Release v4.0.0 (#490)

.version

@@ -1 +1 @@
-v3.2.2
+v4.0.0

CHANGELOG.md

@@ -1,5 +1,14 @@
 # Change Log
 
+## [v4.0.0](https://github.com/auth0/node-jwks-rsa/tree/v4.0.0) (2026-02-27)
+[Full Changelog](https://github.com/auth0/node-jwks-rsa/compare/v3.2.2...v4.0.0)
+
+**⚠️ BREAKING CHANGES**
+- Drops support for Node 14, 16, and 18. The minimum supported Node versions are now 20.19.0, 22.12.0, and 23.0.0.
+- Drops support for the ES256K algorithm (secp256k1 curve). Keys using ES256K will be ignored. Users must transition to a supported curve (e.g., ES256/P-256) or handle legacy keys externally.
+- feat: upgrade jose dependency to v6 [\#486](https://github.com/auth0/node-jwks-rsa/pull/486) ([cschetan77](https://github.com/cschetan77))
+- chore: upgrade minimum Node.js runtime to 20.19.0 [\#485](https://github.com/auth0/node-jwks-rsa/pull/485) ([cschetan77](https://github.com/cschetan77))
+
 ## [v3.2.2](https://github.com/auth0/node-jwks-rsa/tree/v3.2.2) (2026-01-23)
 [Full Changelog](https://github.com/auth0/node-jwks-rsa/compare/v3.2.1...v3.2.2)
 

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "jwks-rsa",
-  "version": "3.2.2",
+  "version": "4.0.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "jwks-rsa",
-      "version": "3.2.2",
+      "version": "4.0.0",
       "license": "MIT",
       "dependencies": {
         "@types/jsonwebtoken": "^9.0.4",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "jwks-rsa",
-  "version": "3.2.2",
+  "version": "4.0.0",
   "description": "Library to retrieve RSA public keys from a JWKS endpoint",
   "main": "src/index.js",
   "files": [