SIGN IN SIGN UP
TryGhost / Ghost UNCLAIMED

Independent technology for modern publishing, memberships, subscriptions and newsletters.

0 0 120 JavaScript

Update dependency jwks-rsa to v3.2.2 (#28137)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [jwks-rsa](https://redirect.github.com/auth0/node-jwks-rsa) | [`3.2.0`
→ `3.2.2`](https://renovatebot.com/diffs/npm/jwks-rsa/3.2.0/3.2.2) |
![age](https://developer.mend.io/api/mc/badges/age/npm/jwks-rsa/3.2.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/jwks-rsa/3.2.0/3.2.2?slim=true)
|

---

### Release Notes

<details>
<summary>auth0/node-jwks-rsa (jwks-rsa)</summary>

###
[`v3.2.2`](https://redirect.github.com/auth0/node-jwks-rsa/blob/HEAD/CHANGELOG.md#v400-2026-02-27)

[Compare
Source](https://redirect.github.com/auth0/node-jwks-rsa/compare/v3.2.1...v3.2.2)

[Full
Changelog](https://redirect.github.com/auth0/node-jwks-rsa/compare/v3.2.2...v4.0.0)

**⚠️ BREAKING CHANGES**

- Drops support for Node 14, 16, and 18. The minimum supported Node
versions are now 20.19.0, 22.12.0, and 23.0.0.
- Drops support for the ES256K algorithm (secp256k1 curve). Keys using
ES256K will be ignored. Users must transition to a supported curve
(e.g., ES256/P-256) or handle legacy keys externally.
- Relies on Node's native `require(esm)` support - [Loading ECMAScript
modules using
require()](https://nodejs.org/api/modules.html#loading-ecmascript-modules-using-require).
Non-standard module runtimes such as **Jest** (uses `vm.Script`) that do
not support this feature may fail while loading ESM. See
[#&#8203;493](https://redirect.github.com/auth0/node-jwks-rsa/issues/493)
for details.
- feat: upgrade jose dependency to v6
[#&#8203;486](https://redirect.github.com/auth0/node-jwks-rsa/pull/486)
([cschetan77](https://redirect.github.com/cschetan77))
- chore: upgrade minimum Node.js runtime to 20.19.0
[#&#8203;485](https://redirect.github.com/auth0/node-jwks-rsa/pull/485)
([cschetan77](https://redirect.github.com/cschetan77))

###
[`v3.2.1`](https://redirect.github.com/auth0/node-jwks-rsa/blob/HEAD/CHANGELOG.md#v322-2026-01-23)

[Compare
Source](https://redirect.github.com/auth0/node-jwks-rsa/compare/v3.2.0...v3.2.1)

[Full
Changelog](https://redirect.github.com/auth0/node-jwks-rsa/compare/v3.2.1...v3.2.2)

**Fixed**

- fix: jwksUri should be optional when custom fetcher is provided
[#&#8203;477](https://redirect.github.com/auth0/node-jwks-rsa/pull/477)
([cschetan77](https://redirect.github.com/cschetan77))

</details>

---

### Configuration

📅 **Schedule**: (in timezone Etc/UTC)

- Branch creation
  - Only on Sunday and Saturday (`* * * * 0,6`)
- Between 11:00 PM and 11:59 PM, Monday through Friday (`* 23 * * 1-5`)
- Between 12:00 AM and 04:59 AM, Monday through Saturday (`* 0-4 * *
1-6`)
- Automerge
  - Only on Sunday and Saturday (`* * * * 0,6`)
- Between 11:00 PM and 11:59 PM, Monday through Friday (`* 23 * * 1-5`)
- Between 12:00 AM and 04:59 AM, Monday through Saturday (`* 0-4 * *
1-6`)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTUuOCIsInVwZGF0ZWRJblZlciI6IjQzLjIwMS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: tryghost-renovate[bot] <269725441+tryghost-renovate[bot]@users.noreply.github.com>
T
tryghost-renovate[bot] committed
1285df1e08c06dec0103b5ac0b0c70995057fe97
Parent: 3db913a
Committed by GitHub <noreply@github.com> on 5/29/2026, 3:32:13 AM