chore(pip-prod)(deps): bump werkzeug from 3.0.1 to 3.0.2 #85

2024-04-02T02:54:29+02:00

dependabot[bot] commented

2024-04-02 02:54:29 +02:00

(Migrated from github.com)

Bumps werkzeug from 3.0.1 to 3.0.2.

Changelog

Version 3.0.2

Released 2024-04-01

Ensure setting merge_slashes to False results in NotFound for repeated-slash requests against single slash routes. :issue:2834

Fix handling of TypeError in TypeConversionDict.get() to match ValueErrors. :issue:2843

Fix response_wrapper type check in test client. :issue:2831

Make the return type of MultiPartParser.parse more precise. :issue:2840

Raise an error if converter arguments cannot be parsed. :issue:2822

Commits

d70dcea Release version 3.0.2
ad703fd Bump the slsa-github-generator action version
5741398 Raise an error if the converter arguments cannot be parsed
0b47237 Fix issue with repeated-slash requests redirecting
f516c40 Handle TypeError in TypeConversionDict
4c09d1b Add missing CHANGES entry for #2832
7ab3823 Fix: Use issubclass instead of isinstance
4e5bdca Make the exception tests more robust
70ad4d6 Use more precise type for formparser.MultiPartParser.parse return
6eafc0e Merge branch '2.3.x' into 3.0.x
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.0.1 to 3.0.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pallets/werkzeug/blob/main/CHANGES.rst">werkzeug's changelog</a>.</em></p> <blockquote> <h2>Version 3.0.2</h2> <p>Released 2024-04-01</p> <ul> <li>Ensure setting merge_slashes to False results in NotFound for repeated-slash requests against single slash routes. :issue:<code>2834</code></li> <li>Fix handling of TypeError in TypeConversionDict.get() to match ValueErrors. :issue:<code>2843</code></li> <li>Fix response_wrapper type check in test client. :issue:<code>2831</code></li> <li>Make the return type of <code>MultiPartParser.parse</code> more precise. :issue:<code>2840</code></li> <li>Raise an error if converter arguments cannot be parsed. :issue:<code>2822</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pallets/werkzeug/commit/d70dcea305bf842c5a3b55265b5ffac2db012e23"><code>d70dcea</code></a> Release version 3.0.2</li> <li><a href="https://github.com/pallets/werkzeug/commit/ad703fd35494e6d5b2c072b7d1cd13afa132f6d2"><code>ad703fd</code></a> Bump the slsa-github-generator action version</li> <li><a href="https://github.com/pallets/werkzeug/commit/57413980f4efa74d997d328782c0efd946c8f81b"><code>5741398</code></a> Raise an error if the converter arguments cannot be parsed</li> <li><a href="https://github.com/pallets/werkzeug/commit/0b472374af1ab91000ea244a0da44d49c04c7cce"><code>0b47237</code></a> Fix issue with repeated-slash requests redirecting</li> <li><a href="https://github.com/pallets/werkzeug/commit/f516c4005c7c4510b61ae07969450771b929809d"><code>f516c40</code></a> Handle TypeError in TypeConversionDict</li> <li><a href="https://github.com/pallets/werkzeug/commit/4c09d1b3b08deb939803a4beb53483cbc54dfb8d"><code>4c09d1b</code></a> Add missing CHANGES entry for <a href="https://redirect.github.com/pallets/werkzeug/issues/2832">#2832</a></li> <li><a href="https://github.com/pallets/werkzeug/commit/7ab3823fb620d29bcfeeff7499dd9a64ad90f360"><code>7ab3823</code></a> Fix: Use <code>issubclass</code> instead of <code>isinstance</code></li> <li><a href="https://github.com/pallets/werkzeug/commit/4e5bdca7f8227d10cae828f8064fb98190ace4aa"><code>4e5bdca</code></a> Make the exception tests more robust</li> <li><a href="https://github.com/pallets/werkzeug/commit/70ad4d6d9b330e8dc780e53470e261cb096fd5fc"><code>70ad4d6</code></a> Use more precise type for formparser.MultiPartParser.parse return</li> <li><a href="https://github.com/pallets/werkzeug/commit/6eafc0ed4610720482fc397476b3d4e4890bc72e"><code>6eafc0e</code></a> Merge branch '2.3.x' into 3.0.x</li> <li>Additional commits viewable in <a href="https://github.com/pallets/werkzeug/compare/3.0.1...3.0.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=werkzeug&package-manager=pip&previous-version=3.0.1&new-version=3.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

luketainton (Migrated from github.com) reviewed 2024-04-02 02:54:29 +02:00

sonarqubecloud[bot] commented

2024-04-02 02:55:48 +02:00

(Migrated from github.com)

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

## [![Quality Gate Passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/qg-passed-20px.png 'Quality Gate Passed')](https://sonarcloud.io/dashboard?id=luketainton_epage&pullRequest=85) **Quality Gate passed** Issues ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 New issues](https://sonarcloud.io/project/issues?id=luketainton_epage&pullRequest=85&resolved=false&inNewCodePeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/accepted-16px.png '') [0 Accepted issues](https://sonarcloud.io/component_measures?id=luketainton_epage&pullRequest=85&metric=new_accepted_issues&view=list) Measures ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=luketainton_epage&pullRequest=85&resolved=false&inNewCodePeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/no-data-16px.png '') No data about Coverage ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/no-data-16px.png '') No data about Duplication [See analysis details on SonarCloud](https://sonarcloud.io/dashboard?id=luketainton_epage&pullRequest=85)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: repos/epage#85