v4.15.5

Fixes

• add a maxOutputLength option to zlib inflate (1b91d88), fixes CVE-2024-28176

v2.0.7

Fixes

• add a maxOutputLength option to zlib inflate (02a6579), fixes CVE-2024-28176

v5.2.2

Fixes

• types: iv and tag is optional in JSON serializations (53019cd)

v5.2.1

Fixes

• build: refactor export targets for browser, node cjs, and node esm builds (50cbc65)

v5.2.0

Features

• extend JWT NumericDate setter syntax (ae363c3)

v5.1.3

Build

• add errors and base64url submodule exports (564412d)

v5.1.2

Fixes

• do not mutate JWTVerifyOptions.requiredClaims (1bf9cec), closes #610

v5.1.1

Refactor

• deprecate the RSA1_5 JWE Algorithm (f746da1)

v5.1.0

Features

• add payload generics to jose.decodeJwt (9de49e2), closes #604

v5.0.2

Fixes

• createRemoteJWKSet: ensure a default user-agent header is present (887dd3c), closes #600