deps: patch pyjwt and certifi security advisories
pip-audit flagged 6 advisories: PyJWT 2.12.1 (PYSEC-2026-175/177/178/179, fixed in 2.13.0) and transitive certifi 2023.11.17 (PYSEC-2024-230, fixed in 2024.7.4). Bump PyJWT and pin certifi to its latest release to enforce the resolved version.
This commit is contained in:
@@ -9,6 +9,7 @@ email-validator==2.3.0
|
||||
sqlalchemy[asyncio]==2.0.49
|
||||
asyncpg==0.31.0
|
||||
aiocryptopay==0.4.8
|
||||
PyJWT[crypto]==2.12.1
|
||||
PyJWT[crypto]==2.13.0
|
||||
Pillow==12.2.0
|
||||
redis==6.4.0
|
||||
certifi==2026.5.20
|
||||
|
||||
Reference in New Issue
Block a user