chore(deps): bump authlib from 1.6.12 to 1.7.2 in /backend (#258)

Bumps [authlib](https://github.com/authlib/authlib) from 1.6.12 to 1.7.2.
- [Release notes](https://github.com/authlib/authlib/releases)
- [Commits](https://github.com/authlib/authlib/compare/1.6.12...v1.7.2)

---
updated-dependencies:
- dependency-name: authlib
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christian Krakau-Louis <christianlouis@gmail.com>
This commit is contained in:
dependabot[bot]
2026-05-18 16:17:39 +02:00
committed by GitHub
parent 9cc9af2735
commit 4b09a3beab
+1 -1
View File
@@ -15,7 +15,7 @@ asyncpg==0.31.0
python-jose[cryptography]==3.5.0 # Updated: Fixed algorithm confusion with OpenSSH ECDSA keys (was 3.3.0)
bcrypt==5.0.0
python-multipart==0.0.29 # Updated: Fixed multiple vulnerabilities (was 0.0.6)
authlib==1.6.12 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)
authlib==1.7.2 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)
httpx==0.28.1
# Payment Processing