From e131e2a9d42c54e269368cc2cc2e99135453bef5729c40b20086371755f53048 Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Sat, 16 Oct 2021 21:22:24 +0000 Subject: [PATCH] - update to 2.0.2: * Handle multiple tokens in ``Connection`` header when routing WebSocket requests. * Set the debugger pin cookie secure flag when on https. * Fix type annotation for ``MultiDict.update`` to accept iterable values :pr:`2142` * Prevent double encoding of redirect URL when ``merge_slash=True`` for ``Rule.match``. * ``CombinedMultiDict.to_dict`` with ``flat=False`` considers all component dicts when building value lists. :issue:`2189` * ``send_file`` only sets a detected ``Content-Encoding`` if ``as_attachment`` is disabled to avoid browsers saving decompressed ``.tar.gz`` files. * Fix type annotations for ``TypeConversionDict.get`` to not return an ``Optional`` value if both ``default`` and ``type`` are not ``None``. * Fix type annotation for routing rule factories to accept ``Iterable[RuleFactory]`` instead of ``Iterable[Rule]`` for the ``rules`` parameter. :issue:`2183` * Add missing type annotation for ``FileStorage.__getattr__`` * The debugger pin cookie is set with ``SameSite`` set to ``Strict`` instead of ``None`` to be compatible with modern browser security. * Type annotations use ``IO[bytes]`` and ``IO[str]`` instead of ``BinaryIO`` and ``TextIO`` for wider type compatibility. * Ad-hoc TLS certs are generated with SAN matching CN. :issue:`2158` * Fix memory usage for locals when using Python 3.6 or pre 0.4.17 greenlet versions. :pr:`2212` * Fix type annotation in ``CallbackDict``, because it is not utilizing a bound TypeVar. :issue:`2235` * Fix setting CSP header options on the response. :pr:`2237` OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Werkzeug?expand=0&rev=60 --- Werkzeug-2.0.1.tar.gz | 3 --- Werkzeug-2.0.2.tar.gz | 3 +++ python-Werkzeug.changes | 38 ++++++++++++++++++++++++++++++++++++++ python-Werkzeug.spec | 2 +- 4 files changed, 42 insertions(+), 4 deletions(-) delete mode 100644 Werkzeug-2.0.1.tar.gz create mode 100644 Werkzeug-2.0.2.tar.gz diff --git a/Werkzeug-2.0.1.tar.gz b/Werkzeug-2.0.1.tar.gz deleted file mode 100644 index 43cff52..0000000 --- a/Werkzeug-2.0.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:1de1db30d010ff1af14a009224ec49ab2329ad2cde454c8a708130642d579c42 -size 892730 diff --git a/Werkzeug-2.0.2.tar.gz b/Werkzeug-2.0.2.tar.gz new file mode 100644 index 0000000..08f5a6d --- /dev/null +++ b/Werkzeug-2.0.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:aa2bb6fc8dee8d6c504c0ac1e7f5f7dc5810a9903e793b6f715a9f015bdadb9a +size 895061 diff --git a/python-Werkzeug.changes b/python-Werkzeug.changes index bdcb764..2217141 100644 --- a/python-Werkzeug.changes +++ b/python-Werkzeug.changes @@ -1,3 +1,41 @@ +------------------------------------------------------------------- +Sat Oct 16 21:20:36 UTC 2021 - Dirk Müller + +- update to 2.0.2: + * Handle multiple tokens in ``Connection`` header when routing + WebSocket requests. + * Set the debugger pin cookie secure flag when on https. + * Fix type annotation for ``MultiDict.update`` to accept iterable + values :pr:`2142` + * Prevent double encoding of redirect URL when ``merge_slash=True`` + for ``Rule.match``. + * ``CombinedMultiDict.to_dict`` with ``flat=False`` considers all + component dicts when building value lists. :issue:`2189` + * ``send_file`` only sets a detected ``Content-Encoding`` if + ``as_attachment`` is disabled to avoid browsers saving + decompressed ``.tar.gz`` files. + * Fix type annotations for ``TypeConversionDict.get`` to not return an + ``Optional`` value if both ``default`` and ``type`` are not + ``None``. + * Fix type annotation for routing rule factories to accept + ``Iterable[RuleFactory]`` instead of ``Iterable[Rule]`` for the + ``rules`` parameter. :issue:`2183` + * Add missing type annotation for ``FileStorage.__getattr__`` + * The debugger pin cookie is set with ``SameSite`` set to ``Strict`` + instead of ``None`` to be compatible with modern browser security. + * Type annotations use ``IO[bytes]`` and ``IO[str]`` instead of + ``BinaryIO`` and ``TextIO`` for wider type compatibility. + * Ad-hoc TLS certs are generated with SAN matching CN. :issue:`2158` + * Fix memory usage for locals when using Python 3.6 or pre 0.4.17 + greenlet versions. :pr:`2212` + * Fix type annotation in ``CallbackDict``, because it is not + utilizing a bound TypeVar. :issue:`2235` + * Fix setting CSP header options on the response. :pr:`2237` + * Fix an issue with with the interactive debugger where lines would + not expand on click for very long tracebacks. :pr:`2239` + * The interactive debugger handles displaying an exception that does + not have a traceback, such as from ``ProcessPoolExecutor``. + ------------------------------------------------------------------- Sat Jun 19 07:42:14 UTC 2021 - Michael Ströder diff --git a/python-Werkzeug.spec b/python-Werkzeug.spec index 0d2e814..cfdb6dd 100644 --- a/python-Werkzeug.spec +++ b/python-Werkzeug.spec @@ -19,7 +19,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} %define skip_python2 1 Name: python-Werkzeug -Version: 2.0.1 +Version: 2.0.2 Release: 0 Summary: The Swiss Army knife of Python web development License: BSD-3-Clause