[Security] Bump pyjwt and rand for remaining GHSAs (#59427)

Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Juan Pérez de Algaba
2026-09-30 14:26:16 +00:00
committed by GitHub
co-authored by Cursor
parent 98b45c1a94
commit eef8b15d7c
6 changed files with 16 additions and 16 deletions
+1 -1
View File
@@ -86,7 +86,7 @@ plotly # required for perf comparison html report
# Skipped (no patched release yet): sqlitedict, accelerate, lmcache, nltk GHSA-8mgp-746c-j5xp.
urllib3>=2.7.0
cryptography>=50.0.0
pyjwt>=2.13.0
pyjwt>=2.14.0
pyasn1>=0.6.4
python-multipart>=0.0.31
anyio>=4.14.2
+1 -1
View File
@@ -84,7 +84,7 @@ plotly # required for perf comparison html report
# Skipped (no patched release yet): sqlitedict, accelerate, lmcache, nltk GHSA-8mgp-746c-j5xp.
urllib3>=2.7.0
cryptography>=50.0.0
pyjwt>=2.13.0
pyjwt>=2.14.0
pyasn1>=0.6.4
python-multipart>=0.0.31
anyio>=4.14.2
+1 -1
View File
@@ -65,7 +65,7 @@ cohere>=7.0.0 # required for cohere chat v2 api tests (protocol/serving import c
# Dependabot GHSA floors for transitive test deps (excl. dependabot.yml ignores).
urllib3>=2.7.0
cryptography>=50.0.0
pyjwt>=2.13.0
pyjwt>=2.14.0
pyasn1>=0.6.4
python-multipart>=0.0.31
anyio>=4.14.2
+1 -1
View File
@@ -809,7 +809,7 @@ pygments==2.21.0
# -r requirements/test/xpu.in
# pytest
# rich
pyjwt==2.13.0
pyjwt==2.15.1
# via
# -r requirements/test/xpu.in
# mcp