Skip to content

Conversation

@spottsdd
Copy link
Contributor

Description

This is a minor update to flask to bring it to a supported version for single step instrumentation.

Note: The latest version of Flask is 3.1.1. It would be good to update to a newer version eventually. That will take much more time to update dependencies and code. This minor bump brings Discounts and Ads-python services to a minimum requirement for SSI without needing additional changes.

How to test

clone the repo
checkout this branch
Uncomment ads-pythong from docker-compose.dev.yml
Set ADS_B_PERCENT=50 under service-proxy
run docker compose -f docker-compose.dev.yml up -d
This will build and run all services.
Verify trace data from discounts and ads-python

@spottsdd spottsdd requested review from a team as code owners July 11, 2025 13:58
click==7.1.2
ddtrace==3.10.1
Flask==1.1.2
Flask==1.1.4

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 Library Vulnerability

flask → 1.1.4

Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header (...read more)

View in Datadog  Leave us feedback  Documentation

click==7.1.2
ddtrace==3.10.1
Flask==1.1.2
Flask==1.1.4

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 Library Vulnerability

flask → 1.1.4

Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header (...read more)

View in Datadog  Leave us feedback  Documentation

@spottsdd spottsdd merged commit 8ab6855 into main Jul 14, 2025
1 check passed
@spottsdd spottsdd deleted the upgrade-flask branch July 14, 2025 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants