Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 29, 2021

Bumps pyjwt from 2.0.1 to 2.1.0.

Release notes

Sourced from pyjwt's releases.

2.1.0

Changelog

Changed

  • Allow claims validation without making JWT signature validation mandatory. #608

Fixed

  • Remove padding from JWK test data. #628
  • Make kty mandatory in JWK to be compliant with RFC7517. #624
  • Allow JWK without alg to be compliant with RFC7517. #624
  • Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. #645

Added

  • Add caching by default to PyJWKClient #611
  • Add missing exceptions.InvalidKeyError to jwt module __init__ imports #620
  • Add support for ES256K algorithm #629
  • Add from_jwk() to Ed25519Algorithm #621
  • Add to_jwk() to Ed25519Algorithm #643
  • Export PyJWK and PyJWKSet #652
Changelog

Sourced from pyjwt's changelog.

v2.1.0 <https://github.com/jpadilla/pyjwt/compare/2.0.1...2.1.0>__

Changed


- Allow claims validation without making JWT signature validation mandatory. `[#608](https://github.com/jpadilla/pyjwt/issues/608) <https://github.com/jpadilla/pyjwt/pull/608>`__

Fixed


- Remove padding from JWK test data. `[#628](https://github.com/jpadilla/pyjwt/issues/628) &lt;https://github.com/jpadilla/pyjwt/pull/628&gt;`__
- Make `kty` mandatory in JWK to be compliant with RFC7517. `[#624](https://github.com/jpadilla/pyjwt/issues/624) &lt;https://github.com/jpadilla/pyjwt/pull/624&gt;`__
- Allow JWK without `alg` to be compliant with RFC7517. `[#624](https://github.com/jpadilla/pyjwt/issues/624) &lt;https://github.com/jpadilla/pyjwt/pull/624&gt;`__
- Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorithm. `[#645](https://github.com/jpadilla/pyjwt/issues/645) &lt;https://github.com/jpadilla/pyjwt/pull/645&gt;`__

Added

  • Add caching by default to PyJWKClient [#611](https://github.com/jpadilla/pyjwt/issues/611) &lt;https://github.com/jpadilla/pyjwt/pull/611&gt;__
  • Add missing exceptions.InvalidKeyError to jwt module init imports [#620](https://github.com/jpadilla/pyjwt/issues/620) &lt;https://github.com/jpadilla/pyjwt/pull/620&gt;__
  • Add support for ES256K algorithm [#629](https://github.com/jpadilla/pyjwt/issues/629) &lt;https://github.com/jpadilla/pyjwt/pull/629&gt;__
  • Add from_jwk() to Ed25519Algorithm [#621](https://github.com/jpadilla/pyjwt/issues/621) &lt;https://github.com/jpadilla/pyjwt/pull/621&gt;__
  • Add to_jwk() to Ed25519Algorithm [#643](https://github.com/jpadilla/pyjwt/issues/643) &lt;https://github.com/jpadilla/pyjwt/pull/643&gt;__
  • Export PyJWK and PyJWKSet [#652](https://github.com/jpadilla/pyjwt/issues/652) &lt;https://github.com/jpadilla/pyjwt/pull/652&gt;__
Commits
  • 79c23d7 Bump up version to v2.1.0 (#653)
  • c7f9ac5 Export PyJWK and PyJWKSet (#652)
  • 816cbe5 [pre-commit.ci] pre-commit autoupdate (#650)
  • 0da4223 Fix incorrect documentation for jwt (#651)
  • 545931d Add to_jwk to Ed25519Algorithm. (#642) (#643)
  • 7f6a236 Clearly warn against computing algorithms from the token’s alg (#647)
  • fb86f9d Allow to verify with private key on ECAlgorithm, as well as on Ed25519Algorit...
  • bcd5728 changed 'paramenter' to 'parameter' (#638)
  • fc7a708 [pre-commit.ci] pre-commit autoupdate (#640)
  • f02fa0d [pre-commit.ci] pre-commit autoupdate (#636)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 29, 2021
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 7, 2021

Superseded by #182.

@dependabot dependabot bot closed this Oct 7, 2021
@dependabot dependabot bot deleted the dependabot/pip/server/pyjwt-2.1.0 branch October 7, 2021 05:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant