Take oauthlib 4.0.1 for CVE-2026-49272 #39

Merged

tiagoagueda merged 1 commit from oauthlib-4.0.1 into main

2026-11-12 04:16:40 +00:00

tiagoagueda commented

2026-11-12 01:34:13 +00:00

Owner

The dependency audit refuses oauthlib 4.0.0 since CVE-2026-49272 was published, so every pull request's audit failed. 4.0.1 fixes it; the core's lock already has it. Only uv.lock changes.

🤖 Generated with Claude Code

The dependency audit refuses oauthlib 4.0.0 since CVE-2026-49272 was published, so every pull request's audit failed. 4.0.1 fixes it; the core's lock already has it. Only `uv.lock` changes. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

tiagoagueda added 1 commit

2026-11-12 01:34:13 +00:00

Take oauthlib 4.0.1 for CVE-2026-49272

CI / test (pull_request) Successful in 3m54s

Details

b1498e16ea

The dependency audit refuses the lock file since the advisory against
oauthlib 4.0.0 was published, so every pull request's audit failed
whatever it changed. 4.0.1 is the release that fixes it, and the core's
lock already has it. Only the lock changes; oauthlib comes in through
the core's django-allauth.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tiagoagueda merged commit f5fc70505a into main

2026-11-12 04:16:40 +00:00

tiagoagueda deleted branch oauthlib-4.0.1

2026-11-12 04:16:41 +00:00

tiagoagueda referenced this pull request from a commit

2026-11-12 04:16:41 +00:00

Take oauthlib 4.0.1 for CVE-2026-49272 (#39)