Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update werkzeug requirement from ~=2.0 to ~=2.2 in /cli #4216

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 25, 2022

Updates the requirements on werkzeug to permit the latest version.

Release notes

Sourced from werkzeug's releases.

2.2.0

This is a feature release, which includes new features and removes previously deprecated features. The 2.2.x branch is now the supported bugfix branch, the 2.1.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades.

Changelog

Sourced from werkzeug's changelog.

Version 2.2.0

Released 2022-07-23

  • Deprecated get_script_name, get_query_string, peek_path_info, pop_path_info, and extract_path_info. :pr:2461
  • Remove previously deprecated code. :pr:2461
  • Add MarkupSafe as a dependency and use it to escape values when rendering HTML. :issue:2419
  • Added the werkzeug.debug.preserve_context mechanism for restoring context-local data for a request when running code in the debug console. :pr:2439
  • Fix compatibility with Python 3.11 by ensuring that end_lineno and end_col_offset are present on AST nodes. :issue:2425
  • Add a new faster matching router based on a state machine. :pr:2433
  • Names within options headers are always converted to lowercase. This matches :rfc:6266 that the case is not relevant. :issue:2442
  • AnyConverter validates the value passed for it when building URLs. :issue:2388
  • The debugger shows enhanced error locations in tracebacks in Python 3.11. :issue:2407
  • Added Sans-IO is_resource_modified and parse_cookie functions based on WSGI versions. :issue:2408
  • Added Sans-IO get_content_length function. :pr:2415
  • Don't assume a mimetype for test responses. :issue:2450
  • Type checking FileStorage accepts os.PathLike. :pr:2418

Version 2.1.2

Released 2022-04-28

  • The development server does not set Transfer-Encoding: chunked for 1xx, 204, 304, and HEAD responses. :issue:2375
  • Response HTML for exceptions and redirects starts with <!doctype html> and <html lang=en>. :issue:2390
  • Fix ability to set some cache_control attributes to False. :issue:2379
  • Disable keep-alive connections in the development server, which are not supported sufficiently by Python's http.server. :issue:2397

Version 2.1.1

... (truncated)

Commits
  • 4c7d990 release version 2.2.0
  • 7e626b8 Remove deprecated multiple option
  • 14f31db Deprecate wsgi functions
  • c074f91 Cleanup b42d1a4b57b8aba5c38fb8a030848db71004e2c5 and 81d2ed03ecf27d640b3a6fe8...
  • b00ecce Don't set a default mimetype for Test Responses
  • e1bfc33 Merge pull request #2458 from pgjones/test
  • cf1d82e Add a test to demonstrate leaf rules don't consume branches
  • ffb15ea Merge remote-tracking branch 'origin/2.1.x'
  • dfdc7c6 Ignore false positive B023 errors
  • c7f10f4 Correct the CHANGES format for the unreleased 2.1.3
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Updates the requirements on [werkzeug](https://github.com/pallets/werkzeug) to permit the latest version.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@2.0.0...2.2.0)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner July 25, 2022 03:11
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 25, 2022
@codecov
Copy link

codecov bot commented Jul 25, 2022

Codecov Report

Merging #4216 (4700f3a) into develop (fdc0dfd) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff            @@
##           develop    #4216   +/-   ##
========================================
  Coverage    86.86%   86.86%           
========================================
  Files          159      159           
  Lines        13495    13495           
========================================
  Hits         11722    11722           
  Misses        1773     1773           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update fdc0dfd...4700f3a. Read the comment docs.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 26, 2023

Superseded by #5234.

@dependabot dependabot bot closed this Apr 26, 2023
@dependabot dependabot bot deleted the dependabot/pip/cli/werkzeug-approx-eq-2.2 branch April 26, 2023 04:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants