chore: release 1.3.3

Author: lepture

docs/changelog.rst

@@ -12,6 +12,13 @@ Changelog
 .. module:: joserfc
     :noindex:
 
+1.3.3
+-----
+
+**Released on September 15, 2025**
+
+- Reject ``crit`` header in unprotected headers.
+
 1.3.2
 -----
 

src/joserfc/__init__.py

@@ -1,4 +1,4 @@
-__version__ = "1.3.2"
+__version__ = "1.3.3"
 __homepage__ = "https://jose.authlib.org/en/"
 __author__ = "Hsiaoming Yang <me@lepture.com>"
 __license__ = "BSD-3-Clause"

src/joserfc/_rfc7517/models.py

@@ -82,7 +82,7 @@ class BaseKey(t.Generic[NativePrivateKey, NativePublicKey], metaclass=ABCMeta):
     value_registry: t.ClassVar[KeyParameterRegistryDict]
     param_registry: t.ClassVar[KeyParameterRegistryDict] = JWK_PARAMETER_REGISTRY
     operation_registry: t.ClassVar[KeyOperationRegistryDict] = JWK_OPERATION_REGISTRY
-    thumbprint_digest_method: t.ClassVar[t.Literal["sha256", "sha384", "sha512"]] = "sha256"
+    thumbprint_digest_method: t.Literal["sha256", "sha384", "sha512"] = "sha256"
 
     def __init__(
         self,