[dependabot]

Bumps com.nimbusds:nimbus-jose-jwt from 10.3 to 10.10.

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

10.3 (2025-05-09) * Restores the Gson shading, adding placeholder interfaces to prevent NoClassDefFoundError occurrences at runtime when the JAR is used on a module path (iss #550).

10.3.1 (2025-07-01) * OctetKeyPairGenerator with Curve.Ed25519 should use the provided SecureRandom (iss #590).

10.4 (2025-07-19) * Creates a hierarchy of Option interfaces, extended by JWSSignerOption, JWEEncrypterOption and JWEDecrypterOption. Intended to provide optional configuration parameters to RSASSASigner, ECDSASigner, RSADecrypter, etc. * Introduces CipherMode implementing JWEEncrypterOption and JWEDecrypterOption, to specify a preferred JCA Cipher mode, such as MODE_ENCRYPT / MODE_DECRYPT when the default MODE_WRAP / MODE_UNWRAP is not supported by the JCA provider (iss #576). * Updates RSAEncrypter and RSADecrypter to support the JWEEncrypterOption CipherMode.ENCRYPT_DECRYPT (iss #576). * Factors out OptionUtils.ensureMinRSAPrivateKeySize. * Deprecates OptionUtils.optionIsPresent.

10.4.1 (2025-08-05) * Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595).

10.4.2 (2025-08-14) * Updates GSon to 2.13.1. * Updates BouncyCastle to 1.81.

10.5 (2025-09-05) * Support for specifying a ScheduledExecutorService instance in RefreshAheadCachingJWKSetSource and JWKSourceBuilder (iss #592).

10.6 (2025-11-06) * Adds static CollectionUtils.containsNull(Set) method. * DefaultJWTClaimsVerifier accepted "aud" (audience) argument must be compatible with Set.of (iss #499). * The DefaultJWTClaimsVerifier must not include JWT claim values in BadJWTException messages (iss #605).

10.7 (2026-01-08) * Adds MaxCompressedCipherTextLength that implements JWEDecrypterOption, to to configure the maximum allowed length of compressed cipher text. * Adds JWEObject.decrypt(JWEDecrypter, Set) method to support the MaxCompressedCipherTextLength option.

10.8 (2026-02-19) * Adds a PasswordBasedDecrypter(byte[], Set) constructor to specify names of the critical header parameters that are deferred to the application for processing. Aligns with other JWEDecrypter and

... (truncated)

Commits

• 78e86f8 DefaultJWTClaimsVerifier accepted "aud" (audience) argument must be compatibl...
• d4c1e05 [maven-release-plugin] prepare release 10.6
• 6a6d0b3 [maven-release-plugin] prepare for next development iteration
• 72ba7d2 Add configurable max compressed cipher text length for JWE decryption (iss #570)
• 74d1dd1 Merged in feature/configurable-max-compressed-ciphertext-length (pull request...
• 1b4a3eb Edits JavaDocs, CHANGELOG.txt for 10.7 release
• 9f4752d Adds casts to tests
• ebdea4e [maven-release-plugin] prepare release 10.7
• 9509dc5 [maven-release-plugin] prepare for next development iteration
• 0e27c9c Adds a PasswordBasedDecrypter(byte[], Set<String>) constructor to specify nam...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Test Results

 1 156 files  ±0   1 156 suites  ±0   4h 7m 32s ⏱️ + 44m 17s
10 984 tests ±0  10 644 ✅ ±0  340 💤 ±0  0 ❌ ±0 
11 172 runs  ±0  10 832 ✅ ±0  340 💤 ±0  0 ❌ ±0 

Results for commit 2db7fd4. ± Comparison against base commit d3279e8.