Skip to content

build(deps): bump pyjwt from 2.0.1 to 2.1.0 in /tools/deprecate_version#27

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/tools/deprecate_version/pyjwt-2.1.0
Closed

build(deps): bump pyjwt from 2.0.1 to 2.1.0 in /tools/deprecate_version#27
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/tools/deprecate_version/pyjwt-2.1.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 28, 2021

Bumps pyjwt from 2.0.1 to 2.1.0.

Release notes

Sourced from pyjwt's releases.

2.1.0

Changelog

Changed

  • Allow claims validation without making JWT signature validation mandatory. #608

Fixed

  • Remove padding from JWK test data. #628
  • Make kty mandatory in JWK to be compliant with RFC7517. #624
  • Allow JWK without alg to be compliant with RFC7517. #624
  • Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. #645

Added

  • Add caching by default to PyJWKClient #611
  • Add missing exceptions.InvalidKeyError to jwt module __init__ imports #620
  • Add support for ES256K algorithm #629
  • Add from_jwk() to Ed25519Algorithm #621
  • Add to_jwk() to Ed25519Algorithm #643
  • Export PyJWK and PyJWKSet #652
Changelog

Sourced from pyjwt's changelog.

v2.1.0 <https://github.com/jpadilla/pyjwt/compare/2.0.1...2.1.0>__

Changed


- Allow claims validation without making JWT signature validation mandatory. `[#608](https://github.com/jpadilla/pyjwt/issues/608) <https://github.com/jpadilla/pyjwt/pull/608>`__

Fixed



- Remove padding from JWK test data. `[#628](https://github.com/jpadilla/pyjwt/issues/628) &lt;https://github.com/jpadilla/pyjwt/pull/628&gt;`__
- Make `kty` mandatory in JWK to be compliant with RFC7517. `[#624](https://github.com/jpadilla/pyjwt/issues/624) &lt;https://github.com/jpadilla/pyjwt/pull/624&gt;`__
- Allow JWK without `alg` to be compliant with RFC7517. `[#624](https://github.com/jpadilla/pyjwt/issues/624) &lt;https://github.com/jpadilla/pyjwt/pull/624&gt;`__
- Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. `[#645](https://github.com/jpadilla/pyjwt/issues/645) &lt;https://github.com/jpadilla/pyjwt/pull/645&gt;`__

Added




    

  • Add caching by default to PyJWKClient [#611](https://github.com/jpadilla/pyjwt/issues/611) &lt;https://github.com/jpadilla/pyjwt/pull/611&gt;__
    • 

  • Add missing exceptions.InvalidKeyError to jwt module init imports [#620](https://github.com/jpadilla/pyjwt/issues/620) &lt;https://github.com/jpadilla/pyjwt/pull/620&gt;__
    • 

  • Add support for ES256K algorithm [#629](https://github.com/jpadilla/pyjwt/issues/629) &lt;https://github.com/jpadilla/pyjwt/pull/629&gt;__
    • 

  • Add from_jwk() to Ed25519Algorithm [#621](https://github.com/jpadilla/pyjwt/issues/621) &lt;https://github.com/jpadilla/pyjwt/pull/621&gt;__
    • 

  • Add to_jwk() to Ed25519Algorithm [#643](https://github.com/jpadilla/pyjwt/issues/643) &lt;https://github.com/jpadilla/pyjwt/pull/643&gt;__
    • 

  • Export PyJWK and PyJWKSet [#652](https://github.com/jpadilla/pyjwt/issues/652) &lt;https://github.com/jpadilla/pyjwt/pull/652&gt;__
Commits
  • 79c23d7 Bump up version to v2.1.0 (#653)
  • c7f9ac5 Export PyJWK and PyJWKSet (#652)
  • 816cbe5 [pre-commit.ci] pre-commit autoupdate (#650)
  • 0da4223 Fix incorrect documentation for jwt (#651)
  • 545931d Add to_jwk to Ed25519Algorithm. (#642) (#643)
  • 7f6a236 Clearly warn against computing algorithms from the token’s alg (#647)
  • fb86f9d Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorit...
  • bcd5728 changed 'paramenter' to 'parameter' (#638)
  • fc7a708 [pre-commit.ci] pre-commit autoupdate (#640)
  • f02fa0d [pre-commit.ci] pre-commit autoupdate (#636)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 28, 2021
@dependabot dependabot bot mentioned this pull request Apr 28, 2021
Closed
@github-actions
Copy link
Copy Markdown

github-actions bot commented May 28, 2021

This pull request has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days if no further activity occurs. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!

@github-actions github-actions bot added the stale label May 28, 2021
@github-actions
Copy link
Copy Markdown

github-actions bot commented Jun 4, 2021

This pull request has been automatically closed because it has not had activity in the last 37 days. Please feel free to give a status update now, ping for review, or re-open when it's ready. Thank you for your contributions!

@github-actions github-actions bot closed this Jun 4, 2021
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Jun 4, 2021

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/pip/tools/deprecate_version/pyjwt-2.1.0 branch June 4, 2021 21:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file stale

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants