From df82b3b8a0f25bbde0c1db78667f2417c55e3f7c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 21:32:18 +0000
Subject: [PATCH] Bump joserfc from 1.6.4 to 1.6.8

Bumps [joserfc](https://github.com/authlib/joserfc) from 1.6.4 to 1.6.8.
- [Release notes](https://github.com/authlib/joserfc/releases)
- [Changelog](https://github.com/authlib/joserfc/blob/main/docs/changelog.rst)
- [Commits](https://github.com/authlib/joserfc/compare/1.6.4...1.6.8)

---
updated-dependencies:
- dependency-name: joserfc
  dependency-version: 1.6.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 31 +++++++++++++++----------------
 1 file changed, 15 insertions(+), 16 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 4ad27e4..425595c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -28,6 +28,8 @@ aws-bedrock-token-generator==1.1.0
     # via -r requirements.in
 awscrt==0.31.2
     # via botocore
+backports-tarfile==1.2.0
+    # via jaraco-context
 beartype==0.22.9
     # via py-key-value-aio
 boto3==1.42.93
@@ -75,7 +77,9 @@ docutils==0.22.4
 email-validator==2.3.0
     # via pydantic
 exceptiongroup==1.3.1
-    # via fastmcp
+    # via
+    #   anyio
+    #   fastmcp
 fastmcp==3.2.4
     # via mcp-proxy-for-aws
 griffelib==2.0.2
@@ -99,7 +103,9 @@ idna==3.15
     #   email-validator
     #   httpx
 importlib-metadata==8.7.1
-    # via opentelemetry-api
+    # via
+    #   keyring
+    #   opentelemetry-api
 jaraco-classes==3.4.0
     # via keyring
 jaraco-context==6.1.2
@@ -116,7 +122,7 @@ jmespath==1.1.0
     # via
     #   boto3
     #   botocore
-joserfc==1.6.4
+joserfc==1.6.8
     # via authlib
 jsonref==1.1.0
     # via fastmcp
@@ -242,11 +248,15 @@ starlette==1.3.1
     #   sse-starlette
 strands-agents[openai]==1.36.0
     # via -r requirements.in
+tomli==2.4.1
+    # via cyclopts
 tqdm==4.67.3
     # via openai
 typing-extensions==4.15.0
     # via
     #   anyio
+    #   cryptography
+    #   cyclopts
     #   exceptiongroup
     #   mcp
     #   openai
@@ -256,10 +266,12 @@ typing-extensions==4.15.0
     #   py-key-value-aio
     #   pydantic
     #   pydantic-core
+    #   pyjwt
     #   referencing
     #   starlette
     #   strands-agents
     #   typing-inspection
+    #   uvicorn
 typing-inspection==0.4.2
     # via
     #   mcp
@@ -285,16 +297,3 @@ wrapt==2.1.2
     #   opentelemetry-instrumentation-threading
 zipp==3.23.1
     # via importlib-metadata
-
-# --- Platform-gated dependencies ---------------------------------------------
-# The entries below are transitive deps that pip resolves only on certain
-# platforms. pip-compile on Linux doesn't record them, so we add them by hand.
-# Safe to skip if you regenerate on Windows (pip-compile will pick them up).
-backports-tarfile==1.2.0 ; python_version < "3.12"
-    # via jaraco-context
-colorama==0.4.6 ; sys_platform == "win32"
-    # via click
-pywin32==311 ; sys_platform == "win32"
-    # via mcp
-pywin32-ctypes==0.2.3 ; sys_platform == "win32"
-    # via keyring