Dependency on old pyjwt

[aberres]

With 5.3 an explicit dependency on PyJWT 2.9 got introduced via #3462

Is there a specific reason for this, or could this be "PyJWT>=2.9.0"?

I noticed this, as updating redis would downgrade pyjwt for me.

$ uv lock --upgrade-package redis==5.3.0
Resolved 329 packages in 470ms
Updated pyjwt v2.10.1 -> v2.9.0
Updated redis v5.2.1 -> v5.3.0

[petyaslavova]

Hi @aberres, thanks for bringing this to our attention! 🙂
I don’t see any reason not to make the change. I tested it locally with the latest PyJWT, and all tests passed.
If you're interested in submitting a PR, I’d be happy to review it. Otherwise, I’ll go ahead and create one later this week or next.

[aberres]

@petyaslavova I added a minimal PR.

[bcmills]

Do you plan to also backport the fix to the 5.3 branch? Currently folks stuck on engine versions older than 7.2 are still exposed to this problem.