[dependabot]

Bumps org.bitbucket.b_c:jose4j from 0.9.6 to 0.9.7.

Changelog

Sourced from [org.bitbucket.b_c:jose4j's changelog](https://bitbucket.org/b_c/jose4j/src/master/Release Notes.md).

jose4j-0.9.7 - September 9, 2026

• update test dependencies
• cap the size of numbers for better resource utilization in JSON processing (hat tip to Mike Read for the tip)
• fix some typos and other issues in javadoc and log messages
• updates for newer maven central publishing

Commits

• 756257e [maven-release-plugin] prepare for next development iteration
• 5db177b Look for Tag mismatch with no "!" b/c apparently maybe that changed
• 71a6650 Merged in strict-aud-validation (pull request #26)
• 05ce887 Compiler source and target to 1.8
• f7c6da8 Update slf4j, bouncycastle, and mockito dependencies
• 3ac5eb4 Merged in fix-comment-typos (pull request #27)
• a87874c Fix stated default in Get.setResponseBodySizeLimit javadoc
• 51bdce2 fix log message arg number missmatch
• 7d8c470 Another log message arg number mismatch with a different fix
• 908a55e cap the size of numbers for better resource utilization in JSON processing (h...
• Additional commits viewable in compare view

[ingvaar]

@dependabot rebase

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Enterprise
• Run ID: aa061ea4-475c-4433-bcd7-3d7ce3d6f367

📥 Commits

Reviewing files that changed from the base of the PR and between ecd4b4e and afd1365.

📒 Files selected for processing: 1

• pom.xml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 10 remain after this review.

Summary by CodeRabbit

• Chores
  • Applied an internal maintenance update. No user-facing changes are noted in this release. Existing functionality and behavior remain unchanged.

Walkthrough

The Maven configuration updates the JOSE4J version from 0.9.6 to 0.9.7. The supplied context does not establish whether this dependency is on a production outage path.

Changes

JOSE4J dependency

Layer / File(s)	Summary
Update JOSE4J version pom.xml	The jose4j.version property changes from 0.9.6 to 0.9.7.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Merge Risk: ⚪ Minimal · up to afd13

The dependency update preserves the existing JWT verification integration, with no established merge-blocking behavior change.

Architecture risk: 🔵 Low · up to afd13

The change affects 1 system.

Changed systems: pom.xml

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — pom.xml (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in pom.xml: The jose4j.version property changes from 0.9.6 to 0.9.7.

Pre-merge checks: 4

Check name	Status	Explanation
Title check		The title clearly identifies the dependency and the exact version update from 0.9.6 to 0.9.7. The change is limited to a dependency version and does not indicate a production outage path.
Description check		The description directly explains the jose4j dependency update and includes the relevant 0.9.7 changelog. The description is related to the changeset.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}