awx/awx at 5333d0d1f9930e4d40ae63e38643e674ff740d4b - awx

mirror of https://github.com/ansible/awx.git synced 2026-10-29 22:03:20 -02:30

Files

T

Rodrigo Toshiaki Horie 5333d0d1f9 Bump PyJWT to address CVE-2026-102268 (#16748 )

* Bump PyJWT to address CVE-2026-102268

Pin PyJWT>=2.14.0 in requirements.in to address CVE-2026-102268
(authentication bypass via improper public key validation).
Regenerated requirements.txt via make docker_update_requirements.

Assisted-By: Claude Code
Signed-off-by: Rodrigo Horie <rodrigo.horie@hotmail.com>

* Use a 32+ byte HMAC key in workload identity tests

PyJWT >= 2.11 emits InsecureKeyLengthWarning for HS256 keys shorter
than 32 bytes, which pytest's filterwarnings=error turns into an
exception that populate_workload_identity_tokens swallows, so the
Gateway request is never made.

Assisted-By: Claude Code
Signed-off-by: Rodrigo Horie <rodrigo.horie@hotmail.com>

---------

Signed-off-by: Rodrigo Horie <rodrigo.horie@hotmail.com>

2026-10-27 09:28:31 -03:00

api

AAP-96178: Fix unified_jobs pagination count to respect RBAC filtering (#16751 )

2026-10-22 09:34:30 -04:00

conf

[AAP-78694] Add CleanTextMixin to settings serializer (#16661 )

2026-09-22 17:41:47 +02:00

locale

Working on running spellcheck on everything ahead of merging the shellcheck/code check CI addition. (#13453 )

2023-03-01 10:19:00 -03:00

main

Bump PyJWT to address CVE-2026-102268 (#16748 )