Sync from SUSE:SLFO:Main python-Flask revision d70b714eb174313c801df9dcb2b4f32f

python-Flask.changes

@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Thu May 15 06:16:18 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
+
+- Update to 3.1.1 (CVE-2025-47278, bsc#1243163):
+  * Fix signing key selection order when key rotation is enabled via
+    SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g
+  * Fix type hint for cli_runner.invoke. #5645
+  * flask --help loads the app and plugins first to make sure all
+    commands are shown. #5673
+  * Mark sans-io base class as being able to handle views that return
+    AsyncIterable. This is not accurate for Flask, but makes typing
+    easier for Quart. #5659
+
 -------------------------------------------------------------------
 Fri Feb  7 01:47:56 UTC 2025 - Steve Kowalik <steven.kowalik@suse.com>
 

python-Flask.spec

@@ -24,7 +24,7 @@
 
 %{?sle15_python_module_pythons}
 Name:           python-Flask
-Version:        3.1.0
+Version:        3.1.1
 Release:        0
 Summary:        A microframework based on Werkzeug, Jinja2 and good intentions
 License:        BSD-3-Clause
@@ -32,6 +32,7 @@ URL:            https://flask.palletsprojects.com
 Source0:        https://files.pythonhosted.org/packages/source/f/flask/flask-%{version}.tar.gz
 Source1:        python-Flask-rpmlintrc
 BuildRequires:  %{python_module Jinja2 >= 3.1.2}
+BuildRequires:  %{python_module MarkupSafe}
 BuildRequires:  %{python_module Werkzeug >= 3.1.0}
 BuildRequires:  %{python_module base >= 3.9}
 BuildRequires:  %{python_module blinker >= 1.9}
@@ -45,6 +46,7 @@ BuildRequires:  %{python_module wheel}
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros >= 20210929
 Requires:       python-Jinja2 >= 3.1.2
+Requires:       python-MarkupSafe
 Requires:       python-Werkzeug >= 3.1.0
 Requires:       python-blinker >= 1.9
 Requires:       python-click >= 8.1.3