From 324201e654523ebc57be6e6fae04b31406797d57 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Radek=20Ma=C5=88=C3=A1k?= <Radek.Manak@protonmail.com>
Date: Thu, 5 Feb 2026 15:12:06 +0100
Subject: [PATCH] Pin PyJWT to fix JWT issuer type error

PyJWT 2.11.0 added strict validation requiring the 'iss' claim to be a
string. github3.py passes integer app_id to 'iss', causing:
  TypeError: Issuer (iss) must be a string.

The fix exists in github3.py main branch (commit b7cf611) but hasn't
been released. Pin PyJWT <2.11.0 as workaround.
---
 requirements.txt | 1 +
 setup.py         | 9 ++++++++-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 77d1aef..6433eb6 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,6 @@
 cryptography>=3.4.7
 github3.py>=3.0.0
+PyJWT>=2.0.0,<2.11.0
 GitPython>=3.1.18
 requests>=2.26.0
 validators>=0.18.2
\ No newline at end of file
diff --git a/setup.py b/setup.py
index db3b597..8a0b6d7 100755
--- a/setup.py
+++ b/setup.py
@@ -8,7 +8,14 @@
    author='Mikhail Fedosin',
    author_email='mfedosin@redhat.com',
    packages=['rebasebot'],
-   install_requires=['cryptography', 'gitpython', 'github3.py', 'requests', 'validators'], #external packages as dependencies
+   install_requires=[
+       'cryptography>=3.4.7',
+       'gitpython>=3.1.18',
+       'github3.py>=3.0.0',
+       'PyJWT>=2.0.0,<2.11.0',
+       'requests>=2.26.0',
+       'validators>=0.18.2'
+   ], #external packages as dependencies
    scripts=['rebasebot/cli.py'],
    include_package_data=True,
    package_data={'rebasebot': ['builtin-hooks/**']}