build(deps): update jwt requirement from >= 2.2.3, < 2.5.0 to >= 2.2.3, < 2.7.0

[dependabot[bot]]

Updates the requirements on jwt to permit the latest version.

Changelog

Sourced from jwt's changelog.

v2.6.0 (2022-12-22)

Full Changelog

Features:

• Support custom algorithms by passing algorithm objects#512 (@​anakinj).
• Support descriptive (not key related) JWK parameters#520 (@​bellebaum).
• Support for JSON Web Key Sets#525 (@​bellebaum).
• Support HMAC keys over 32 chars when using RbNaCl#521 (@​anakinj).

Fixes and enhancements:

• Raise descriptive error on empty hmac_secret and OpenSSL 3.0/openssl gem <3.0.1 #530 (@​jonmchan).

v2.5.0 (2022-08-25)

Full Changelog

Features:

• Support JWK thumbprints as key ids #481 (@​anakinj).
• Support OpenSSL >= 3.0 #496 (@​anakinj).

Fixes and enhancements:

• Bring back the old Base64 (RFC2045) deocode mechanisms #488 (@​anakinj).
• Rescue RbNaCl exception for EdDSA wrong key #491 (@​n-studio).
• New parameter name for cases when kid is not found using JWK key loader proc #501 (@​anakinj).
• Fix NoMethodError when a 2 segment token is missing 'alg' header #502 (@​cmrd-senya).

v2.4.1 (2022-06-07)

Full Changelog

Fixes and enhancements:

• Raise JWT::DecodeError on invalid signature #484 (@​freakyfelt!).

v2.4.0 (2022-06-06)

Full Changelog

Features:

• Dropped support for Ruby 2.5 and older #453 - @​anakinj.
• Use Ruby built-in url-safe base64 methods #454 - @​bdewater.
• Updated rubocop to 1.23.0 #457 - @​anakinj.
• Add x5c header key finder #338 - @​bdewater.
• Author driven changelog process #463 - @​anakinj.
• Allow regular expressions and procs to verify issuer #437 (rewritten).
• Add Support to be able to verify from multiple keys #425 (ritikesh).

... (truncated)

Commits

• 604fe61 Bump version to 2.6.0
• f6c93c7 HMAC using RbNaCL separated into own implementations.
• 2c6fa02 Smoke test for built gem
• d34d808 Tests for missing and empty token header
• b478722 Collect coverage from all previous tests
• 38b75dc Raise error on incomplete RSA ANS.1 sequence
• 6167a62 Moved constants close to each other
• 5be1d79 Avoid iterating the RSA_OPT_PARAMS twice
• 3b11042 Better reasons to skip tests
• e7fceee Skip tests that will not work on certain OpenSSL versions
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #333.