fix(deps): update module github.com/lestrrat-go/jwx/v4 to v4.4.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/lestrrat-go/jwx/v4	v4.2.0 → v4.4.0

---

Release Notes

lestrrat-go/jwx (github.com/lestrrat-go/jwx/v4)

v4.4.0

Compare Source

For more detailed release notes, see Changes.

What's Changed

• implement ML-DSA natively on Go 1.27 by @​lestrrat in #​2309
• use released Go 1.27 in CI by @​lestrrat in #​2308
• move ML-DSA primitives to dsig by @​lestrrat in #​2310
• generate ML-DSA from jwa/objects.yml by @​lestrrat in #​2311
• show both ML-DSA paths in the extensions doc by @​lestrrat in #​2312
• make GOEXPERIMENT conditional on Go 1.26 by @​lestrrat in #​2313
• point ML-DSA doc cache at generated jwa file by @​lestrrat in #​2314
• strip inherited jsonv2 on Go 1.27 by @​lestrrat in #​2315

Full Changelog: lestrrat-go/jwx@v4.3.0...v4.4.0

v4.3.0

Compare Source

For more detailed release notes, see Changes.

What's Changed

• jwe: serialize the JSON "aad" member as BASE64URL(JWE AAD) by @​sueun-dev in #​2275
• add JWE authenticated data option by @​lestrrat in #​2277
• build(deps): bump actions/stale from 10.4.0 to 11.0.0 by @​dependabot[bot] in #​2281
• build(deps): bump github/codeql-action from 4 to 4.37.3 by @​dependabot[bot] in #​2284
• build(deps): bump github/codeql-action from 4.37.3 to 4.37.4 by @​dependabot[bot] in #​2286
• build(deps): bump github/codeql-action from 4.37.4 to 4.37.5 by @​dependabot[bot] in #​2291
• build(deps): bump github/codeql-action from 4.37.5 to 4.37.6 by @​dependabot[bot] in #​2294
• fuzz every package, not just the module root by @​lestrrat in #​2295
• retry a fuzz target that fails with no crasher by @​lestrrat in #​2296
• build(deps): bump github/codeql-action from 4.37.6 to 4.37.7 by @​dependabot[bot] in #​2303
• build(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 by @​dependabot[bot] in #​2302
• fix build under Go 1.27 by @​lestrrat in #​2304

New Contributors

• @​sueun-dev made their first contribution in #​2275

Full Changelog: lestrrat-go/jwx@v4.2.0...v4.3.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/stretchr/testify	v1.11.1 -> v1.12.0
github.com/lestrrat-go/dsig	v1.3.0 -> v1.4.0