chore: bump authlib and lock h11

[UladzislauK-Writer]

Summary by CodeRabbit

• Chores
  • Pinned a dependency to a specific release to improve consistency and predictability across deployment environments.
  • Added an explicit networking dependency to ensure stable HTTP behavior and compatibility.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 80fb698b-d692-434f-9219-f8754e87e20e

📥 Commits

Reviewing files that changed from the base of the PR and between 4381680 and 8f3b03e.

⛔ Files ignored due to path filters (1)

• poetry.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• pyproject.toml

🚧 Files skipped from review as they are similar to previous changes (1)

• pyproject.toml

---

📝 Walkthrough

Walkthrough

Updated dependency declarations in pyproject.toml: authlib constraint changed from a range (>=1.3.0, <1.7) to a caret-pinned spec (^1.6.9), and h11 was added as an explicit dependency (^0.16).

Changes

Cohort / File(s)	Summary
Dependency updates pyproject.toml	Changed tool.poetry.dependencies.authlib from >=1.3.0, <1.7 to ^1.6.9; added tool.poetry.dependencies.h11 with ^0.16.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

🐰 I hopped through toml and found a line,
Tucked h11 in and pinned authlib fine,
A careful nibble, versions neat and spry,
Dependencies settled, I wink my eye —
A tiny thump, the build can sigh. ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'chore: bump authlib' accurately describes the main change in the pull request, which updates the authlib dependency from a range constraint to a caret-pinned spec.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch vlad/bump-authlib

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

🧹 Nitpick comments (1)

pyproject.toml (1)

34-34: Use a bounded constraint for authlib to maintain consistency with other dependencies.

authlib is the only exact-pinned dependency in the runtime set; all others (click, fastapi, pandas, etc.) use bounded ranges. Since authlib usage here is standard OAuth2 operations (OAuth2Session, fetch_token, get), these should be compatible across patch versions. Consider using >=1.6.9, <1.7 or ^1.6.9 to align with the project's existing constraint style.

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@pyproject.toml` at line 34, Replace the exact-pinned dependency declaration
for authlib in pyproject.toml with a bounded range to match the project's other
dependencies (e.g., change "authlib = \"1.6.9\"" to a range such as "authlib =
\">=1.6.9, <1.7\"" or a caret constraint like "^1.6.9"); update the dependency
line for authlib so runtime usage of OAuth2Session/fetch_token/get remains
compatible while avoiding a single exact pin.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In `@pyproject.toml`:
- Line 34: Replace the exact-pinned dependency declaration for authlib in
pyproject.toml with a bounded range to match the project's other dependencies
(e.g., change "authlib = \"1.6.9\"" to a range such as "authlib = \">=1.6.9,
<1.7\"" or a caret constraint like "^1.6.9"); update the dependency line for
authlib so runtime usage of OAuth2Session/fetch_token/get remains compatible
while avoiding a single exact pin.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: ce3d2932-8f1a-4d02-a0f6-7fa733927179

📥 Commits

Reviewing files that changed from the base of the PR and between da82279 and 4381680.

⛔ Files ignored due to path filters (1)

• poetry.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• pyproject.toml