Skip to content

chore(deps): bump joserfc from 1.6.5 to 1.6.8 - #194

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/joserfc-1.6.8
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/joserfc-1.6.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps joserfc from 1.6.5 to 1.6.8.

Release notes

Sourced from joserfc's releases.

1.6.8

  • Reject empty OctKey.

Full Changelog: authlib/joserfc@1.6.7...1.6.8

1.6.7

   🐞 Bug Fixes

    View changes on GitHub
Changelog

Sourced from joserfc's changelog.

1.6.8

Released on May 27, 2026

  • Reject empty OctKey.

1.6.7

Released on May 23, 2026

  • Update for type hints.

1.6.6

Released on May 18, 2026

  • JWS: validate payload size when b64=false.
Commits
  • ea1d9e3 chore: release 1.6.8
  • 86d0091 Reject empty oct key material and empty HMAC keys at sign/verify entry
  • 1e5b94d chore: release 1.6.7
  • 75d9f95 fix(typing): use cast for type hints
  • 6d24037 Merge pull request #98 from jonathangreen/algorithms-accept-collection
  • 102a7a7 fix(typing): accept any Collection for algorithms, not just list
  • 8b869e8 chore: release 1.6.6
  • 00d599b chore: update actions
  • 9186561 Merge pull request #97 from authlib/fix-b64
  • 4d4ea2e fix(jws): validate payload size for b64=false
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 2, 2026
@dependabot
dependabot Bot requested a review from elkaix as a code owner July 2, 2026 22:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/joserfc-1.6.8 branch 3 times, most recently from 63e69f3 to 1e1d04d Compare July 12, 2026 00:22
@dependabot
dependabot Bot force-pushed the dependabot/uv/joserfc-1.6.8 branch 4 times, most recently from d291001 to caaae1a Compare July 22, 2026 13:34
Bumps [joserfc](https://github.com/authlib/joserfc) from 1.6.5 to 1.6.8.
- [Release notes](https://github.com/authlib/joserfc/releases)
- [Changelog](https://github.com/authlib/joserfc/blob/main/docs/changelog.rst)
- [Commits](authlib/joserfc@1.6.5...1.6.8)

---
updated-dependencies:
- dependency-name: joserfc
  dependency-version: 1.6.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/joserfc-1.6.8 branch from caaae1a to e9cfa81 Compare July 22, 2026 21:41

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants