Skip to content

Commit bb9b8a5

Browse files
committed
fix(deps): upgrade PyJWT from 2.10.1 to 2.12.1 to address CVE
PyJWT~=2.10.1 was pinning below the security fix in 2.12.x. Widening to ~=2.12.1 picks up the patched release while staying within the 2.x major. All IAS token tests pass with the new version.
1 parent 6aa929d commit bb9b8a5

2 files changed

Lines changed: 6 additions & 6 deletions

File tree

pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ dependencies = [
2020
"opentelemetry-processor-baggage~=0.61b0",
2121
"traceloop-sdk~=0.54.0",
2222
"httpx>=0.27.0",
23-
"PyJWT~=2.10.1",
23+
"PyJWT~=2.12.1",
2424
"protobuf>=4.25.0",
2525
"protovalidate>=0.13.0",
2626
"grpcio>=1.60.0",

uv.lock

Lines changed: 5 additions & 5 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)