cloudnativedaysjp / broadcast

2 stars 1 forks source link

Update dependency PyJWT to v2.9.0 #293

Open renovate[bot] opened 1 year ago

renovate[bot] commented 1 year ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
PyJWT ==2.4.0 -> ==2.9.0 age adoption passing confidence

Release Notes

jpadilla/pyjwt (PyJWT) ### [`v2.9.0`](https://togithub.com/jpadilla/pyjwt/blob/HEAD/CHANGELOG.rst#Unreleased-httpsgithubcomjpadillapyjwtcompare290HEAD) [Compare Source](https://togithub.com/jpadilla/pyjwt/compare/2.8.0...2.9.0) Changed ``` Fixed ~~~~~ Added ~~~~~ ``` ### [`v2.8.0`](https://togithub.com/jpadilla/pyjwt/blob/HEAD/CHANGELOG.rst#v280-httpsgithubcomjpadillapyjwtcompare270280) [Compare Source](https://togithub.com/jpadilla/pyjwt/compare/2.7.0...2.8.0) Changed ``` - Update python version test matrix by @​auvipy in `#​895 `__ Fixed ~~~~~ Added ~~~~~ - Add ``strict_aud`` as an option to ``jwt.decode`` by @​woodruffw in `#​902 `__ - Export PyJWKClientConnectionError class by @​daviddavis in `#​887 `__ - Allows passing of ssl.SSLContext to PyJWKClient by @​juur in `#​891 `__ ``` ### [`v2.7.0`](https://togithub.com/jpadilla/pyjwt/blob/HEAD/CHANGELOG.rst#Unreleased-httpsgithubcomjpadillapyjwtcompare270HEAD) [Compare Source](https://togithub.com/jpadilla/pyjwt/compare/2.6.0...2.7.0) Changed ``` Fixed ~~~~~ Added ~~~~~ ``` ### [`v2.6.0`](https://togithub.com/jpadilla/pyjwt/blob/HEAD/CHANGELOG.rst#v270-httpsgithubcomjpadillapyjwtcompare260270) [Compare Source](https://togithub.com/jpadilla/pyjwt/compare/2.5.0...2.6.0) Changed ``` - Changed the error message when the token audience doesn't match the expected audience by @​irdkwmnsb `#​809 `__ - Improve error messages when cryptography isn't installed by @​Viicos in `#​846 `__ - Make `Algorithm` an abstract base class by @​Viicos in `#​845 `__ - ignore invalid keys in a jwks by @​timw6n in `#​863 `__ Fixed ~~~~~ - Add classifier for Python 3.11 by @​eseifert in `#​818 `__ - Fix ``_validate_iat`` validation by @​Viicos in `#​847 `__ - fix: use datetime.datetime.timestamp function to have a milliseconds by @​daillouf `#​821 `__ - docs: correct mistake in the changelog about verify param by @​gbillig in `#​866 `__ Added ~~~~~ - Add ``compute_hash_digest`` as a method of ``Algorithm`` objects, which uses the underlying hash algorithm to compute a digest. If there is no appropriate hash algorithm, a ``NotImplementedError`` will be raised in `#​775 `__ - Add optional ``headers`` argument to ``PyJWKClient``. If provided, the headers will be included in requests that the client uses when fetching the JWK set by @​thundercat1 in `#​823 `__ - Add PyJWT._{de,en}code_payload hooks by @​akx in `#​829 `__ - Add `sort_headers` parameter to `api_jwt.encode` by @​evroon in `#​832 `__ - Make mypy configuration stricter and improve typing by @​akx in `#​830 `__ - Add more types by @​Viicos in `#​843 `__ - Add a timeout for PyJWKClient requests by @​daviddavis in `#​875 `__ - Add client connection error exception by @​daviddavis in `#​876 `__ - Add complete types to take all allowed keys into account by @​Viicos in `#​873 `__ - Add `as_dict` option to `Algorithm.to_jwk` by @​fluxth in `#​881 `__ ``` ### [`v2.5.0`](https://togithub.com/jpadilla/pyjwt/blob/HEAD/CHANGELOG.rst#v260-httpsgithubcomjpadillapyjwtcompare250260) [Compare Source](https://togithub.com/jpadilla/pyjwt/compare/2.4.0...2.5.0) Changed ``` - bump up cryptography >= 3.4.0 by @​jpadilla in `#​807 `_ - Remove `types-cryptography` from `crypto` extra by @​lautat in `#​805 `_ Fixed ~~~~~ - Invalidate token on the exact second the token expires `#​797 `_ - fix: version 2.5.0 heading typo by @​c0state in `#​803 `_ Added ~~~~~ - Adding validation for `issued_at` when `iat > (now + leeway)` as `ImmatureSignatureError` by @​sriharan16 in https://github.com/jpadilla/pyjwt/pull/794 ```

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.