Update dependency python-jose to ~=3.4.0 #92

Renovate · 2025-02-18T20:29:38+02:00

Renovate commented

2025-02-18 20:29:38 +02:00

This PR contains the following updates:

Package	Update	Change
python-jose (changelog)	minor	`~=3.3.0` -> `~=3.4.0`

Release Notes

mpdavis/python-jose (python-jose)

`v3.4.0`

Compare Source

News

Remove support for Python 3.6 and 3.7
Added support for Python 3.10 and 3.11

Bug fixes and Improvements

Updating CryptographyAESKey::encrypt to generate 96 bit IVs for GCM block
cipher mode
Fix for PEM key comparisons caused by line lengths and new lines
Fix for CVE-2024-33664 - JWE limited to 250KiB
Fix for CVE-2024-33663 - signing JWT with public key is now forbidden
Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)

Housekeeping

Updated Github Actions Workflows
Updated to use tox 4.x
Revise codecov integration
Fixed DeprecationWarnings

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [python-jose](https://github.com/mpdavis/python-jose) ([changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)) | minor | `~=3.3.0` -> `~=3.4.0` | --- ### Release Notes <details> <summary>mpdavis/python-jose (python-jose)</summary> ### [`v3.4.0`](https://github.com/mpdavis/python-jose/blob/HEAD/CHANGELOG.md#340----2025-02-14-) [Compare Source](https://github.com/mpdavis/python-jose/compare/3.3.0...3.4.0) ##### News - Remove support for Python 3.6 and 3.7 - Added support for Python 3.10 and 3.11 ##### Bug fixes and Improvements - Updating `CryptographyAESKey::encrypt` to generate 96 bit IVs for GCM block cipher mode - Fix for PEM key comparisons caused by line lengths and new lines - Fix for CVE-2024-33664 - JWE limited to 250KiB - Fix for CVE-2024-33663 - signing JWT with public key is now forbidden - Replace usage of deprecated datetime.utcnow() with datetime.now(UTC) ##### Housekeeping - Updated Github Actions Workflows - Updated to use tox 4.x - Revise codecov integration - Fixed DeprecationWarnings </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

Renovate added 1 commit 2025-02-18 20:29:39 +02:00

Update dependency python-jose to ~=3.4.0 e0da6332f0

profitroll merged commit a36032b251 into dev

2025-02-18 22:21:10 +02:00

profitroll deleted branch renovate/python-jose-3.x

2025-02-18 22:21:10 +02:00

profitroll referenced this issue from a commit

2025-02-18 22:21:11 +02:00

Merge pull request 'Update dependency python-jose to ~=3.4.0' (#92) from renovate/python-jose-3.x into dev

Sign in to join this conversation.