From 960ab2a96f90f36a42fa5f629ebd0b37873f3318 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 25 Mar 2026 19:43:17 +0000 Subject: [PATCH] chore(deps): bump python-jose Bumps the pip group with 1 update in the /backend directory: [python-jose](https://github.com/mpdavis/python-jose). Updates `python-jose` from 3.3.0 to 3.4.0 - [Release notes](https://github.com/mpdavis/python-jose/releases) - [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md) - [Commits](https://github.com/mpdavis/python-jose/compare/3.3.0...3.4.0) --- updated-dependencies: - dependency-name: python-jose dependency-version: 3.4.0 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 3510b4d..0707b88 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -11,7 +11,7 @@ psycopg2-binary==2.9.11 asyncpg==0.31.0 # Authentication -python-jose[cryptography]==3.3.0 +python-jose[cryptography]==3.4.0 bcrypt==4.3.0 python-multipart==0.0.22 # Updated: Fixed multiple vulnerabilities (was 0.0.6) authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6)