Bump the pip group across 5 directories with 9 updates #5
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the pip group with 1 update in the /examples/server/aiohttp directory: aiohttp.
Bumps the pip group with 1 update in the /examples/server/asgi directory: websockets.
Bumps the pip group with 3 updates in the /examples/server/sanic directory: websockets, sanic and ujson.
Bumps the pip group with 1 update in the /examples/server/tornado directory: tornado.
Bumps the pip group with 4 updates in the /examples/server/wsgi directory: eventlet, flask, jinja2 and werkzeug.
Updates
aiohttpfrom 1.2.0 to 3.9.4Release notes
Sourced from aiohttp's releases.
... (truncated)
Changelog
Sourced from aiohttp's changelog.
... (truncated)
Commits
b3397c7Release v3.9.4 (#8201)a7e240a[PR #8320/9ba9a4e5 backport][3.9] Fix Python parser to mark responses without...2833552Escape filenames and paths in HTML when generating index pages (#8317) (#8319)ed43040[PR #8309/c29945a1 backport][3.9] Improve reliability of run_app test (#8315)ec2be05[PR #8299/28d026eb backport][3.9] Create marker for internal tests (#8307)292d961[PR #8304/88c80c14 backport][3.9] Check for backports in CI (#8305)cebe526Fix handling of multipart/form-data (#8280) (#8302)270ae9c[PR #8297/d15f07cf backport][3.9] Upgrade to llhttp 9.2.1 (#8292) (#8298)bb23105[PR #8283/54e13b0a backport][3.9] Fix blocking I/O in the event loop while pr...3f79241[PR #8286/28f1fd88 backport][3.9] docs: remove repetitive word in comment (#8...Updates
websocketsfrom 7.0 to 9.1Release notes
Sourced from websockets's releases.
Changelog
Sourced from websockets's changelog.
... (truncated)
Commits
d0f3288Bump version number.547a26bUse constant-time comparison for passwords.a14226aBump version number.8900c13Add mypy to dictionary.0713dbfAdd test coverage.b99c4feRestore real imports for compatibility with mypy.e44e085Use relative imports everywhere, for consistency.70fadbfRestore compatibility with Python < 3.9.217ac2dFix broken link.fc176f4Bump version number.Updates
websocketsfrom 10.1 to 12.0Release notes
Sourced from websockets's releases.
Changelog
Sourced from websockets's changelog.
... (truncated)
Commits
d0f3288Bump version number.547a26bUse constant-time comparison for passwords.a14226aBump version number.8900c13Add mypy to dictionary.0713dbfAdd test coverage.b99c4feRestore real imports for compatibility with mypy.e44e085Use relative imports everywhere, for consistency.70fadbfRestore compatibility with Python < 3.9.217ac2dFix broken link.fc176f4Bump version number.Updates
sanicfrom 21.12.0 to 21.12.2Release notes
Sourced from sanic's releases.
Commits
0b75059Version Bump5b1686cUse path.parts instead of match (#2508)86baaefUse pathlib for path resolution (#2506)2b4b78dFix dotted testee6d8cfPrevent directory traversion with static files (#2495)c4da66bUpdate changelogd50d3b8Bump version313f97aOnly display MOTD in ASGI on startup (#2349)a23547dIgnore name argument on Python 3.7 (#2355)34d1deeAdd config.update support for setters (#2354)Updates
ujsonfrom 5.2.0 to 5.4.0Release notes
Sourced from ujson's releases.
Commits
9c20de0Merge pull request from GHSA-fm67-cv37-96ffb21da40Fix double free on string decoding if realloc fails67ec071Merge pull request #555 from JustAnotherArchivist/fix-decode-surrogates-2bc7bdffReplace wchar_t string decoding implementation with a uint32_t-based onecc70119Merge pull request #548 from JustAnotherArchivist/arbitrary-ints4b5ccccMerge pull request #553 from bwoodsend/pypy-ciabe26fcMerge pull request #551 from bwoodsend/bye-bye-travis3efb5ccDelete old TravisCI workflow and references.404de1axfail test_decode_surrogate_characters() on Windows PyPy.f7e66dcSwitch to musl docker base images.Updates
tornadofrom 5.1.1 to 6.3.3Changelog
Sourced from tornado's changelog.
... (truncated)
Commits
e4d6984Merge pull request #3307 from bdarnell/branch6.36a9e6fbci: Don't test py312 in branch6.35c8a9a4Set version to 6.3.37dfe8b5httpserver_test: Add ExpectLog to fix CI217295bhttp1connection: Make content-length parsing more stricte3aa6c5Merge pull request #3267 from bdarnell/branch6.334f5c1cVersion 6.3.232ad07cweb: Fix an open redirect in StaticFileHandlere0fa53eMerge pull request #3257 from bdarnell/build-workflow-wstest-warningf5a1d5cci: Only run pypi actions from the main repoUpdates
eventletfrom 0.20.1 to 0.35.2Changelog
Sourced from eventlet's changelog.
... (truncated)
Commits
edd9e7eUpdate changelog for version 0.35.2 (#920)a23fd0eFix tool.setuptools/packages list (#921)51e3c49Dnspython 2.6.1 - Address DoS via the Tudoor mechanism (CVE-2023-29483)b6f6e7cadd asyncio into the doc hub page (#918)96a3940clean obsolete python 2 code from the ssl module (#915)06ec630Add get_server_info to db_pool.py (#324)dfcc939wsgi: Handle Timeouts from applications (#911)799dabc[Fix] shrinks window before connecting (#905)3f8c9e4Do not allow failed patching to stop execution (#907)d467343Add Python 3.7 to pyproject classifiers (#904)Updates
flaskfrom 1.0.2 to 2.2.5Release notes
Sourced from flask's releases.
... (truncated)
Changelog
Sourced from flask's changelog.
... (truncated)
Commits
47af817release version 2.2.5afd63b1Merge pull request #5109 from pallets/backport-vary-cookie8646edcsetVary: Cookieheader consistently for sessiona6367daMerge pull request #5108 from pallets/werkzeug-compat3fbfbadwerkzeug 2.3.3 compatibility726d3f4start version 2.2.5ddc7accMerge pull request #5081 from pallets/release-2.2.474e0329release version 2.2.42d46068update dev env64bc458update dev dependenciesUpdates
jinja2from 2.10.1 to 3.1.3Release notes
Sourced from jinja2's releases.
... (truncated)
Changelog
Sourced from jinja2's changelog.
... (truncated)
Commits
d9de4bbrelease version 3.1.350124e1skip test pypi9ea7222use trusted publishingda703f7use trusted publishingbce1746use trusted publishing7277d80update pre-commit hooks5c8a105Make nested-trans-block exceptions nicer (#1918)19a55dbMake nested-trans-block exceptions nicer7167953Merge pull request from GHSA-h5c8-rqwp-cp957dd3680xmlattr filter disallows keys with spacesUpdates
werkzeugfrom 0.15.3 to 2.3.8Release notes
Sourced from werkzeug's releases.
... (truncated)
Changelog
Sourced from werkzeug's changelog.
... (truncated)
Commits
dc90943Release version 2.3.8f230020Fix: slow multipart parsing for huge files with few CR/LF characters26f3e95reformat lines828bab4Start version 2.3.83c2ba3dRelease version 2.3.7ac9974cFix qvalue parsing (#2753)88f4ed6qvalue parsing accepts float without decimaldd1f137Fix: Improve Error Message (#2750)fdc295aclearer url rule slash errora0f4bf4fix: improve error messageDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependenc...Description has been truncated