fix(deps): upgrade OpenAI stack and resolve dependency vulnerabilities

playground/backend_manager/app/auth/jwt_handler.py

@@ -15,7 +15,8 @@
 from datetime import datetime, timedelta, timezone, UTC
 from fastapi import Depends, HTTPException, Security, status
 from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
-from jose import JWTError, jwt
+import jwt
+from jwt import InvalidTokenError
 from app.config import settings
 
 security = HTTPBearer(auto_error=False)
@@ -40,7 +41,7 @@ def decode_access_token(token: str) -> dict:
     try:
         payload = jwt.decode(token, settings.JWT_SECRET_KEY, algorithms=[settings.JWT_ALGORITHM])
         return payload
-    except JWTError as e:
+    except InvalidTokenError as e:
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
             detail=f"Invalid or expired credentials: {str(e)}",

playground/backend_manager/requirements.txt

@@ -2,7 +2,7 @@ fastapi>=0.115.0
 uvicorn[standard]>=0.32.0
 pydantic>=2.9.0
 pydantic-settings>=2.5.0
-python-jose[cryptography]>=3.3.0
+PyJWT[crypto]>=2.15.1,<3.0.0
 passlib[bcrypt]>=1.7.4
 docker>=7.1.0
 google-cloud-bigquery>=3.26.0

playground/nginx_container/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM nginx:1.27-alpine
+FROM nginx:1.30.6-alpine
 
 # Install openssl for auto-generating self-signed dev certificates and curl for healthchecks
 RUN apk add --no-cache openssl curl bash