From b10cef39ed46e8325c8cfbd7abb2b4e34fd3bdeb Mon Sep 17 00:00:00 2001
From: David Abramov <dabramov@lbl.gov>
Date: Tue, 23 Jun 2026 12:10:18 -0700
Subject: [PATCH 1/2] Pin authlib version to 1.6.12 in dependencies

---
 pyproject.toml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 7ff59ad6..03e0592c 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -5,7 +5,7 @@ description = "ALS configuration and code for Prefect workflows to move data and
 readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
-    "authlib",
+    "authlib==1.6.12",
     "dynaconf",
     "globus-compute-sdk @ git+https://github.com/globus/globus-compute.git@d1731340074be56861ec91d732bdff44f8e2b46e#subdirectory=compute_sdk",
     "globus-sdk>=3.0",
@@ -40,4 +40,4 @@ dev = [
 
 [build-system]
 requires = ["setuptools"]
-build-backend = "setuptools.build_meta"
\ No newline at end of file
+build-backend = "setuptools.build_meta"

From ca91f49071a1ef121864b4ff5435d8b73dc4c053 Mon Sep 17 00:00:00 2001
From: David Abramov <dabramov@lbl.gov>
Date: Tue, 23 Jun 2026 14:09:22 -0700
Subject: [PATCH 2/2] Pinning cryptography, fastapi, and starlette dependencies
 as well

---
 pyproject.toml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pyproject.toml b/pyproject.toml
index 03e0592c..8c007895 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -6,7 +6,9 @@ readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
     "authlib==1.6.12",
+    "cryptography==47.0.0",
     "dynaconf",
+    "fastapi==0.136.1",
     "globus-compute-sdk @ git+https://github.com/globus/globus-compute.git@d1731340074be56861ec91d732bdff44f8e2b46e#subdirectory=compute_sdk",
     "globus-sdk>=3.0",
     "griffe>=0.49.0,<2.0.0",
@@ -25,6 +27,7 @@ dependencies = [
     "pyyaml",
     "scicat_beamline @ git+https://github.com/als-computing/scicat_beamline.git@4828273f5f49ba4eba5442728729e0545b3f5b79",
     "sfapi_client",
+    "starlette==1.0.0",
     "tiled[client]",
     "watchfiles"
 ]