Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/open-webui/open-webui/pull/9201
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 2/1/2025
**Status:** ✅ Merged
**Merged:** 2/1/2025
**Merged by:** [@tjbck](https://github.com/tjbck)
**Base:** `dev` ← **Head:** `dependabot/pip/backend/dev/authlib-1.4.1`
---
### 📝 Commits (1)
- [`c00d1a2`](https://github.com/open-webui/open-webui/commit/c00d1a2f87bc7a432e249468830fcbfbcfb44397) build(deps): bump authlib from 1.3.2 to 1.4.1 in /backend
### 📊 Changes
**1 file changed** (+1 additions, -1 deletions)
<details>
<summary>View changed files</summary>
📝 `backend/requirements.txt` (+1 -1)
</details>
### 📄 Description
Bumps [authlib](https://github.com/lepture/authlib) from 1.3.2 to 1.4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/lepture/authlib/releases">authlib's releases</a>.</em></p>
<blockquote>
<h2>Version 1.4.1</h2>
<ul>
<li>Improve garbage collection on OAuth clients. <a href="https://redirect.github.com/lepture/authlib/issues/698">#698</a></li>
<li>Fix client parameters for httpx. <a href="https://redirect.github.com/lepture/authlib/issues/694">#694</a></li>
</ul>
<h2>Version 1.4.0</h2>
<p><strong>Bugfixes</strong></p>
<ul>
<li>Fix id_token decoding when kid is null. <a href="https://redirect.github.com/lepture/authlib/issues/659">#659</a></li>
<li>Support for Python 3.13. <a href="https://redirect.github.com/lepture/authlib/issues/682">#682</a></li>
<li>Force login if the prompt parameter value is login. <a href="https://redirect.github.com/lepture/authlib/issues/637">#637</a></li>
<li>Support for httpx 0.28. <a href="https://redirect.github.com/lepture/authlib/issues/695">#695</a></li>
</ul>
<p><strong>Breaking changes</strong></p>
<ul>
<li>Stop support for Python 3.8. <a href="https://redirect.github.com/lepture/authlib/issues/682">#682</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/lepture/authlib/blob/master/docs/changelog.rst">authlib's changelog</a>.</em></p>
<blockquote>
<h2>Version 1.4.1</h2>
<p><strong>Released on Jan 28, 2025</strong></p>
<ul>
<li>Improve garbage collection on OAuth clients. :issue:<code>698</code></li>
<li>Fix client parameters for httpx. :issue:<code>694</code></li>
</ul>
<h2>Version 1.4.0</h2>
<p><strong>Released on Dec 20, 2024</strong></p>
<ul>
<li>Fix <code>id_token</code> decoding when kid is null. :pr:<code>659</code></li>
<li>Support for Python 3.13. :pr:<code>682</code></li>
<li>Force login if the <code>prompt</code> parameter value is <code>login</code>. :pr:<code>637</code></li>
<li>Support for httpx 0.28, :pr:<code>695</code></li>
</ul>
<p><strong>Breaking changes</strong>:</p>
<ul>
<li>Stop support for Python 3.8. :pr:<code>682</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/lepture/authlib/commit/0e8f480e9c9a91ab3dc8017de70f59014e66664d"><code>0e8f480</code></a> chore: release 1.4.1</li>
<li><a href="https://github.com/lepture/authlib/commit/c46e939c38c507438dee039440e74e8f97f8ef9d"><code>c46e939</code></a> fix(client): improve garbage collection for oauth clients</li>
<li><a href="https://github.com/lepture/authlib/commit/9188e21283e52f42b0e495d978d255715d6fae7b"><code>9188e21</code></a> fix(httpx): remove compact code for httpx</li>
<li><a href="https://github.com/lepture/authlib/commit/c7e2d9f76f7c780d7dce538e55d2d0a279d64e02"><code>c7e2d9f</code></a> fix(httpx): update test cases for httpx</li>
<li><a href="https://github.com/lepture/authlib/commit/ce1405dd14795e20c9429757780cf2e5c74bd011"><code>ce1405d</code></a> fix: improve garbage collection via <a href="https://redirect.github.com/lepture/authlib/issues/698">#698</a></li>
<li><a href="https://github.com/lepture/authlib/commit/532cce618b07dd15843437da0b18f04ceb36b0a4"><code>532cce6</code></a> fix: update httpx client kwargs <a href="https://redirect.github.com/lepture/authlib/issues/694">#694</a></li>
<li><a href="https://github.com/lepture/authlib/commit/fe12a578854fb64c8a3906676ba7d2a2b9579459"><code>fe12a57</code></a> chore: update readme</li>
<li><a href="https://github.com/lepture/authlib/commit/eb34edfc8b1fdaae51a91d4686ebb34395e5082c"><code>eb34edf</code></a> chore: release 1.4.0</li>
<li><a href="https://github.com/lepture/authlib/commit/bc5500352a3ad67b5d66f21c762cc5c063a2f2f3"><code>bc55003</code></a> Merge pull request <a href="https://redirect.github.com/lepture/authlib/issues/695">#695</a> from MeggyCal/master</li>
<li><a href="https://github.com/lepture/authlib/commit/1d10ff348c052682178572ed1647c5cebb681b86"><code>1d10ff3</code></a> Support httpx 0.28</li>
<li>Additional commits viewable in <a href="https://github.com/lepture/authlib/compare/v1.3.2...v1.4.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/9201
Author: @dependabot[bot]
Created: 2/1/2025
Status: ✅ Merged
Merged: 2/1/2025
Merged by: @tjbck
Base:
dev← Head:dependabot/pip/backend/dev/authlib-1.4.1📝 Commits (1)
c00d1a2build(deps): bump authlib from 1.3.2 to 1.4.1 in /backend📊 Changes
1 file changed (+1 additions, -1 deletions)
View changed files
📝
backend/requirements.txt(+1 -1)📄 Description
Bumps authlib from 1.3.2 to 1.4.1.
Release notes
Sourced from authlib's releases.
Changelog
Sourced from authlib's changelog.
Commits
0e8f480chore: release 1.4.1c46e939fix(client): improve garbage collection for oauth clients9188e21fix(httpx): remove compact code for httpxc7e2d9ffix(httpx): update test cases for httpxce1405dfix: improve garbage collection via #698532cce6fix: update httpx client kwargs #694fe12a57chore: update readmeeb34edfchore: release 1.4.0bc55003Merge pull request #695 from MeggyCal/master1d10ff3Support httpx 0.28Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.