[Security] Bump pyjwt and rand for remaining GHSAs (#59427)
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com> Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
co-authored by
Cursor
parent
98b45c1a94
commit
eef8b15d7c
@@ -86,7 +86,7 @@ plotly # required for perf comparison html report
|
||||
# Skipped (no patched release yet): sqlitedict, accelerate, lmcache, nltk GHSA-8mgp-746c-j5xp.
|
||||
urllib3>=2.7.0
|
||||
cryptography>=50.0.0
|
||||
pyjwt>=2.13.0
|
||||
pyjwt>=2.14.0
|
||||
pyasn1>=0.6.4
|
||||
python-multipart>=0.0.31
|
||||
anyio>=4.14.2
|
||||
|
||||
@@ -84,7 +84,7 @@ plotly # required for perf comparison html report
|
||||
# Skipped (no patched release yet): sqlitedict, accelerate, lmcache, nltk GHSA-8mgp-746c-j5xp.
|
||||
urllib3>=2.7.0
|
||||
cryptography>=50.0.0
|
||||
pyjwt>=2.13.0
|
||||
pyjwt>=2.14.0
|
||||
pyasn1>=0.6.4
|
||||
python-multipart>=0.0.31
|
||||
anyio>=4.14.2
|
||||
|
||||
@@ -65,7 +65,7 @@ cohere>=7.0.0 # required for cohere chat v2 api tests (protocol/serving import c
|
||||
# Dependabot GHSA floors for transitive test deps (excl. dependabot.yml ignores).
|
||||
urllib3>=2.7.0
|
||||
cryptography>=50.0.0
|
||||
pyjwt>=2.13.0
|
||||
pyjwt>=2.14.0
|
||||
pyasn1>=0.6.4
|
||||
python-multipart>=0.0.31
|
||||
anyio>=4.14.2
|
||||
|
||||
@@ -809,7 +809,7 @@ pygments==2.21.0
|
||||
# -r requirements/test/xpu.in
|
||||
# pytest
|
||||
# rich
|
||||
pyjwt==2.13.0
|
||||
pyjwt==2.15.1
|
||||
# via
|
||||
# -r requirements/test/xpu.in
|
||||
# mcp
|
||||
|
||||
Reference in New Issue
Block a user