chore(deps): bump jsonwebtoken 9.3 -> 10.4 (#1810)

Signed-off-by: Simo Lin <linsimo.mark@gmail.com>

Author: slin1237

crates/auth/Cargo.toml

@@ -29,7 +29,9 @@ subtle.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
 # Only used by auth
-jsonwebtoken = { version = "9.3", default-features = false, features = ["use_pem"] }
+# jsonwebtoken 10 decouples crypto behind a provider trait; `rust_crypto` selects the
+# RustCrypto backend (matches the workspace's pure-Rust stack, no aws-lc-sys C build).
+jsonwebtoken = { version = "10.4", default-features = false, features = ["use_pem", "rust_crypto"] }
 sha2 = "0.11"
 url = "2.5"
 

model_gateway/Cargo.toml

@@ -145,7 +145,7 @@ npyz = { version = "0.9", features = ["npz"] }
 opentelemetry-proto = { version = "0.32", features = ["gen-tonic"] }
 serial_test = "3.5"
 rsa = { version = "0.9", features = ["sha2"] }
-jsonwebtoken = "9.3"
+jsonwebtoken = { version = "10.4", features = ["rust_crypto"] }
 validator = "0.20.0"
 tracing-test = "0.2"
 tokio = { workspace = true, features = ["test-util"] }