Bump joserfc from 1.5.0 to 1.6.8 in /python

[dependabot]

Bumps joserfc from 1.5.0 to 1.6.8.

Release notes

Sourced from joserfc's releases.

1.6.8

• Reject empty OctKey.

Full Changelog: authlib/joserfc@1.6.7...1.6.8

1.6.7

   🐞 Bug Fixes

• jws: Validate payload size for b64=false  -  by @​lepture (4d4ea)
• typing: Accept any Collection for algorithms, not just list  -  by @​jonathangreen (102a7)
• typing: Use cast for type hints  -  by @​lepture (75d9f)

    View changes on GitHub

1.6.5

No significant changes

    View changes on GitHub

1.6.4

   🐞 Bug Fixes

• Use  -  by 5e3daf0 [( inst)](https://github.com/authlib/joserfc/commit/ instead of Optional for typing)
• jwe: Remove InvalidCEKLengthError  -  by @​lepture (8aeb1)

    View changes on GitHub

1.6.3

   🐞 Bug Fixes

• jwe: Set max value for p2c  -  by @​lepture (696a9)

    View changes on GitHub

1.6.2

   🐞 Bug Fixes

• Class does not need to inherit object  -  by @​lepture (4a9be)
• jwe: Move size limit to DeflateZipModel  -  by @​lepture (04211)
• jwe: Auto add kid when add_recipient  -  by @​lepture (10ac9)
• jwe: Auto add kid to recipient when kid exists  -  by @​lepture (9db7e)

    View changes on GitHub

1.6.1

   🐞 Bug Fixes

• Remove duplicate code  -  by @​lepture (2c2ca)
• Improve base key method definition  -  by @​lepture (d78b4)
• Update for type hints  -  by @​lepture (e0d4f)

... (truncated)

Changelog

Sourced from joserfc's changelog.

1.6.8

Released on May 27, 2026

• Reject empty OctKey.

1.6.7

Released on May 23, 2026

• Update for type hints.

1.6.6

Released on May 18, 2026

• JWS: validate payload size when b64=false.

1.6.5

Released on May 3, 2026

• JWS: increase registry's payload max size.

1.6.4

Released on April 13, 2026

• JWE: remove InvalidCEKLengthError.
• JWK: fix ECKey serialization.

1.6.3

Released on February 25, 2026

• JWE: Set a max value for p2c header.

1.6.2

Released on February 16, 2026

• JWE: Auto add kid to recipient.
• JWE: Use DeflateZipModel.MAX_SIZE to determine size limit.

... (truncated)

Commits

• ea1d9e3 chore: release 1.6.8
• 86d0091 Reject empty oct key material and empty HMAC keys at sign/verify entry
• 1e5b94d chore: release 1.6.7
• 75d9f95 fix(typing): use cast for type hints
• 6d24037 Merge pull request #98 from jonathangreen/algorithms-accept-collection
• 102a7a7 fix(typing): accept any Collection for algorithms, not just list
• 8b869e8 chore: release 1.6.6
• 00d599b chore: update actions
• 9186561 Merge pull request #97 from authlib/fix-b64
• 4d4ea2e fix(jws): validate payload size for b64=false
• Additional commits viewable in compare view

[github-actions]

This pull request has been automatically marked as stale because it has not had
any activity for 14 days. It will be closed in another 14 days if no further activity occurs.
Thank you for your contributions.

You can always ask for help on our discussion forum or Ray's public slack channel.

If you'd like to keep this open, just leave any comment, and the stale label will be removed.