Bump flask-session from 0.4.0 to 0.7.0

[dependabot]

Bumps flask-session from 0.4.0 to 0.7.0.

Release notes

Sourced from flask-session's releases.

0.5.0

This fixes compatibility with Flask 2.3.

Flask-Session has joined the Pallets Community Ecosystem, https://github.com/pallets-eco. Any community member interested in helping maintain this project may contribute by joining the #flask-session channel on https://discord.gg/pallets.

• Changes: https://flasksession.readthedocs.io/en/latest/changes.html#version-0-5-0
• Milestone: https://github.com/pallets-eco/flask-session/milestone/1?closed=1

0.4.1

Version 0.4.1 was already released to PyPI on April 29, 2023. We are creating a release record here in GitHub while tagging it.

• Changes: https://flasksession.readthedocs.io/en/latest/changes.html#version-0-4-1

Changelog

Sourced from flask-session's changelog.

0.7.0 - 2024-03-18

Changed

-   Access session interfaces via subfolder, for example ``flask_session.redis.RedisSessionInterface`` (`2bc7df <https://github.com/pallets-eco/flask-session/commit/2bc7df1be7b8929e55cb25f13845caf0503630d8>`_).
-   Deprecate ``pickle`` in favor of ``msgspec``, which is configured with ``SESSION_SERIALIZATION_FORMAT`` to choose between ``'json'`` and ``'msgpack'``. All sessions will convert to msgspec upon first interaction with 0.7.0. Pickle is still available to read existing sessions, but will be removed in 1.0.0. (`c7f8ce <https://github.com/pallets-eco/flask-session/commit/c7f8ced0e1532dea87850d34b3328a3fcb769988>`_, `c7f8ce <https://github.com/pallets-eco/flask-session/commit/c7f8ced0e1532dea87850d34b3328a3fcb769988>`_)
-   Deprecate ``SESSION_USE_SIGNER`` (`a5dba7 <https://github.com/pallets-eco/flask-session/commit/a5dba7022f806c8fb4412d0428b69dd4a077e4a7>`_).
-   Deprecate :class:`flask_session.filesystem.FileSystemSessionInterface` in favor of the broader :class:`flask_session.cachelib.CacheLibSessionInterface` (`2bc7df <https://github.com/pallets-eco/flask-session/commit/2bc7df1be7b8929e55cb25f13845caf0503630d8>`_).
Added
-   All sessions that are accessed or modified while using 0.7.0 will convert to msgspec. Once using 1.0.0, any sessions that are still in pickle will be cleared upon access.
-   Add time-to-live expiration for MongoDB (`9acee3 &lt;https://github.com/pallets-eco/flask-session/commit/9acee3c5fb7072476f3feea923529d19d5e855c3&gt;`_).
-   Add retry for SQL based storage (`[#211](https://github.com/pallets-eco/flask-session/issues/211) &lt;https://github.com/pallets-eco/flask-session/pull/211&gt;`_).
-   Add ``flask session_cleanup`` command and alternatively, ``SESSION_CLEANUP_N_REQUESTS`` for SQLAlchemy or future non-TTL backends (`[#211](https://github.com/pallets-eco/flask-session/issues/211) &lt;https://github.com/pallets-eco/flask-session/pull/211&gt;`_).
-   Add type hints (`7d7d58 &lt;https://github.com/pallets-eco/flask-session/commit/7d7d58ce371553da39095a421445cf639a62bd5f&gt;`_).
-   Add logo and additional documentation.
-   Add vary cookie header when session modified or accessed as per flask's built-in session (`7ab698 &lt;https://github.com/pallets-eco/flask-session/commit/7ab6980c8ba15912df13dd1e78242803e8104dd6&gt;`_).
-   Add regenerate method to session interface to mitigate fixation (`[#27](https://github.com/pallets-eco/flask-session/issues/27) &lt;https://github.com/pallets-eco/flask-session/pull/27&gt;`_, `[#39](https://github.com/pallets-eco/flask-session/issues/39) &lt;https://github.com/pallets-eco/flask-session/issues/39&gt;`_)(`80df63 &lt;https://github.com/pallets-eco/flask-session/commit/80df635ffd466fa7798f6031be5469b4d5dae069&gt;`_).
Removed

</code></pre>

<ul>

<li>Remove null session in favour of relevant exception messages (<code>#107 &lt;https://github.com/pallets-eco/flask-session/issues/107&amp;gt;&lt;/code&gt;&lt;em>, <code>#182 &lt;https://github.com/pallets-eco/flask-session/issues/182&amp;gt;&lt;/code&gt;&lt;/em&gt;)(&lt;code&gt;d7ed1c &lt;https://github.com/pallets-eco/flask-session/commit/d7ed1c6e7eb3904888b72f0d6c006db1b9b60795&amp;gt;&lt;/code&gt;_).&lt;/li>

<li>Drop support for Python 3.7 which is end-of-life and precludes use of msgspec (<code>bd7e5b &lt;https://github.com/pallets-eco/flask-session/commit/bd7e5b0bbfc10cdfa9c83b859593c69cc4381571&amp;gt;&lt;/code&gt;_).&lt;/li>

</ul>

<p>Fixed</p>

<pre><code>-   Prevent session identifier reuse on storage miss ([#76](https://github.com/pallets-eco/flask-session/issues/76) &amp;lt;https://github.com/pallets-eco/flask-session/pull/76&amp;gt;_).

Abstraction to improve consistency between backends.
Enforce PERMANENT_SESSION_LIFETIME as expiration consistently for all backends ([#81](https://github.com/pallets-eco/flask-session/issues/81) &amp;lt;https://github.com/pallets-eco/flask-session/issues/81&amp;gt;)(86895b &amp;lt;https://github.com/pallets-eco/flask-session/commit/86895b523203ca67c9f87416bdbf028852dcb357&amp;gt;).
Specifically include backend session interfaces in public API and document usage ([#210](https://github.com/pallets-eco/flask-session/issues/210) &amp;lt;https://github.com/pallets-eco/flask-session/issues/210&amp;gt;_).
Fix non-permanent sessions not updating expiry ([#221](https://github.com/pallets-eco/flask-session/issues/221) &amp;lt;https://github.com/pallets-eco/flask-session/issues/221&amp;gt;_).

0.6.0 - 2024-01-16
Changed

</code></pre>

<ul>

<li>Use :meth:<code>~ServerSideSession.should_set_cookie</code> for preventing each request from saving the session again.</li>

<li>Do not store a permanent session that is otherwise empty.</li>

<li>Use <code>secrets</code> module to generate session identifiers, with 256 bits of entropy (was previously 122).</li>

<li>Explicitly name support for <code>python-memcached</code>, <code>pylibmc</code> and <code>pymemcache</code> for <code>cachelib</code> backend.</li>

</ul>

<p>Added</p>

<pre><code>

Introduce SESSION_KEY_LENGTH to control the length of the session key in bytes, default is 32.

&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>

<ul>

<li><a href="https://github.com/pallets-eco/flask-session/commit/3bc0d7c403d24c354ceec4aa5ed3fedb83f270ea&quot;&gt;&lt;code&gt;3bc0d7c&lt;/code&gt;&lt;/a> Prep release</li>

<li><a href="https://github.com/pallets-eco/flask-session/commit/6dfd17ee556384ad6bda73c903aa8091416e2b2e&quot;&gt;&lt;code&gt;6dfd17e&lt;/code&gt;&lt;/a> Use common changelog spec</li>

<li><a href="https://github.com/pallets-eco/flask-session/commit/a46bbbde3202bd351cdf795e16a5b8325e6fb626&quot;&gt;&lt;code&gt;a46bbbd&lt;/code&gt;&lt;/a> Add rye support</li>

<li><a href="https://github.com/pallets-eco/flask-session/commit/78bc8c0a86d49b9f7515f94e3e4d1e48dcb28917&quot;&gt;&lt;code&gt;78bc8c0&lt;/code&gt;&lt;/a> Formatting</li>

<li><a href="https://github.com/pallets-eco/flask-session/commit/bd7e5b0bbfc10cdfa9c83b859593c69cc4381571&quot;&gt;&lt;code&gt;bd7e5b0&lt;/code&gt;&lt;/a> Drop python 3.7</li>

<li><a href="https://github.com/pallets-eco/flask-session/commit/22c2d90b7d9dc6703b4f0a9b885b5fe6c3e94bf0&quot;&gt;&lt;code&gt;22c2d90&lt;/code&gt;&lt;/a> Test python versions</li>

<li><a href="https://github.com/pallets-eco/flask-session/commit/35d25df5a80fe0c54e1805a57a84116afcf47648&quot;&gt;&lt;code&gt;35d25df&lt;/code&gt;&lt;/a> Fix testing warnings</li>

<li><a href="https://github.com/pallets-eco/flask-session/commit/9ead9ce2c767a291b9cf82dbf5aa1aac3a5b3240&quot;&gt;&lt;code&gt;9ead9ce&lt;/code&gt;&lt;/a> Add tests for vary header</li>

<li><a href="https://github.com/pallets-eco/flask-session/commit/e274c086929b5465eb564d5be01a6350baf2f91e&quot;&gt;&lt;code&gt;e274c08&lt;/code&gt;&lt;/a> Typo in deprecation warning</li>

<li><a href="https://github.com/pallets-eco/flask-session/commit/8508fb99d0e70c912afbc522be1233978cfc8630&quot;&gt;&lt;code&gt;8508fb9&lt;/code&gt;&lt;/a> Update changelog</li>

<li>Additional commits viewable in <a href="https://github.com/pallets-eco/flask-session/compare/0.4.0...0.7.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />



Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #171.