Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update werkzeug requirement from <2.1,>=1.0 to >=1.0,<2.3 #57

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Aug 1, 2022

Updates the requirements on werkzeug to permit the latest version.

Release notes

Sourced from werkzeug's releases.

2.2.1

This is a fix release for the 2.2.0 feature release.

Changelog

Sourced from werkzeug's changelog.

Version 2.2.1

Released 2022-07-27

  • Fix router so that /path/ will match a rule /path if strict slashes mode is disabled for the rule. :issue:2467
  • Fix router so that partial part matches are not allowed i.e. /2df does not match /<int>. :pr:2470
  • Fix router static part weighting, so that simpler routes are matched before more complex ones. :issue:2471
  • Restore ValidationError to be importable from werkzeug.routing. :issue:2465

Version 2.2.0

Released 2022-07-23

  • Deprecated get_script_name, get_query_string, peek_path_info, pop_path_info, and extract_path_info. :pr:2461
  • Remove previously deprecated code. :pr:2461
  • Add MarkupSafe as a dependency and use it to escape values when rendering HTML. :issue:2419
  • Added the werkzeug.debug.preserve_context mechanism for restoring context-local data for a request when running code in the debug console. :pr:2439
  • Fix compatibility with Python 3.11 by ensuring that end_lineno and end_col_offset are present on AST nodes. :issue:2425
  • Add a new faster matching router based on a state machine. :pr:2433
  • Names within options headers are always converted to lowercase. This matches :rfc:6266 that the case is not relevant. :issue:2442
  • AnyConverter validates the value passed for it when building URLs. :issue:2388
  • The debugger shows enhanced error locations in tracebacks in Python 3.11. :issue:2407
  • Added Sans-IO is_resource_modified and parse_cookie functions based on WSGI versions. :issue:2408
  • Added Sans-IO get_content_length function. :pr:2415
  • Don't assume a mimetype for test responses. :issue:2450
  • Type checking FileStorage accepts os.PathLike. :pr:2418

Version 2.1.2

Released 2022-04-28

... (truncated)

Commits
  • 410c878 release version 2.2.1
  • cdee5ce Merge pull request #2472 from pgjones/2.2.x
  • 56a24f7 Bugfix the calculation of weighting based on static parts
  • 5c85706 Merge pull request #2470 from pgjones/2.2.x
  • b59eb67 Switch $\Z to \Z in matching regex
  • 3a408ed Bugfix ensure that the entire part is matched
  • 76ccf1f Merge pull request #2468 from pgjones/2.2.x
  • 364d9c2 Restore ValidationError as part of the werkzeug.routing API
  • fa76cbe Ensure that rules without strict slashes match paths with slashes
  • 7ae6bc1 Merge branch '2.1.x' into 2.2.x
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [werkzeug](https://github.com/pallets/werkzeug) to permit the latest version.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@1.0.0...2.2.1)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants