From 993ce814062c94aa132e49f79e336afb05522335 Mon Sep 17 00:00:00 2001
From: Tung Wu <tung@oursky.com>
Date: Wed, 20 May 2026 15:07:14 +0800
Subject: [PATCH] Fix ruby-jwt empty-key HMAC bypass

Bump jwt from 2.10.1 to 2.10.2.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 Gemfile.lock | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index 760e1f3..ef35c92 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -237,7 +237,7 @@ GEM
       xcinvoke (~> 0.3.0)
     jmespath (1.6.2)
     json (2.10.2)
-    jwt (2.10.1)
+    jwt (2.10.2)
       base64
     liferaft (0.0.6)
     logger (1.6.6)