWG URL API from node's core url #465 (cschetan77)
• fix: Moving @types/express to dev and re generating package lock #464 (cschetan77)

v3.2.0

Changed

• Bump express from 4.18.2 to 4.19.2 #408 (dependabot[bot])
• Bump braces from 3.0.2 to 3.0.3 #413 (dependabot[bot])
• Bump jose from 4.15.4 to 4.15.5 #402 (dependabot[bot])
• Bump codecov/codecov-action from 3.1.4 to 3.1.5 #396 (dependabot[bot])
• Bump actions/cache from 3 to 4 #395 (dependabot[bot])
• Update automated release process to latest version #391 (frederikprijck)
• Bump actions/github-script from 6 to 7 #387 (dependabot[bot])
• chore(deps): Update Lockfile #386 (evansims)
• Bump actions/setup-node from 3 to 4 #382 (dependabot[bot])
• Bump @babel/traverse from 7.10.1 to 7.23.2 #381 (dependabot[bot])

Fixed

• [Fix] Change type of unused req param to unknown to resolve type conflicts #394 (zackdotcomputer)
• fix(compat): ensure WebCryptoAPI runtime imported keys are re-exportable #409 (panva)
• fix: express-jwt types #412 (jfromaniello)

v3.1.0

Added

• feat: resolve bun/deno compat issues #374 (panva)

v3.0.1

Fixed

• update types/jsonwebtoken update v9.0.0 #349 (ToshihitoKon)
• Bump jsonwebtoken from 8.5.1 to 9.0.0 #344 (dependabot[bot])

v3.0.0

⚠️ BREAKING CHANGES

This release drops support for Node 10 and 12

• [major] bump jose #333 (panva)

v2.1.5

Fixed

• Fix GetVerificationKey typing to include undefined #329 (AaronMoat)

fixes #325