Bump pyjwt from 1.4.2 to 1.5.3

[dependabot]

Bumps pyjwt from 1.4.2 to 1.5.3.

Release notes

Sourced from pyjwt's releases.

v1.5.3

Changed

• Increase required version of the cryptography package to >=1.4.0.

Fixed

• Remove uses of deprecated functions from the cryptography package.
• Warn about missing algorithms param to decode() only when verify param is True #281

v1.5.2

Fixed

• Ensure correct arguments order in decode super call 7c1e61d

v1.5.1

Changed

• Change optparse for argparse. #238238

Fixed

• Guard against PKCS1 PEM encododed public keys #277277
• Add deprecation warning when decoding without specifying algorithms #277277
• Improve deprecation messages #270270
• PyJWT.decode: move verify param into options #271271

Added

• Support for Python 3.6 #262262
• Expose jwt.InvalidAlgorithmError #264264

v1.5.0

Changed

• Add support for ECDSA public keys in RFC 4253 (OpenSSH) format #244
• Renamed commandline script jwt to jwt-cli to avoid issues with the script clobbering the jwt module in some circumstances. #187
• Better error messages when using an algorithm that requires the cryptography package, but it isn't available #230
• Tokens with future 'iat' values are no longer rejected #190
• Non-numeric 'iat' values now raise InvalidIssuedAtError instead of DecodeError
• Remove rejection of future 'iat' claims #252

... (truncated)

Changelog

Sourced from pyjwt's changelog.

v1.5.3 <https://github.com/jpadilla/pyjwt/compare/1.5.2...1.5.3>__

Changed

-  Increase required version of the cryptography package to >=1.4.0.
Fixed

-  Remove uses of deprecated functions from the cryptography package.
-  Warn about missing ``algorithms`` param to ``decode()`` only when
   ``verify`` param is ``True``
   `[#281](https://github.com/jpadilla/pyjwt/issues/281) <https://github.com/jpadilla/pyjwt/pull/281>`__
v1.5.2 <https://github.com/jpadilla/pyjwt/compare/1.5.1...1.5.2>__
Fixed



Ensure correct arguments order in decode super call
7c1e61d <https://github.com/jpadilla/pyjwt/commit/7c1e61dde27bafe16e7d1bb6e35199e778962742>__

v1.5.1 <https://github.com/jpadilla/pyjwt/compare/1.5.0...1.5.1>__
Changed

• Change optparse for argparse. [#238](https://github.com/jpadilla/pyjwt/issues/238) <https://github.com/jpadilla/pyjwt/pull/238>__

Fixed

-  Guard against PKCS1 PEM encoded public keys
   `[#277](https://github.com/jpadilla/pyjwt/issues/277) <https://github.com/jpadilla/pyjwt/pull/277>`__
-  Add deprecation warning when decoding without specifying
   ``algorithms`` `[#277](https://github.com/jpadilla/pyjwt/issues/277) <https://github.com/jpadilla/pyjwt/pull/277>`__
-  Improve deprecation messages
   `[#270](https://github.com/jpadilla/pyjwt/issues/270) <https://github.com/jpadilla/pyjwt/pull/270>`__
-  PyJWT.decode: move verify param into options
   `[#271](https://github.com/jpadilla/pyjwt/issues/271) <https://github.com/jpadilla/pyjwt/pull/271>`__
Added

• Support for Python 3.6

... (truncated)

Commits

• 72bb76c Use twine for publishing to PyPI
• 2f76281 Bump up version to v1.5.3
• 608ed4a Warn about missing algorithms arg only when verify is True
• 3def8d8 Require cryptography >= 1.4, replace deprecated function
• 5fbc484 Prevent needing to scroll on jwt.decode example
• ffa8458 Add 'algorithms=[]' kwargs to jwt.decode() examples
• 74399b1 Bump up for release
• 7c1e61d Ensure correct arguments order in decode super call
• bc96621 Bump up version
• 8bd4f6e Update CHANGELOG.md
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[jonathangreen]

@dependabot ignore this minor version

[dependabot]

OK, I won't notify you about version 1.5.x again, unless you re-open this PR or update to a 1.5.x release yourself.

[jonathangreen]

Reopening this to remove pyjwt from the dependabot ignore list, this should get closed automatically by dependabot.

[jonathangreen]

@dependabot rebase

[jonathangreen]

@dependabot recreate

[jonathangreen]

@dependabot recreate

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[jonathangreen]

@dependabot recreate

[dependabot]

Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).

[jonathangreen]

@dependabot reopen

[jonathangreen]

@dependabot recreate

[jonathangreen]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[jonathangreen]

@dependabot recreate

[dependabot]

A newer version of pyjwt exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

[dependabot]

Superseded by #1375.