Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Pin flask to latest version 3.0.2 #32

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Conversation

pyup-bot
Copy link
Collaborator

@pyup-bot pyup-bot commented Feb 3, 2024

This PR pins Flask to the latest release 3.0.2.

Changelog

3.0.2

This is a fix release for the 3.0.x feature release branch. It fixes bugs but does not otherwise change behavior and should not result in breaking changes.

* Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3.0.2
* Milestone: https://github.com/pallets/flask/milestone/34?closed=1
* PyPI: https://pypi.org/project/Flask/3.0.2/

3.0.1

This is a fix release for the 3.0.x feature release branch.

Fixes an issue where using other JSON providers, such as `flask-orjson`, previously caused loaded session data to have an incorrect format in some cases.

* Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-1
* Milestone: https://github.com/pallets/flask/milestone/32?closed=1
* PyPI: https://pypi.org/project/Flask/3.0.1/

3.0.0

This is a feature release, which includes new features, removes previously deprecated code, and adds new deprecations. The 3.0.x branch is now the supported fix branch, the 2.3.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as [pip-tools](https://pypi.org/project/pip-tools/) to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

* Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-0
* Milestone: https://github.com/pallets/flask/milestone/20?closed=1

2.3.3

This is a fix release for the 2.3.x feature branch.

- Changes: https://flask.palletsprojects.com/en/2.3.x/changes/#version-2-3-3
- Milestone: https://github.com/pallets/flask/milestone/31?closed=1

2.3.2

This is a security fix release for the 2.3.x release branch.

* Security advisory: https://github.com/pallets/flask/security/advisories/GHSA-m2qf-hxjv-5gpq, CVE-2023-30861
* Changes: https://flask.palletsprojects.com/en/2.3.x/changes/#version-2-3-2
* Milestone: https://github.com/pallets/flask/milestone/29?closed=1

2.3.1

This is a fix release for the 2.3.x release branch.

* Changes: https://flask.palletsprojects.com/en/2.3.x/changes/#version-2-3-1
* Milestone: https://github.com/pallets/flask/milestone/28?closed=1

2.3.0

This is a feature release, which includes new features, removes previously deprecated code, and adds new deprecations. The 2.3.x branch is now the supported fix branch, the 2.2.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as [pip-tools](https://pypi.org/project/pip-tools/) to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

* Changes: https://flask.palletsprojects.com/en/2.3.x/changes/#version-2-3-0
* Milestone: https://github.com/pallets/flask/milestone/24?closed=1

2.2.5

This is a security fix release for the 2.2.x release branch. Note that 2.3.x is the currently supported release branch; please upgrade to the latest version if possible.

* Security advisory: https://github.com/pallets/flask/security/advisories/GHSA-m2qf-hxjv-5gpq, CVE-2023-30861
* Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-5
* Milestone: https://github.com/pallets/flask/milestone/30?closed=1

2.2.4

This is a fix release for the 2.2.x release branch.

* Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-4
* Milestone: https://github.com/pallets/flask/milestone/27?closed=1

2.2.3

This is a fix release for the 2.2.x release branch.

* Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-3
* Milestone: https://github.com/pallets/flask/milestone/26?closed=1

2.2.2

This is a fix release for the [2.2.0](https://github.com/pallets/flask/releases/tag/2.2.0) feature release.

* Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-2
* Milestone: https://github.com/pallets/flask/milestone/25?closed=1

2.2.1

This is a fix release for the [2.2.0](https://github.com/pallets/flask/releases/tag/2.2.0) feature release.

* Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-1
* Milestone: https://github.com/pallets/flask/milestone/23?closed=1

2.2.0

This is a feature release, which includes new features and removes previously deprecated code. The 2.2.x branch is now the supported bug fix branch, the 2.1.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as [pip-tools](https://pypi.org/project/pip-tools/) to pin all dependencies and control upgrades.

* Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-0
* Milestone: https://github.com/pallets/flask/milestone/19?closed=1

2.1.3

* Changes: https://flask.palletsprojects.com/en/2.1.x/changes/#version-2-1-3
* Milestone: https://github.com/pallets/flask/milestone/22?closed=1

2.1.2

This is a fix release for the [2.1.0](https://github.com/pallets/flask/releases/tag/2.1.0) feature release.

* Changes: https://flask.palletsprojects.com/en/2.1.x/changes/#version-2-1-2
* Milestone: https://github.com/pallets/flask/milestone/21?closed=1

2.1.1

This is a fix release for the [2.1.0](https://github.com/pallets/flask/releases/tag/2.1.0) feature release.

* Changes: https://flask.palletsprojects.com/en/2.1.x/changes/#version-2-1-1
* Milestone: https://github.com/pallets/flask/milestone/18?closed=1

2.1.0

This is a feature release, which includes new features and removes previously deprecated features. The 2.1.x branch is now the supported bugfix branch, the 2.0.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as [pip-tools](https://pypi.org/project/pip-tools/) to pin all dependencies and control upgrades.

* Changes: https://flask.palletsprojects.com/en/2.1.x/changes/#version-2-1-0
* Milestone: https://github.com/pallets/flask/milestone/13?closed=1

We also encourage upgrading to the latest versions of the other Pallets projects as well.

* Werkzeug 2.1 changes: https://werkzeug.palletsprojects.com/en/2.1.x/changes/#version-2-1-0
* Jinja 3.1 changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-1
* Click 8.1 changes: https://click.palletsprojects.com/en/8.1.x/changes/#version-8-1-0
* MarkupSafe 2.1 changes: https://markupsafe.palletsprojects.com/en/2.1.x/changes/#version-2-1-1
* ItsDangerous 2.1 changes: https://itsdangerous.palletsprojects.com/en/2.1.x/changes/#version-2-1-2

2.0.3

* Changes: https://flask.palletsprojects.com/en/2.0.x/changes/#version-2-0-3
* Milestone: https://github.com/pallets/flask/milestone/17?closed=1

2.0.2

* Changes: https://flask.palletsprojects.com/en/2.0.x/changes/#version-2-0-2

2.0.1

* Changes: https://flask.palletsprojects.com/en/2.0.x/changes/#version-2-0-1

2.0.0

New major versions of all the core Pallets libraries, including Flask 2.0, have been released! :tada: 

* Read the announcement on our blog: https://palletsprojects.com/blog/flask-2-0-released/
* Read the full list of changes: https://flask.palletsprojects.com/changes/#version-2-0-0
* Retweet the announcement on Twitter: https://twitter.com/PalletsTeam/status/1392266507296514048
* Follow our blog, Twitter, or GitHub to see future announcements.

This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.

2.0.0rc2

* Changes: https://flask.palletsprojects.com/en/master/changes#version-2-0-0

2.0.0rc1

* Changes: https://flask.palletsprojects.com/en/master/changes/#version-2-0-0

1.1.2

1.1.x is the last version to support Python 2.7 and Python 3.5. It also contains deprecation warnings for code that will be removed in 2.0. Please pay attention to deprecation warnings in your project!

This release contains a couple bug fixes.

* Changelog: https://flask.palletsprojects.com/en/1.1.x/changelog/#version-1-1-2

1.1.1

* Blog: https://palletsprojects.com/blog/flask-1-1-released
* Changelog: https://flask.palletsprojects.com/en/1.1.x/changelog/#version-1-1-1

1.1.0

* Blog: https://palletsprojects.com/blog/flask-1-1-released
* Changelog: https://flask.palletsprojects.com/en/1.1.x/changelog/#version-1-1-0

1.0.4

* Changelog: https://flask.palletsprojects.com/en/1.0.x/changelog/#version-1-0-4

1.0.3

* Changelog: https://flask.palletsprojects.com/en/1.0.x/changelog/#version-1-0-3

1.0.2

This release includes bug fixes and minor changes since 1.0.1. See the [changelog](http://flask.pocoo.org/docs/changelog/#version-1-0-2) for details.


Install or Upgrade
-------------------

Install from [PyPI](https://pypi.org/project/Flask/1.0.1/) with pip:

 pip install -U Flask

1.0.1

This release includes bug fixes and minor changes since 1.0. See the [changelog](http://flask.pocoo.org/docs/changelog/#version-1-0-1) for details.


Install or Upgrade
-------------------

Install from [PyPI](https://pypi.org/project/Flask/1.0.1/) with pip:

 pip install -U Flask

1.0

pip install -U Flask

0.12.4

This is a repackage of [0.12.3](https://github.com/pallets/flask/releases/0.12.3) to fix an issue with how the package was built.


Upgrade
--------

Upgrade from [PyPI](https://pypi.org/project/Flask/0.12.4/) with pip. Use a version identifier if you want to stay at 0.12:

 pip install -U 'Flask~=0.12.4'

0.12.3

This release includes an important security fix for JSON and a minor backport for CLI support in PyCharm. It is provided for projects that cannot update to Flask 1.0 immediately. See the [1.0 announcement](../flask-1-0-released) and update to it instead if possible.


JSON Security Fix
------------------

Flask previously decoded incoming JSON bytes using the content type of the request. Although JSON should only be encoded as UTF-8, Flask was more lenient. However, Python includes non-text related encodings that could result in unexpected memory use by a request.

Flask will now detect the encoding of incoming JSON data as one of the supported UTF encodings, and will not allow arbitrary encodings from the request.


Upgrade
--------

Upgrade from [PyPI](https://pypi.org/project/Flask/) with pip. Use a version identifier if you want to stay at 0.12:

 pip install -U 'Flask~=0.12.3'
Links

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant