v2.0

Mitigates security vulnerability CVE-2021-46743.

Notable changes:

• requires PHP 8.
• requires configuration changes
  • subtle change of wrapping the string secret into the new Secret configuration object when only using a single algorithm for encoding/decoding
  • when using multiple possible algorithms, "kid" JWT header parameter must be used when encoding the JWT

See the changelog for detailed info. Also see this issue to understand the changes.