chore(pip-prod)(deps): bump flask from 3.0.2 to 3.0.3 #86

2024-04-08T02:53:41+02:00

dependabot[bot] commented

2024-04-08 02:53:41 +02:00

(Migrated from github.com)

Bumps flask from 3.0.2 to 3.0.3.

Release notes

3.0.3

This is a fix release for the 3.0.x feature branch.

PyPI: https://pypi.org/project/Flask/3.0.3/ Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-3 Milestone: https://github.com/pallets/flask/milestone/35?closed=1

The default hashlib.sha1 may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. #5448

Don't initialize the cli attribute in the sansio scaffold, but rather in the Flask concrete class. #5270

Changelog

Sourced from flask's changelog.

Version 3.0.3

Released 2024-04-07

The default hashlib.sha1 may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. :issue:5448

Don't initialize the cli attribute in the sansio scaffold, but rather in the Flask concrete class. :pr:5270

Commits

c12a5d8 release version 3.0.3
5e22cc9 Don't set the cli attribute in the sansio scaffold (#5270)
5fdce4c Don't set the cli attribute in the sansio scaffold
adb7dd9 don't access app.logger when configuring app.logger
b739390 support FIPS builds without SHA-1 (#5460)
db46111 access sha1 lazily
7320e31 start version 3.0.3
87d5f5b update project files (#5457)
d5e321b release version 3.0.2 (#5403)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [flask](https://github.com/pallets/flask) from 3.0.2 to 3.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pallets/flask/releases">flask's releases</a>.</em></p> <blockquote> <h2>3.0.3</h2> <p>This is a fix release for the 3.0.x feature branch.</p> <p>PyPI: <a href="https://pypi.org/project/Flask/3.0.3/">https://pypi.org/project/Flask/3.0.3/</a> Changes: <a href="https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-3">https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-3</a> Milestone: <a href="https://github.com/pallets/flask/milestone/35?closed=1">https://github.com/pallets/flask/milestone/35?closed=1</a></p> <ul> <li>The default <code>hashlib.sha1</code> may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. <a href="https://redirect.github.com/pallets/flask/issues/5448">#5448</a></li> <li>Don't initialize the <code>cli</code> attribute in the sansio scaffold, but rather in the <code>Flask</code> concrete class. <a href="https://redirect.github.com/pallets/flask/issues/5270">#5270</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pallets/flask/blob/main/CHANGES.rst">flask's changelog</a>.</em></p> <blockquote> <h2>Version 3.0.3</h2> <p>Released 2024-04-07</p> <ul> <li>The default <code>hashlib.sha1</code> may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. :issue:<code>5448</code></li> <li>Don't initialize the <code>cli</code> attribute in the sansio scaffold, but rather in the <code>Flask</code> concrete class. :pr:<code>5270</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pallets/flask/commit/c12a5d874c5a014495eb2db8a73f40037bc813ac"><code>c12a5d8</code></a> release version 3.0.3</li> <li><a href="https://github.com/pallets/flask/commit/5e22cc9eec0d1da2da706ccf724fde702b30d5f2"><code>5e22cc9</code></a> Don't set the cli attribute in the sansio scaffold (<a href="https://redirect.github.com/pallets/flask/issues/5270">#5270</a>)</li> <li><a href="https://github.com/pallets/flask/commit/5fdce4c331ac530280cc941179d364a07f4a1088"><code>5fdce4c</code></a> Don't set the cli attribute in the sansio scaffold</li> <li><a href="https://github.com/pallets/flask/commit/adb7dd99c295a28726c8d818fba54c7b3f958ecc"><code>adb7dd9</code></a> don't access app.logger when configuring app.logger</li> <li><a href="https://github.com/pallets/flask/commit/b73939095564ec5c088c53e7595b00d174a018f5"><code>b739390</code></a> support FIPS builds without SHA-1 (<a href="https://redirect.github.com/pallets/flask/issues/5460">#5460</a>)</li> <li><a href="https://github.com/pallets/flask/commit/db461112c70d5f2bf93c7a6ac27eeb665c232dd0"><code>db46111</code></a> access sha1 lazily</li> <li><a href="https://github.com/pallets/flask/commit/7320e311a0a3f190351173f8be90cab31dadbf73"><code>7320e31</code></a> start version 3.0.3</li> <li><a href="https://github.com/pallets/flask/commit/87d5f5b9a9697434e6d972b021201105eabb54e6"><code>87d5f5b</code></a> update project files (<a href="https://redirect.github.com/pallets/flask/issues/5457">#5457</a>)</li> <li><a href="https://github.com/pallets/flask/commit/d5e321b792cd6f3cd7b072d175f47eacbd5ee14f"><code>d5e321b</code></a> release version 3.0.2 (<a href="https://redirect.github.com/pallets/flask/issues/5403">#5403</a>)</li> <li>See full diff in <a href="https://github.com/pallets/flask/compare/3.0.2...3.0.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=flask&package-manager=pip&previous-version=3.0.2&new-version=3.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

luketainton (Migrated from github.com) reviewed 2024-04-08 02:53:41 +02:00

sonarqubecloud[bot] commented

2024-04-08 02:55:07 +02:00

(Migrated from github.com)

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

## [![Quality Gate Passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/qg-passed-20px.png 'Quality Gate Passed')](https://sonarcloud.io/dashboard?id=luketainton_epage&pullRequest=86) **Quality Gate passed** Issues ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 New issues](https://sonarcloud.io/project/issues?id=luketainton_epage&pullRequest=86&resolved=false&inNewCodePeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/accepted-16px.png '') [0 Accepted issues](https://sonarcloud.io/component_measures?id=luketainton_epage&pullRequest=86&metric=new_accepted_issues&view=list) Measures ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png '') [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=luketainton_epage&pullRequest=86&resolved=false&inNewCodePeriod=true) ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/no-data-16px.png '') No data about Coverage ![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/no-data-16px.png '') No data about Duplication [See analysis details on SonarCloud](https://sonarcloud.io/dashboard?id=luketainton_epage&pullRequest=86)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: repos/epage#86