chore(pip-prod)(deps): bump werkzeug from 3.0.6 to 3.1.0 #113

luke · 2024-11-01T01:58:42+01:00

dependabot[bot] commented

2024-11-01 01:58:42 +01:00

(Migrated from github.com)

Bumps werkzeug from 3.0.6 to 3.1.0.

Release notes

3.1.0

This is the Werkzeug 3.1.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecations, or introduce potentially breaking changes. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

PyPI: https://pypi.org/project/Werkzeug/3.1.0/ Changes: https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-1-0 Milestone: https://github.com/pallets/werkzeug/milestone/34?closed=1

Drop support for Python 3.8. #2966

Remove previously deprecated code. #2967

Request.max_form_memory_size defaults to 500kB instead of unlimited. Non-file form fields over this size will cause a RequestEntityTooLarge error. #2964

OrderedMultiDict and ImmutableOrderedMultiDict are deprecated. Use MultiDict and ImmutableMultiDict instead. #2968

Behavior of properties on request.cache_control and response.cache_control has been significantly adjusted.

Dict values are always str | None. Setting properties will convert the value to a string. Setting a property to False is equivalent to setting it to None. Getting typed properties will return None if conversion raises ValueError, rather than the string. #2980

max_age is None if present without a value, rather than -1. #2980

no_cache is a boolean for requests, it is True instead of "*" when present. It remains a string for responses. #2980

max_stale is True if present without a value, rather than "*". #2980

no_transform is a boolean. Previously it was mistakenly always None. #2881

min_fresh is None if present without a value, rather than "*". #2881

private is True if present without a value, rather than "*". #2980

Added the must_understand property. #2881

Added the stale_while_revalidate, and stale_if_error properties. #2948

Type annotations more accurately reflect the values. #2881

Support Cookie CHIPS (Partitioned Cookies). #2797

Add 421 MisdirectedRequest HTTP exception. #2850

Increase default work factor for PBKDF2 to 1,000,000 iterations. #2969

Inline annotations for datastructures, removing stub files. #2970

MultiDict.getlist catches TypeError in addition to ValueError when doing type conversion. #2976

Implement | and |= operators for MultiDict, Headers, and CallbackDict, and disallow |= on immutable types. #2977

Changelog

Sourced from werkzeug's changelog.

Version 3.1.0

Released 2024-10-31

Drop support for Python 3.8. :pr:2966

Remove previously deprecated code. :pr:2967

Request.max_form_memory_size defaults to 500kB instead of unlimited. Non-file form fields over this size will cause a RequestEntityTooLarge error. :issue:2964

OrderedMultiDict and ImmutableOrderedMultiDict are deprecated. Use MultiDict and ImmutableMultiDict instead. :issue:2968

Behavior of properties on request.cache_control and response.cache_control has been significantly adjusted.

Dict values are always str | None. Setting properties will convert the value to a string. Setting a property to False is equivalent to setting it to None. Getting typed properties will return None if conversion raises ValueError, rather than the string. :issue:2980

max_age is None if present without a value, rather than -1. :issue:2980

no_cache is a boolean for requests, it is True instead of "*" when present. It remains a string for responses. :issue:2980

max_stale is True if present without a value, rather than "*". :issue:2980

no_transform is a boolean. Previously it was mistakenly always None. :issue:2881

min_fresh is None if present without a value, rather than "*". :issue:2881

private is True if present without a value, rather than "*". :issue:2980

Added the must_understand property. :issue:2881

Added the stale_while_revalidate, and stale_if_error properties. :issue:2948

Type annotations more accurately reflect the values. :issue:2881

Support Cookie CHIPS (Partitioned Cookies). :issue:2797

Add 421 MisdirectedRequest HTTP exception. :issue:2850

Increase default work factor for PBKDF2 to 1,000,000 iterations. :issue:2969

Inline annotations for datastructures, removing stub files. :issue:2970

MultiDict.getlist catches TypeError in addition to ValueError when doing type conversion. :issue:2976

Implement | and |= operators for MultiDict, Headers, and CallbackDict, and disallow |= on immutable types. :issue:2977

Commits

df655e6 release version 3.1.0
564835a add docstring changelogs
1735b75 more cache-control cleanup (#2983)
b0f361c more cache-control cleanup
fa38728 more cache-control cleanup (#2981)
e3a50c9 more cache-control cleanup
1eb7ada implement or and ior operators (#2979)
b65b587 implement or and ior operators
862cb19 getlist catches TypeError (#2978)
e550ef8 getlist catches TypeError
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.0.6 to 3.1.0. <details> <summary>Release notes</summary> Sourced from <a href="https://github.com/pallets/werkzeug/releases">werkzeug's releases</a>. <blockquote> <h2>3.1.0</h2> This is the Werkzeug 3.1.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecations, or introduce potentially breaking changes. We encourage everyone to upgrade, and to use a tool such as <a href="https://pypi.org/project/pip-tools/">pip-tools</a> to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early. PyPI: <a href="https://pypi.org/project/Werkzeug/3.1.0/">https://pypi.org/project/Werkzeug/3.1.0/</a> Changes: <a href="https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-1-0">https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-1-0</a> Milestone: <a href="https://github.com/pallets/werkzeug/milestone/34?closed=1">https://github.com/pallets/werkzeug/milestone/34?closed=1</a> <ul> <li>Drop support for Python 3.8. <a href="https://redirect.github.com/pallets/werkzeug/issues/2966">#2966</a></li> <li>Remove previously deprecated code. <a href="https://redirect.github.com/pallets/werkzeug/issues/2967">#2967</a></li> <li><code>Request.max_form_memory_size</code> defaults to 500kB instead of unlimited. Non-file form fields over this size will cause a <code>RequestEntityTooLarge</code> error. <a href="https://redirect.github.com/pallets/werkzeug/issues/2964">#2964</a></li> <li><code>OrderedMultiDict</code> and <code>ImmutableOrderedMultiDict</code> are deprecated. Use <code>MultiDict</code> and <code>ImmutableMultiDict</code> instead. <a href="https://redirect.github.com/pallets/werkzeug/issues/2968">#2968</a></li> <li>Behavior of properties on <code>request.cache_control</code> and <code>response.cache_control</code> has been significantly adjusted. <ul> <li>Dict values are always <code>str | None</code>. Setting properties will convert the value to a string. Setting a property to <code>False</code> is equivalent to setting it to <code>None</code>. Getting typed properties will return <code>None</code> if conversion raises <code>ValueError</code>, rather than the string. <a href="https://redirect.github.com/pallets/werkzeug/issues/2980">#2980</a></li> <li><code>max_age</code> is <code>None</code> if present without a value, rather than <code>-1</code>. <a href="https://redirect.github.com/pallets/werkzeug/issues/2980">#2980</a></li> <li><code>no_cache</code> is a boolean for requests, it is <code>True</code> instead of <code>"*"</code> when present. It remains a string for responses. <a href="https://redirect.github.com/pallets/werkzeug/issues/2980">#2980</a></li> <li><code>max_stale</code> is <code>True</code> if present without a value, rather than <code>"*"</code>. <a href="https://redirect.github.com/pallets/werkzeug/issues/2980">#2980</a></li> <li><code>no_transform</code> is a boolean. Previously it was mistakenly always <code>None</code>. <a href="https://redirect.github.com/pallets/werkzeug/issues/2881">#2881</a></li> <li><code>min_fresh</code> is <code>None</code> if present without a value, rather than <code>"*"</code>. <a href="https://redirect.github.com/pallets/werkzeug/issues/2881">#2881</a></li> <li><code>private</code> is <code>True</code> if present without a value, rather than <code>"*"</code>. <a href="https://redirect.github.com/pallets/werkzeug/issues/2980">#2980</a></li> <li>Added the <code>must_understand</code> property. <a href="https://redirect.github.com/pallets/werkzeug/issues/2881">#2881</a></li> <li>Added the <code>stale_while_revalidate</code>, and <code>stale_if_error</code> properties. <a href="https://redirect.github.com/pallets/werkzeug/issues/2948">#2948</a></li> <li>Type annotations more accurately reflect the values. <a href="https://redirect.github.com/pallets/werkzeug/issues/2881">#2881</a></li> </ul> </li> <li>Support Cookie CHIPS (Partitioned Cookies). <a href="https://redirect.github.com/pallets/werkzeug/issues/2797">#2797</a></li> <li>Add 421 <code>MisdirectedRequest</code> HTTP exception. <a href="https://redirect.github.com/pallets/werkzeug/issues/2850">#2850</a></li> <li>Increase default work factor for PBKDF2 to 1,000,000 iterations. <a href="https://redirect.github.com/pallets/werkzeug/issues/2969">#2969</a></li> <li>Inline annotations for <code>datastructures</code>, removing stub files. <a href="https://redirect.github.com/pallets/werkzeug/issues/2970">#2970</a></li> <li><code>MultiDict.getlist</code> catches <code>TypeError</code> in addition to <code>ValueError</code> when doing type conversion. <a href="https://redirect.github.com/pallets/werkzeug/issues/2976">#2976</a></li> <li>Implement <code>|</code> and <code>|=</code> operators for <code>MultiDict</code>, <code>Headers</code>, and <code>CallbackDict</code>, and disallow <code>|=</code> on immutable types. <a href="https://redirect.github.com/pallets/werkzeug/issues/2977">#2977</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> Sourced from <a href="https://github.com/pallets/werkzeug/blob/main/CHANGES.rst">werkzeug's changelog</a>. <blockquote> <h2>Version 3.1.0</h2> Released 2024-10-31 <ul> <li> Drop support for Python 3.8. :pr:<code>2966</code> </li> <li> Remove previously deprecated code. :pr:<code>2967</code> </li> <li> <code>Request.max_form_memory_size</code> defaults to 500kB instead of unlimited. Non-file form fields over this size will cause a <code>RequestEntityTooLarge</code> error. :issue:<code>2964</code> </li> <li> <code>OrderedMultiDict</code> and <code>ImmutableOrderedMultiDict</code> are deprecated. Use <code>MultiDict</code> and <code>ImmutableMultiDict</code> instead. :issue:<code>2968</code> </li> <li> Behavior of properties on <code>request.cache_control</code> and <code>response.cache_control</code> has been significantly adjusted. <ul> <li>Dict values are always <code>str | None</code>. Setting properties will convert the value to a string. Setting a property to <code>False</code> is equivalent to setting it to <code>None</code>. Getting typed properties will return <code>None</code> if conversion raises <code>ValueError</code>, rather than the string. :issue:<code>2980</code></li> <li><code>max_age</code> is <code>None</code> if present without a value, rather than <code>-1</code>. :issue:<code>2980</code></li> <li><code>no_cache</code> is a boolean for requests, it is <code>True</code> instead of <code>"*"</code> when present. It remains a string for responses. :issue:<code>2980</code></li> <li><code>max_stale</code> is <code>True</code> if present without a value, rather than <code>"*"</code>. :issue:<code>2980</code></li> <li><code>no_transform</code> is a boolean. Previously it was mistakenly always <code>None</code>. :issue:<code>2881</code></li> <li><code>min_fresh</code> is <code>None</code> if present without a value, rather than <code>"*"</code>. :issue:<code>2881</code></li> <li><code>private</code> is <code>True</code> if present without a value, rather than <code>"*"</code>. :issue:<code>2980</code></li> <li>Added the <code>must_understand</code> property. :issue:<code>2881</code></li> <li>Added the <code>stale_while_revalidate</code>, and <code>stale_if_error</code> properties. :issue:<code>2948</code></li> <li>Type annotations more accurately reflect the values. :issue:<code>2881</code></li> </ul> </li> <li> Support Cookie CHIPS (Partitioned Cookies). :issue:<code>2797</code> </li> <li> Add 421 <code>MisdirectedRequest</code> HTTP exception. :issue:<code>2850</code> </li> <li> Increase default work factor for PBKDF2 to 1,000,000 iterations. :issue:<code>2969</code> </li> <li> Inline annotations for <code>datastructures</code>, removing stub files. :issue:<code>2970</code> </li> <li> <code>MultiDict.getlist</code> catches <code>TypeError</code> in addition to <code>ValueError</code> when doing type conversion. :issue:<code>2976</code> </li> <li> Implement <code>|</code> and <code>|=</code> operators for <code>MultiDict</code>, <code>Headers</code>, and <code>CallbackDict</code>, and disallow <code>|=</code> on immutable types. :issue:<code>2977</code> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pallets/werkzeug/commit/df655e6ce6bc77adc7833619a079e66eba566aee"><code>df655e6</code></a> release version 3.1.0</li> <li><a href="https://github.com/pallets/werkzeug/commit/564835a6b5928d7240f636a13d80d69359cd86f5"><code>564835a</code></a> add docstring changelogs</li> <li><a href="https://github.com/pallets/werkzeug/commit/1735b751338ed5c9db0771344a61b6410edcadc0"><code>1735b75</code></a> more cache-control cleanup (<a href="https://redirect.github.com/pallets/werkzeug/issues/2983">#2983</a>)</li> <li><a href="https://github.com/pallets/werkzeug/commit/b0f361ce69038a55f7ca8cfb6262ddc5ffe1eeea"><code>b0f361c</code></a> more cache-control cleanup</li> <li><a href="https://github.com/pallets/werkzeug/commit/fa387288bd2ffccedc632ccdffb0f3f1c0b25ece"><code>fa38728</code></a> more cache-control cleanup (<a href="https://redirect.github.com/pallets/werkzeug/issues/2981">#2981</a>)</li> <li><a href="https://github.com/pallets/werkzeug/commit/e3a50c9ac130658e15bc8e8a4555a58379006cba"><code>e3a50c9</code></a> more cache-control cleanup</li> <li><a href="https://github.com/pallets/werkzeug/commit/1eb7ada4dcce1667e0964cb1bc122de3f1ae0279"><code>1eb7ada</code></a> implement or and ior operators (<a href="https://redirect.github.com/pallets/werkzeug/issues/2979">#2979</a>)</li> <li><a href="https://github.com/pallets/werkzeug/commit/b65b587aa12ec40df1eecb4c6aadaf8de8931187"><code>b65b587</code></a> implement or and ior operators</li> <li><a href="https://github.com/pallets/werkzeug/commit/862cb193c2b13db860d886725fa4235173d0dfcd"><code>862cb19</code></a> getlist catches TypeError (<a href="https://redirect.github.com/pallets/werkzeug/issues/2978">#2978</a>)</li> <li><a href="https://github.com/pallets/werkzeug/commit/e550ef8b313324d2efc0b9385be4c8c5739df36b"><code>e550ef8</code></a> getlist catches TypeError</li> <li>Additional commits viewable in <a href="https://github.com/pallets/werkzeug/compare/3.0.6...3.1.0">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=werkzeug&package-manager=pip&previous-version=3.0.6&new-version=3.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

luketainton (Migrated from github.com) reviewed 2024-11-01 01:58:42 +01:00

sonarqubecloud[bot] commented

2024-11-01 02:00:37 +01:00

(Migrated from github.com)

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

## [![Quality Gate Passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/qg-passed-20px.png 'Quality Gate Passed')](https://sonarcloud.io/dashboard?id=luketainton_epage&pullRequest=113) **Quality Gate passed** Issues ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 New issues](https://sonarcloud.io/project/issues?id=luketainton_epage&pullRequest=113&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/accepted-16px.png '') [0 Accepted issues](https://sonarcloud.io/project/issues?id=luketainton_epage&pullRequest=113&issueStatuses=ACCEPTED) Measures ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=luketainton_epage&pullRequest=113&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0.0% Coverage on New Code](https://sonarcloud.io/component_measures?id=luketainton_epage&pullRequest=113&metric=new_coverage&view=list) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0.0% Duplication on New Code](https://sonarcloud.io/component_measures?id=luketainton_epage&pullRequest=113&metric=new_duplicated_lines_density&view=list) [See analysis details on SonarCloud](https://sonarcloud.io/dashboard?id=luketainton_epage&pullRequest=113)

luke referenced this issue from a commit

2025-03-27 21:17:47 +01:00

chore(pip-prod)(deps): bump werkzeug from 3.0.6 to 3.1.0 (#113)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: repos/epage#113