Merge branch '396-vulnerability-in-pyjwt-dependency' into 'main'

chore: Bump PyJWT to ~=2.4 Closes #396 See merge request meltano/sdk!302
meltano · May 26, 2022 · 913ede0 · 913ede0
2 parents 1576b5c + 7f459c1
commit 913ede0
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 5 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -14,6 +14,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changes
 
+- Tap SDK: Bump minimum version of `PyJWT to `2.4` ([#396](https://gitlab.com/meltano/sdk/-/issues/396), [!302](https://gitlab.com/meltano/sdk/-/merge_requests/302)).
+
 ### Fixes
 
 ### Breaks

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -32,7 +32,7 @@ pipelinewise-singer-python = "1.2.0"
 backoff = ">=1.8.0,<2.0"
 pendulum = "^2.1.0"
 click = "~=8.0"
-PyJWT = "~=2.3"
+PyJWT = "~=2.4"
 requests = "^2.25.1"
 cryptography = "^3.4.6"
 importlib-metadata = {version = "*", markers = "python_version < \"3.8\""}