Skip to content

LCORE-1421: fixes authlib CVE#1279

Merged
tisnik merged 1 commit intolightspeed-core:mainfrom
tisnik:lcore-1421-fixes-authlib
Mar 5, 2026
Merged

LCORE-1421: fixes authlib CVE#1279
tisnik merged 1 commit intolightspeed-core:mainfrom
tisnik:lcore-1421-fixes-authlib

Conversation

@tisnik
Copy link
Contributor

@tisnik tisnik commented Mar 5, 2026

Description

LCORE-1421: fixes authlib CVE

Type of change

  • Refactor
  • New feature
  • Bug fix
  • CVE fix
  • Optimization
  • Documentation Update
  • Configuration Update
  • Bump-up service version
  • Bump-up dependent library
  • Bump-up library or tool used for development (does not change the final image)
  • CI configuration change
  • Konflux configuration change
  • Unit tests improvement
  • Integration tests improvement
  • End to end tests improvement
  • Benchmarks improvement

Tools used to create PR

  • Assisted-by: N/A
  • Generated by: N/A

Related Tickets & Documents

  • Related Issue #LCORE-1421

Summary by CodeRabbit

  • Chores
    • Updated authlib dependency to version 1.6.9 for improved stability and security.

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Mar 5, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: d8b7b480-0ea3-4317-af24-f13e012bb2ad

📥 Commits

Reviewing files that changed from the base of the PR and between 410bb5f and d1f42ed.

📒 Files selected for processing (1)
  • requirements.hashes.source.txt

Walkthrough

Updated authlib dependency from version 1.6.6 to 1.6.9 in the requirements file, replacing the associated SHA256 hashes. No other dependencies were modified; control flow remains unchanged.

Changes

Cohort / File(s) Summary
Dependency Version Update
requirements.hashes.source.txt
Updated authlib from 1.6.6 to 1.6.9 with new SHA256 hashes.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The pull request title clearly references fixing a CVE in authlib, which directly aligns with the changeset that updates authlib from 1.6.6 to 1.6.9 with new hashes.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@tisnik tisnik merged commit 1f218bd into lightspeed-core:main Mar 5, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant