sentry-python icon indicating copy to clipboard operation
sentry-python copied to clipboard
verified publisher icon getsentry

build(deps): update werkzeug requirement from <2.1.0 to <2.3.0

Open dependabot[bot] opened this issue 3 years ago • 3 comments

Updates the requirements on werkzeug to permit the latest version.

Release notes

Sourced from werkzeug's releases.

2.2.0

This is a feature release, which includes new features and removes previously deprecated features. The 2.2.x branch is now the supported bugfix branch, the 2.1.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades.

Changelog

Sourced from werkzeug's changelog.

Version 2.2.0

Released 2022-07-23

  • Deprecated get_script_name, get_query_string, peek_path_info, pop_path_info, and extract_path_info. :pr:2461
  • Remove previously deprecated code. :pr:2461
  • Add MarkupSafe as a dependency and use it to escape values when rendering HTML. :issue:2419
  • Added the werkzeug.debug.preserve_context mechanism for restoring context-local data for a request when running code in the debug console. :pr:2439
  • Fix compatibility with Python 3.11 by ensuring that end_lineno and end_col_offset are present on AST nodes. :issue:2425
  • Add a new faster matching router based on a state machine. :pr:2433
  • Names within options headers are always converted to lowercase. This matches :rfc:6266 that the case is not relevant. :issue:2442
  • AnyConverter validates the value passed for it when building URLs. :issue:2388
  • The debugger shows enhanced error locations in tracebacks in Python 3.11. :issue:2407
  • Added Sans-IO is_resource_modified and parse_cookie functions based on WSGI versions. :issue:2408
  • Added Sans-IO get_content_length function. :pr:2415
  • Don't assume a mimetype for test responses. :issue:2450
  • Type checking FileStorage accepts os.PathLike. :pr:2418

Version 2.1.2

Released 2022-04-28

  • The development server does not set Transfer-Encoding: chunked for 1xx, 204, 304, and HEAD responses. :issue:2375
  • Response HTML for exceptions and redirects starts with <!doctype html> and <html lang=en>. :issue:2390
  • Fix ability to set some cache_control attributes to False. :issue:2379
  • Disable keep-alive connections in the development server, which are not supported sufficiently by Python's http.server. :issue:2397

Version 2.1.1

... (truncated)

Commits
  • 4c7d990 release version 2.2.0
  • 7e626b8 Remove deprecated multiple option
  • 14f31db Deprecate wsgi functions
  • c074f91 Cleanup b42d1a4b57b8aba5c38fb8a030848db71004e2c5 and 81d2ed03ecf27d640b3a6fe8...
  • b00ecce Don't set a default mimetype for Test Responses
  • e1bfc33 Merge pull request #2458 from pgjones/test
  • cf1d82e Add a test to demonstrate leaf rules don't consume branches
  • ffb15ea Merge remote-tracking branch 'origin/2.1.x'
  • dfdc7c6 Ignore false positive B023 errors
  • c7f10f4 Correct the CHANGES format for the unreleased 2.1.3
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot[bot] avatar Jul 25 '22 03:07 dependabot[bot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot[bot] avatar Aug 02 '22 12:08 dependabot[bot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot[bot] avatar Aug 04 '22 10:08 dependabot[bot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot[bot] avatar Aug 05 '22 14:08 dependabot[bot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot[bot] avatar Nov 08 '22 16:11 dependabot[bot]