From e6009f8e7cdc8663ec254b0b956b322f6b1a37c5 Mon Sep 17 00:00:00 2001 From: Brady Owens Date: Thu, 2 Oct 2025 11:17:49 -0400 Subject: [PATCH 1/6] #168 Upgrade Golang-jwt package to maintained branch of 5.x --- go.mod | 2 +- go.sum | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 61f084b..7ef6f1a 100644 --- a/go.mod +++ b/go.mod @@ -5,7 +5,7 @@ go 1.24.0 toolchain go1.24.2 require ( - github.com/golang-jwt/jwt/v4 v4.5.2 + github.com/golang-jwt/jwt/v5 v5.3.0 github.com/google/go-cmp v0.7.0 github.com/google/go-github/v75 v75.0.0 ) diff --git a/go.sum b/go.sum index fb7949d..3bcbf1b 100644 --- a/go.sum +++ b/go.sum @@ -1,5 +1,6 @@ github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI= github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0= +github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE= github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU= From 89a2fb389601e1187dd832ced05d6cfd638236e5 Mon Sep 17 00:00:00 2001 From: Brady Owens Date: Fri, 10 Oct 2025 21:20:08 -0400 Subject: [PATCH 2/6] #168 Upgrade Readme file for upgrade jwt package --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 24f9619..d27e8d3 100644 --- a/README.md +++ b/README.md @@ -106,4 +106,4 @@ tr := NewFromAppsTransport(atr, 99) ## Dependencies -- [github.com/golang-jwt/jwt-go](https://github.com/golang-jwt/jwt-go) +- [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) From 4cdae77520a4fb13d79d2b7d81da4fd9f35f89de Mon Sep 17 00:00:00 2001 From: Brady Owens Date: Fri, 10 Oct 2025 21:20:32 -0400 Subject: [PATCH 3/6] #168 Go mod tidy with new jwt package --- go.sum | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/go.sum b/go.sum index 3bcbf1b..bdf233c 100644 --- a/go.sum +++ b/go.sum @@ -1,5 +1,4 @@ -github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI= -github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0= +github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo= github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE= github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= From 4aa6850cbd71a68544b65d0890ad3db7fbe949b6 Mon Sep 17 00:00:00 2001 From: Brady Owens Date: Fri, 10 Oct 2025 21:20:57 -0400 Subject: [PATCH 4/6] #168 Update appTransport with new JWT package --- appsTransport.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/appsTransport.go b/appsTransport.go index ada64bc..e5c7864 100644 --- a/appsTransport.go +++ b/appsTransport.go @@ -9,7 +9,7 @@ import ( "strconv" "time" - jwt "github.com/golang-jwt/jwt/v4" + jwt "github.com/golang-jwt/jwt/v5" ) // AppsTransport provides a http.RoundTripper by wrapping an existing From 581ad6f069a2836ddb691324ead2d101124449dc Mon Sep 17 00:00:00 2001 From: Brady Owens Date: Fri, 10 Oct 2025 21:21:15 -0400 Subject: [PATCH 5/6] #168 Update appTransport test with new JWT package --- appsTransport_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/appsTransport_test.go b/appsTransport_test.go index 37a2b2c..02483b4 100644 --- a/appsTransport_test.go +++ b/appsTransport_test.go @@ -9,7 +9,7 @@ import ( "strings" "testing" - jwt "github.com/golang-jwt/jwt/v4" + jwt "github.com/golang-jwt/jwt/v5" "github.com/google/go-cmp/cmp" ) From cc2aee656042291c44b2205a7685b3e7501d4348 Mon Sep 17 00:00:00 2001 From: Brady Owens Date: Fri, 10 Oct 2025 21:21:30 -0400 Subject: [PATCH 6/6] #168 Update sign with new JWT package --- sign.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sign.go b/sign.go index 928e10e..e626a60 100644 --- a/sign.go +++ b/sign.go @@ -3,7 +3,7 @@ package ghinstallation import ( "crypto/rsa" - jwt "github.com/golang-jwt/jwt/v4" + jwt "github.com/golang-jwt/jwt/v5" ) // Signer is a JWT token signer. This is a wrapper around [jwt.SigningMethod] with predetermined