Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=wrynose 2026-03-18T21:33:32+00:00 2026-03-18T21:33:32+00:00 Gyorgy Sarvari skandigraun@gmail.com 2026-03-17T17:23:44+00:00 urn:sha1:0abb9a484ebb10785126dbbbd88b85b50c061bd3 Contains fix for CVE-2026-32597. Since NVD tracks this CVE without version info, mark the CVE explicitly patched. Changes: 2.12.1: Add typing_extensions dependency for Python < 3.11 2.12.0: chore(docs): fix docs build Annotate PyJWKSet.keys for pyright fix: close HTTPError to prevent ResourceWarning on Python 3.14 chore: remove superfluous constants chore(tests): enable mypy Bump actions/download-artifact from 7 to 8 fix: do not store reference to algorithms dict on PyJWK Use PyJWK algorithm when encoding without explicit algorithm Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. (CVE-2026-32597) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2026-02-05T04:53:30+00:00 Gyorgy Sarvari skandigraun@gmail.com 2026-02-02T16:37:13+00:00 urn:sha1:9205d2c95eaccfd780ce6a61362e9f58395dd6ae Changelog: https://github.com/jpadilla/pyjwt/releases/tag/2.11.0 - Fixed type error in comment - Make note of use of leeway with nbf - Validate key against allowed types for Algorithm family - Add iterator for PyJWKSet - Add iss, issuer type checks - Improve typing/logic for options in decode, decode_complete; Improve docs - Map algorithm=None to "none" - Correct PyJWKClient.get_signing_key_from_jwt annotation - Fixed doc string typo in _validate_jti() function - Update SECURITY.md - Typing fix: use float instead of int for lifespan and timeout - Fix TYP header documentation - doc: Document claims sub and jti - Resolve package build warnings - Support Python 3.14, and test against PyPy 3.10+ - Fix a SyntaxWarning caused by invalid escape sequences - Standardize CHANGELOG links to PRs - Migrate from pep517, which is deprecated, to build - Fix incorrectly-named test suite function - Fix Read the Docs builds - Escalate test suite warnings to errors - Add pyupgrade as a pre-commit hook - Simplify the test suite decorators - Improve coverage config and eliminate unused test suite code - Build a shared wheel once in the test suite - Thoroughly test type annotations, and resolve errors - Fix leeway value in usage documentation Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>