chore(deps): bump python-jose
Bumps the pip group with 1 update in the /backend directory: [python-jose](https://github.com/mpdavis/python-jose). Updates `python-jose` from 3.3.0 to 3.4.0 - [Release notes](https://github.com/mpdavis/python-jose/releases) - [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md) - [Commits](https://github.com/mpdavis/python-jose/compare/3.3.0...3.4.0) --- updated-dependencies: - dependency-name: python-jose dependency-version: 3.4.0 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>
This commit is contained in:
@@ -11,7 +11,7 @@ psycopg2-binary==2.9.11
|
||||
asyncpg==0.31.0
|
||||
|
||||
# Authentication
|
||||
python-jose[cryptography]==3.3.0
|
||||
python-jose[cryptography]==3.4.0
|
||||
bcrypt==4.3.0
|
||||
python-multipart==0.0.22 # Updated: Fixed multiple vulnerabilities (was 0.0.6)
|
||||
authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)
|
||||
|
||||
Reference in New Issue
Block a user