Skip to content

chore(deps): bump joserfc from 1.6.8 to 1.7.5 - #5121

Merged
neubig merged 1 commit into
mainfrom
dependabot/uv/joserfc-1.7.5
Sep 22, 2026
Merged

neubig merged 1 commit into
mainfrom
dependabot/uv/joserfc-1.7.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps joserfc from 1.6.8 to 1.7.5.

Release notes

Sourced from joserfc's releases.

1.7.5

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

1.7.4

   🐞 Bug Fixes

    View changes on GitHub

1.7.3

   🐞 Bug Fixes

    View changes on GitHub

1.7.2

   🐞 Bug Fixes

    View changes on GitHub

1.7.1

   🐞 Bug Fixes

    View changes on GitHub

1.7.0

   🐞 Bug Fixes

    View changes on GitHub

... (truncated)

Changelog

Sourced from joserfc's changelog.

1.7.5

Released on August 29, 2026

  • JWK: Ignore keys with unknown kty values when importing a key set.
  • JWE: Add max_recipients to JWERegistry.

1.7.4

Released on July 13, 2026

  • Reject JWS general JSON serialization when signatures is empty.
  • Raises DecodeError when encrypted_key is None in JWE.

1.7.3

Released on July 8, 2026

  • Add default claims validation for iss, sub and aud.
  • Add size validation even for self-provided payload.

1.7.2

Released on June 29, 2026

  • Avoid trailing padding for JWTs.

1.7.1

Released on June 8, 2026

  • JWE: use the original aad value for decrypting.

1.7.0

Released on June 2, 2026

  • Drop Python 3.9 support.
  • Update type hints.
  • JWK: export public key by default in .as_dict, .as_pem, .as_der methods.

1.6.9

... (truncated)

Commits
  • 357c319 chore: release 1.7.5
  • d6dc8df feat: add max_recipients on JWERegistry
  • 26a1027 docs: update sponsors link
  • 4dcd363 fix: ignore unknown kty in KeySet.import_key_set (RFC 7517 §5) (#103)
  • 7facdee chore: release 1.7.4
  • 241ca27 chore: mark code no cover
  • 74be971 fix(jwe): raise DecodeError when encrypted_key is None
  • f409f8f fix: prevent verify_general_json bypass empty signatures
  • 6426489 chore: remove pypy-3.10
  • e88e0ce chore: release 1.7.3
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
---
🐳 Agent Server images for this PR — GHCR package, pull/run commands, and all pushed tags (click to expand)

• GHCR package: https://github.com/OpenHands/agent-sdk/pkgs/container/agent-server

Variants & Base Images

Variant Architectures Base Image Docs / Tags
java amd64, arm64 eclipse-temurin:17-jdk Link
python-slim amd64, arm64 python-node-runtime Link
python-minimal amd64, arm64 python-node-runtime Link
python amd64, arm64 python-node-runtime Link
golang amd64, arm64 golang:1.21-bookworm Link

Pull (multi-arch manifest)

# Each variant is a multi-arch manifest supporting both amd64 and arm64
docker pull ghcr.io/openhands/agent-server:18ac1f0-python

Run

docker run -it --rm \
  -p 8000:8000 \
  --name agent-server-18ac1f0-python \
  ghcr.io/openhands/agent-server:18ac1f0-python

All tags pushed for this build

ghcr.io/openhands/agent-server:18ac1f0-golang-amd64
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-golang-amd64
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-golang-amd64
ghcr.io/openhands/agent-server:18ac1f0-golang_tag_1.21-bookworm-amd64
ghcr.io/openhands/agent-server:18ac1f0-golang-arm64
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-golang-arm64
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-golang-arm64
ghcr.io/openhands/agent-server:18ac1f0-golang_tag_1.21-bookworm-arm64
ghcr.io/openhands/agent-server:18ac1f0-java-amd64
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-java-amd64
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-java-amd64
ghcr.io/openhands/agent-server:18ac1f0-eclipse-temurin_tag_17-jdk-amd64
ghcr.io/openhands/agent-server:18ac1f0-java-arm64
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-java-arm64
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-java-arm64
ghcr.io/openhands/agent-server:18ac1f0-eclipse-temurin_tag_17-jdk-arm64
ghcr.io/openhands/agent-server:18ac1f0-python-amd64
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-python-amd64
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-python-amd64
ghcr.io/openhands/agent-server:18ac1f0-python-node-runtime-amd64
ghcr.io/openhands/agent-server:18ac1f0-python-arm64
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-python-arm64
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-python-arm64
ghcr.io/openhands/agent-server:18ac1f0-python-node-runtime-arm64
ghcr.io/openhands/agent-server:18ac1f0-python-minimal-amd64
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-python-minimal-amd64
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-python-minimal-amd64
ghcr.io/openhands/agent-server:18ac1f0-python-node-runtime-minimal-amd64
ghcr.io/openhands/agent-server:18ac1f0-python-minimal-arm64
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-python-minimal-arm64
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-python-minimal-arm64
ghcr.io/openhands/agent-server:18ac1f0-python-node-runtime-minimal-arm64
ghcr.io/openhands/agent-server:18ac1f0-python-slim-amd64
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-python-slim-amd64
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-python-slim-amd64
ghcr.io/openhands/agent-server:18ac1f0-python-node-runtime-slim-amd64
ghcr.io/openhands/agent-server:18ac1f0-python-slim-arm64
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-python-slim-arm64
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-python-slim-arm64
ghcr.io/openhands/agent-server:18ac1f0-python-node-runtime-slim-arm64
ghcr.io/openhands/agent-server:18ac1f0-golang
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-golang
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-golang
ghcr.io/openhands/agent-server:18ac1f0-golang_tag_1.21-bookworm
ghcr.io/openhands/agent-server:18ac1f0-java
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-java
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-java
ghcr.io/openhands/agent-server:18ac1f0-eclipse-temurin_tag_17-jdk
ghcr.io/openhands/agent-server:18ac1f0-python-minimal
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-python-minimal
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-python-minimal
ghcr.io/openhands/agent-server:18ac1f0-python-node-runtime-minimal
ghcr.io/openhands/agent-server:18ac1f0-python-slim
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-python-slim
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-python-slim
ghcr.io/openhands/agent-server:18ac1f0-python-node-runtime-slim
ghcr.io/openhands/agent-server:18ac1f0-python
ghcr.io/openhands/agent-server:18ac1f0ea3a90279af23c8b934225d17fadf7fbc-python
ghcr.io/openhands/agent-server:dependabot-uv-joserfc-1.7.5-python
ghcr.io/openhands/agent-server:18ac1f0-python-node-runtime

About Multi-Architecture Support

  • Each variant tag (e.g., 18ac1f0-python) is a multi-arch manifest supporting both amd64 and arm64
  • Docker automatically pulls the correct architecture for your platform
  • Individual architecture tags (e.g., 18ac1f0-python-amd64) are also available if needed

Bumps [joserfc](https://github.com/authlib/joserfc) from 1.6.8 to 1.7.5.
- [Release notes](https://github.com/authlib/joserfc/releases)
- [Changelog](https://github.com/authlib/joserfc/blob/main/docs/changelog.rst)
- [Commits](authlib/joserfc@1.6.8...1.7.5)

---
updated-dependencies:
- dependency-name: joserfc
  dependency-version: 1.7.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 17, 2026
@github-actions

Copy link
Copy Markdown
Contributor

REST API breakage checks (OpenAPI) — ✅ PASSED

Result: ✅ PASSED

Action log

@github-actions

Copy link
Copy Markdown
Contributor

Coverage

Coverage Report •
FileStmtsMissCoverMissing
TOTAL44748819882% 
report-only-changed-files is enabled. No changed files were found in the coverage report :)

@all-hands-bot

Copy link
Copy Markdown
Collaborator

👋 This PR needs a couple of things fixed before OpenHands can review it:

  • the PR description's HUMAN: section needs at least 20 characters describing what you tested, not just the template placeholder

Push an update once this is addressed and this check re-runs automatically.

This is an automated check - no AI was used to generate this comment.

@neubig neubig left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved: checks are green. This review was created by an AI agent (OpenHands) on behalf of the user.

@neubig
neubig merged commit 5e27a54 into main Sep 22, 2026
107 checks passed
@neubig
neubig deleted the dependabot/uv/joserfc-1.7.5 branch September 22, 2026 12:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants