From 0e3b0404acfce54a59f118703b586280b3ec487f Mon Sep 17 00:00:00 2001 From: BinoyOza-okta Date: Wed, 23 Sep 2026 09:37:19 +0530 Subject: [PATCH 1/2] =?UTF-8?q?chore(deps):=20resolve=20Dependabot=20secur?= =?UTF-8?q?ity=20alerts=20=E2=80=94=20bump=20runtime,=20dev,=20and=20CI=20?= =?UTF-8?q?dependencies?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Runtime dependencies: - aiohttp 3.13.5 -> 3.14.3 - jwcrypto 1.5.7 -> 1.5.8 - PyJWT 2.12.1 -> 2.13.0 - requests 2.33.0 -> 2.34.2 - pillow extras <12 -> <13 (extras_require["images"] upper bound) Development & testing dependencies: - pyfakefs 5.10.2 -> 6.2.0 - pytest-asyncio 1.3.0 -> 1.4.0 - pytest-randomly 4.0.1 -> 4.1.0 - twine 6.2.0 -> 7.0.0 CI: - actions/setup-python v6 -> v7 (both workflows) Kept in sync across all sources of truth so the next SDK regeneration does not roll versions back: - requirements.txt, test-requirements.txt, setup.py - openapi/templates/requirements.mustache - openapi/templates/test-requirements.mustache - openapi/templates/setup.mustache - openapi/templates/pyproject.mustache (aiohttp lower bound 3.8.4 -> 3.14.3) Also bumped the jwcrypto hint version in the DPoP ImportError message in okta/oauth.py and the corresponding openapi/templates/okta/oauth.mustache so the install hint matches the new pinned floor. No functional/API changes. --- .github/workflows/python-package.yml | 2 +- .github/workflows/python.yml | 2 +- okta/oauth.py | 2 +- openapi/templates/okta/oauth.mustache | 2 +- openapi/templates/pyproject.mustache | 2 +- openapi/templates/requirements.mustache | 14 +++++++------- openapi/templates/setup.mustache | 10 +++++----- openapi/templates/test-requirements.mustache | 2 +- requirements.txt | 12 ++++++------ setup.py | 10 +++++----- test-requirements.txt | 2 +- 11 files changed, 30 insertions(+), 30 deletions(-) diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml index 2b9f6376..25c99858 100644 --- a/.github/workflows/python-package.yml +++ b/.github/workflows/python-package.yml @@ -21,7 +21,7 @@ jobs: steps: - uses: actions/checkout@v6 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python-version }} - name: Install dependencies diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 3e715705..a28dc59b 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -18,7 +18,7 @@ jobs: steps: - uses: actions/checkout@v6 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python-version }} - name: Install dependencies diff --git a/okta/oauth.py b/okta/oauth.py index 5203cae3..741ee9d8 100644 --- a/okta/oauth.py +++ b/okta/oauth.py @@ -79,7 +79,7 @@ def __init__(self, request_executor: Any, config: Dict[str, Any]) -> None: ) raise ValueError( "DPoP requires 'pycryptodomex' and 'jwcrypto' libraries. " - "Install with: pip install pycryptodomex>=3.23.0 jwcrypto>=1.5.6" + "Install with: pip install pycryptodomex>=3.23.0 jwcrypto>=1.5.8" ) from error try: diff --git a/openapi/templates/okta/oauth.mustache b/openapi/templates/okta/oauth.mustache index 5203cae3..741ee9d8 100644 --- a/openapi/templates/okta/oauth.mustache +++ b/openapi/templates/okta/oauth.mustache @@ -79,7 +79,7 @@ class OAuth: ) raise ValueError( "DPoP requires 'pycryptodomex' and 'jwcrypto' libraries. " - "Install with: pip install pycryptodomex>=3.23.0 jwcrypto>=1.5.6" + "Install with: pip install pycryptodomex>=3.23.0 jwcrypto>=1.5.8" ) from error try: diff --git a/openapi/templates/pyproject.mustache b/openapi/templates/pyproject.mustache index e75d2b50..b7a8ae7f 100644 --- a/openapi/templates/pyproject.mustache +++ b/openapi/templates/pyproject.mustache @@ -15,7 +15,7 @@ python = "^3.9" urllib3 = ">= 1.25.3" python-dateutil = ">=2.8.2" {{#asyncio}} -aiohttp = ">= 3.8.4" +aiohttp = ">= 3.14.3" aiohttp-retry = ">= 2.8.3" {{/asyncio}} {{#tornado}} diff --git a/openapi/templates/requirements.mustache b/openapi/templates/requirements.mustache index 9c0184e4..62b0ba52 100644 --- a/openapi/templates/requirements.mustache +++ b/openapi/templates/requirements.mustache @@ -1,22 +1,22 @@ aenum==3.1.17 -aiohttp==3.13.5 +aiohttp==3.14.3 blinker==1.9.0 -jwcrypto==1.5.7 +jwcrypto==1.5.8 pycryptodomex==3.23.0 pydantic==2.11.3 pydash==8.0.6 -PyJWT==2.12.1 +PyJWT==2.13.0 python-dateutil==2.9.0.post0 PyYAML==6.0.3 -requests==2.33.0 +requests==2.34.2 xmltodict==1.0.4 # Development & Testing Tools flake8==7.3.0 -pyfakefs==5.10.2 +pyfakefs==6.2.0 pytest==9.0.3 -pytest-asyncio==1.3.0 +pytest-asyncio==1.4.0 pytest-mock==3.15.1 pytest-recording==0.13.4 tox==4.30.3 -twine==6.2.0 +twine==7.0.0 diff --git a/openapi/templates/setup.mustache b/openapi/templates/setup.mustache index 62ec5574..1f0b7479 100644 --- a/openapi/templates/setup.mustache +++ b/openapi/templates/setup.mustache @@ -34,16 +34,16 @@ NAME = "okta" PYTHON_REQUIRES = ">=3.10" REQUIRES = [ "aenum >= 3.1.17", - "aiohttp >= 3.13.5", + "aiohttp >= 3.14.3", "blinker >= 1.9.0", - 'jwcrypto >= 1.5.7', + 'jwcrypto >= 1.5.8', "pycryptodomex >= 3.23.0", "pydantic >= 2.11.3", "pydash >= 8.0.6", - "PyJWT >= 2.12.1", + "PyJWT >= 2.13.0", "python-dateutil >= 2.9.0.post0", "PyYAML >= 6.0.3", - "requests >= 2.33.0", + "requests >= 2.34.2", "xmltodict >= 1.0.4", ] @@ -78,7 +78,7 @@ setup( keywords=["OpenAPI", "OpenAPI-Generator", "Okta Admin Management"], install_requires=REQUIRES, extras_require={ - "images": ["pillow >= 9.0.0, < 12"], + "images": ["pillow >= 9.0.0, < 13"], }, packages=find_packages(exclude=["test", "tests"]), include_package_data=True, diff --git a/openapi/templates/test-requirements.mustache b/openapi/templates/test-requirements.mustache index e4d58e25..344fbab6 100644 --- a/openapi/templates/test-requirements.mustache +++ b/openapi/templates/test-requirements.mustache @@ -1,5 +1,5 @@ pytest~=9.0.3 pytest-cov>=7.1.0 -pytest-randomly>=4.0.1 +pytest-randomly>=4.1.0 mypy>=1.4.1 types-python-dateutil>=2.8.19 diff --git a/requirements.txt b/requirements.txt index 9c0184e4..efcf0a22 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,21 +1,21 @@ aenum==3.1.17 -aiohttp==3.13.5 +aiohttp==3.14.3 blinker==1.9.0 -jwcrypto==1.5.7 +jwcrypto==1.5.8 pycryptodomex==3.23.0 pydantic==2.11.3 pydash==8.0.6 -PyJWT==2.12.1 +PyJWT==2.13.0 python-dateutil==2.9.0.post0 PyYAML==6.0.3 -requests==2.33.0 +requests==2.34.2 xmltodict==1.0.4 # Development & Testing Tools flake8==7.3.0 -pyfakefs==5.10.2 +pyfakefs==6.2.0 pytest==9.0.3 -pytest-asyncio==1.3.0 +pytest-asyncio==1.4.0 pytest-mock==3.15.1 pytest-recording==0.13.4 tox==4.30.3 diff --git a/setup.py b/setup.py index 62ec5574..1f0b7479 100644 --- a/setup.py +++ b/setup.py @@ -34,16 +34,16 @@ PYTHON_REQUIRES = ">=3.10" REQUIRES = [ "aenum >= 3.1.17", - "aiohttp >= 3.13.5", + "aiohttp >= 3.14.3", "blinker >= 1.9.0", - 'jwcrypto >= 1.5.7', + 'jwcrypto >= 1.5.8', "pycryptodomex >= 3.23.0", "pydantic >= 2.11.3", "pydash >= 8.0.6", - "PyJWT >= 2.12.1", + "PyJWT >= 2.13.0", "python-dateutil >= 2.9.0.post0", "PyYAML >= 6.0.3", - "requests >= 2.33.0", + "requests >= 2.34.2", "xmltodict >= 1.0.4", ] @@ -78,7 +78,7 @@ def get_version(): keywords=["OpenAPI", "OpenAPI-Generator", "Okta Admin Management"], install_requires=REQUIRES, extras_require={ - "images": ["pillow >= 9.0.0, < 12"], + "images": ["pillow >= 9.0.0, < 13"], }, packages=find_packages(exclude=["test", "tests"]), include_package_data=True, diff --git a/test-requirements.txt b/test-requirements.txt index e4d58e25..344fbab6 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,5 +1,5 @@ pytest~=9.0.3 pytest-cov>=7.1.0 -pytest-randomly>=4.0.1 +pytest-randomly>=4.1.0 mypy>=1.4.1 types-python-dateutil>=2.8.19 From 1d1d39f64e964ce187e44cb1b3b714cfd34f0f7c Mon Sep 17 00:00:00 2001 From: BinoyOza-okta Date: Wed, 23 Sep 2026 09:48:39 +0530 Subject: [PATCH 2/2] - Synced pyproject.toml with the requirements.txt file. --- openapi/templates/pyproject.mustache | 6 +++--- pyproject.toml | 8 ++++---- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/openapi/templates/pyproject.mustache b/openapi/templates/pyproject.mustache index b7a8ae7f..b3d8121e 100644 --- a/openapi/templates/pyproject.mustache +++ b/openapi/templates/pyproject.mustache @@ -13,7 +13,7 @@ include = ["{{packageName}}/py.typed"] python = "^3.9" urllib3 = ">= 1.25.3" -python-dateutil = ">=2.8.2" +python-dateutil = ">=2.9.0.post0" {{#asyncio}} aiohttp = ">= 3.14.3" aiohttp-retry = ">= 2.8.3" @@ -25,14 +25,14 @@ tornado = ">=4.2,<5" pem = ">= 19.3.0" pycryptodome = ">= 3.9.0" {{/hasHttpSignatureMethods}} -pydantic = ">=2" +pydantic = ">=2.11.3" typing-extensions = ">=4.7.1" [tool.poetry.dev-dependencies] pytest = ">=9.0.3" tox = ">=4.30.3" flake8 = ">=7.3.0" -types-python-dateutil = ">=2.8.19.14" +types-python-dateutil = ">=2.8.19" mypy = "1.4.1" diff --git a/pyproject.toml b/pyproject.toml index b311eaad..45102b4b 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -10,18 +10,18 @@ keywords = ["OpenAPI", "OpenAPI-Generator", "Okta Admin Management"] include = ["okta/py.typed"] [tool.poetry.dependencies] -python = "^3.9" +python = "^3.10" urllib3 = ">= 1.25.3" -python-dateutil = ">=2.8.2" -pydantic = ">=2" +python-dateutil = ">=2.9.0.post0" +pydantic = ">=2.11.3" typing-extensions = ">=4.7.1" [tool.poetry.dev-dependencies] pytest = ">=9.0.3" tox = ">=4.30.3" flake8 = ">=7.3.0" -types-python-dateutil = ">=2.8.19.14" +types-python-dateutil = ">=2.8.19" mypy = "1.4.1"