pool/python-Werkzeug
SHA256
17
0
Fork 2
Code Issues Pull Requests Activity

Compare commits

base: pool:factory
Branches Tags
pool:factory pool:slfo-1.2 pool:slfo-main python:main
..
compare: python:main
Branches Tags
python:main pool:factory pool:slfo-1.2 pool:slfo-main

8 Commits
factory ... main

Author SHA256 Message Date
Ana Guerrero
b99a0b7f06 Accepting request 1223597 from devel:languages:python 
OBS-URL: https://build.opensuse.org/request/show/1223597
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Werkzeug?expand=0&rev=50
 2024-11-12 18:19:57 +00:00
Dirk Mueller
75b6255994 Accepting request 1223546 from home:glaubitz:branches:devel:languages:python 
- Update to 3.1.3
  * Initial data passed to ``MultiDict`` and similar interfaces only accepts
    ``list``, ``tuple``, or ``set`` when passing multiple values. It had been
    changed to accept any ``Collection``, but this matched types that should be
    treated as single values, such as ``bytes``. :issue:`2994`
  * When the ``Host`` header is not set and ``Request.host`` falls back to the
    WSGI ``SERVER_NAME`` value, if that value is an IPv6 address it is wrapped
    in ``[]`` to match the ``Host`` header. :issue:`2993`
- from version 3.1.2
  * Improve type annotation for ``TypeConversionDict.get`` to allow the ``type``
    parameter to be a callable. :issue:`2988`
  * ``Headers`` does not inherit from ``MutableMapping``, as it is does not
    exactly match that interface. :issue:`2989`

OBS-URL: https://build.opensuse.org/request/show/1223546
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Werkzeug?expand=0&rev=100
 2024-11-12 09:37:54 +00:00
Ana Guerrero
490d11d2db Accepting request 1221443 from devel:languages:python 
OBS-URL: https://build.opensuse.org/request/show/1221443
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Werkzeug?expand=0&rev=49
 2024-11-06 15:49:44 +00:00
John Paul Adrian Glaubitz
e43cd1da6c Accepting request 1220538 from home:glaubitz:branches:devel:languages:python 
- Update to 3.1.1
  * Fix an issue that caused ``str(Request.headers)`` to always appear empty.
    :issue:`2985`
- from version 3.1.0
  * Drop support for Python 3.8. :pr:`2966`
  * Remove previously deprecated code. :pr:`2967`
  * ``Request.max_form_memory_size`` defaults to 500kB instead of unlimited.
    Non-file form fields over this size will cause a ``RequestEntityTooLarge``
    error. :issue:`2964`
  * ``OrderedMultiDict`` and ``ImmutableOrderedMultiDict`` are deprecated.
    Use ``MultiDict`` and ``ImmutableMultiDict`` instead. :issue:`2968`
  * Behavior of properties on ``request.cache_control`` and
    ``response.cache_control`` has been significantly adjusted.
    * Dict values are always ``str | None``. Setting properties will convert
      the value to a string. Setting a property to ``False`` is equivalent to
      setting it to ``None``. Getting typed properties will return ``None`` if
      conversion raises ``ValueError``, rather than the string. :issue:`2980`
    * ``max_age`` is ``None`` if present without a value, rather than ``-1``.
      :issue:`2980`
    * ``no_cache`` is a boolean for requests, it is ``True`` instead of
      ``"*"`` when present. It remains a string for responses. :issue:`2980`
    * ``max_stale`` is ``True`` if present without a value, rather
      than ``"*"``. :issue:`2980`
    * ``no_transform`` is a boolean. Previously it was mistakenly always
      ``None``. :issue:`2881`
    * ``min_fresh`` is ``None`` if present without a value, rather than
      ``"*"``. :issue:`2881`
    * ``private`` is ``True`` if present without a value, rather than ``"*"``.
      :issue:`2980`
    * Added the ``must_understand`` property. :issue:`2881`

OBS-URL: https://build.opensuse.org/request/show/1220538
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Werkzeug?expand=0&rev=98
 2024-11-05 13:35:57 +00:00
Ana Guerrero
2a7724646d Accepting request 1218824 from devel:languages:python 
- Update to 3.0.6 (bsc#1232449, CVE-2024-49767):
  * Fix how max_form_memory_size is applied when parsing large
    non-file fields. GHSA-q34m-jh98-gwm2
  * safe_join catches certain paths on Windows that were not caught by
    ntpath.isabs on Python < 3.11. GHSA-f9vj-2wh5-fj8j
- 3.0.5:
  * The Watchdog reloader ignores file closed no write events. #2945
  * Logging works with client addresses containing an IPv6 scope.
    #2952
  * Ignore invalid authorization parameters. #2955
  * Improve type annotation fore SharedDataMiddleware. #2958
  * Compatibility with Python 3.13 when generating debugger pin and
    the current UID does not have an associated name. #2957

OBS-URL: https://build.opensuse.org/request/show/1218824
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Werkzeug?expand=0&rev=48
 2024-10-29 13:32:17 +00:00
Daniel Garcia
4ed63dd228 - Update to 3.0.6 (bsc#1232449, CVE-2024-49767): 
* Fix how max_form_memory_size is applied when parsing large
    non-file fields. GHSA-q34m-jh98-gwm2
  * safe_join catches certain paths on Windows that were not caught by
    ntpath.isabs on Python < 3.11. GHSA-f9vj-2wh5-fj8j
- 3.0.5:
  * The Watchdog reloader ignores file closed no write events. #2945
  * Logging works with client addresses containing an IPv6 scope.
    #2952
  * Ignore invalid authorization parameters. #2955
  * Improve type annotation fore SharedDataMiddleware. #2958
  * Compatibility with Python 3.13 when generating debugger pin and
    the current UID does not have an associated name. #2957

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Werkzeug?expand=0&rev=96
 2024-10-28 13:13:37 +00:00
Dominique Leuenberger
4623de012d Accepting request 1196238 from devel:languages:python 
OBS-URL: https://build.opensuse.org/request/show/1196238
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Werkzeug?expand=0&rev=47
 2024-08-29 13:42:42 +00:00
Nico Krapp
f9fefcf079 Accepting request 1196085 from home:glaubitz:branches:devel:languages:python 
- Update to 3.0.4
  * Restore behavior where parsing `multipart/x-www-form-urlencoded` data with
    invalid UTF-8 bytes in the body results in no form data parsed rather than a
    413 error. :issue:`2930`
  * Improve ``parse_options_header`` performance when parsing unterminated
    quoted string values. :issue:`2904`
  * Debugger pin auth is synchronized across threads/processes when tracking
    failed entries. :issue:`2916`
  * Dev server handles unexpected `SSLEOFError` due to issue in Python < 3.13.
    :issue:`2926`
  * Debugger pin auth works when the URL already contains a query string.
    :issue:`2918`

OBS-URL: https://build.opensuse.org/request/show/1196085
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Werkzeug?expand=0&rev=94
 2024-08-27 09:30:24 +00:00
4 changed files with 100 additions and 127 deletions
Expand all files Collapse all files

27
python-Werkzeug.changes
View File

@@ -1,30 +1,3 @@
-------------------------------------------------------------------
Tue Jan 27 16:24:20 UTC 2026 - Dirk Müller <dmueller@suse.com>
- update to 3.1.5:
* safe_join on Windows does not allow more special device
names, regardless of extension or surrounding spaces.
:ghsa:`87hc-h4r5-73f7`
* Fix AttributeError when initializing DebuggedApplication with
pin_security=False. :issue:`3075`
-------------------------------------------------------------------
Wed Jan 7 15:28:53 UTC 2026 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 3.1.4
* ``safe_join`` on Windows does not allow special device names. This prevents
reading from these when using `send_from_directory`. ``secure_filename``
already prevented writing to these. :ghsa:`hgf8-39gv-g3f2`
* The debugger pin fails after 10 attempts instead of 11. :pr:`3020`
* The multipart form parser handles a ``\r\n`` sequence at a chunk boundary.
:issue:`3065`
* Improve CPU usage during Watchdog reloader. :issue:`3054`
* `Request.json` annotation is more accurate. :issue:`3067`
* Traceback rendering handles when the line number is beyond the available
source lines. :issue:`3044`
* `HTTPException.get_response` annotation and doc better conveys the
distinction between WSGI and sans-IO responses. :issue:`3056`
-------------------------------------------------------------------
Tue Nov 12 07:59:40 UTC 2024 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>

4
python-Werkzeug.spec
View File

@@ -1,7 +1,7 @@
#
# spec file for package python-Werkzeug
#
# Copyright (c) 2026 SUSE LLC and contributors
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -27,7 +27,7 @@
%{?sle15_python_module_pythons}
Name: python-Werkzeug%{psuffix}
Version: 3.1.5
Version: 3.1.3
Release: 0
Summary: The Swiss Army knife of Python web development
License: BSD-3-Clause

BIN
werkzeug-3.1.3.tar.gz LFS Normal file
View File

Binary file not shown.

3
werkzeug-3.1.5.tar.gz
View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:6a548b0e88955dd07ccb25539d7d0cc97417ee9e179677d22c7041c8f078ce67
size 864754