Bump the pip group across 7 directories with 11 updates #44

dependabot · 2024-05-06T14:53:05Z

Bumps the pip group with 3 updates in the /appengine/build_reporter directory: flask, jinja2 and werkzeug.
Bumps the pip group with 8 updates in the /appengine/initiator directory:

Package	From	To
flask	`1.1.1`	`2.2.5`
jinja2	`2.10.3`	`3.1.4`
werkzeug	`0.16.0`	`3.0.3`
certifi	`2019.9.11`	`2023.7.22`
grpcio	`1.24.3`	`1.53.2`
idna	`2.8`	`3.7`
protobuf	`3.10.0`	`3.18.3`
urllib3	`1.25.6`	`1.26.18`

Bumps the pip group with 3 updates in the /appengine/mailer directory: flask, jinja2 and werkzeug.
Bumps the pip group with 9 updates in the /appengine/uploader directory:

Package	From	To
flask	`1.0.2`	`2.2.5`
jinja2	`2.10`	`3.1.4`
werkzeug	`0.15.3`	`3.0.3`
certifi	`2018.11.29`	`2023.7.22`
grpcio	`1.18.0`	`1.53.2`
idna	`2.8`	`3.7`
protobuf	`3.6.1`	`3.18.3`
urllib3	`1.24.1`	`1.26.18`
gunicorn	`19.9.0`	`22.0.0`

Bumps the pip group with 5 updates in the /composer directory:

Package	From	To
certifi	`2020.12.5`	`2023.7.22`
grpcio	`1.47.0`	`1.53.2`
idna	`3.3`	`3.7`
protobuf	`3.20.0`	`3.20.2`
urllib3	`1.26.9`	`1.26.18`

Bumps the pip group with 5 updates in the /composer/completion_monitor directory:

Package	From	To
certifi	`2020.12.5`	`2023.7.22`
grpcio	`1.47.0`	`1.53.2`
idna	`3.3`	`3.7`
protobuf	`3.20.0`	`3.20.2`
urllib3	`1.26.9`	`1.26.18`

Bumps the pip group with 11 updates in the /e2e_test directory:

Package	From	To
flask	`0.12.4`	`2.2.5`
jinja2	`2.10`	`3.1.4`
werkzeug	`0.15.3`	`3.0.3`
certifi	`2018.11.29`	`2023.7.22`
grpcio	`1.18.0`	`1.53.2`
idna	`2.8`	`3.7`
protobuf	`3.6.1`	`3.18.3`
urllib3	`1.24.1`	`1.26.18`
gunicorn	`19.9.0`	`22.0.0`
apache-airflow	`1.10.2`	`2.9.0`
gitpython	`2.1.11`	`3.1.41`

Updates flask from 1.1.1 to 2.2.5

Release notes

Sourced from flask's releases.

2.2.5

This is a security fix release for the 2.2.x release branch. Note that 2.3.x is the currently supported release branch; please upgrade to the latest version if possible.

Security advisory: GHSA-m2qf-hxjv-5gpq, CVE-2023-30861

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-5

Milestone: https://github.com/pallets/flask/milestone/30?closed=1

2.2.4

This is a fix release for the 2.2.x release branch.

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-4

Milestone: https://github.com/pallets/flask/milestone/27?closed=1

2.2.3

This is a fix release for the 2.2.x release branch.

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-3

Milestone: https://github.com/pallets/flask/milestone/26?closed=1

2.2.2

This is a fix release for the 2.2.0 feature release.

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-2

Milestone: https://github.com/pallets/flask/milestone/25?closed=1

2.2.1

This is a fix release for the 2.2.0 feature release.

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-1

Milestone: https://github.com/pallets/flask/milestone/23?closed=1

2.2.0

This is a feature release, which includes new features and removes previously deprecated code. The 2.2.x branch is now the supported bug fix branch, the 2.1.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades.

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-0

Milestone: https://github.com/pallets/flask/milestone/19?closed=1

2.1.3

Changes: https://flask.palletsprojects.com/en/2.1.x/changes/#version-2-1-3

Milestone: https://github.com/pallets/flask/milestone/22?closed=1

2.1.2

This is a fix release for the 2.1.0 feature release.

Changes: https://flask.palletsprojects.com/en/2.1.x/changes/#version-2-1-2

Milestone: https://github.com/pallets/flask/milestone/21?closed=1

2.1.1

This is a fix release for the 2.1.0 feature release.

... (truncated)

Changelog

Sourced from flask's changelog.

Version 2.2.5

Released 2023-05-02

Update for compatibility with Werkzeug 2.3.3.

Set Vary: Cookie header when the session is accessed, modified, or refreshed.

Version 2.2.4

Released 2023-04-25

Update for compatibility with Werkzeug 2.3.

Version 2.2.3

Released 2023-02-15

Autoescape is enabled by default for .svg template files. :issue:4831

Fix the type of template_folder to accept pathlib.Path. :issue:4892

Add --debug option to the flask run command. :issue:4777

Version 2.2.2

Released 2022-08-08

Update Werkzeug dependency to >= 2.2.2. This includes fixes related to the new faster router, header parsing, and the development server. :pr:4754

Fix the default value for app.env to be "production". This attribute remains deprecated. :issue:4740

Version 2.2.1

Released 2022-08-03

Setting or accessing json_encoder or json_decoder raises a deprecation warning. :issue:4732

Version 2.2.0

... (truncated)

Commits

47af817 release version 2.2.5
afd63b1 Merge pull request #5109 from pallets/backport-vary-cookie
8646edc set Vary: Cookie header consistently for session
a6367da Merge pull request #5108 from pallets/werkzeug-compat
3fbfbad werkzeug 2.3.3 compatibility
726d3f4 start version 2.2.5
ddc7acc Merge pull request #5081 from pallets/release-2.2.4
74e0329 release version 2.2.4
2d46068 update dev env
64bc458 update dev dependencies
Additional commits viewable in compare view

Updates jinja2 from 2.10.3 to 3.1.4

Release notes

Sourced from jinja2's releases.

3.1.4

This is the Jinja 3.1.4 security release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/Jinja2/3.1.4/ Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-4

The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. GHSA-h75v-3vvj-5mfj

3.1.3

This is a fix release for the 3.1.x feature branch.

Fix for GHSA-h5c8-rqwp-cp95. You are affected if you are using xmlattr and passing user input as attribute keys.

Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-3

Milestone: https://github.com/pallets/jinja/milestone/15?closed=1

3.1.2

This is a fix release for the 3.1.0 feature release.

Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-2

Milestone: https://github.com/pallets/jinja/milestone/13?closed=1

3.1.1

Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-1

Milestone: https://github.com/pallets/jinja/milestone/12?closed=1

3.1.0

This is a feature release, which includes new features and removes previously deprecated features. The 3.1.x branch is now the supported bugfix branch, the 3.0.x branch has become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. We also encourage upgrading to MarkupSafe 2.1.1, the latest version at this time.

Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-0

Milestone: https://github.com/pallets/jinja/milestone/8?closed=1

MarkupSafe changes: https://markupsafe.palletsprojects.com/en/2.1.x/changes/#version-2-1-1

3.0.3

Changes: https://jinja.palletsprojects.com/en/3.0.x/changes/#version-3-0-3

3.0.2

Changes: https://jinja.palletsprojects.com/en/3.0.x/changes/#version-3-0-2

3.0.1

Changes: https://jinja.palletsprojects.com/en/3.0.x/changes/#version-3-0-1

3.0.0

New major versions of all the core Pallets libraries, including Jinja 3.0, have been released! 🎉

Read the announcement on our blog: https://palletsprojects.com/blog/flask-2-0-released/

Read the full list of changes: https://jinja.palletsprojects.com/changes/#version-3-0-0

Retweet the announcement on Twitter: https://twitter.com/PalletsTeam/status/1392266507296514048

Follow our blog, Twitter, or GitHub to see future announcements.

This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.

... (truncated)

Changelog

Sourced from jinja2's changelog.

Version 3.1.4

Released 2024-05-05

The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. :ghsa:h75v-3vvj-5mfj

Version 3.1.3

Released 2024-01-10

Fix compiler error when checking if required blocks in parent templates are empty. :pr:1858

xmlattr filter does not allow keys with spaces. :ghsa:h5c8-rqwp-cp95

Make error messages stemming from invalid nesting of {% trans %} blocks more helpful. :pr:1918

Version 3.1.2

Released 2022-04-28

Add parameters to Environment.overlay to match __init__. :issue:1645

Handle race condition in FileSystemBytecodeCache. :issue:1654

Version 3.1.1

Released 2022-03-25

The template filename on Windows uses the primary path separator. :issue:1637

Version 3.1.0

Released 2022-03-24

Drop support for Python 3.6. :pr:1534

Remove previously deprecated code. :pr:1544

... (truncated)

Commits

dd4a8b5 release version 3.1.4
0668239 Merge pull request from GHSA-h75v-3vvj-5mfj
d655030 disallow invalid characters in keys to xmlattr filter
a7863ba add ghsa links
b5c98e7 start version 3.1.4
da3a9f0 update project files (#1968)
0ee5eb4 satisfy formatter, linter, and strict mypy
20477c6 update project files (#5457)
e491223 update pyyaml dev dependency
36f9885 fix pr link
Additional commits viewable in compare view

Updates werkzeug from 0.16.0 to 3.0.3

Release notes

Sourced from werkzeug's releases.

3.0.3

This is the Werkzeug 3.0.3 security release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/Werkzeug/3.0.3/ Changes: https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-3 Milestone: https://github.com/pallets/werkzeug/milestone/35?closed=1

Only allow localhost, .localhost, 127.0.0.1, or the specified hostname when running the dev server, to make debugger requests. Additional hosts can be added by using the debugger middleware directly. The debugger UI makes requests using the full URL rather than only the path. GHSA-2g68-c3qc-8985

Make reloader more robust when "" is in sys.path. #2823

Better TLS cert format with adhoc dev certs. #2891

Inform Python < 3.12 how to handle itms-services URIs correctly, rather than using an overly-broad workaround in Werkzeug that caused some redirect URIs to be passed on without encoding. #2828

Type annotation for Rule.endpoint and other uses of endpoint is Any. #2836

3.0.2

This is a fix release for the 3.0.x feature branch.

Changes: https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-2

3.0.1

This is a security release for the 3.0.x feature branch.

Changes: https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-1

3.0.0

This is a feature release, which includes new features, removes previously deprecated code, and adds new deprecations. The 3.0.x branch is now the supported fix branch, the 2.3.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

Changes: https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-0

Milestone: https://github.com/pallets/werkzeug/milestone/21?closed=1

2.3.8

This is a security release for the 2.3.x feature branch.

Changes: https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-8

2.3.7

This is a fix release for the 2.3.x feature branch.

Changes: https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-7

Milestone: https://github.com/pallets/werkzeug/milestone/33?closed=1

2.3.6

This is a fix release for the 2.3.x feature branch.

Changes: https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-6

Milestone: https://github.com/pallets/werkzeug/milestone/32?closed=1

2.3.5

This is a fix release for the 2.3.x feature branch.

... (truncated)

Changelog

Sourced from werkzeug's changelog.

Version 3.0.3

Released 2024-05-05

Only allow localhost, .localhost, 127.0.0.1, or the specified hostname when running the dev server, to make debugger requests. Additional hosts can be added by using the debugger middleware directly. The debugger UI makes requests using the full URL rather than only the path. :ghsa:2g68-c3qc-8985

Make reloader more robust when "" is in sys.path. :pr:2823

Better TLS cert format with adhoc dev certs. :pr:2891

Inform Python < 3.12 how to handle itms-services URIs correctly, rather than using an overly-broad workaround in Werkzeug that caused some redirect URIs to be passed on without encoding. :issue:2828

Type annotation for Rule.endpoint and other uses of endpoint is Any. :issue:2836

Make reloader more robust when "" is in sys.path. :pr:2823

Version 3.0.2

Released 2024-04-01

Ensure setting merge_slashes to False results in NotFound for repeated-slash requests against single slash routes. :issue:2834

Fix handling of TypeError in TypeConversionDict.get() to match ValueError. :issue:2843

Fix response_wrapper type check in test client. :issue:2831

Make the return type of MultiPartParser.parse more precise. :issue:2840

Raise an error if converter arguments cannot be parsed. :issue:2822

Version 3.0.1

Released 2023-10-24

Fix slow multipart parsing for large parts potentially enabling DoS attacks.

Version 3.0.0

Released 2023-09-30

Remove previously deprecated code. :pr:2768

... (truncated)

Commits

f9995e9 release version 3.0.3
3386395 Merge pull request from GHSA-2g68-c3qc-8985
890b6b6 only require trusted host for evalex
71b69df restrict debugger trusted hosts
d2d3869 endpoint type is Any (#2895)
7080b55 endpoint type is Any
7555eff remove iri_to_uri redirect workaround (#2894)
97fb2f7 remove _invalid_iri_to_uri workaround
249527f make cn field a valid single hostname, and use wildcard in SANs field. (#2892)
793be47 update adhoc tls dev cert format
Additional commits viewable in compare view

Updates flask from 1.1.1 to 2.2.5

Release notes

Sourced from flask's releases.

2.2.5

This is a security fix release for the 2.2.x release branch. Note that 2.3.x is the currently supported release branch; please upgrade to the latest version if possible.

Security advisory: GHSA-m2qf-hxjv-5gpq, CVE-2023-30861

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-5

Milestone: https://github.com/pallets/flask/milestone/30?closed=1

2.2.4

This is a fix release for the 2.2.x release branch.

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-4

Milestone: https://github.com/pallets/flask/milestone/27?closed=1

2.2.3

This is a fix release for the 2.2.x release branch.

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-3

Milestone: https://github.com/pallets/flask/milestone/26?closed=1

2.2.2

This is a fix release for the 2.2.0 feature release.

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-2

Milestone: https://github.com/pallets/flask/milestone/25?closed=1

2.2.1

This is a fix release for the 2.2.0 feature release.

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-1

Milestone: https://github.com/pallets/flask/milestone/23?closed=1

2.2.0

This is a feature release, which includes new features and removes previously deprecated code. The 2.2.x branch is now the supported bug fix branch, the 2.1.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades.

Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-0

Milestone: https://github.com/pallets/flask/milestone/19?closed=1

2.1.3

Changes: https://flask.palletsprojects.com/en/2.1.x/changes/#version-2-1-3

Milestone: https://github.com/pallets/flask/milestone/22?closed=1

2.1.2

This is a fix release for the 2.1.0 feature release.

Changes: https://flask.palletsprojects.com/en/2.1.x/changes/#version-2-1-2

Milestone: https://github.com/pallets/flask/milestone/21?closed=1

2.1.1

This is a fix release for the 2.1.0 feature release.

... (truncated)

Changelog

Sourced from flask's changelog.

Version 2.2.5

Released 2023-05-02

Update for compatibility with Werkzeug 2.3.3.

Set Vary: Cookie header when the session is accessed, modified, or refreshed.

Version 2.2.4

Released 2023-04-25

Update for compatibility with Werkzeug 2.3.

Version 2.2.3

Released 2023-02-15

Autoescape is enabled by default for .svg template files. :issue:4831

Fix the type of template_folder to accept pathlib.Path. :issue:4892

Add --debug option to the flask run command. :issue:4777

Version 2.2.2

Released 2022-08-08

Update Werkzeug dependency to >= 2.2.2. This includes fixes related to the new faster router, header parsing, and the development server. :pr:4754

Fix the default value for app.env to be "production". This attribute remains deprecated. :issue:4740

Version 2.2.1

Released 2022-08-03

Setting or accessing json_encoder or json_decoder raises a deprecation warning. :issue:4732

Version 2.2.0

... (truncated)

Commits

47af817 release version 2.2.5
afd63b1 Merge pull request #5109 from pallets/backport-vary-cookie
8646edc set Vary: Cookie header consistently for session
a6367da Merge pull request #5108 from pallets/werkzeug-compat
3fbfbad werkzeug 2.3.3 compatibility
726d3f4 start version 2.2.5
ddc7acc Merge pull request #5081 from pallets/release-2.2.4
74e0329 release version 2.2.4
2d46068 update dev env
64bc458 update dev dependencies
Additional commits viewable in compare view

Updates jinja2 from 2.10.3 to 3.1.4

Release notes

Sourced from jinja2's releases.

3.1.4

This is the Jinja 3.1.4 security release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/Jinja2/3.1.4/ Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-4

The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. GHSA-h75v-3vvj-5mfj

3.1.3

This is a fix release for the 3.1.x feature branch.

Fix for GHSA-h5c8-rqwp-cp95. You are affected if you are using xmlattr and passing user input as attribute keys.

Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-3

Milestone: https://github.com/pallets/jinja/milestone/15?closed=1

3.1.2

This is a fix release for the 3.1.0 feature release.

Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-2

Milestone: https://github.com/pallets/jinja/milestone/13?closed=1

3.1.1

Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-1

Milestone: https://github.com/pallets/jinja/milestone/12?closed=1

3.1.0

This is a feature release, which includes new features and removes previously deprecated features. The 3.1.x branch is now the supported bugfix branch, the 3.0.x branch has become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. We also encourage upgrading to MarkupSafe 2.1.1, the latest version at this time.

Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-0

Milestone: https://github.com/pallets/jinja/milestone/8?closed=1

MarkupSafe changes: https://markupsafe.palletsprojects.com/en/2.1.x/changes/#version-2-1-1

3.0.3

Changes: https://jinja.palletsprojects.com/en/3.0.x/changes/#version-3-0-3

3.0.2

Changes: https://jinja.palletsprojects.com/en/3.0.x/changes/#version-3-0-2

3.0.1

Changes: https://jinja.palletsprojects.com/en/3.0.x/changes/#version-3-0-1

3.0.0

New major versions of all the core Pallets libraries, including Jinja 3.0, have been released! 🎉

Read the announcement on our blog: https://palletsprojects.com/blog/flask-2-0-released/

Read the full list of changes: https://jinja.palletsprojects.com/changes/#version-3-0-0

Retweet the announcement on Twitter: https://twitter.com/PalletsTeam/status/1392266507296514048

Follow our blog, Twitter, or GitHub to see future announcements.

This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.

... (truncated)

Changelog

Sourced from jinja2's changelog.

Version 3.1.4

Released 2024-05-05

The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. :ghsa:h75v-3vvj-5mfj

Version 3.1.3

Released 2024-01-10

Fix compiler error when checking if required blocks in parent templates are empty. :pr:1858

xmlattr filter does not allow keys with spaces. :ghsa:h5c8-rqwp-cp95

Make error messages stemming from invalid nesting of {% trans %} blocks more helpful. :pr:1918

Version 3.1.2

Released 2022-04-28

Add parameters to Environment.overlay to match __init__. :issue:1645

Handle race condition in FileSystemBytecodeCache. :issue:1654

Version 3.1.1

Released 2022-03-25

The template filename on Windows uses the primary path separator. :issue:1637

Version 3.1.0

Released 2022-03-24

Drop support for Python 3.6. :pr:1534

Remove previously deprecated code. :pr:1544

... (truncated)

Commits

dd4a8b5 release version 3.1.4
0668239 Merge pull request from GHSA-h75v-3vvj-5mfj
d655030 disallow invalid characters in keys to xmlattr filter
a7863ba add ghsa links
b5c98e7 start version 3.1.4
da3a9f0 update project files (#1968)
0ee5eb4 satisfy formatter, linter, and strict mypy
20477c6 update project files (#5457)
e491223 update pyyaml dev dependency
36f9885 fix pr link
Additional commits viewable in compare view

Updates werkzeug from 0.16.0 to 3.0.3

Release notes

Sourced from werkzeug's releases.

3.0.3

This is the Werkzeug 3.0.3 security release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/Werkzeug/3.0.3/ Changes: https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-3 Milestone: https://github.com/pallets/werkzeug/milestone/35?closed=1

Only allow localhost, .localhost, 127.0.0.1, or the specified hostname when running the dev server, to make debugger requests. Additional hosts can be added by using the debugger middleware directly. The debugger UI makes requests using the full URL rather than only the path. GHSA-2g68-c3qc-8985

Make reloader more robust when "" is in sys.path. #2823

Better TLS cert format with adhoc dev certs. #2891

Inform Python < 3.12 how to handle itms-services URIs correctly, rather than using an overly-broad workaround in Werkzeug that caused some redirect URIs to be passed on without encoding. #2828

Type annotation for Rule.endpoint and other uses of endpoint is Any. #2836

3.0.2

This is a fix release for the 3.0.x feature branch.

Changes: https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-2

3.0.1

This is a security release for the 3.0.x feature branch.

Changes: https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-1

3.0.0

This is a feature release, which includes new features, removes previously deprecated code, and adds new deprecations. The 3.0.x branch is now the supported fix branch, the 2.3.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

Changes: https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-0

Milestone: https://github.com/pallets/werkzeug/milestone/21?closed=1

2.3.8

This is a security release for the 2.3.x feature branch.

Changes: https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-8

2.3.7

This is a fix release for the 2.3.x feature branch.

Changes: https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-7

Milestone: https://github.com/pallets/werkzeug/milestone/33?closed=1

2.3.6

This is a fix release for the 2.3.x feature branch.

Changes: https://werkzeug.palletsprojects.com/en/2.3.x/changes/#version-2-3-6

Milestone: https://github.com/pallets/werkzeug/milestone/32?closed=1

2.3.5

This is a fix release for the 2.3.x feature branch.

... (truncated)

Changelog

Sourced from werkzeug's changelog.

Version 3.0.3

Released 2024-05-05

Only allow localhost, .localhost, 127.0.0.1, or the specified hostname when running the dev server, to make debugger requests. Additional hosts can be added by using the debugger middleware directly. The debugger UI makes requests using the full URL rather than only the path. :ghsa:2g68-c3qc-8985

Make reloader more robust when "" is in sys.path. :pr:2823

Better TLS cert format with adhoc dev certs. :pr:2891

Inform Python < 3.12 how to handle itms-services URIs correctly, rather than using an overly-broad workaround in Werkzeug that caused some redirect URIs to be passed on without encoding. :issue:2828

Type annotation for Rule.endpoint and other uses of endpoint is Any. :issue:2836

Make reloader more robust when "" is in sys.path. :pr:2823

Version 3.0.2

Released 2024-04-01

Ensure setting merge_slashes to False results in NotFound for repeated-slash requests against single slash routes. :issue:2834

Fix handling of TypeError in TypeConversionDict.get() to match ValueError. :issue:2843

Fix response_wrapper type check in test client. :issue:2831

Make the return type of MultiPartParser.parse more precise. :issue:2840

Raise an error if converter arguments cannot be parsed. :issue:2822

Version 3.0.1

Released 2023-10-24

Fix slow multipart parsing for large parts potentially enabling DoS attacks.

Version 3.0.0

Released 2023-09-30

Remove previously deprecated code. :pr:2768

... (truncated)

Commits

f9995e9 release version 3.0.3
3386395 Merge pull request from GHSA-2g68-c3qc-8985
890b6b6 only require trusted host for evalex
71b69df restrict debugger trusted hosts
d2d3869 endpoint type is Any (#2895)
7080b55 endpoint type is Any
7555eff remove iri_to_uri redirect workaround (#2894)
97fb2f7 remove _invalid_iri_to_uri workaround
249527f make cn field a valid single hostname, and use wildcard in SANs field. (#2892)
793be47 update adhoc tls dev cert format
Additional commits viewable in compare view

Updates certifi from 2019.9.11 to 2023.7.22

Commits

8fb96ed 2023.07.22
afe7722 Bump actions/setup-python from 4.6.1 to 4.7.0 (#230)
2038739 Bump dessant/lock-threads from 3.0.0 to 4.0.1 (#229)
44df761 Hash pin Actions and enable dependabot (#228)
8b3d7ba 2023.05.07
53da240 ci: Add Python 3.12-dev to the testing (#224)
c2fc3b1 Create a Security Policy (#222)
c211ef4 Set up permissions to github workflows (#218)
2087de5 Don't let deprecation warning fail CI (#219)
e0b9fc5 remove paragraphs about 1024-bit roots from README
Additional commits viewable in compare view

Updates grpcio from 1.24.3 to 1.53.2

Release notes

Sourced from grpcio's releases.

Release v1.53.2

This is release gRPC Core 1.53.2 (glockenspiel).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Core

[backport][iomgr][EventEngine] Improve server handling of file descriptor exhaustion by @drfloob in grpc/grpc#33672

Release v1.53.1

This is release gRPC Core 1.53.1 (glockenspiel).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Fixed CVE-2023-32731

Fixed CVE-2023-32732

Release v1.53.0

This is release 1.53.0 (glockenspiel) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

xDS: fix crash when removing the last endpoint from the last locality in weighted_target. (#32592)

filter stack: pass peer name up via recv_initial_metadata batch. (#31933)

[EventEngine] Add advice against blocking work in callbacks. (#32397)

[http2] Dont drop connections on metadata limit exceeded. (#32309)

xDS: reject aggregate cluster with empty cluster list. (#32238)

Fix Python epoll1 Fork Support. (#32196)

server: introduce ServerMetricRecorder API and move per-call reporting from a C++ interceptor to a C-core filter. (#32106)

[EventEngine] Add invalid handle types to the public API. (#32202)

[EventEngine] Refactoring the EventEngine Test Suite: Part 1. (#32127)

xDS: fix WeightedClusters total weight handling. (#32134)

C++

Update minimum MSVC version to 2019. (#32615)

Use CMake variables for paths in pkg-config files. (#31671)

... (truncated)

Changelog

Sourced from grpcio's changelog.

gRPC Release Schedule

Below is the release schedule for gRPC Java, Go and Core and its dependent languages C++, C#, Objective-C, PHP, Python and Ruby.

Releases are scheduled every six weeks on Tuesdays on a best effort basis. In some unavoidable situations a release may be delayed or released early or a language may skip a release altogether and do the next release to catch up with other languages. See the past releases in the links above. A six-week cycle gives us a good balance between delivering new features/fixes quickly and keeping the release overhead low.

The gRPC release support policy can be found here.

Releases are cut from release branches. For Core and Java repos, the release branch is cut two weeks before the scheduled release date. For Go, the branch is cut just before the release. An RC (release candidate) is published for Core and its dependent languages just after the branch cut. This RC is later promoted to release version if no further changes are made to the release branch. We do our best to keep head of master branch stable at all times regardless of release schedule. Daily build packages from master branch for C#, PHP, Python, Ruby and Protoc plugins are published on packages.grpc.io. If you depend on gRPC in production we recommend to set up your CI system to test the RCs and, if possible, the daily builds.

Names of gRPC releases are here.

Release Scheduled Branch Cut Scheduled Release Date

v1.17.0 Nov 19, 2018 Dec 4, 2018

v1.18.0 Jan 2, 2019 Jan 15, 2019

v1.19.0 Feb 12, 2019 Feb 26, 2019

v1.20.0 Mar 26, 2019 Apr 9, 2019

v1.21.0 May 7, 2019 May 21, 2019

v1.22.0 Jun 18, 2019 Jul 2, 2019

v1.23.0 Jul 30, 2019 Aug 13, 2019

v1.24.0 Sept 10, 2019 Sept 24, 2019

v1.25.0 Oct 22, 2019 Nov 5, 2019

v1.26.0 Dec 3, 2019 Dec 17, 2019

v1.27.0 Jan 14, 2020 Jan 28, 2020

v1.28.0 Feb 25, 2020 Mar 10, 2020

v1.29.0 Apr 7, 2020 Apr 21, 2020

v1.30.0 May 19, 2020 Jun 2, 2020

v1.31.0 Jul 14, 2020 Jul 28, 2020

v1.32.0 Aug 25, 2020 Sep 8, 2020

v1.33.0 Oct 6, 2020 Oct 20, 2020

v1.34.0 Nov 17, 2020 Dec 1, 2020

v1.35.0 Dec 29, 2020 Jan 12, 2021

v1.36.0 Feb 9, 2021 Feb 23, 2021

v1.37.0 Mar 23, 2021 Apr 6, 2021

v1.38.0 May 4, 2021 May 18, 2021

v1.39.0 Jun 15, 2021 Jun 29, 2021

v1.40.0 Jul 27, 2021 Aug 10, 2021

v1.41.0 Sep 7, 2021 Sep 21, 2021

v1.42.0 Oct 19, 2021 Nov 2, 2021

v1.43.0 Nov 30, 2021 Dec 14, 2021

v1.44.0 Jan 11, 2022 Jan 25, 2022

v1.45.0 Feb 22, 2022 Mar 8, 2022

Commits

afb307f [v1.53.x][Interop] Backport Python image update (#33864)
7a9373b [Backport] [depe...
Description has been truncated

Bumps the pip group with 3 updates in the /appengine/build_reporter directory: [flask](https://github.com/pallets/flask), [jinja2](https://github.com/pallets/jinja) and [werkzeug](https://github.com/pallets/werkzeug). Bumps the pip group with 8 updates in the /appengine/initiator directory: | Package | From | To | | --- | --- | --- | | [flask](https://github.com/pallets/flask) | `1.1.1` | `2.2.5` | | [jinja2](https://github.com/pallets/jinja) | `2.10.3` | `3.1.4` | | [werkzeug](https://github.com/pallets/werkzeug) | `0.16.0` | `3.0.3` | | [certifi](https://github.com/certifi/python-certifi) | `2019.9.11` | `2023.7.22` | | [grpcio](https://github.com/grpc/grpc) | `1.24.3` | `1.53.2` | | [idna](https://github.com/kjd/idna) | `2.8` | `3.7` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `3.10.0` | `3.18.3` | | [urllib3](https://github.com/urllib3/urllib3) | `1.25.6` | `1.26.18` | Bumps the pip group with 3 updates in the /appengine/mailer directory: [flask](https://github.com/pallets/flask), [jinja2](https://github.com/pallets/jinja) and [werkzeug](https://github.com/pallets/werkzeug). Bumps the pip group with 9 updates in the /appengine/uploader directory: | Package | From | To | | --- | --- | --- | | [flask](https://github.com/pallets/flask) | `1.0.2` | `2.2.5` | | [jinja2](https://github.com/pallets/jinja) | `2.10` | `3.1.4` | | [werkzeug](https://github.com/pallets/werkzeug) | `0.15.3` | `3.0.3` | | [certifi](https://github.com/certifi/python-certifi) | `2018.11.29` | `2023.7.22` | | [grpcio](https://github.com/grpc/grpc) | `1.18.0` | `1.53.2` | | [idna](https://github.com/kjd/idna) | `2.8` | `3.7` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `3.6.1` | `3.18.3` | | [urllib3](https://github.com/urllib3/urllib3) | `1.24.1` | `1.26.18` | | [gunicorn](https://github.com/benoitc/gunicorn) | `19.9.0` | `22.0.0` | Bumps the pip group with 5 updates in the /composer directory: | Package | From | To | | --- | --- | --- | | [certifi](https://github.com/certifi/python-certifi) | `2020.12.5` | `2023.7.22` | | [grpcio](https://github.com/grpc/grpc) | `1.47.0` | `1.53.2` | | [idna](https://github.com/kjd/idna) | `3.3` | `3.7` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `3.20.0` | `3.20.2` | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.9` | `1.26.18` | Bumps the pip group with 5 updates in the /composer/completion_monitor directory: | Package | From | To | | --- | --- | --- | | [certifi](https://github.com/certifi/python-certifi) | `2020.12.5` | `2023.7.22` | | [grpcio](https://github.com/grpc/grpc) | `1.47.0` | `1.53.2` | | [idna](https://github.com/kjd/idna) | `3.3` | `3.7` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `3.20.0` | `3.20.2` | | [urllib3](https://github.com/urllib3/urllib3) | `1.26.9` | `1.26.18` | Bumps the pip group with 11 updates in the /e2e_test directory: | Package | From | To | | --- | --- | --- | | [flask](https://github.com/pallets/flask) | `0.12.4` | `2.2.5` | | [jinja2](https://github.com/pallets/jinja) | `2.10` | `3.1.4` | | [werkzeug](https://github.com/pallets/werkzeug) | `0.15.3` | `3.0.3` | | [certifi](https://github.com/certifi/python-certifi) | `2018.11.29` | `2023.7.22` | | [grpcio](https://github.com/grpc/grpc) | `1.18.0` | `1.53.2` | | [idna](https://github.com/kjd/idna) | `2.8` | `3.7` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `3.6.1` | `3.18.3` | | [urllib3](https://github.com/urllib3/urllib3) | `1.24.1` | `1.26.18` | | [gunicorn](https://github.com/benoitc/gunicorn) | `19.9.0` | `22.0.0` | | [apache-airflow](https://github.com/apache/airflow) | `1.10.2` | `2.9.0` | | [gitpython](https://github.com/gitpython-developers/GitPython) | `2.1.11` | `3.1.41` | Updates `flask` from 1.1.1 to 2.2.5 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.1...2.2.5) Updates `jinja2` from 2.10.3 to 3.1.4 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@2.10.3...3.1.4) Updates `werkzeug` from 0.16.0 to 3.0.3 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.0...3.0.3) Updates `flask` from 1.1.1 to 2.2.5 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.1...2.2.5) Updates `jinja2` from 2.10.3 to 3.1.4 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@2.10.3...3.1.4) Updates `werkzeug` from 0.16.0 to 3.0.3 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.0...3.0.3) Updates `certifi` from 2019.9.11 to 2023.7.22 - [Commits](certifi/python-certifi@2019.09.11...2023.07.22) Updates `grpcio` from 1.24.3 to 1.53.2 - [Release notes](https://github.com/grpc/grpc/releases) - [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md) - [Commits](grpc/grpc@v1.24.3...v1.53.2) Updates `idna` from 2.8 to 3.7 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v2.8...v3.7) Updates `protobuf` from 3.10.0 to 3.18.3 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](protocolbuffers/protobuf@v3.10.0...v3.18.3) Updates `urllib3` from 1.25.6 to 1.26.18 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.25.6...1.26.18) Updates `flask` from 1.1.1 to 2.2.5 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.1...2.2.5) Updates `jinja2` from 2.10.1 to 3.1.4 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@2.10.3...3.1.4) Updates `werkzeug` from 0.15.6 to 3.0.3 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.0...3.0.3) Updates `flask` from 1.0.2 to 2.2.5 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.1...2.2.5) Updates `jinja2` from 2.10 to 3.1.4 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@2.10.3...3.1.4) Updates `werkzeug` from 0.15.3 to 3.0.3 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.0...3.0.3) Updates `certifi` from 2018.11.29 to 2023.7.22 - [Commits](certifi/python-certifi@2019.09.11...2023.07.22) Updates `grpcio` from 1.18.0 to 1.53.2 - [Release notes](https://github.com/grpc/grpc/releases) - [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md) - [Commits](grpc/grpc@v1.24.3...v1.53.2) Updates `idna` from 2.8 to 3.7 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v2.8...v3.7) Updates `protobuf` from 3.6.1 to 3.18.3 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](protocolbuffers/protobuf@v3.10.0...v3.18.3) Updates `urllib3` from 1.24.1 to 1.26.18 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.25.6...1.26.18) Updates `gunicorn` from 19.9.0 to 22.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@19.9.0...22.0.0) Updates `certifi` from 2020.12.5 to 2023.7.22 - [Commits](certifi/python-certifi@2019.09.11...2023.07.22) Updates `grpcio` from 1.47.0 to 1.53.2 - [Release notes](https://github.com/grpc/grpc/releases) - [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md) - [Commits](grpc/grpc@v1.24.3...v1.53.2) Updates `idna` from 3.3 to 3.7 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v2.8...v3.7) Updates `protobuf` from 3.20.0 to 3.20.2 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](protocolbuffers/protobuf@v3.10.0...v3.18.3) Updates `urllib3` from 1.26.9 to 1.26.18 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.25.6...1.26.18) Updates `certifi` from 2020.12.5 to 2023.7.22 - [Commits](certifi/python-certifi@2019.09.11...2023.07.22) Updates `grpcio` from 1.47.0 to 1.53.2 - [Release notes](https://github.com/grpc/grpc/releases) - [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md) - [Commits](grpc/grpc@v1.24.3...v1.53.2) Updates `idna` from 3.3 to 3.7 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v2.8...v3.7) Updates `protobuf` from 3.20.0 to 3.20.2 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](protocolbuffers/protobuf@v3.10.0...v3.18.3) Updates `urllib3` from 1.26.9 to 1.26.18 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.25.6...1.26.18) Updates `flask` from 0.12.4 to 2.2.5 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.1...2.2.5) Updates `jinja2` from 2.10 to 3.1.4 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@2.10.3...3.1.4) Updates `werkzeug` from 0.15.3 to 3.0.3 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.0...3.0.3) Updates `certifi` from 2018.11.29 to 2023.7.22 - [Commits](certifi/python-certifi@2019.09.11...2023.07.22) Updates `grpcio` from 1.18.0 to 1.53.2 - [Release notes](https://github.com/grpc/grpc/releases) - [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md) - [Commits](grpc/grpc@v1.24.3...v1.53.2) Updates `idna` from 2.8 to 3.7 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v2.8...v3.7) Updates `protobuf` from 3.6.1 to 3.18.3 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl) - [Commits](protocolbuffers/protobuf@v3.10.0...v3.18.3) Updates `urllib3` from 1.24.1 to 1.26.18 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@1.25.6...1.26.18) Updates `gunicorn` from 19.9.0 to 22.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@19.9.0...22.0.0) Updates `apache-airflow` from 1.10.2 to 2.9.0 - [Release notes](https://github.com/apache/airflow/releases) - [Changelog](https://github.com/apache/airflow/blob/main/RELEASE_NOTES.rst) - [Commits](apache/airflow@1.10.2...2.9.0) Updates `gitpython` from 2.1.11 to 3.1.41 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@2.1.11...3.1.41) --- updated-dependencies: - dependency-name: flask dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-type: direct:production dependency-group: pip - dependency-name: grpcio dependency-type: direct:production dependency-group: pip - dependency-name: idna dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-type: direct:production dependency-group: pip - dependency-name: jinja2 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-type: direct:production dependency-group: pip - dependency-name: grpcio dependency-type: direct:production dependency-group: pip - dependency-name: idna dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-type: direct:production dependency-group: pip - dependency-name: gunicorn dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-type: direct:production dependency-group: pip - dependency-name: grpcio dependency-type: direct:production dependency-group: pip - dependency-name: idna dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-type: direct:production dependency-group: pip - dependency-name: certifi dependency-type: direct:production dependency-group: pip - dependency-name: grpcio dependency-type: direct:production dependency-group: pip - dependency-name: idna dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-type: direct:production dependency-group: pip - dependency-name: urllib3 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-type: direct:development dependency-group: pip - dependency-name: jinja2 dependency-type: direct:development dependency-group: pip - dependency-name: werkzeug dependency-type: direct:development dependency-group: pip - dependency-name: certifi dependency-type: direct:development dependency-group: pip - dependency-name: grpcio dependency-type: direct:development dependency-group: pip - dependency-name: idna dependency-type: direct:development dependency-group: pip - dependency-name: protobuf dependency-type: direct:development dependency-group: pip - dependency-name: urllib3 dependency-type: direct:development dependency-group: pip - dependency-name: gunicorn dependency-type: direct:development dependency-group: pip - dependency-name: apache-airflow dependency-type: direct:development dependency-group: pip - dependency-name: gitpython dependency-type: direct:development dependency-group: pip ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label May 6, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the pip group across 7 directories with 11 updates #44

Bump the pip group across 7 directories with 11 updates #44

Uh oh!

dependabot bot commented on behalf of github May 6, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Release	Scheduled Branch Cut	Scheduled Release Date
v1.17.0	Nov 19, 2018	Dec 4, 2018
v1.18.0	Jan 2, 2019	Jan 15, 2019
v1.19.0	Feb 12, 2019	Feb 26, 2019
v1.20.0	Mar 26, 2019	Apr 9, 2019
v1.21.0	May 7, 2019	May 21, 2019
v1.22.0	Jun 18, 2019	Jul 2, 2019
v1.23.0	Jul 30, 2019	Aug 13, 2019
v1.24.0	Sept 10, 2019	Sept 24, 2019
v1.25.0	Oct 22, 2019	Nov 5, 2019
v1.26.0	Dec 3, 2019	Dec 17, 2019
v1.27.0	Jan 14, 2020	Jan 28, 2020
v1.28.0	Feb 25, 2020	Mar 10, 2020
v1.29.0	Apr 7, 2020	Apr 21, 2020
v1.30.0	May 19, 2020	Jun 2, 2020
v1.31.0	Jul 14, 2020	Jul 28, 2020
v1.32.0	Aug 25, 2020	Sep 8, 2020
v1.33.0	Oct 6, 2020	Oct 20, 2020
v1.34.0	Nov 17, 2020	Dec 1, 2020
v1.35.0	Dec 29, 2020	Jan 12, 2021
v1.36.0	Feb 9, 2021	Feb 23, 2021
v1.37.0	Mar 23, 2021	Apr 6, 2021
v1.38.0	May 4, 2021	May 18, 2021
v1.39.0	Jun 15, 2021	Jun 29, 2021
v1.40.0	Jul 27, 2021	Aug 10, 2021
v1.41.0	Sep 7, 2021	Sep 21, 2021
v1.42.0	Oct 19, 2021	Nov 2, 2021
v1.43.0	Nov 30, 2021	Dec 14, 2021
v1.44.0	Jan 11, 2022	Jan 25, 2022
v1.45.0	Feb 22, 2022	Mar 8, 2022

Bump the pip group across 7 directories with 11 updates #44

Are you sure you want to change the base?

Bump the pip group across 7 directories with 11 updates #44

Uh oh!

Conversation

dependabot bot commented on behalf of github May 6, 2024

2.2.5

2.2.4

2.2.3

2.2.2

2.2.1

2.2.0

2.1.3

2.1.2

2.1.1

Version 2.2.5

Version 2.2.4

Version 2.2.3

Version 2.2.2

Version 2.2.1

Version 2.2.0

3.1.4

3.1.3

3.1.2

3.1.1

3.1.0

3.0.3

3.0.2

3.0.1

3.0.0

Version 3.1.4

Version 3.1.3

Version 3.1.2

Version 3.1.1

Version 3.1.0

3.0.3

3.0.2

3.0.1

3.0.0

2.3.8

2.3.7

2.3.6

2.3.5

Version 3.0.3

Version 3.0.2

Version 3.0.1

Version 3.0.0

2.2.5

2.2.4

2.2.3

2.2.2

2.2.1

2.2.0

2.1.3

2.1.2

2.1.1

Version 2.2.5

Version 2.2.4

Version 2.2.3

Version 2.2.2

Version 2.2.1

Version 2.2.0

3.1.4

3.1.3

3.1.2

3.1.1

3.1.0

3.0.3

3.0.2

3.0.1

3.0.0

Version 3.1.4

Version 3.1.3

Version 3.1.2

Version 3.1.1

Version 3.1.0

3.0.3

3.0.2

3.0.1

3.0.0