chore: release 1.6.3

Author: lepture

docs/changelog.rst

@@ -12,6 +12,13 @@ Changelog
 .. module:: joserfc
     :noindex:
 
+1.6.3
+-----
+
+**Released on February 25, 2026**
+
+- **JWE**: Set a max value for ``p2c`` header.
+
 1.6.2
 -----
 

src/joserfc/__init__.py

@@ -1,4 +1,4 @@
-__version__ = "1.6.2"
+__version__ = "1.6.3"
 __homepage__ = "https://jose.authlib.org/en/"
 __author__ = "Hsiaoming Yang <me@lepture.com>"
 __license__ = "BSD-3-Clause"

src/joserfc/_rfc7518/jwe_encs.py

@@ -53,7 +53,6 @@ def encrypt(self, plaintext: bytes, cek: bytes, iv: bytes, aad: bytes) -> tuple[
         pad = PKCS7(AES.block_size).padder()
         padded_data = pad.update(plaintext) + pad.finalize()
 
-        # noqa: S5542  # Safe: JWE A128CBC-HS256 uses CBC + HMAC (Encrypt-then-MAC)
         cipher = Cipher(AES(ekey), CBC(iv))
         enc = cipher.encryptor()
         ciphertext = enc.update(padded_data) + enc.finalize()
@@ -69,7 +68,6 @@ def decrypt(self, ciphertext: bytes, tag: bytes, cek: bytes, iv: bytes, aad: byt
         if not hmac.compare_digest(ctag, tag):
             raise DecodeError("tag does not match")
 
-        # noqa: S5542  # Safe: JWE A128CBC-HS256 uses CBC + HMAC (Encrypt-then-MAC)
         cipher = Cipher(AES(dkey), CBC(iv))
         d = cipher.decryptor()
         data = d.update(ciphertext) + d.finalize()