You'll notice
An invalid OIDC issuer now gives a clear not-a-valid-URL error instead of an uncaught exception.
OIDC discovery and token-exchange code paths now check URL.canParse() on the well-known/token endpoint URL before constructing a URL object. An invalid issuer now surfaces a clear "issuer is not a valid URL" error instead of an uncaught exception from URL construction.