Changed
storage.UserProtocolnow supports read-only attributes for better type-checker compatibility- Improved type annotations and enabled mypy type checking in CI
Fixed
sanitize_redirect()now handles invalid redirect values that raiseValueError- Fixed timezone handling when working with dates
Security
- Require
PyJWT >= 2.12.0to address CVE-2026-32597