Skip to content

[chore][extension/oidcauth] bump go-oidc, remove custom JWS parsing#41694

Merged
atoulme merged 2 commits into
open-telemetry:mainfrom
asweet-confluent:address-jose-cve
Aug 6, 2025
Merged

[chore][extension/oidcauth] bump go-oidc, remove custom JWS parsing#41694
atoulme merged 2 commits into
open-telemetry:mainfrom
asweet-confluent:address-jose-cve

Conversation

@asweet-confluent
Copy link
Copy Markdown
Contributor

Description

  • Upgrades go-oidc to include this change
  • Removes the custom JWT parsing code and replaces it with an equivalent function from go-jose.

Link to tracking issue

Fixes #41556.

Testing

I'm relying on existing unit tests.

@atoulme atoulme merged commit 719a477 into open-telemetry:main Aug 6, 2025
181 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade go-jose to 4.0.5 above to address CVE-2025-27144

3 participants