Bump jwt from 2.7.1 to 2.8.2

[dependabot[bot]]

Bumps jwt from 2.7.1 to 2.8.2.

Changelog

Sourced from jwt's changelog.

v2.8.2 (2024-06-18)

Full Changelog

Fixes and enhancements:

• Print deprecation warnings only on when token decoding succeeds #600 (@​anakinj)
• Unify code style #602 (@​anakinj)

v2.8.1 (2024-02-29)

Full Changelog

Features:

• Configurable base64 decode behaviour #589 (@​anakinj)

Fixes and enhancements:

• Output deprecation warnings once #589 (@​anakinj)

v2.8.0 (2024-02-17)

Full Changelog

Features:

• Updated rubocop to 1.56 #573 (@​anakinj)
• Run CI on Ruby 3.3 #577 (@​anakinj)
• Deprecation warning added for the HMAC algorithm HS512256 (HMAC-SHA-512 truncated to 256-bits) #575 (@​anakinj)
• Stop using RbNaCl for standard HMAC algorithms #575 (@​anakinj)

Fixes and enhancements:

• Fix signature has expired error if payload is a string #555 (@​GobinathAL)
• Fix key base equality and spaceship operators #569 (@​magneland)
• Remove explicit base64 require from x5c_key_finder #580 (@​anakinj)
• Performance improvements and cleanup of tests #581 (@​anakinj)
• Repair EC x/y coordinates when importing JWK #585 (@​julik)
• Explicit dependency to the base64 gem #582 (@​anakinj)
• Deprecation warning for decoding content not compliant with RFC 4648 #582 (@​anakinj)
• Algorithms moved under the ::JWT::JWA module (@​anakinj)

Commits

• e674ca3 Version 2.8.2
• 3f1a899 Unify code style and simplify rubocop configuration
• 1d2b671 Always empty warnings
• 8b45cb1 Print deprecation warnings only if token validation succeeds
• 764bc34 Prepare next iteration
• ea1e441 Version 2.8.1
• db99c67 Configurabe base64 behaviour and log deprecations once by default
• bd3f80b Next iteration
• 956fa1b Version 2.8.0
• d9352e8 Adjust to changed exception message
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.