What's Changed
Security
- Fixed GHSA-752w-5fwx-jx9f (High): raised PyJWT minimum to 2.12.0, which patches JWT crit header bypass vulnerability.
Dependencies
- PyJWT: ~=2.9.0 → >=2.12, <3
- python-dotenv: ~=1.0.1 → >=1.0, <2
- urllib3: >=1.25.3, <2.1.0 → >=1.25.3, <3
Python
- Minimum Python version raised from 3.8 to 3.9 — Python 3.8 is EOL (Oct 2024) and PyJWT ≥2.12 does not support it.
Full Changelog: 2.1.0...2.1.1