Update dependency jwt to v3

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
jwt (changelog)	2.10.1 -> 3.1.2

---

Release Notes

jwt/ruby-jwt (jwt)

v3.1.2

Compare Source

Full Changelog

Fixes and enhancements:

• Avoid using the same digest across calls in JWT::JWA::Ecdsa and JWT::JWA::Rsa #​697
• Fix signing with a EC JWK #​699 (@​anakinj)

v3.1.1

Compare Source

Full Changelog

Fixes and enhancements:

• Require the algorithm to be provided when signing and verifying tokens using JWKs #​695 (@​anakinj)

v3.1.0

Compare Source

Full Changelog

Features:

• Add support for x5t header parameter for X.509 certificate thumbprint verification #​669 (@​hieuk09)
• Raise an error if the ECDSA signing or verification key is not an instance of OpenSSL::PKey::EC #​688 (@​anakinj)
• Allow OpenSSL::PKey::EC::Point to be used as the verification key in ECDSA #​689 (@​anakinj)
• Require claims to have been verified before accessing the JWT::EncodedToken#payload #​690 (@​anakinj)
• Support signing and verifying tokens using a JWK #​692 (@​anakinj)

v3.0.0

Compare Source

Full Changelog

Breaking changes:

• Require token signature to be verified before accessing payload #​648 (@​anakinj)
• Drop support for the HS512256 algorithm #​650 (@​anakinj)
• Remove deprecated claim verification methods #​654 (@​anakinj)
• Remove dependency to rbnacl #​655 (@​anakinj)
• Support only stricter base64 decoding (RFC 4648) #​658 (@​anakinj)
• Custom algorithms are required to include JWT::JWA::SigningAlgorithm #​660 (@​anakinj)
• Require RSA keys to be at least 2048 bits #​661 (@​anakinj)
• Base64 encode and decode the k value for HMAC JWKs #​662 (@​anakinj)

Take a look at the upgrade guide for more details.

Features:

• JWT::EncodedToken#verify! method that bundles signature and claim validation #​647 (@​anakinj)
• Do not override the alg header if already given #​659 (@​anakinj)
• Make JWK::KeyFinder compatible with JWT::EncodedToken #​663 (@​anakinj)

Fixes and enhancements:

• Ruby 3.4 to CI matrix #​649 (@​anakinj)
• Add logger as development dependency #​670 (@​hieuk09)

v2.10.2: jwt-2.10.2

Compare Source

v2.10.2 (2025-06-29)

Full Changelog

Fixes and enhancements:

• Avoid using the same digest across calls in JWT::JWA::Ecdsa and JWT::JWA::Rsa #​697

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.