Bump the pip group across 5 directories with 9 updates #6
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the pip group with 1 update in the /examples/server/aiohttp directory: aiohttp.
Bumps the pip group with 1 update in the /examples/server/asgi directory: websockets.
Bumps the pip group with 3 updates in the /examples/server/sanic directory: websockets, sanic and ujson.
Bumps the pip group with 1 update in the /examples/server/tornado directory: tornado.
Bumps the pip group with 4 updates in the /examples/server/wsgi directory: eventlet, flask, jinja2 and werkzeug.
Updates
aiohttpfrom 1.2.0 to 3.9.4Release notes
Sourced from aiohttp's releases.
... (truncated)
Changelog
Sourced from aiohttp's changelog.
... (truncated)
Commits
b3397c7Release v3.9.4 (#8201)a7e240a[PR #8320/9ba9a4e5 backport][3.9] Fix Python parser to mark responses without...2833552Escape filenames and paths in HTML when generating index pages (#8317) (#8319)ed43040[PR #8309/c29945a1 backport][3.9] Improve reliability of run_app test (#8315)ec2be05[PR #8299/28d026eb backport][3.9] Create marker for internal tests (#8307)292d961[PR #8304/88c80c14 backport][3.9] Check for backports in CI (#8305)cebe526Fix handling of multipart/form-data (#8280) (#8302)270ae9c[PR #8297/d15f07cf backport][3.9] Upgrade to llhttp 9.2.1 (#8292) (#8298)bb23105[PR #8283/54e13b0a backport][3.9] Fix blocking I/O in the event loop while pr...3f79241[PR #8286/28f1fd88 backport][3.9] docs: remove repetitive word in comment (#8...Updates
websocketsfrom 7.0 to 9.1Release notes
Sourced from websockets's releases.
Changelog
Sourced from websockets's changelog.
... (truncated)
Commits
d0f3288Bump version number.547a26bUse constant-time comparison for passwords.a14226aBump version number.8900c13Add mypy to dictionary.0713dbfAdd test coverage.b99c4feRestore real imports for compatibility with mypy.e44e085Use relative imports everywhere, for consistency.70fadbfRestore compatibility with Python < 3.9.217ac2dFix broken link.fc176f4Bump version number.Updates
websocketsfrom 10.1 to 12.0Release notes
Sourced from websockets's releases.
Changelog
Sourced from websockets's changelog.
... (truncated)
Commits
d0f3288Bump version number.547a26bUse constant-time comparison for passwords.a14226aBump version number.8900c13Add mypy to dictionary.0713dbfAdd test coverage.b99c4feRestore real imports for compatibility with mypy.e44e085Use relative imports everywhere, for consistency.70fadbfRestore compatibility with Python < 3.9.217ac2dFix broken link.fc176f4Bump version number.Updates
sanicfrom 21.12.0 to 21.12.2Release notes
Sourced from sanic's releases.
Commits
0b75059Version Bump5b1686cUse path.parts instead of match (#2508)86baaefUse pathlib for path resolution (#2506)2b4b78dFix dotted testee6d8cfPrevent directory traversion with static files (#2495)c4da66bUpdate changelogd50d3b8Bump version313f97aOnly display MOTD in ASGI on startup (#2349)a23547dIgnore name argument on Python 3.7 (#2355)34d1deeAdd config.update support for setters (#2354)Updates
ujsonfrom 5.2.0 to 5.4.0Release notes
Sourced from ujson's releases.
Commits
9c20de0Merge pull request from GHSA-fm67-cv37-96ffb21da40Fix double free on string decoding if realloc fails67ec071Merge pull request #555 from JustAnotherArchivist/fix-decode-surrogates-2bc7bdffReplace wchar_t string decoding implementation with a uint32_t-based onecc70119Merge pull request #548 from JustAnotherArchivist/arbitrary-ints4b5ccccMerge pull request #553 from bwoodsend/pypy-ciabe26fcMerge pull request #551 from bwoodsend/bye-bye-travis3efb5ccDelete old TravisCI workflow and references.404de1axfail test_decode_surrogate_characters() on Windows PyPy.f7e66dcSwitch to musl docker base images.Updates
tornadofrom 5.1.1 to 6.3.3Changelog
Sourced from tornado's changelog.
... (truncated)
Commits
e4d6984Merge pull request #3307 from bdarnell/branch6.36a9e6fbci: Don't test py312 in branch6.35c8a9a4Set version to 6.3.37dfe8b5httpserver_test: Add ExpectLog to fix CI217295bhttp1connection: Make content-length parsing more stricte3aa6c5Merge pull request #3267 from bdarnell/branch6.334f5c1cVersion 6.3.232ad07cweb: Fix an open redirect in StaticFileHandlere0fa53eMerge pull request #3257 from bdarnell/build-workflow-wstest-warningf5a1d5cci: Only run pypi actions from the main repoUpdates
eventletfrom 0.20.1 to 0.35.2Changelog
Sourced from eventlet's changelog.
... (truncated)
Commits
edd9e7eUpdate changelog for version 0.35.2 (#920)a23fd0eFix tool.setuptools/packages list (#921)51e3c49Dnspython 2.6.1 - Address DoS via the Tudoor mechanism (CVE-2023-29483)b6f6e7cadd asyncio into the doc hub page (#918)96a3940clean obsolete python 2 code from the ssl module (#915)06ec630Add get_server_info to db_pool.py (#324)dfcc939wsgi: Handle Timeouts from applications (#911)799dabc[Fix] shrinks window before connecting (#905)3f8c9e4Do not allow failed patching to stop execution (#907)d467343Add Python 3.7 to pyproject classifiers (#904)Updates
flaskfrom 1.0.2 to 2.2.5Release notes
Sourced from flask's releases.
... (truncated)
Changelog
Sourced from flask's changelog.
... (truncated)
Commits
47af817release version 2.2.5afd63b1Merge pull request #5109 from pallets/backport-vary-cookie8646edcsetVary: Cookieheader consistently for sessiona6367daMerge pull request #5108 from pallets/werkzeug-compat3fbfbadwerkzeug 2.3.3 compatibility726d3f4start version 2.2.5ddc7accMerge pull request #5081 from pallets/release-2.2.474e0329release version 2.2.42d46068update dev env64bc458update dev dependenciesUpdates
jinja2from 2.10.1 to 3.1.4Release notes
Sourced from jinja2's releases.
... (truncated)
Changelog
Sourced from jinja2's changelog.
... (truncated)
Commits
dd4a8b5release version 3.1.40668239Merge pull request from GHSA-h75v-3vvj-5mfjd655030disallow invalid characters in keys to xmlattr filtera7863baadd ghsa linksb5c98e7start version 3.1.4da3a9f0update project files (#1968)0ee5eb4satisfy formatter, linter, and strict mypy20477c6update project files (#5457)e491223update pyyaml dev dependency36f9885fix pr linkUpdates
werkzeugfrom 0.15.3 to 3.0.3Release notes
Sourced from werkzeug's releases.
... (truncated)
Changelog
Sourced from werkzeug's changelog.
... (truncated)
Commits
f9995e9release version 3.0.33386395Merge pull request from GHSA-2g68-c3qc-8985890b6b6only require trusted host for evalex71b69dfrestrict debugger trusted hostsd2d3869endpoint type is Any (#2895)7080b55endpoint type is Any7555effremove iri_to_uri redirect workaround (#2894)97fb2f7remove _invalid_iri_to_uri workaround249527fmake cn field a valid single hostname, and use wildcard in SANs field. (#2892)793be47update adhoc tls dev cert formatDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manuallyDescription has been truncated