From b187292ba1e9b76cfe3aec945d83f89e42bafaa1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Oct 2026 11:33:14 +0000 Subject: [PATCH] Bump pyjwt from 2.14.0 to 2.15.0 in /backend Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.14.0 to 2.15.0. - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0) --- updated-dependencies: - dependency-name: pyjwt dependency-version: 2.15.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 7204f93..f80d098 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -39,7 +39,7 @@ email-validator==2.2.0 # and CVE-2024-33664 (JWE decompression DoS), and a September 2026 advisory still # covers releases up to 3.5.0. passlib was dropped as well — it is unmaintained # and required a monkeypatch of a private hook to work with current bcrypt. -PyJWT[crypto]==2.14.0 +PyJWT[crypto]==2.15.0 bcrypt==5.0.0 cryptography==50.0.1 qrcode==8.2