Sync from SUSE:SLFO:1.1 python-Flask revision 0c00e7be5513885a1d29cff8bf3ff94f

python-Flask.changes

@@ -1,86 +1,3 @@
--------------------------------------------------------------------
-Thu May 15 06:16:18 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
-
-- Update to 3.1.1 (CVE-2025-47278, bsc#1243163):
-  * Fix signing key selection order when key rotation is enabled via
-    SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g
-  * Fix type hint for cli_runner.invoke. #5645
-  * flask --help loads the app and plugins first to make sure all
-    commands are shown. #5673
-  * Mark sans-io base class as being able to handle views that return
-    AsyncIterable. This is not accurate for Flask, but makes typing
-    easier for Quart. #5659
-
--------------------------------------------------------------------
-Fri Feb  7 01:47:56 UTC 2025 - Steve Kowalik <steven.kowalik@suse.com>
-
-- Update to 3.1.0:
-  * Drop support for Python 3.8.
-  * Update minimum dependency versions to latest feature releases.
-    Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9.
-  * Provide a configuration option to control automatic option responses.
-  * Flask.open_resource/open_instance_resource and Blueprint.open_resource
-    take an encoding parameter to use when opening in text mode. It defaults
-    to utf-8.
-  * Request.max_content_length can be customized per-request instead of only
-    through the MAX_CONTENT_LENGTH config.
-  * Add support for the Partitioned cookie attribute (CHIPS), with the
-    SESSION_COOKIE_PARTITIONED config.
-  * -e path takes precedence over default .env and .flaskenv files.
-    load_dotenv loads default files in addition to a path unless
-    load_defaults=False is passed.
-  * Support key rotation with the SECRET_KEY_FALLBACKS config, a list of old
-    secret keys that can still be used for unsigning.
-  * Fix how setting host_matching=True or subdomain_matching=False interacts
-    with SERVER_NAME. Setting SERVER_NAME no longer restricts requests to
-    only that domain.
-  * Request.trusted_hosts is checked during routing, and can be set through
-    the TRUSTED_HOSTS config.
-
--------------------------------------------------------------------
-Tue Aug 13 17:07:09 UTC 2024 - Guang Yee <gyee@suse.com>
-
-- update to 3.0.3
-  * The default hashlib.sha1 may not be available in FIPS builds.
-    Don’t access it at import time so the developer has time to
-    change the default. :issue:`5448`
-  * Don’t initialize the cli attribute in the sansio scaffold,
-    but rather in the Flask concrete class. :issue:`5270`
-
--------------------------------------------------------------------
-Wed Apr 10 10:13:58 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
-
-- Remove not needed dependency python-contextvars
-
--------------------------------------------------------------------
-Mon Feb  5 10:05:00 UTC 2024 - Dirk Müller <dmueller@suse.com>
-
-- update to 3.0.2:
-  * Correct type for jinja_loader property. :issue:`5388`
-  * Fix error with --extra-files and --exclude-patterns CLI
-    options. :issue:`5391`
-
--------------------------------------------------------------------
-Sat Jan 20 14:06:53 UTC 2024 - Dirk Müller <dmueller@suse.com>
-
-- update to 3.0.1:
-  * Correct type for path argument to send_file. :issue:`5230`
-  * Fix a typo in an error message for the flask run --key
-    option. :pr:`5344`
-  * Session data is untagged without relying on the built-in
-    json.loads object_hook. This allows other JSON providers that
-    don't implement that. :issue:`5381`
-  * Address more type findings when using mypy strict mode.
-    :pr:`5383`
-  * Remove previously deprecated code. :pr:`5223`
-  * Deprecate the __version__ attribute. Use feature detection,
-    or importlib.metadata.version("flask"), instead.
-    :issue:`5230`
-  * Restructure the code such that the Flask (app) and Blueprint
-    classes have Sans-IO bases. :pr:`5127`
-  * Allow self as an argument to url_for. :pr:`5264`
-  * Require Werkzeug >= 3.0.0.
-
 -------------------------------------------------------------------
 Mon Sep 25 02:32:34 UTC 2023 - Steve Kowalik <steven.kowalik@suse.com>
 
@@ -254,18 +171,18 @@ Mon Mar 28 19:45:05 UTC 2022 - Michael Ströder <michael@stroeder.com>
   * copy_current_request_context can decorate async functions. #4303
   * The CLI uses importlib.metadata instead of setuptools to load command entry points. #4419
   * Overriding FlaskClient.open will not cause an error on redirect. #3396
-  * Add an --exclude-patterns option to the flask run CLI command to
+  * Add an --exclude-patterns option to the flask run CLI command to 
     specify patterns that will be ignored by the reloader. #4188
   * When using lazy loading (the default with the debugger), the Click context from
     the flask run command remains available in the loader thread. #4460
   * Deleting the session cookie uses the httponly flag. #4485
-  * Relax typing for errorhandler to allow the user to use more precise
+  * Relax typing for errorhandler to allow the user to use more precise 
     types and decorate the same function multiple times. #4095, #4295, #4297
   * Fix typing for __exit__ methods for better compatibility with ExitStack. #4474
-  * From Werkzeug, for redirect responses the Location header URL will
+  * From Werkzeug, for redirect responses the Location header URL will 
     remain relative, and exclude the scheme and domain, by default. #4496
-  * Add Config.from_prefixed_env() to load config values from environment
+  * Add Config.from_prefixed_env() to load config values from environment 
-    variables that start with FLASK_ or another prefix. This parses values as
+    variables that start with FLASK_ or another prefix. This parses values as 
     JSON by default, and allows setting keys in nested dicts. #4479
 
 -------------------------------------------------------------------
@@ -296,7 +213,7 @@ Tue Oct  5 09:49:23 UTC 2021 - Michael Ströder <michael@stroeder.com>
 - Update to 2.0.2
   * Fix type annotation for teardown_* methods. #4093
   * Fix type annotation for before_request and before_app_request decorators. #4104
-  * Fixed the issue where typing requires template global decorators to
+  * Fixed the issue where typing requires template global decorators to 
     accept functions with no arguments. #4098
   * Support View and MethodView instances with async handlers. #4112
   * Enhance typing of app.errorhandler decorator. #4095
@@ -408,9 +325,9 @@ Sat Jun 19 07:28:01 UTC 2021 - Michael Ströder <michael@stroeder.com>
       methods=["POST"]). #3907
     - Support async views, error handlers, before and after request, and teardown functions. #3412
     - Support nesting blueprints. #593, #1548, #3923
-    - Set the default encoding to “UTF-8” when loading .env and .flaskenv
+    - Set the default encoding to “UTF-8” when loading .env and .flaskenv 
       files to allow to use non-ASCII characters. #3931
-    - flask shell sets up tab and history completion like the default
+    - flask shell sets up tab and history completion like the default 
       python shell if readline is installed. #3941
     - helpers.total_seconds() is deprecated. Use timedelta.total_seconds() instead. #3962
     - Add type hinting. #3973.
@@ -937,7 +854,7 @@ Thu Oct 24 11:05:46 UTC 2013 - speilicke@suse.com
 -------------------------------------------------------------------
 Mon Sep  9 07:47:12 UTC 2013 - dmueller@suse.com
 
-- add dependency on itsdangerous
+- add dependency on itsdangerous 
 
 -------------------------------------------------------------------
 Tue Jun 25 11:33:18 UTC 2013 - dmueller@suse.com

python-Flask.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-Flask
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -22,9 +22,10 @@
 %bcond_with libalternatives
 %endif
 
+%define oldpython python
 %{?sle15_python_module_pythons}
 Name:           python-Flask
-Version:        3.1.1
+Version:        2.3.3
 Release:        0
 Summary:        A microframework based on Werkzeug, Jinja2 and good intentions
 License:        BSD-3-Clause
@@ -32,25 +33,23 @@ URL:            https://flask.palletsprojects.com
 Source0:        https://files.pythonhosted.org/packages/source/f/flask/flask-%{version}.tar.gz
 Source1:        python-Flask-rpmlintrc
 BuildRequires:  %{python_module Jinja2 >= 3.1.2}
-BuildRequires:  %{python_module MarkupSafe}
+BuildRequires:  %{python_module Werkzeug >= 2.3.7}
-BuildRequires:  %{python_module Werkzeug >= 3.1.0}
+BuildRequires:  %{python_module blinker >= 1.6.2}
-BuildRequires:  %{python_module base >= 3.9}
-BuildRequires:  %{python_module blinker >= 1.9}
 BuildRequires:  %{python_module click >= 8.1.3}
+BuildRequires:  %{python_module contextvars}
 BuildRequires:  %{python_module flit-core}
 BuildRequires:  %{python_module importlib-metadata >= 3.6.0 if %python-base < 3.10}
-BuildRequires:  %{python_module itsdangerous >= 2.2}
+BuildRequires:  %{python_module itsdangerous >= 2.1.2}
 BuildRequires:  %{python_module pip}
 BuildRequires:  %{python_module pytest >= 6.2.4}
 BuildRequires:  %{python_module wheel}
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros >= 20210929
 Requires:       python-Jinja2 >= 3.1.2
-Requires:       python-MarkupSafe
+Requires:       python-Werkzeug >= 2.3.7
-Requires:       python-Werkzeug >= 3.1.0
+Requires:       python-blinker >= 1.6.2
-Requires:       python-blinker >= 1.9
 Requires:       python-click >= 8.1.3
-Requires:       python-itsdangerous >= 2.2
+Requires:       python-itsdangerous >= 2.1.2
 %if 0%{?python_version_nodots} < 310
 Requires:       python-importlib-metadata >= 3.6.0
 %endif
@@ -60,7 +59,7 @@ Requires:       alts
 BuildRequires:  alts
 %else
 Requires(post): update-alternatives
-Requires(postun): update-alternatives
+Requires(postun):update-alternatives
 %endif
 BuildArch:      noarch
 %if %{?suse_version} < 1500
@@ -108,8 +107,8 @@ export LANG=en_US.UTF-8
 %python_uninstall_alternative flask
 
 %files %{python_files}
-%license LICENSE.txt
+%license LICENSE.rst
-%doc CHANGES.rst README.md
+%doc CHANGES.rst README.rst
 %python_alternative %{_bindir}/flask
 %{_bindir}/flask-%{python_bin_suffix}
 %{python_sitelib}/flask