fix(deps): bump joserfc from 1.0.4 to 1.1.0

[dependabot]

Bumps joserfc from 1.0.4 to 1.1.0.

Release notes

Sourced from joserfc's releases.

1.1.0

   🚨 Breaking Changes

• Use ECKey.binding.register_curve to register new supported curves.  -  by @​lepture (04dd9)

   🚀 Features

• Add __eq__ for Key and KeySet  -  by @​lepture (2ebe3)
• Use InvalidHeaderValueError in registry header validation  -  by @​lepture in authlib/joserfc#47 (79826)
• Prevent from Base64 Malleability  -  by @​FrancoisCapon in authlib/joserfc#51 (9da05)
• Export import_key and generate_key methods  -  by @​lepture (48a3a)

   🐞 Bug Fixes

• Use import as for prioritize the modules for editors  -  by @​lepture (20e15)
• Use UnsupportedAlgorithmError instead of ValueError in JWS/JWE registry  -  by @​lepture (b603e)
• Use MissingKeyTypeError, InvalidKeyIdError errors  -  by @​lepture (4bc5b)
• Allow jwt.encode passing encoder_cls and jwt.decode passing decoder_cls  -  by @​lepture (ce9a4)
• Use correct types for encoder_cls and decoder_cls parameters  -  by @​lepture (e403e)
• Respect RFC6749 character set in error descriptions  -  by @​azmeuk (70819)
• Add KeyBase and GuestProtocol to __all__  -  by @​nsmithuk (b9ec7)
• Update header validation raised errors  -  by @​lepture in authlib/joserfc#45 (2be0f)
• Add "none" algorithm for JWS  -  by @​lepture in authlib/joserfc#44 (cf0ad)
• Cleanup joserfc.util  -  by @​lepture (28f58)
• Cleanup useless code in joserfc.util  -  by @​lepture (e2af0)
• Update default value type hints for BaseKey.get method, #52  -  by @​lepture in authlib/joserfc#52 (eafa0)
• Raise MissingKeyError when import empty key set. #35  -  by @​lepture in authlib/joserfc#35 (3555f)
• Remove useless catching binascii.Error  -  by @​lepture (a3da1)

    View changes on GitHub

Changelog

Sourced from joserfc's changelog.

1.1.0

Released on May 24, 2025

• Use "import as" to prioritize the modules for editors.
• Added parameter encoder_cls for jwt.encode and decoder_cls for jwt.decode.
• Added none algorithm for JWS.
• Added jwk.import_key and jwk.generate_key aliases.

Breaking changes:

• Use ECKey.binding.register_curve to register new supported curves.
• Use UnsupportedAlgorithmError instead of ValueError in JWS/JWE registry.
• Use MissingKeyTypeError and InvalidKeyIdError for errors in JWK.
• Use UnsupportedHeaderError, MissingHeaderError, and MissingCritHeaderError for header validation.
• Respect RFC6749 character set in error descriptions.

Commits

• 68df43f chore: release 1.1.0
• a3da19d fix: remove useless catching binascii.Error
• e2520a5 tests: add more test cases for UnsupportedAlgorithmError
• 3555fe5 fix: raise MissingKeyError when import empty key set. #35
• eafa07e fix: update default value type hints for BaseKey.get method, #52
• 48a3a71 feat: Export import_key and generate_key methods
• 8cf217d chore: Potential fix for code scanning alert no. 4: Workflow does not contain...
• e2af045 fix: cleanup useless code in joserfc.util
• 28f584a fix: cleanup joserfc.util
• b1e16e1 refactor: update urlsafe_b64decode function
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Filip Andonie (Filip1x9)]

Dependabot (@dependabot) rebase

[Filip Andonie (Filip1x9)]

Dependabot (@dependabot) squash and merge