Skip to content

Bump flask from 1.1.2 to 2.1.3 #682

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 14, 2022

Bumps flask from 1.1.2 to 2.1.3.

Release notes

Sourced from flask's releases.

2.1.3

2.1.2

This is a fix release for the 2.1.0 feature release.

2.1.1

This is a fix release for the 2.1.0 feature release.

2.1.0

This is a feature release, which includes new features and removes previously deprecated features. The 2.1.x branch is now the supported bugfix branch, the 2.0.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades.

We also encourage upgrading to the latest versions of the other Pallets projects as well.

2.0.3

2.0.2

2.0.1

2.0.0

New major versions of all the core Pallets libraries, including Flask 2.0, have been released! 🎉

This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.

... (truncated)

Changelog

Sourced from flask's changelog.

Version 2.1.3

Released 2022-07-13

  • Inline some optional imports that are only used for certain CLI commands. :pr:4606
  • Relax type annotation for after_request functions. :issue:4600
  • instance_path for namespace packages uses the path closest to the imported submodule. :issue:4610
  • Clearer error message when render_template and render_template_string are used outside an application context. :pr:4693

Version 2.1.2

Released 2022-04-28

  • Fix type annotation for json.loads, it accepts str or bytes. :issue:4519
  • The --cert and --key options on flask run can be given in either order. :issue:4459

Version 2.1.1

Released on 2022-03-30

  • Set the minimum required version of importlib_metadata to 3.6.0, which is required on Python < 3.10. :issue:4502

Version 2.1.0

Released 2022-03-28

  • Drop support for Python 3.6. :pr:4335

  • Update Click dependency to >= 8.0. :pr:4008

  • Remove previously deprecated code. :pr:4337

    • The CLI does not pass script_info to app factory functions.
    • config.from_json is replaced by config.from_file(name, load=json.load).
    • json functions no longer take an encoding parameter.
    • safe_join is removed, use werkzeug.utils.safe_join instead.

... (truncated)

Commits
  • 187d717 Merge pull request #4694 from pallets/release-2.1.3
  • 134aebe release version 2.1.3
  • a7859c6 Merge pull request #4693 from Yourun-proger/msg_app_ctx
  • 58f3536 error for render_template outside app context
  • 7096b2c update requirements
  • 94233fc Merge pull request #4681 from earlruby/patch-1
  • 6751f68 New URL for the Quart project
  • cafe68e Merge pull request #4675 from tiesjan/2.1.x
  • 9dfcb90 Document serialization of Decimal in JSONEncoder
  • e4c4fd5 Merge pull request #4674 from pallets/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 14, 2022
Bumps [flask](https://github.com/pallets/flask) from 1.1.2 to 2.1.3.
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@1.1.2...2.1.3)

---
updated-dependencies:
- dependency-name: flask
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/flask-2.1.3 branch from 62b16ab to 143f7e7 Compare July 15, 2022 06:15
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 2, 2022

A newer version of flask exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

Copy link
Member

@canihavesomecoffee canihavesomecoffee left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not mergeable unless bumping other deps and fixing all major BC.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants