Bump JWX and Go version to address a CVE

v0.3.2

Recent JWX possibly broken, quote go version

Documentation fixes

v0.3.1

Documentation fixes

Key ID no longer mandatory

Breaking change: keyid is no longer a Signer/Verifier parameter. Instead if it is needed, include it in SignConfig/VerifyConfig.

Normalize path for @request-target

v0.2.2

Normalize an empty path

Bump JWX library

No change other than addressing CVE-2024-21319 (which does not apply to our code).

RFC 9421

Full implementation of the RFC, including test cases.

Draft -17

Draft -17 made an important change re: encoding of query parameters.

Renamed signature context

v0.1.15

Bump GH actions

Draft -12

• Binary sequences
• Signature context
• Updated test vectors, including message transformations
• New ECDSA variant
• Improved parameter validation on signing

Full Changelog: v0.1.13...v0.1.14

Draft -10

New way to bind requests and responses.
A bit of security hygiene.

Full Changelog: v0.1.12...v0.1.13