Changed
- Fix advisory GHSA-869p-cjfg-cm3x: createSign and createVerify now require
that a non empty secret is provided (via opts.secret, opts.privateKey or opts.key)
when using HMAC algorithms. - Upgrading JWA version to 2.0.1, addressing a compatibility issue for Node >= 25.