Take oauthlib 4.0.1 for CVE-2026-49272 #31

Merged

tiagoagueda merged 1 commit from oauthlib-4.0.1 into main

2026-11-12 05:06:34 +00:00

tiagoagueda commented

2026-11-12 01:34:15 +00:00

Owner

The dependency audit refuses oauthlib 4.0.0 since CVE-2026-49272 was published, so every pull request's audit failed. 4.0.1 fixes it; the core's lock already has it. Only uv.lock changes.

🤖 Generated with Claude Code

The dependency audit refuses oauthlib 4.0.0 since CVE-2026-49272 was published, so every pull request's audit failed. 4.0.1 fixes it; the core's lock already has it. Only `uv.lock` changes. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

tiagoagueda added 1 commit

2026-11-12 01:34:16 +00:00

Take oauthlib 4.0.1 for CVE-2026-49272

CI / test (pull_request) Successful in 3m26s

Details

CI / Audit the locked dependencies (pull_request) Successful in 2m48s

Details

a3ada6502b

The dependency audit refuses the lock file since the advisory against
oauthlib 4.0.0 was published, so every pull request's audit failed
whatever it changed. 4.0.1 is the release that fixes it, and the core's
lock already has it. Only the lock changes; oauthlib comes in through
the core's django-allauth.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tiagoagueda merged commit 0da8b4ccd7 into main

2026-11-12 05:06:34 +00:00

tiagoagueda deleted branch oauthlib-4.0.1

2026-11-12 05:06:35 +00:00

tiagoagueda referenced this pull request from a commit

2026-11-12 05:06:35 +00:00

Take oauthlib 4.0.1 for CVE-2026-49272 (#31)