Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jun 1, 2023

Bumps pyjwt from 2.4.0 to 2.7.0.

Release notes

Sourced from pyjwt's releases.

2.7.0

What's Changed

New Contributors

Full Changelog: jpadilla/pyjwt@2.6.0...2.7.0

2.6.0

... (truncated)

Changelog

Sourced from pyjwt's changelog.

v2.7.0 <https://github.com/jpadilla/pyjwt/compare/2.6.0...2.7.0>__

Changed


- Changed the error message when the token audience doesn't match the expected audience by @irdkwmnsb `[#809](https://github.com/jpadilla/pyjwt/issues/809) <https://github.com/jpadilla/pyjwt/pull/809>`__
- Improve error messages when cryptography isn't installed by @Viicos in `[#846](https://github.com/jpadilla/pyjwt/issues/846) <https://github.com/jpadilla/pyjwt/pull/846>`__
- Make `Algorithm` an abstract base class by @Viicos in `[#845](https://github.com/jpadilla/pyjwt/issues/845) <https://github.com/jpadilla/pyjwt/pull/845>`__
- ignore invalid keys in a jwks by @timw6n in `[#863](https://github.com/jpadilla/pyjwt/issues/863) <https://github.com/jpadilla/pyjwt/pull/863>`__

Fixed


- Add classifier for Python 3.11 by @eseifert in `[#818](https://github.com/jpadilla/pyjwt/issues/818) &lt;https://github.com/jpadilla/pyjwt/pull/818&gt;`__
- Fix ``_validate_iat`` validation by @Viicos in `[#847](https://github.com/jpadilla/pyjwt/issues/847) &lt;https://github.com/jpadilla/pyjwt/pull/847&gt;`__
- fix: use datetime.datetime.timestamp function to have a milliseconds by @daillouf `[#821](https://github.com/jpadilla/pyjwt/issues/821) &lt;https://github.com/jpadilla/pyjwt/pull/821&gt;`__
- docs: correct mistake in the changelog about verify param by @gbillig in `[#866](https://github.com/jpadilla/pyjwt/issues/866) &lt;https://github.com/jpadilla/pyjwt/pull/866&gt;`__

Added

  • Add compute_hash_digest as a method of Algorithm objects, which uses the underlying hash algorithm to compute a digest. If there is no appropriate hash algorithm, a NotImplementedError will be raised in [#775](https://github.com/jpadilla/pyjwt/issues/775) &lt;https://github.com/jpadilla/pyjwt/pull/775&gt;__
  • Add optional headers argument to PyJWKClient. If provided, the headers will be included in requests that the client uses when fetching the JWK set by @​thundercat1 in [#823](https://github.com/jpadilla/pyjwt/issues/823) &lt;https://github.com/jpadilla/pyjwt/pull/823&gt;__
  • Add PyJWT._{de,en}code_payload hooks by @​akx in [#829](https://github.com/jpadilla/pyjwt/issues/829) &lt;https://github.com/jpadilla/pyjwt/pull/829&gt;__
  • Add sort_headers parameter to api_jwt.encode by @​evroon in [#832](https://github.com/jpadilla/pyjwt/issues/832) &lt;https://github.com/jpadilla/pyjwt/pull/832&gt;__
  • Make mypy configuration stricter and improve typing by @​akx in [#830](https://github.com/jpadilla/pyjwt/issues/830) &lt;https://github.com/jpadilla/pyjwt/pull/830&gt;__
  • Add more types by @​Viicos in [#843](https://github.com/jpadilla/pyjwt/issues/843) &lt;https://github.com/jpadilla/pyjwt/pull/843&gt;__
  • Add a timeout for PyJWKClient requests by @​daviddavis in [#875](https://github.com/jpadilla/pyjwt/issues/875) &lt;https://github.com/jpadilla/pyjwt/pull/875&gt;__
  • Add client connection error exception by @​daviddavis in [#876](https://github.com/jpadilla/pyjwt/issues/876) &lt;https://github.com/jpadilla/pyjwt/pull/876&gt;__
  • Add complete types to take all allowed keys into account by @​Viicos in [#873](https://github.com/jpadilla/pyjwt/issues/873) &lt;https://github.com/jpadilla/pyjwt/pull/873&gt;__
  • Add as_dict option to Algorithm.to_jwk by @​fluxth in [#881](https://github.com/jpadilla/pyjwt/issues/881) &lt;https://github.com/jpadilla/pyjwt/pull/881&gt;__

v2.6.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.5.0...2.6.0&gt;__

Changed

  • bump up cryptography >= 3.4.0 by @​jpadilla in [#807](https://github.com/jpadilla/pyjwt/issues/807) <https://github.com/jpadilla/pyjwt/pull/807>_
  • Remove types-cryptography from crypto extra by @​lautat in [#805](https://github.com/jpadilla/pyjwt/issues/805) <https://github.com/jpadilla/pyjwt/pull/805>_

Fixed


- Invalidate token on the exact second the token expires `[#797](https://github.com/jpadilla/pyjwt/issues/797) <https://github.com/jpadilla/pyjwt/pull/797>`_
</tr></table> 

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.4.0 to 2.7.0.
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.4.0...2.7.0)

---
updated-dependencies:
- dependency-name: pyjwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jun 1, 2023
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Aug 1, 2023

Superseded by #64.

@dependabot dependabot bot closed this Aug 1, 2023
@dependabot dependabot bot deleted the dependabot-pip-pyjwt-2.7.0 branch August 1, 2023 12:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants