oidc: modernize with new Go APIs by @ericchiang in #487
oidc: improve documentation for APIs by @ericchiang in #488
SECURITY.md: add a security policy and point to project-level reporting by @ericchiang in #489
oidc: ignore JWKs with unknown signing algorithms rather than failing by @ericchiang in #491
readme: update README and docs by @ericchiang in #492
oidc: add API for determining when issuer URLs mismatch by @ericchiang in #493
oidc: add constants for "email" and "profile" scopes by @ericchiang in #494

Full Changelog: https://github.com/coreos/go-oidc/compare/v3.19.0...v3.20.0

`v3.19.0`

Compare Source

What's Changed

fix: Key refresh should set no-cache to get most up to date keys by @Yanni8 in #485
oidc: add support for validating back-channel logout tokens by @ericchiang in #486

New Contributors

@Yanni8 made their first contribution in #485

Full Changelog: https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0

`v3.18.0`

Compare Source

What's Changed

.github: configure dependabot by @ericchiang in #477
.github: update go versions in CI by @ericchiang in #480
build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by @dependabot[bot] in #478
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #479

Full Changelog: https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0

`v3.17.0`

Compare Source

What's Changed

oidc: improve error message for mismatched issuer URLs by @ericchiang in #469

Full Changelog: https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | require | minor | `v3.16.0` → `v3.21.0` | --- ### Release Notes <details> <summary>coreos/go-oidc (github.com/coreos/go-oidc/v3)</summary> ### [`v3.21.0`](https://github.com/coreos/go-oidc/releases/tag/v3.21.0) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.20.0...v3.21.0) #### What's Changed - oidc: ignore JWKs with unsupported key types rather than failing by [@nicoske](https://github.com/nicoske) in [#499](https://github.com/coreos/go-oidc/pull/499) #### New Contributors - [@nicoske](https://github.com/nicoske) made their first contribution in [#499](https://github.com/coreos/go-oidc/pull/499) **Full Changelog**: <https://github.com/coreos/go-oidc/compare/v3.20.0...v3.21.0> ### [`v3.20.0`](https://github.com/coreos/go-oidc/releases/tag/v3.20.0) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.19.0...v3.20.0) #### What's Changed - oidc: modernize with new Go APIs by [@ericchiang](https://github.com/ericchiang) in [#487](https://github.com/coreos/go-oidc/pull/487) - oidc: improve documentation for APIs by [@ericchiang](https://github.com/ericchiang) in [#488](https://github.com/coreos/go-oidc/pull/488) - SECURITY.md: add a security policy and point to project-level reporting by [@ericchiang](https://github.com/ericchiang) in [#489](https://github.com/coreos/go-oidc/pull/489) - oidc: ignore JWKs with unknown signing algorithms rather than failing by [@ericchiang](https://github.com/ericchiang) in [#491](https://github.com/coreos/go-oidc/pull/491) - readme: update README and docs by [@ericchiang](https://github.com/ericchiang) in [#492](https://github.com/coreos/go-oidc/pull/492) - oidc: add API for determining when issuer URLs mismatch by [@ericchiang](https://github.com/ericchiang) in [#493](https://github.com/coreos/go-oidc/pull/493) - oidc: add constants for "email" and "profile" scopes by [@ericchiang](https://github.com/ericchiang) in [#494](https://github.com/coreos/go-oidc/pull/494) **Full Changelog**: <https://github.com/coreos/go-oidc/compare/v3.19.0...v3.20.0> ### [`v3.19.0`](https://github.com/coreos/go-oidc/releases/tag/v3.19.0) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0) #### What's Changed - fix: Key refresh should set `no-cache` to get most up to date keys by [@Yanni8](https://github.com/Yanni8) in [#485](https://github.com/coreos/go-oidc/pull/485) - oidc: add support for validating back-channel logout tokens by [@ericchiang](https://github.com/ericchiang) in [#486](https://github.com/coreos/go-oidc/pull/486) #### New Contributors - [@Yanni8](https://github.com/Yanni8) made their first contribution in [#485](https://github.com/coreos/go-oidc/pull/485) **Full Changelog**: <https://github.com/coreos/go-oidc/compare/v3.18.0...v3.19.0> ### [`v3.18.0`](https://github.com/coreos/go-oidc/releases/tag/v3.18.0) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0) #### What's Changed - .github: configure dependabot by [@ericchiang](https://github.com/ericchiang) in [#477](https://github.com/coreos/go-oidc/pull/477) - .github: update go versions in CI by [@ericchiang](https://github.com/ericchiang) in [#480](https://github.com/coreos/go-oidc/pull/480) - build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#478](https://github.com/coreos/go-oidc/pull/478) - build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#479](https://github.com/coreos/go-oidc/pull/479) **Full Changelog**: <https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0> ### [`v3.17.0`](https://github.com/coreos/go-oidc/releases/tag/v3.17.0) [Compare Source](https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0) #### What's Changed - oidc: improve error message for mismatched issuer URLs by [@ericchiang](https://github.com/ericchiang) in [#469](https://github.com/coreos/go-oidc/pull/469) **Full Changelog**: <https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-09-13 23:20:08 -04:00

chore(deps): update module github.com/coreos/go-oidc/v3 to v3.21.0

renovate/artifacts Artifact file update failure

4bce205937

renovate-bot commented

2026-09-13 23:20:09 -04:00

Author

Collaborator

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: install-tool golang 1.25.0

### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: go.sum ``` Command failed: install-tool golang 1.25.0 ```