Skip to content
This repository was archived by the owner on Jul 10, 2022. It is now read-only.

build(deps): bump werkzeug from 1.0.1 to 2.1.1 #222

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2022

Bumps werkzeug from 1.0.1 to 2.1.1.

Release notes

Sourced from werkzeug's releases.

2.1.1

This is a fix release for the 2.1.0 feature release.

2.1.0

This is a feature release, which includes new features and removes previously deprecated features. The 2.1.x branch is now the supported bugfix branch, the 2.0.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades.

2.0.3

2.0.2

2.0.1

2.0.0

New major versions of all the core Pallets libraries, including Werkzeug 2.0, have been released! 🎉

This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.

2.0.0rc5

2.0.0rc4

2.0.0 Release Candidate 3

Use the --pre flag to install this pre-release:

pip install --pre Werkzeug==2.0.0rc3

2.0.0 Release Candidate 2

... (truncated)

Changelog

Sourced from werkzeug's changelog.

Version 2.1.1

Released 2022-04-01

  • ResponseCacheControl.s_maxage converts its value to an int, like max_age. :issue:2364

Version 2.1.0

Released 2022-03-28

  • Drop support for Python 3.6. :pr:2277

  • Using gevent or eventlet requires greenlet>=1.0 or PyPy>=7.3.7. werkzeug.locals and contextvars will not work correctly with older versions. :pr:2278

  • Remove previously deprecated code. :pr:2276

    • Remove the non-standard shutdown function from the WSGI environ when running the development server. See the docs for alternatives.
    • Request and response mixins have all been merged into the Request and Response classes.
    • The user agent parser and the useragents module is removed. The user_agent module provides an interface that can be subclassed to add a parser, such as ua-parser. By default it only stores the whole string.
    • The test client returns TestResponse instances and can no longer be treated as a tuple. All data is available as properties on the response.
    • Remove locals.get_ident and related thread-local code from locals, it no longer makes sense when moving to a contextvars-based implementation.
    • Remove the python -m werkzeug.serving CLI.
    • The has_key method on some mapping datastructures; use key in data instead.
    • Request.disable_data_descriptor is removed, pass shallow=True instead.
    • Remove the no_etag parameter from Response.freeze().
    • Remove the HTTPException.wrap class method.
    • Remove the cookie_date function. Use http_date instead.
    • Remove the pbkdf2_hex, pbkdf2_bin, and safe_str_cmp functions. Use equivalents in hashlib and hmac modules instead.
    • Remove the Href class.
    • Remove the HTMLBuilder class.
    • Remove the invalidate_cached_property function. Use del obj.attr instead.

... (truncated)

Commits
  • 1bfd5de Merge pull request #2369 from pallets/release-2.1.1
  • ae7ca14 release version 2.1.1
  • ae18aca Merge pull request #2365 from Yourun-proger/cache_bug
  • 74948bc s_maxage converts to an int
  • 2b05281 start version 2.1.1
  • 294de75 Merge pull request #2358 from pallets/release-2.1.0
  • 67b108c release version 2.1.0
  • dae7e0d Merge pull request #2357 from pallets/parse_options_header-multiple
  • 2ffa7c1 deprecate parse_options_header multiple parameter
  • 560dd5f Merge pull request #2356 from spaceone/fix-typos-in-docstrings
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 1.0.1 to 2.1.1.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@1.0.1...2.1.1)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 1, 2022
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 28, 2022

Superseded by #224.

@dependabot dependabot bot closed this Apr 28, 2022
@dependabot dependabot bot deleted the dependabot/pip/werkzeug-2.1.1 branch April 28, 2022 22:37
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants