Skip to content

chore(deps): update dependency werkzeug to v3.1.7#916

Merged
descope[bot] merged 1 commit intomainfrom
renovate/werkzeug-3.x
Apr 14, 2026
Merged

chore(deps): update dependency werkzeug to v3.1.7#916
descope[bot] merged 1 commit intomainfrom
renovate/werkzeug-3.x

Conversation

@descope
Copy link
Copy Markdown
Contributor

@descope descope Bot commented Apr 14, 2026

This PR contains the following updates:

Package Update Change Pending OpenSSF
Werkzeug (changelog) patch ==3.1.6 -> ==3.1.7 3.1.8 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

pallets/werkzeug (Werkzeug)

v3.1.7

Compare Source

Released 2026-03-23

  • parse_list_header preserves partially quoted items, discards empty
    items, and returns empty for unclosed quoted values. :pr:3128
  • WWWAuthenticate.to_header does not produce a trailing space when there
    are no parameters. :issue:3127
  • Transfer-Encoding is parsed as a set. :pr:3134
  • Request.host, get_host, and host_is_trusted validate the
    characters of the value. An empty value is no longer allowed. A Unix socket
    server address is ignored. The trusted_list argument to
    host_is_trusted is optional. :pr:3113
  • Fix multipart form parser handling of newline at boundary. :issue:3088
  • Response.make_conditional sets the Accept-Ranges header even if it
    is not a satisfiable range request. :issue:3108
  • merge_slashes merges any number of consecutive slashes. :issue:3121

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@descope descope Bot added the renovate label Apr 14, 2026
@descope descope Bot enabled auto-merge (squash) April 14, 2026 01:09
@descope descope Bot force-pushed the renovate/werkzeug-3.x branch from e055ccd to e1fb433 Compare April 14, 2026 01:09
@github-actions
Copy link
Copy Markdown

Coverage report

The coverage rate went from 98.35% to 98.35% ➡️

None of the new lines are part of the tested code. Therefore, there is no coverage data about them.

@descope descope Bot merged commit 6f05fe1 into main Apr 14, 2026
31 checks passed
@descope descope Bot deleted the renovate/werkzeug-3.x branch April 14, 2026 01:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants