Skip to content

Raise minimum version of authlib to avoid CVE#2027

Open
dirkkul wants to merge 1 commit intomainfrom
authlib_update
Open

Raise minimum version of authlib to avoid CVE#2027
dirkkul wants to merge 1 commit intomainfrom
authlib_update

Conversation

@dirkkul
Copy link
Copy Markdown
Collaborator

@dirkkul dirkkul commented Apr 29, 2026

we're not affected, but lets just update

Copilot AI review requested due to automatic review settings April 29, 2026 11:35
Copy link
Copy Markdown

@orca-security-eu orca-security-eu Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Orca Security Scan Summary

Status Check Issues by priority
Passed Passed Infrastructure as Code high 0   medium 0   low 0   info 0 View in Orca
Passed Passed SAST high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Secrets high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Vulnerabilities high 0   medium 0   low 0   info 0 View in Orca

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the project’s Authlib dependency floor to a newer patch release to align with the stated security posture (CVE avoidance) and keep dev dependencies consistent with runtime requirements.

Changes:

  • Bump authlib minimum version in setup.cfg from >=1.6.7 to >=1.6.11.
  • Update pinned dev dependency in requirements-devel.txt from ==1.6.9 to ==1.6.11.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
setup.cfg Raises the minimum supported Authlib version for installs.
requirements-devel.txt Keeps the dev pin aligned with the new minimum Authlib version.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@codecov-commenter
Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.71%. Comparing base (78fa5f7) to head (8645388).
⚠️ Report is 155 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2027      +/-   ##
==========================================
- Coverage   87.95%   86.71%   -1.24%     
==========================================
  Files         280      299      +19     
  Lines       21664    22889    +1225     
==========================================
+ Hits        19054    19848     +794     
- Misses       2610     3041     +431     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants