[dependabot]

Bumps joserfc from 1.7.5 to 1.7.6.

Release notes

Sourced from joserfc's releases.

1.7.6

   🐞 Bug Fixes

• Validate compact value size before split  -  by @​lepture (397e0)
• ci: Restrict default workflow token permissions  -  by @​lepture (d060c)
• jwe: Limit additional authenticated data size  -  by @​lepture (25e95)
• jwk: Handle KeySet equality with unrelated types  -  by @​janmrow in authlib/joserfc#106 (27d7c)
• jwt: Report correct claim name for invalid iss  -  by @​janmrow (eec6d)
• jwt: Require string values for jti claims  -  by @​lepture (e93fd)

    View changes on GitHub

Changelog

Sourced from joserfc's changelog.

1.7.6

Released on October 19, 2026

• JWE: Limit base64url-encoded additional authenticated data to 65,536 bytes before copying or decoding it in JSON serialization. Configure the limit with JWERegistry(max_aad_length=...).
• JWT: Reject non-string jti claims, including arrays containing an expected token ID, even when no claim options are configured.
• JWT: Report the correct claim name for invalid iss values.
• JWS & JWE: Validate compact token size before splitting it into segments.
• JWK: Handle key set equality comparisons with unrelated types.

Commits

• c54d9cc chore: release 1.7.6
• d060c2e fix(ci): restrict default workflow token permissions
• e93fd2b fix(jwt): require string values for jti claims
• 25e9526 fix(jwe): limit additional authenticated data size
• 27d7c8a fix(jwk): handle KeySet equality with unrelated types (#106)
• 397e04f fix: validate compact value size before split
• 8074dc7 Merge pull request #105 from janmrow/fix/jwt-iss-claim-name
• eec6d5e fix(jwt): report correct claim name for invalid iss
• See full diff in compare view

[github-actions]

Integration Tests

Test summary after running integration tests

filepath	passed	failed	skipped	SUBTOTAL
tests/test_dbgap.py	4	0	1	5
tests/test_ras_passport.py	0	0	2	2
tests/test_data_upload.py	8	0	1	9
tests/test_graph_submit_and_query.py	12	1	1	14
tests/test_presigned_url.py	8	0	0	8
tests/test_centralized_auth.py	5	0	0	5
tests/test_audit_service.py	1	0	0	1
tests/test_google_data_access.py	1	0	0	1
tests/test_gen3_sdk.py	1	0	0	1
TOTAL	40	1	5	46

Test summary after rerunning failed integration tests

filepath	passed	SUBTOTAL
tests/test_graph_submit_and_query.py	1	1
TOTAL	1	1

Please find the detailed integration test report here

Please find the detailed integration test report after rerunning failed tests here

Please find the Github Action logs here

[github-actions]

Integration Tests

Test summary after running integration tests

filepath	passed	failed	skipped	SUBTOTAL
tests/test_dbgap.py	4	0	1	5
tests/test_ras_passport.py	0	0	2	2
tests/test_data_upload.py	6	2	1	9
tests/test_graph_submit_and_query.py	11	2	1	14
tests/test_presigned_url.py	8	0	0	8
tests/test_centralized_auth.py	5	0	0	5
tests/test_audit_service.py	1	0	0	1
tests/test_google_data_access.py	1	0	0	1
tests/test_gen3_sdk.py	1	0	0	1
TOTAL	37	4	5	46

Test summary after rerunning failed integration tests

filepath	failed	SUBTOTAL
tests/test_graph_submit_and_query.py	2	2
tests/test_data_upload.py	2	2
TOTAL	4	4

Please find the detailed integration test report here

Please find the detailed integration test report after rerunning failed tests here

Please find the Github Action logs here

[github-actions]

Failure Analysis

Please find the detailed test analysis report here