Skip to content

build(deps): bump Authlib from 1.6.12 to 1.9.1 - #300

Open
katsugtgz wants to merge 1 commit into
GitHubSecurityLab:mainfrom
katsugtgz:deps/authlib-1.9.1
Open

katsugtgz wants to merge 1 commit into
GitHubSecurityLab:mainfrom
katsugtgz:deps/authlib-1.9.1

Conversation

@katsugtgz

Copy link
Copy Markdown

Updates Authlib from 1.6.12 to 1.9.1 to clear the authlib advisories fixed in 1.9.0 and 1.9.1 (GHSA-6v38-4h7w-rj9h, GHSA-7vr2-2fgp-9w7p, GHSA-8m4g-j4wp-wgcg).

Evidence:

  • pyproject.toml referenced Authlib==1.6.12
  • OSV reports 8 advisories for authlib 1.6.12 (CVE-2026-114614 through CVE-2026-114620, plus CVE-2026-96760)
  • updated version: Authlib==1.9.1 (requires-python >=3.10, compatible with the repo floor)

Validation:

  • OSV reports no advisories for authlib 1.9.1
  • hatch test --python 3.14 --randomize --parallel --retries 2 --retry-delay 1 (ci.yml command): 553 passed, 2 skipped (live-token smoke tests), 0 failed

Scope: dependency version bump in pyproject.toml only.

Commit author katsugtgz, unsigned.

@katsugtgz
katsugtgz requested a review from a team as a code owner October 30, 2026 00:06
Copilot AI balanced review requested due to automatic review settings October 30, 2026 00:06

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants