Update werkzeug requirement from <2.2.0 to <2.3.0
Updates the requirements on werkzeug to permit the latest version.
Release notes
Sourced from werkzeug's releases.
2.2.1
This is a fix release for the 2.2.0 feature release.
Changelog
Sourced from werkzeug's changelog.
Version 2.2.1
Released 2022-07-27
- Fix router so that
/path/will match a rule/pathif strict slashes mode is disabled for the rule. :issue:2467- Fix router so that partial part matches are not allowed i.e.
/2dfdoes not match/<int>. :pr:2470- Fix router static part weighting, so that simpler routes are matched before more complex ones. :issue:
2471- Restore
ValidationErrorto be importable fromwerkzeug.routing. :issue:2465Version 2.2.0
Released 2022-07-23
- Deprecated
get_script_name,get_query_string,peek_path_info,pop_path_info, andextract_path_info. :pr:2461- Remove previously deprecated code. :pr:
2461- Add MarkupSafe as a dependency and use it to escape values when rendering HTML. :issue:
2419- Added the
werkzeug.debug.preserve_contextmechanism for restoring context-local data for a request when running code in the debug console. :pr:2439- Fix compatibility with Python 3.11 by ensuring that
end_linenoandend_col_offsetare present on AST nodes. :issue:2425- Add a new faster matching router based on a state machine. :pr:
2433- Names within options headers are always converted to lowercase. This matches :rfc:
6266that the case is not relevant. :issue:2442AnyConvertervalidates the value passed for it when building URLs. :issue:2388- The debugger shows enhanced error locations in tracebacks in Python 3.11. :issue:
2407- Added Sans-IO
is_resource_modifiedandparse_cookiefunctions based on WSGI versions. :issue:2408- Added Sans-IO
get_content_lengthfunction. :pr:2415- Don't assume a mimetype for test responses. :issue:
2450- Type checking
FileStorageacceptsos.PathLike. :pr:2418Version 2.1.2
Released 2022-04-28
... (truncated)
Commits
410c878release version 2.2.1cdee5ceMerge pull request #2472 from pgjones/2.2.x56a24f7Bugfix the calculation of weighting based on static parts5c85706Merge pull request #2470 from pgjones/2.2.xb59eb67Switch $\Z to \Z in matching regex3a408edBugfix ensure that the entire part is matched76ccf1fMerge pull request #2468 from pgjones/2.2.x364d9c2Restore ValidationError as part of the werkzeug.routing APIfa76cbeEnsure that rules without strict slashes match paths with slashes7ae6bc1Merge branch '2.1.x' into 2.2.x- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Leaving this open with the hope that dependabot will auto-update to the 2.3.x release of the fix in https://github.com/spulec/moto/pull/5330 and go green.
Think issue ( https://github.com/spulec/moto/issues/5341 ) is the one we want to watch
A newer version of werkzeug exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.
@dependabot recreate
It sounds like more work is needed upstream ( https://github.com/spulec/moto/issues/5341#issuecomment-1206995825 ) before this can be updated
:+1: Mostly wanted to make sure dependabot would update for us when the time came.
@dependabot recreate
@dependabot rebase
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!
If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.
@dependabot recreate
Let's see if this works 🍀
Looks like it is working 🥳
Thanks, @jakirkham! 🙏🏽