session_transaction fails because it's calling _update_cookies_from_response with missing arg headers

[hofrob]

I'm re-creating the bug using flask and pytest.

tests/test_session_tx.py

import flask


def test_session_tx():
    app = flask.Flask("test")
    app.config["SECRET_KEY"] = "foo"
    client = app.test_client()
    with client.session_transaction() as session:
        session["bar"] = "baz"

• install flask, pytest: pip install flask==2.2.4 pytest
• run pytest tests/test_session_tx.py

        if hasattr(self, "_update_cookies_from_response"):
>           self._update_cookies_from_response(
                ctx.request.host.partition(":")[0], resp.headers.getlist("Set-Cookie")
            )
E           TypeError: Client._update_cookies_from_response() missing 1 required positional argument: 'headers'

venv/lib/python3.11/site-packages/flask/testing.py:171: TypeError

Environment:

• Python version: 3.11.2
• Werkzeug version: 2.3.3
• Flask: 2.2.4

[davidism]

I'll add compatibility back in a 2.2.5 release. However, note that you're on an unnsupported version of Flask. The best way to fix this is to upgrade to Flask>=2.3.2.

[hofrob]

Ok, this was a bit too fast for my brain. This is a bug in flask 2.2.4. Sorry about that!

I will take a look at our dependencies later and see why we even get these incompatible packages.