Skip to content

build(deps): Bump github.com/lestrrat-go/jwx/v2 from 2.1.6 to 2.1.7 in /authbridge/authlib#638

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/authbridge/authlib/github.com/lestrrat-go/jwx/v2-2.1.7
Closed

build(deps): Bump github.com/lestrrat-go/jwx/v2 from 2.1.6 to 2.1.7 in /authbridge/authlib#638
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/authbridge/authlib/github.com/lestrrat-go/jwx/v2-2.1.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/lestrrat-go/jwx/v2 from 2.1.6 to 2.1.7.

Changelog

Sourced from github.com/lestrrat-go/jwx/v2's changelog.

v2.1.7 30 Jun 2026

  • This module is now deprecated. v2 is no longer maintained; please migrate to github.com/lestrrat-go/jwx/v4 or github.com/lestrrat-go/jwx/v3. The go.mod deprecation notice causes go get and pkg.go.dev to flag this module as deprecated.
Commits
  • f818e26 Merge branch 'develop/v2' into v2
  • 15997a7 release v2.1.7
  • 4b065d7 build(deps): bump actions/cache from 6.0.0 to 6.1.0 (#2237)
  • 1da7d9b build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 (#2229)
  • acff097 build(deps): bump actions/cache from 5 to 6 (#2228)
  • 4e33541 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2225)
  • 11d9ac0 build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 (#2191)
  • 3314202 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#2183)
  • 5b7fe02 build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#2178)
  • 273a5e4 build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#2177)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 6, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 6, 2026 23:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 6, 2026
Bumps [github.com/lestrrat-go/jwx/v2](https://github.com/lestrrat-go/jwx) from 2.1.6 to 2.1.7.
- [Release notes](https://github.com/lestrrat-go/jwx/releases)
- [Changelog](https://github.com/lestrrat-go/jwx/blob/v2.1.7/Changes)
- [Commits](lestrrat-go/jwx@v2.1.6...v2.1.7)

---
updated-dependencies:
- dependency-name: github.com/lestrrat-go/jwx/v2
  dependency-version: 2.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/authbridge/authlib/github.com/lestrrat-go/jwx/v2-2.1.7 branch from 1b78e79 to 6f60802 Compare July 13, 2026 19:10
@pdettori

Copy link
Copy Markdown
Member

Superseded by #673, which bundles this bump with the other authlib dependency updates and runs go mod tidy in the dependent envoy/proxy modules to fix the Go CI failure.

@pdettori pdettori closed this Jul 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@github-project-automation github-project-automation Bot moved this from New/ToDo to Done in Kagenti Issue Prioritization Jul 15, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/authbridge/authlib/github.com/lestrrat-go/jwx/v2-2.1.7 branch July 15, 2026 23:09
pdettori added a commit to pdettori/kagenti-extensions that referenced this pull request Jul 16, 2026
Bundles Dependabot PRs rossoctl#638, rossoctl#639, rossoctl#670, rossoctl#541 into a single update:

- github.com/lestrrat-go/jwx/v2 2.1.6 -> 2.1.7 (rossoctl#638)
- google.golang.org/grpc 1.81.1 -> 1.82.0 (rossoctl#639)
- golang.org/x/net 0.56.0 -> 0.57.0 (rossoctl#670)
- github.com/spiffe/go-spiffe/v2 2.6.0 -> 2.8.1 (rossoctl#541)

The authbridge-envoy and authbridge-proxy modules replace authlib via a
local path directive, so bumping authlib's dependencies leaves their
go.sum stale. Dependabot only tidies the module it edits, which is why
each of the four PRs failed the envoy/proxy Go CI Lint step
(go vet with GOWORK=off: 'updates to go.mod needed; go mod tidy').
This bundle runs go mod tidy in all three modules.

Assisted-By: Claude (Anthropic AI) <noreply@anthropic.com>
Signed-off-by: Paolo Dettori <dettori@us.ibm.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants