Conversation
Bumps [flask](https://github.com/pallets/flask) from 3.0.3 to 3.1.0. - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@3.0.3...3.1.0) --- updated-dependencies: - dependency-name: flask dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
|
The following labels could not be found: |
|
By default, I don't review pull requests opened by bots. If you would like me to review this pull request anyway, you can request a review via the |
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
github-actions
bot
added
the
size/XS
Reviewer's Guide by SourceryThis pull request bumps the Flask dependency from version 3.0.3 to 3.1.0 by modifying the requirements.txt file. Updated class diagram for Flask RequestclassDiagram
class Request {
+max_content_length: int
+trusted_hosts: t.Optional[t.List[str]]
}
note for Request "max_content_length can be customized per-request.\n trusted_hosts is checked during routing, and can be set through the TRUSTED_HOSTS config."
Updated class diagram for FlaskclassDiagram
class Flask {
+open_resource(filename: str, mode: str = 'rb', encoding: t.Optional[str] = None) : IO[Any]
+open_instance_resource(filename: str, mode: str = 'rb', encoding: t.Optional[str] = None) : IO[Any]
}
note for Flask "open_resource and open_instance_resource take an encoding parameter."
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
|
Updated dependencies detected. Learn more about Socket for GitHub ↗︎
|
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is filesystem access?Accesses the file system, and could potentially read sensitive data. If a package must read the file system, clarify what it will read and ensure it reads only what it claims to. If appropriate, packages can leave file system access to consumers and operate on data passed to it instead. What is dynamic code execution?Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior. Avoid packages that use dynamic code execution like eval(), since this could potentially execute any code. What is network access?This module accesses the network. Packages should remove all network access that is functionally unnecessary. Consumers should audit network access to ensure legitimate use. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot (hey, dependabot[bot]!). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
gstraccini
bot
added
the
☑️ auto-merge
![gstraccini[bot]](https://avatars.githubusercontent.com/in/480132?s=60&v=4){kind=small}
guibranco
left a comment
guibranco
left a comment
There was a problem hiding this comment.
Automatically approved by gstraccini[bot]
|
@dependabot squash and merge |
|
One of your CI runs failed on this pull request, so Dependabot won't merge it. Dependabot will still automatically merge this pull request if you amend it and your tests pass. |
|
Infisical secrets check: ✅ No secrets leaked! 💻 Scan logs10:20AM INF scanning for exposed secrets...
10:20AM INF 69 commits scanned.
10:20AM INF scan completed in 66.9ms
10:20AM INF no leaks found
|
1 participant
Bumps flask from 3.0.3 to 3.1.0.
Release notes
Sourced from flask's releases.
Changelog
Sourced from flask's changelog.
Commits
ab81496release version 3.1.070602a1remove test pypi6748a09update dev dependencies22c48a7Merge remote-tracking branch 'origin/stable'2eab96ause generic bases for session (#5638)f49dbfduse generic bases for session7b21d43configure and checkrequest.trusted_hosts(#5637)4f7156fconfigure and check trusted_hosts10bdf61settingSERVER_NAMEdoes not restrict routing for bothsubdomain_matching...4995a77fix subdomain_matching=False behaviorDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot will merge this PR once CI passes on it, as requested by @guibranco.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by Sourcery
Upgrade Flask from version 3.0.3 to 3.1.0.
Chores:
Description by Korbit AI
What change is being made?
Upgrade Flask from version 3.0.3 to 3.1.0 in
requirements.txt.Why are these changes being made?
This change is being made to incorporate the latest features, improvements, and security updates provided in Flask 3.1.0, ensuring that the project stays up-to-date and benefits from any enhancements or bug fixes included in the newer version.