build(deps): bump jwks-rsa from 3.2.0 to 4.0.1 by dependabot[bot] · Pull Request #3089 · firebase/firebase-admin-node

Skip to content

Navigation Menu

Sign in

Appearance settings

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up

Appearance settings

Conversation

@dependabot

Copy link Copy Markdown

Contributor

@dependabot dependabot bot commented on behalf of github

Mar 4, 2026

edited

Loading

Bumps jwks-rsa from 3.2.0 to 4.0.1.

Release notes

Sourced from jwks-rsa's releases.

v4.0.1

Changed

v4.0.0

⚠️ BREAKING CHANGES

v3.2.2

Fixed

  • fix: jwksUri should be optional when custom fetcher is provided #477 (cschetan77)

v3.2.1

Added

Fixed

  • fix: Migrate to WHATWG URL API from node's core url #465 (cschetan77)
  • fix: Moving @​types/express to dev and re generating package lock #464 (cschetan77)
Changelog

Sourced from jwks-rsa's changelog.

v4.0.1 (2026-03-02)

Full Changelog

Changed

v4.0.0 (2026-02-27)

Full Changelog

⚠️ BREAKING CHANGES

  • Drops support for Node 14, 16, and 18. The minimum supported Node versions are now 20.19.0, 22.12.0, and 23.0.0.
  • Drops support for the ES256K algorithm (secp256k1 curve). Keys using ES256K will be ignored. Users must transition to a supported curve (e.g., ES256/P-256) or handle legacy keys externally.
  • feat: upgrade jose dependency to v6 #486 (cschetan77)
  • chore: upgrade minimum Node.js runtime to 20.19.0 #485 (cschetan77)

v3.2.2 (2026-01-23)

Full Changelog

Fixed

  • fix: jwksUri should be optional when custom fetcher is provided #477 (cschetan77)

v3.2.1 (2026-01-15)

Full Changelog

Added

Fixed

  • fix: Migrate to WHATWG URL API from node's core url #465 (cschetan77)
  • fix: Moving @​types/express to dev and re generating package lock #464 (cschetan77)
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for jwks-rsa since your current version.


@dependabot dependabot bot added dependencies

Pull requests that update a dependency file

javascript

Pull requests that update Javascript code

labels

Mar 4, 2026

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/jwks-rsa-4.0.1 branch from 25674b4 to 85f8f50 Compare

March 19, 2026 14:52
Bumps [jwks-rsa](https://github.com/auth0/node-jwks-rsa) from 3.2.0 to 4.0.1.
- [Release notes](https://github.com/auth0/node-jwks-rsa/releases)
- [Changelog](https://github.com/auth0/node-jwks-rsa/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jwks-rsa@v3.2.0...v4.0.1)

---
updated-dependencies:
- dependency-name: jwks-rsa
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/jwks-rsa-4.0.1 branch from 85f8f50 to a5e7f94 Compare

March 27, 2026 16:23

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Pull requests that update a dependency file

javascript

Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants