v1.9.3

What's Changed

• build(deps-dev): bump js-yaml from 4.3.1 to 4.3.2 in /cli by @dependabot[bot] in #336
• fix: an empty narrowed scope set is a denial, not an omitted request by @rsharath in #345
• fix: refuse clients registered for an auth method we cannot enforce by @saucam in #346
• feat: implement RFC 7523 §2.2 private_key_jwt client authentication (#206) by @saucam in #347
• fix: CIMD honours the supported grant subset instead of rejecting the document (#344) by @saucam in #350
• fix: derive client-authentication questions instead of reading client_type (#348) by @saucam in #349
• feat: confidential CIMD clients — parse jwks/jwks_uri and accept private_key_jwt (#264) by @saucam in #351

Full Changelog: v1.9.2...v1.9.3