Skip to content

Unpin and bump PyJWT#4757

Open
quis wants to merge 2 commits intomainfrom
unpin-pyjwt
Open

Unpin and bump PyJWT#4757
quis wants to merge 2 commits intomainfrom
unpin-pyjwt

Conversation

@quis
Copy link
Member

@quis quis commented Feb 26, 2026

We can get this as a sub-dependency so it doesn’t need to be in our requirements.in file.

The admin app is already running this version:

@quis quis marked this pull request as ready for review February 27, 2026 09:33
quis added 2 commits March 2, 2026 12:45
Newer (2.11.0 and onwards) versions of PyJWT won’t let us created a
token with a non-string ISS field. To ensure we still handle the case
where we decode such a token, this adds an extra test that uses mocking
to raise the same exception that PyJWT would.
We can get this as a sub-dependencies so it doesn’t need to be in our
`requirements.in` file.

The admin app is already running this version:
- https://github.com/alphagov/notifications-admin/blob/c37a07307ecbc0491c71cfd52f48ed08a88ea07e/requirements.txt#L129
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant