fix(deps): update dependency kelvinmo/simplejwt to ^0.9.0

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
kelvinmo/simplejwt	^0.5.1 -> ^0.9.0

---

Release Notes

kelvinmo/simplejwt (kelvinmo/simplejwt)

v0.9.0

Compare Source

• Changed: Providing invalid JSON tokens into JWT::deserialise() and
  JWE::decrypt() will throw an InvalidTokenException instead of
  InvalidArgumentException
• Changed: JWT and JWE methods now check for validity of
  algorithm classes
• Changed: Additional type hinting on public API methods
• Removed: Support for PHP 7.2

v0.8.2

Compare Source

• Changed: Update dependency on symfony/console to support v7.0

v0.8.1

Compare Source

• Fixed: Throw a KeyException when loading an invalid PEM-encoded
  RSAKey

v0.8.0

Compare Source

• Added: Support for Ed25519 signatures and X25519 key derviation
  algorithms
• Added: Support for AES GCM key encryption algorithms (A128GCMKW,
  A192GCMKW and A256GCMKW)
• Added: Support for COSE based keys
• Changed: Use box to package the jwkstool utility
• Changed: Refactored Algorithm (now renamed to BaseAlgorithm)
  and Key to extract interfaces (into AlgorithmInterface and
  KeyInterface respectively)
• Changed: Key ID kid parameter no longer automatically generated
  when a Key object is created. Use Key::getKeyId(true) or
  KeySet::add(..., true) to generate a key ID
• Removed: Helper::getObject() and Helper::getJWTObject() have been
  replaced by Helper::decode() and Helper::decodeFully() respectively
• Removed: Support for PHP 7.1

v0.7.1

Compare Source

• Fixed: Incorrect key selection when encrypting/decrypting keys in
  ECDH-ES+AxxxKW (#​159)
• Fixed: Exporting keys as JSON in jwkstool

v0.7.0

Compare Source

• Changed: Split SimpleJWT\Crypt namespace into multiple namespaces, one
  for each algorithm type (#​60)
• Changed: JWT and JWE now derives from a common parent class Token
• Changed: Improved ASN.1 processing code (#​68)
• Changed: Util::base64url_decode() will now throw
  \UnexpectedValueException instead of returning false if the input
  cannot be decoded

v0.6.3

Compare Source

• Deprecated: Helper::getObject() and Helper::getJWTObject() have been
  replaced by Helper::decode() and Helper::decodeFully() respectively,
  and will be removed in future versions

v0.6.2

Compare Source

• Changed: Updated symfony/console package version
• Fixed: Compatibility with PHP 8.1 when using ECDH (#​58)

v0.6.1

Compare Source

• Changed: JWT::deserialise() no longer takes a $format parameter (which
  is already ignored)
• Changed: KeyFactory::create() now throws a KeyException if the supplied key
  cannot be decoded
• Changed: OpenSSLSig::getKeyCriteria() now throws an UnexpectedValueException
  if the supplied algorithm (alg header) is not valid
• Deprecated: Helper::getJWTObject() now ignores the $jwe_kid parameter
  and will be removed in future versions
• Fixed: API documentation for better static analysis checks

v0.6.0

Compare Source

• Added: Support for Elliptic Curve Diffie-Hellman Ephemeral Static algorithms
• Added: JWT::tokenHash() to calculate OpenID Connect access token hash values
• Changed: When parsing multi-recipient JWTs and JWEs without corresponding
  key, the error code for InvalidTokenException was changed from
  TOKEN_PARSE_ERROR to SIGNATURE_VERIFICATION_ERROR (for JWSs) and
  DECRYPTION_ERROR (for JWEs), so that they are consistent with their
  single-recipient equivalents
• Fixed: Decoding JSON formatted JWEs and JWKs
• Fixed: Parsing multi-recipient JWTs and JWEs

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[forking-renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (^0.9.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.