Skip to content

Conversation

@ldionne
Copy link
Member

@ldionne ldionne commented Oct 6, 2025

This PR updates most of the dependencies to their latest version. I have tried extracting as
many independent patches as possible, however at the core there are a few interdependent
changes.

@ldionne ldionne changed the title [deps] Bump Werkzeug to 3.1.3 [deps] Bump Flask, Werkzeug and Click Oct 6, 2025
@ldionne ldionne marked this pull request as draft October 6, 2025 16:55
@ldionne ldionne force-pushed the review/bump-werkzeug branch 2 times, most recently from 4ccaec4 to 8a4a515 Compare October 10, 2025 01:31
@ldionne ldionne changed the title [deps] Bump Flask, Werkzeug and Click [deps] Upgrade dependencies to fix various functionality and tests Oct 10, 2025
@ldionne ldionne force-pushed the review/bump-werkzeug branch from 96470d2 to 718bbdd Compare October 10, 2025 01:45
This patch bumps most dependencies to recent versions, which should
resolve many Dependabot alerts. In addition to that, it allows all the
tests to finally run successfully.
It seems that in a recent version, Flask-WTF's forms stopped
providing the hidden_tag() method. Instead, FlaskForms provide
that method.
Flask's JSONEncoder class was removed in version 3.0 since the
Python Standard Library provides its own json library. Instead,
update the code to use either that or Flask's default JSON provider.

Flask apps don't have a `.json_encoder` property anymore, the
property is `.json`.
@ldionne ldionne force-pushed the review/bump-werkzeug branch from 718bbdd to af4372e Compare October 13, 2025 20:44
Fix some tests with invalid expectations, or which relied on
implementation details like matching the internal server error
string.
@ldionne ldionne force-pushed the review/bump-werkzeug branch from af4372e to db5accb Compare October 13, 2025 20:53
@ldionne ldionne marked this pull request as ready for review October 13, 2025 20:53
@ldionne ldionne merged commit 595f058 into llvm:main Oct 14, 2025
3 checks passed
@ldionne ldionne deleted the review/bump-werkzeug branch October 14, 2025 11:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant