Update dependency authlib to v1.7.0 #38

Merged

fredrik merged 1 commit from renovate/all-python-dependencies into main

2026-04-20 08:43:50 +02:00

renovate-bot commented

2026-04-18 14:01:48 +02:00

Collaborator

This PR contains the following updates:

Package	Change	Age	Confidence
authlib	`==1.6.11` -> `==1.7.0`

Release Notes

authlib/authlib (authlib)

`v1.7.0`

Compare Source

What's Changed

Authorization and token endpoints request empty scope parameter management by @azmeuk in #847
Support from Python 3.10 to 3.14 by @azmeuk in #850
Allow composition of AuthorizationServerMetadata by @azmeuk in #853
Make require_oauth parenthesis optional by @azmeuk in #855
Fix expires_at behavior when its value is 0 by @azmeuk in #854
Migration to joserfc by @lepture in #852
RP-initiated logout by @frohrlich in #849
Fix get_jwt_config by @lepture in #858
chore(ci): Update PyPy version from 3.10 to 3.11 by @cclauss in #863
fix: remove "none" from default authlib.jose.jwt algorithms by @lepture in #860
fix: normalize resolve_client_public_key method by @lepture in #861
Implement rfc9700 PKCE downgrade countermeasure by @azmeuk in #864
Use correct syntax for tox.requires in tox.ini by @alex-ball in #868
Set client session User-Agent when fetching server metadata and JWKs by @alex-ball in #867
fix: use the real application object for Flask by @nblock in #869
Accept the issuer URL as a valid audience by @azmeuk in #865
Don't nest InvalidTokenError extra attribute by @azmeuk in #872
Documentation overhaul by @azmeuk in #875
Update README.md docs.authlib.org/en/latest => docs.authlib.org/en/stable by @guillett in #876
Merge release/1.6 branch by @lepture in #877

New Contributors

@frohrlich made their first contribution in #849
@cclauss made their first contribution in #863
@alex-ball made their first contribution in #868
@nblock made their first contribution in #869
@guillett made their first contribution in #876

Full Changelog: https://github.com/authlib/authlib/compare/v1.6.10...v1.7.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [authlib](https://github.com/authlib/authlib) | `==1.6.11` -> `==1.7.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/authlib/1.7.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/authlib/1.6.11/1.7.0?slim=true) | --- ### Release Notes <details> <summary>authlib/authlib (authlib)</summary> ### [`v1.7.0`](https://github.com/authlib/authlib/releases/tag/v1.7.0) [Compare Source](https://github.com/authlib/authlib/compare/v1.6.11...v1.7.0) #### What's Changed - Authorization and token endpoints request empty scope parameter management by [@azmeuk](https://github.com/azmeuk) in [#847](https://github.com/authlib/authlib/pull/847) - Support from Python 3.10 to 3.14 by [@azmeuk](https://github.com/azmeuk) in [#850](https://github.com/authlib/authlib/pull/850) - Allow composition of AuthorizationServerMetadata by [@azmeuk](https://github.com/azmeuk) in [#853](https://github.com/authlib/authlib/pull/853) - Make require\_oauth parenthesis optional by [@azmeuk](https://github.com/azmeuk) in [#855](https://github.com/authlib/authlib/pull/855) - Fix `expires_at` behavior when its value is 0 by [@azmeuk](https://github.com/azmeuk) in [#854](https://github.com/authlib/authlib/pull/854) - Migration to joserfc by [@lepture](https://github.com/lepture) in [#852](https://github.com/authlib/authlib/pull/852) - RP-initiated logout by [@frohrlich](https://github.com/frohrlich) in [#849](https://github.com/authlib/authlib/pull/849) - Fix `get_jwt_config` by [@lepture](https://github.com/lepture) in [#858](https://github.com/authlib/authlib/pull/858) - chore(ci): Update PyPy version from 3.10 to 3.11 by [@cclauss](https://github.com/cclauss) in [#863](https://github.com/authlib/authlib/pull/863) - fix: remove "none" from default authlib.jose.jwt algorithms by [@lepture](https://github.com/lepture) in [#860](https://github.com/authlib/authlib/pull/860) - fix: normalize resolve\_client\_public\_key method by [@lepture](https://github.com/lepture) in [#861](https://github.com/authlib/authlib/pull/861) - Implement rfc9700 PKCE downgrade countermeasure by [@azmeuk](https://github.com/azmeuk) in [#864](https://github.com/authlib/authlib/pull/864) - Use correct syntax for tox.requires in tox.ini by [@alex-ball](https://github.com/alex-ball) in [#868](https://github.com/authlib/authlib/pull/868) - Set client session User-Agent when fetching server metadata and JWKs by [@alex-ball](https://github.com/alex-ball) in [#867](https://github.com/authlib/authlib/pull/867) - fix: use the real application object for Flask by [@nblock](https://github.com/nblock) in [#869](https://github.com/authlib/authlib/pull/869) - Accept the issuer URL as a valid audience by [@azmeuk](https://github.com/azmeuk) in [#865](https://github.com/authlib/authlib/pull/865) - Don't nest InvalidTokenError extra attribute by [@azmeuk](https://github.com/azmeuk) in [#872](https://github.com/authlib/authlib/pull/872) - Documentation overhaul by [@azmeuk](https://github.com/azmeuk) in [#875](https://github.com/authlib/authlib/pull/875) - Update README.md docs.authlib.org/en/latest => docs.authlib.org/en/stable by [@guillett](https://github.com/guillett) in [#876](https://github.com/authlib/authlib/pull/876) - Merge release/1.6 branch by [@lepture](https://github.com/lepture) in [#877](https://github.com/authlib/authlib/pull/877) #### New Contributors - [@frohrlich](https://github.com/frohrlich) made their first contribution in [#849](https://github.com/authlib/authlib/pull/849) - [@cclauss](https://github.com/cclauss) made their first contribution in [#863](https://github.com/authlib/authlib/pull/863) - [@alex-ball](https://github.com/alex-ball) made their first contribution in [#868](https://github.com/authlib/authlib/pull/868) - [@nblock](https://github.com/nblock) made their first contribution in [#869](https://github.com/authlib/authlib/pull/869) - [@guillett](https://github.com/guillett) made their first contribution in [#876](https://github.com/authlib/authlib/pull/876) **Full Changelog**: <https://github.com/authlib/authlib/compare/v1.6.10...v1.7.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-04-18 14:01:48 +02:00

Update dependency authlib to v1.7.0

Run Tests on PRs / Run tests (pull_request) Failing after 21s

Details

e6e48dda05