Compare commits

...

4 commits

Author SHA1 Message Date
Jeremiah Lowin
bc4ea2157f
Upgrade examples/testing_demo lockfile, drops diskcache (CVE-2025-69872) 2026-03-15 11:52:51 -04:00
Jeremiah Lowin
39ec253dca
Bump PyJWT in examples/testing_demo lockfile 2026-03-15 11:31:50 -04:00
Jeremiah Lowin
f9d51b8681
Move PyJWT floor to azure optional dependency group 2026-03-15 11:25:24 -04:00
Jeremiah Lowin
9e29a49a94
Bump PyJWT >= 2.12.0 (CVE-2026-32597) 2026-03-15 11:20:38 -04:00
3 changed files with 516 additions and 809 deletions

File diff suppressed because it is too large Load diff

View file

@ -54,7 +54,8 @@ classifiers = [
[project.optional-dependencies]
anthropic = ["anthropic>=0.40.0"]
apps = ["prefab-ui>=0.11.2"]
azure = ["azure-identity>=1.16.0"]
# PyJWT floor: transitive via msal; CVE-2026-32597 affects <= 2.11.0
azure = ["azure-identity>=1.16.0", "PyJWT>=2.12.0"]
code-mode = ["pydantic-monty>=0.0.8"]
gemini = ["google-genai>=1.18.0"]
openai = ["openai>=1.102.0"]

2
uv.lock generated
View file

@ -799,6 +799,7 @@ apps = [
]
azure = [
{ name = "azure-identity" },
{ name = "pyjwt" },
]
code-mode = [
{ name = "pydantic-monty" },
@ -866,6 +867,7 @@ requires-dist = [
{ name = "pydantic", extras = ["email"], specifier = ">=2.11.7" },
{ name = "pydantic-monty", marker = "extra == 'code-mode'", specifier = ">=0.0.8" },
{ name = "pydocket", marker = "extra == 'tasks'", specifier = ">=0.18.0" },
{ name = "pyjwt", marker = "extra == 'azure'", specifier = ">=2.12.0" },
{ name = "pyperclip", specifier = ">=1.9.0" },
{ name = "python-dotenv", specifier = ">=1.1.0" },
{ name = "pyyaml", specifier = ">=6.0,<7.0" },