Merge pull request #77 from christianlouis/dependabot/pip/backend/pip-49f76fc107

chore(deps): bump python-jose from 3.3.0 to 3.4.0 in /backend in the pip group across 1 directory
This commit is contained in:
Christian Krakau-Louis
2026-03-25 23:54:28 +01:00
committed by GitHub
+1 -1
View File
@@ -11,7 +11,7 @@ psycopg2-binary==2.9.11
asyncpg==0.31.0
# Authentication
python-jose[cryptography]==3.3.0
python-jose[cryptography]==3.4.0
bcrypt==4.3.0
python-multipart==0.0.22 # Updated: Fixed multiple vulnerabilities (was 0.0.6)
authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)