From 845e90437b2bb6e7c2d003f963ca54bb82c8bf3b Mon Sep 17 00:00:00 2001 From: Houkun Date: Mon, 9 Nov 2026 11:05:03 +0100 Subject: [PATCH] security: require oauthlib>=4.0.1 (Dependabot alert #40) Co-Authored-By: Claude Opus 5.5 --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 02a7169..f654d14 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -13,7 +13,7 @@ pyspark = ">=3.4.4" fire = ">=0.4" # this is not a direct dependency of the template, but a dependency of databricks-cli # that comes from mlflow, if we dont pin it here we get a lower version that has a security problem -oauthlib = ">=4.0.0" +oauthlib = ">=4.0.1" urllib3 = ">=2.8.0" requests = "^2.23.3" # PyJWT is a transitive dependency of databricks-cli; pinned here to pull in fixes for