Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 23, 2021

Bumps werkzeug from 1.0.1 to 2.0.1.

Release notes

Sourced from werkzeug's releases.

2.0.1

2.0.0

New major versions of all the core Pallets libraries, including Werkzeug 2.0, have been released! 🎉

This represents a significant amount of work, and there are quite a few changes. Be sure to carefully read the changelog, and use tools such as pip-compile and Dependabot to pin your dependencies and control your updates.

2.0.0rc5

2.0.0rc4

2.0.0 Release Candidate 3

Use the --pre flag to install this pre-release:

pip install --pre Werkzeug==2.0.0rc3

2.0.0 Release Candidate 2

Use the --pre flag to install this pre-release:

pip install --pre Werkzeug==2.0.0rc2

2.0.0 Release Candidate 1

Use the --pre flag to install this pre-release:

pip install --pre Werkzeug==2.0.0rc1
Changelog

Sourced from werkzeug's changelog.

Version 2.0.1

Released 2021-05-17

  • Fix type annotation for send_file max_age callable. Don't pass pathlib.Path to max_age. :issue:2119
  • Mark top-level names as exported so type checking understands imports in user projects. :issue:2122
  • Fix some types that weren't available in Python 3.6.0. :issue:2123
  • cached_property is generic over its return type, properties decorated with it report the correct type. :issue:2113
  • Fix multipart parsing bug when boundary contains special regex characters. :issue:2125
  • Type checking understands that calling headers.get with a string default will always return a string. :issue:2128
  • If HTTPException.description is not a string, get_description will convert it to a string. :issue:2115

Version 2.0.0

Released 2021-05-11

  • Drop support for Python 2 and 3.5. :pr:1693
  • Deprecate :func:utils.format_string, use :class:string.Template instead. :issue:1756
  • Deprecate :func:utils.bind_arguments and :func:utils.validate_arguments, use :meth:Signature.bind and :func:inspect.signature instead. :issue:1757
  • Deprecate :class:utils.HTMLBuilder. :issue:1761
  • Deprecate :func:utils.escape and :func:utils.unescape, use MarkupSafe instead. :issue:1758
  • Deprecate the undocumented python -m werkzeug.serving CLI. :issue:1834
  • Deprecate the environ["werkzeug.server.shutdown"] function that is available when running the development server. :issue:1752
  • Deprecate the useragents module and the built-in user agent parser. Use a dedicated parser library instead by subclassing user_agent.UserAgent and setting Request.user_agent_class. :issue:2078
  • Remove the unused, internal posixemulation module. :issue:1759
  • All datetime values are timezone-aware with tzinfo=timezone.utc. This applies to anything using http.parse_date: Request.date, .if_modified_since, .if_unmodified_since; Response.date, .expires, .last_modified, .retry_after; parse_if_range_header, and IfRange.date. When comparing values, the other values must also be aware, or these values must be made naive. When passing

... (truncated)

Commits
  • 73ed5ef Merge pull request #2135 from pallets/release-2.0.1
  • c09fe3f release version 2.0.1
  • f0bc6b2 Merge pull request #2134 from pallets/typeshed
  • e6305ec Merge pull request #2133 from pallets/http-description
  • 67ef741 convert HTTPException.description to string
  • ca830ca use _typeshed.wsgi instead of wsgiref.types
  • c2fd0f1 update 2128 changelog
  • 1b8907a Merge pull request #2129 from bayesimpact/pascal-type-get
  • 625aaba Enhance type of headers.get method.
  • 1104012 Merge pull request #2126 from pgjones/mpfix
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 23, 2021
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch from e74a630 to 66eb077 Compare May 28, 2021 20:13
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch from 66eb077 to efce2f9 Compare June 10, 2021 20:03
@dependabot dependabot bot requested a review from a team as a code owner June 10, 2021 20:03
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch from efce2f9 to 89e2823 Compare June 11, 2021 14:29
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch 2 times, most recently from 3ef16f0 to 2ebae49 Compare July 1, 2021 18:59
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch 3 times, most recently from 7f02d35 to d83246a Compare July 14, 2021 18:22
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch 2 times, most recently from 734fe76 to 1179b1d Compare July 23, 2021 19:51
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch 2 times, most recently from 53ddb07 to 71e7ef5 Compare August 5, 2021 18:58
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch 3 times, most recently from b346b44 to c20cf43 Compare August 25, 2021 18:36
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch 3 times, most recently from 991c54f to c7a335a Compare September 8, 2021 20:47
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch from c7a335a to 3266e83 Compare September 16, 2021 20:57
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 1.0.1 to 2.0.1.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@1.0.1...2.0.1)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/werkzeug-2.0.1 branch from 3266e83 to 8298b25 Compare October 1, 2021 17:11
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 10, 2021

Superseded by #2690.

@dependabot dependabot bot closed this Oct 10, 2021
@dependabot dependabot bot deleted the dependabot/pip/werkzeug-2.0.1 branch October 10, 2021 11:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant