From 9e29a49a94f01df286b5d205159dc9b4cf0f7fe8 Mon Sep 17 00:00:00 2001
From: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
Date: Sun, 15 Mar 2026 11:20:38 -0400
Subject: [PATCH] Bump PyJWT >= 2.12.0 (CVE-2026-32597)

---
 pyproject.toml | 1 +
 uv.lock        | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/pyproject.toml b/pyproject.toml
index a2ca97991..1297f2698 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -25,6 +25,7 @@ dependencies = [
     "jsonref>=1.1.0",
     "uncalled-for>=0.2.0",
     "watchfiles>=1.0.0",
+    "PyJWT>=2.12.0",
 ]
 
 requires-python = ">=3.10"
diff --git a/uv.lock b/uv.lock
index 4390a2b4a..d43c012da 100644
--- a/uv.lock
+++ b/uv.lock
@@ -780,6 +780,7 @@ dependencies = [
     { name = "platformdirs" },
     { name = "py-key-value-aio", extra = ["filetree", "keyring", "memory"] },
     { name = "pydantic", extra = ["email"] },
+    { name = "pyjwt" },
     { name = "pyperclip" },
     { name = "python-dotenv" },
     { name = "pyyaml" },
@@ -866,6 +867,7 @@ requires-dist = [
     { name = "pydantic", extras = ["email"], specifier = ">=2.11.7" },
     { name = "pydantic-monty", marker = "extra == 'code-mode'", specifier = ">=0.0.8" },
     { name = "pydocket", marker = "extra == 'tasks'", specifier = ">=0.18.0" },
+    { name = "pyjwt", specifier = ">=2.12.0" },
     { name = "pyperclip", specifier = ">=1.9.0" },
     { name = "python-dotenv", specifier = ">=1.1.0" },
     { name = "pyyaml", specifier = ">=6.0,<7.0" },