From 3bcbae1a3208d48ad99671d1d534b42b670a6e8d Mon Sep 17 00:00:00 2001 From: al-munazzim Date: Wed, 12 Aug 2026 21:53:45 +0200 Subject: [PATCH 1/2] Pin Werkzeug below 3.1 for Flask 2.2 compatibility (#2699) Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Nazim --- requirements.in | 2 ++ requirements.txt | 7 ++++--- 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/requirements.in b/requirements.in index 26142703f..e3706e083 100644 --- a/requirements.in +++ b/requirements.in @@ -1,6 +1,8 @@ certifi==2024.7.4 Click==8.1.7 Flask==2.2.5 +# Flask 2.2.x test_client uses werkzeug.__version__, removed in Werkzeug 3.1. +Werkzeug==3.0.6 Flask-Babel==3.1.0 Flask-Cors==6.0.0 Flask-Login==0.6.3 diff --git a/requirements.txt b/requirements.txt index 198e05128..d2ee198a5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -907,10 +907,11 @@ urllib3==2.7.0 \ --hash=sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c \ --hash=sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897 # via requests -werkzeug==3.0.3 \ - --hash=sha256:097e5bfda9f0aba8da6b8545146def481d06aa7d3266e7448e2cccf67dd8bd18 \ - --hash=sha256:fc9645dc43e03e4d630d23143a04a7f947a9a3b5727cd535fdfe155a17cc48c8 +werkzeug==3.0.6 \ + --hash=sha256:1bc0c2310d2fbb07b1dd1105eba2f7af72f322e1e455f2f93c993bee8c8a5f17 \ + --hash=sha256:a8dd59d4de28ca70471a34cba79bed5f7ef2e036a76b3ab0835474246eb41f8d # via + # -r requirements.in # flask # flask-cors # flask-login From 81a8a407a23533aa3fbc9b926b001808667d3cf6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 12 Aug 2026 19:56:48 +0000 Subject: [PATCH 2/2] Chore(deps): Bump werkzeug from 3.0.6 to 3.1.6 Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.0.6 to 3.1.6. - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/werkzeug/compare/3.0.6...3.1.6) --- updated-dependencies: - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- requirements.in | 2 +- requirements.txt | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/requirements.in b/requirements.in index e3706e083..23a811c29 100644 --- a/requirements.in +++ b/requirements.in @@ -2,7 +2,7 @@ certifi==2024.7.4 Click==8.1.7 Flask==2.2.5 # Flask 2.2.x test_client uses werkzeug.__version__, removed in Werkzeug 3.1. -Werkzeug==3.0.6 +Werkzeug==3.1.6 Flask-Babel==3.1.0 Flask-Cors==6.0.0 Flask-Login==0.6.3 diff --git a/requirements.txt b/requirements.txt index d2ee198a5..23e116eeb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -907,9 +907,9 @@ urllib3==2.7.0 \ --hash=sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c \ --hash=sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897 # via requests -werkzeug==3.0.6 \ - --hash=sha256:1bc0c2310d2fbb07b1dd1105eba2f7af72f322e1e455f2f93c993bee8c8a5f17 \ - --hash=sha256:a8dd59d4de28ca70471a34cba79bed5f7ef2e036a76b3ab0835474246eb41f8d +werkzeug==3.1.6 \ + --hash=sha256:210c6bede5a420a913956b4791a7f4d6843a43b6fcee4dfa08a65e93007d0d25 \ + --hash=sha256:7ddf3357bb9564e407607f988f683d72038551200c704012bb9a4c523d42f131 # via # -r requirements.in # flask