Bump PyJWT >= 2.12.0 (CVE-2026-32597)

This commit is contained in:
Jeremiah Lowin 2026-03-15 11:20:38 -04:00
commit 9e29a49a94
No known key found for this signature in database
2 changed files with 3 additions and 0 deletions

View file

@ -25,6 +25,7 @@ dependencies = [
"jsonref>=1.1.0",
"uncalled-for>=0.2.0",
"watchfiles>=1.0.0",
"PyJWT>=2.12.0",
]
requires-python = ">=3.10"

2
uv.lock generated
View file

@ -780,6 +780,7 @@ dependencies = [
{ name = "platformdirs" },
{ name = "py-key-value-aio", extra = ["filetree", "keyring", "memory"] },
{ name = "pydantic", extra = ["email"] },
{ name = "pyjwt" },
{ name = "pyperclip" },
{ name = "python-dotenv" },
{ name = "pyyaml" },
@ -866,6 +867,7 @@ requires-dist = [
{ name = "pydantic", extras = ["email"], specifier = ">=2.11.7" },
{ name = "pydantic-monty", marker = "extra == 'code-mode'", specifier = ">=0.0.8" },
{ name = "pydocket", marker = "extra == 'tasks'", specifier = ">=0.18.0" },
{ name = "pyjwt", specifier = ">=2.12.0" },
{ name = "pyperclip", specifier = ">=1.9.0" },
{ name = "python-dotenv", specifier = ">=1.1.0" },
{ name = "pyyaml", specifier = ">=6.0,<7.0" },