Bumps the python-deps group in /python3 with 3 updates: flask, flask-httpauth and psycopg2-binary.
Updates flask from 3.0.0 to 3.0.3
Release notes
Sourced from flask's releases.
3.0.3
This is a fix release for the 3.0.x feature branch.
PyPI: https://pypi.org/project/Flask/3.0.3/
Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-3
Milestone: https://github.com/pallets/flask/milestone/35?closed=1
- The default
hashlib.sha1 may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. #5448
- Don't initialize the
cli attribute in the sansio scaffold, but rather in the Flask concrete class. #5270
3.0.2
This is a fix release for the 3.0.x feature release branch. It fixes bugs but does not otherwise change behavior and should not result in breaking changes.
3.0.1
This is a fix release for the 3.0.x feature release branch.
Fixes an issue where using other JSON providers, such as flask-orjson, previously caused loaded session data to have an incorrect format in some cases.
Changelog
Sourced from flask's changelog.
Version 3.0.3
Released 2024年04月07日
- The default
hashlib.sha1 may not be available in FIPS builds. Don't
access it at import time so the developer has time to change the default.
:issue:5448
- Don't initialize the
cli attribute in the sansio scaffold, but rather in
the Flask concrete class. :pr:5270
Version 3.0.2
Released 2024年02月03日
- Correct type for
jinja_loader property. :issue:5388
- Fix error with
--extra-files and --exclude-patterns CLI options.
:issue:5391
Version 3.0.1
Released 2024年01月18日
- Correct type for
path argument to send_file. :issue:5230
- Fix a typo in an error message for the
flask run --key option. :pr:5344
- Session data is untagged without relying on the built-in
json.loads
object_hook. This allows other JSON providers that don't implement that.
:issue:5381
- Address more type findings when using mypy strict mode. :pr:
5383
Commits
Updates flask-httpauth from 4.7.0 to 4.8.0
Release notes
Sourced from flask-httpauth's releases.
Release 4.8.0
See CHANGE.LOG for release notes.
Changelog
Sourced from flask-httpauth's changelog.
Flask-HTTPAuth change log
Release 4.8.0 - 2023年04月27日
- Changes to handle breaking changes in Flask/Werkzeug 2.3 #160 (commit)
- Remove Python 3.6 and 3.7 from builds, add Python 3.11 (commit)
- Replace itsdangerous with pyjwt in examples #157 (commit)
- Better documentation for the
get_user_roles callback argument #152 (commit) (thanks Taranjeet Singh!)
Release 4.7.0 - 2022年05月29日
- Fallback to latin-1 encoding for credentials when utf-8 fails #151 (commit)
- Documentation updates (commit)
Release 4.6.0 - 2022年04月21日
- Add MD5-Sess algorithm for Digest auth (commit)
- Add qop=auth option for Digest auth (commit) (thanks Edward!)
- Add Python 3.10 and PyPy 3.8 to build (commit)
Release 4.5.0 - 2021年10月25日
- Support for Flask 2 async views (commit)
- Do not read the request body #138 (commit)
- Remove unused
flask.g import in token authentication example #137 (commit) (thanks Jonas Sandström!)
- Fixed documentation typo #127 (commit) (thanks Reggie V!)
Release 4.4.0 - 2021年05月13日
- Replace
safe_str_cmp with hmac.compare_digest to avoid a deprecation warning from Werkzeug #126 (commit) (thanks Federico Martinez!)
- Drop Python 2 support (commit)
Release 4.3.0 - 2021年05月01日
- Support token auth with custom header in MultiAuth class #125 (commit)
- Catch
UnicodeDecodeError when passing malformed data in authorization header #122 (commit) (thanks Bastian Raschke!)
- Fixes typo #116 (commit) (thanks Renato Oliveira!)
- Move builds to GitHub actions (commit)
Release 4.2.0 - 2020年11月16日
- Allow error response to return a 200 status code #114 (commit)
- Add optional argument to MultiAuth class #115 (commit) (thanks pryankster and Michael Wright!)
- Remove python 3.5 and add python 3.9 to build (commit)
Release 4.1.0 - 2020年06月04日
- Basic authentication with custom scheme (commit)
Release 4.0.0 - 2020年04月26日
... (truncated)
Commits
4d01283 Release 4.8.0
7654839 Support for breaking changes in Flask/Werkzeug 2.3 (Fixes #160)
15498a3 Upgrade GitHub actions #nolog
04399bd Remove Python 3.6 from builds, add Python 3.11
60552cc update tox.ini #nolog
6f708b0 Replace itsdangerous with pyjwt in examples (Fixes #157)
03ff944 Better documentation for the get_user_roles callback argument (#152)
f2b70b2 Version 4.7.1.dev0
- See full diff in compare view
Updates psycopg2-binary from 2.9.8 to 2.9.9
Changelog
Sourced from psycopg2-binary's changelog.
Current release
What's new in psycopg 2.9.9
^^^^^^^^^^^^^^^^^^^^^^^^^^^
- Add support for Python 3.12.
- Drop support for Python 3.6.
What's new in psycopg 2.9.8
^^^^^^^^^^^^^^^^^^^^^^^^^^^
- Wheel package bundled with PostgreSQL 16 libpq in order to add support for
recent features, such as
sslcertmode.
What's new in psycopg 2.9.7
^^^^^^^^^^^^^^^^^^^^^^^^^^^
- Fix propagation of exceptions raised during module initialization
(:ticket:
[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
- Fix building when pg_config returns an empty string (:ticket:
[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
- Wheel package bundled with OpenSSL 1.1.1v.
What's new in psycopg 2.9.6
^^^^^^^^^^^^^^^^^^^^^^^^^^^
- Package manylinux 2014 for aarch64 and ppc64le platforms, in order to
include libpq 15 in the binary package (:ticket:
[#1396](https://github.com/psycopg/psycopg2/issues/1396)).
- Wheel package bundled with OpenSSL 1.1.1t.
What's new in psycopg 2.9.5
^^^^^^^^^^^^^^^^^^^^^^^^^^^
- Add support for Python 3.11.
- Add support for rowcount in MERGE statements in binary packages
(:ticket:
[#1497](https://github.com/psycopg/psycopg2/issues/1497)).
- Wheel package bundled with OpenSSL 1.1.1r and PostgreSQL 15 libpq.
What's new in psycopg 2.9.4
^^^^^^^^^^^^^^^^^^^^^^^^^^^
- Fix
~psycopg2.extras.register_composite(),
~psycopg2.extras.register_range() with customized :sql:search_path
(:ticket:[#1487](https://github.com/psycopg/psycopg2/issues/1487)).
- Handle correctly composite types with names or in schemas requiring escape.
... (truncated)
Commits
ad5bee7 chore: bump version number to 2.9.9
37d1de1 chore: add support for Python 3.12
abf2723 chore: drop support for Python 3.6
2da65a7 chore: drop leftover Python 2.7 import aliases from setup.py
3fa60fd chore: bump doc requirement complained by dependabot
1c1484e ci: better interaction with scaleway build server
c81cec6 chore: bump to next dev release
7fe8cb7 chore: bump docs requirements dependabot complains about
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Uh oh!
There was an error while loading. Please reload this page.
Bumps the python-deps group in /python3 with 3 updates: flask, flask-httpauth and psycopg2-binary.
Updates
flaskfrom 3.0.0 to 3.0.3Release notes
Sourced from flask's releases.
Changelog
Sourced from flask's changelog.
Commits
c12a5d8release version 3.0.35e22cc9Don't set the cli attribute in the sansio scaffold (#5270)5fdce4cDon't set the cli attribute in the sansio scaffoldadb7dd9don't access app.logger when configuring app.loggerb739390support FIPS builds without SHA-1 (#5460)db46111access sha1 lazily7320e31start version 3.0.387d5f5bupdate project files (#5457)d5e321brelease version 3.0.2 (#5403)d203059release version 3.0.2Updates
flask-httpauthfrom 4.7.0 to 4.8.0Release notes
Sourced from flask-httpauth's releases.
Changelog
Sourced from flask-httpauth's changelog.
... (truncated)
Commits
4d01283Release 4.8.07654839Support for breaking changes in Flask/Werkzeug 2.3 (Fixes #160)15498a3Upgrade GitHub actions #nolog04399bdRemove Python 3.6 from builds, add Python 3.1160552ccupdate tox.ini #nolog6f708b0Replace itsdangerous with pyjwt in examples (Fixes #157)03ff944Better documentation for the get_user_roles callback argument (#152)f2b70b2Version 4.7.1.dev0Updates
psycopg2-binaryfrom 2.9.8 to 2.9.9Changelog
Sourced from psycopg2-binary's changelog.
... (truncated)
Commits
ad5bee7chore: bump version number to 2.9.937d1de1chore: add support for Python 3.12abf2723chore: drop support for Python 3.62da65a7chore: drop leftover Python 2.7 import aliases from setup.py3fa60fdchore: bump doc requirement complained by dependabot1c1484eci: better interaction with scaleway build serverc81cec6chore: bump to next dev release7fe8cb7chore: bump docs requirements dependabot complains aboutDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions