Update dependency com.auth0:java-jwt to v3.19.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
com.auth0:java-jwt	3.8.2 -> 3.19.4

---

Release Notes

auth0/java-jwt (com.auth0:java-jwt)

v3.19.4

Compare Source

Full Changelog

This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices.
Please review the README note for additional details.

v3.19.3

Compare Source

Full Changelog

Security

• Update com.fasterxml.jackson.core:jackson-databind to 2.13.4.2 #​631 (jimmyjames)

v3.19.2

Compare Source

Full Changelog

Security

• [SDK-3311] Added protection against CVE-2022-21449 #​579 (poovamraj)

v3.19.1

Compare Source

Full Changelog

Security

• Security: Bump jackson-databind to 2.13.2.2 #​566 (evansims)

v3.19.0

Compare Source

Full Changelog

Deprecated

• Deprecate ES256K Algorithm #​543 (poovamraj)

Fixed

• fix typos in JWTVerifier#verify docstring #​526 (OdunlamiZO)

Security

• Bump jackson-databind dependency to 2.13.2 #​542 (evansims)

v3.18.3

Compare Source

Full Changelog

Security

• Update jackson dependency #​523 (poovamraj)

v3.18.2

Compare Source

Full Changelog

Fixed

• [SDK-2758] Restore withIssuer #​513 (jimmyjames)
• [SDK-2751] Serialize audience claim when a List #​512 (jimmyjames)

v3.18.1

Compare Source

Full Changelog

Fixed

• Fix min JDK version regression #​504 (lbalmaceda)

v3.18.0

Compare Source

Full Changelog

Changed

• Update OSS release plugin version #​501 (lbalmaceda)

v3.17.0

Compare Source

Full Changelog

Added

• Add module system support #​484 (XakepSDK)

v3.16.0

Compare Source

Full Changelog

Changed

• Improve Javadoc generation #​496 (Marcono1234)
• Add package-info.java for internal impl package #​495 (Marcono1234)

v3.15.0

Compare Source

Full Changelog

Changed

• Remove jcenter #​482 (jimmyjames)
• Move form commons-codec Base64 to j.u.Base64 #​478 (XakepSDK)

v3.14.0

Compare Source

Full Changelog

Added

• Add withPayload to JWTCreator.Builder #​475 (jimmyjames)

v3.13.0

Compare Source

Full Changelog

Added

• Add ability to verify audience contains at least one of those expected #​472 (jimmyjames)
• Add toString to Claim objects [SDK-2225] #​469 (jimmyjames)

v3.12.1

Compare Source

Full Changelog

Changed

• Update jackson-databind to 2.11.0 #​464 (darveshsingh)

v3.12.0

Compare Source

Full Changelog

Changed

• Thread-safe classes should be Shared statically #​462 (LeeHainie)

Security

• Update jackson-databind to 2.10.5.1 (fixes CVE-2020-25649) #​463 (overheadhunter)

Breaking changes

• Target Java 8 #​455 (lbalmaceda)

v3.11.0

Compare Source

Full Changelog

Added

• Add ability to verify claim presence #​442 (jimmyjames)
• Add Support for secp256k1 algorithms (AKA ES256K) #​439 (jimmyjames)

Fixed

• Fix and document thread-safety #​427 (lbalmaceda)
• Wrap IllegalArgumentException into JWTDecodeException #​426 (lbalmaceda)

v3.10.3

Compare Source

Full Changelog

Fixed

• Fixed an NPE on null map and list claims #​417 (Vorotyntsev)

v3.10.2

Compare Source

Full Changelog

Fixed

• JavaDoc fix #​413 (jimmyjames)
• Check varargs null values in JWTVerifier #​412 (jimmyjames)

v3.10.1

Compare Source

Full Changelog

Changed

• Update Jackson and Commons Codec dependencies #​407 (jimmyjames)

Security

• Update jackson-databind to 2.10.2 #​399 (gexclaude)

v3.10.0

Compare Source

Full Changelog
Closed issues

• NullPointerException when the claim doesn't exist in the token #​384

Added

• Add Javadoc URL and badge to the README #​382 (lbalmaceda)
• Allow to customize the typ header claim #​381 (lbalmaceda)
• JWTCreator for basic types #​282 (skjolber)
• Support verification of Long[] datatype like in JWTCreator #​278 (skjolber)

Changed

• Update to Gradle 6.1.1 #​389 (jimmyjames)

Fixed

• Handle missing expected array claim #​393 (lbalmaceda)
• Update tests to use valid Base64 URL-encoded tokens #​386 (jimmyjames)

v3.9.0

Compare Source

Full Changelog

Added

• Support serialization of DecodedJWT #​370 (jimmyjames)

Fixed

• Fixing JwtCreator builder when setting headers as a map #​320 (maxbalan)

v3.8.3

Compare Source

Full Changelog

Security

• Fix: updated jackson-databind to 2.10.0.pr3 to block CVE #​356 (danbrodsky)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.