Bump the python-requirements group with 69 updates

[dependabot]

Bumps the python-requirements group with 69 updates:

Package	From	To
aiohttp	3.9.1	3.9.5
anyio	3.7.1	4.3.0
asgiref	3.7.2	3.8.1
attrs	23.1.0	23.2.0
azure-core	1.29.5	1.30.1
azure-identity	1.15.0	1.16.0
azure-monitor-opentelemetry	1.1.1	1.4.0
azure-monitor-opentelemetry-exporter	1.0.0b19	1.0.0b24
azure-storage-blob	12.19.0	12.19.1
certifi	2023.11.17	2024.2.2
cryptography	41.0.7	42.0.5
distro	1.8.0	1.9.0
fixedint	0.1.6	0.2.0
flask	3.0.0	3.0.3
frozenlist	1.4.0	1.4.1
httpcore	1.0.2	1.0.5
httpx	0.25.2	0.27.0
hypercorn	0.15.0	0.16.0
idna	3.6	3.7
importlib-metadata	6.11.0	7.1.0
itsdangerous	2.1.2	2.2.0
jinja2	3.1.2	3.1.3
markupsafe	2.1.3	2.1.5
msal	1.26.0	1.28.0
msal-extensions	1.0.0	1.1.0
multidict	6.0.4	6.0.5
numpy	1.26.2	1.26.4
openai[datalib]	1.3.7	1.23.2
opentelemetry-api	1.21.0	1.24.0
opentelemetry-instrumentation	0.42b0	0.45b0
opentelemetry-instrumentation-aiohttp-client	0.42b0	0.45b0
opentelemetry-instrumentation-asgi	0.42b0	0.45b0
opentelemetry-instrumentation-dbapi	0.42b0	0.45b0
opentelemetry-instrumentation-django	0.42b0	0.45b0
opentelemetry-instrumentation-fastapi	0.42b0	0.45b0
opentelemetry-instrumentation-flask	0.42b0	0.45b0
opentelemetry-instrumentation-httpx	0.42b0	0.45b0
opentelemetry-instrumentation-psycopg2	0.42b0	0.45b0
opentelemetry-instrumentation-requests	0.42b0	0.45b0
opentelemetry-instrumentation-urllib	0.42b0	0.45b0
opentelemetry-instrumentation-urllib3	0.42b0	0.45b0
opentelemetry-instrumentation-wsgi	0.42b0	0.45b0
opentelemetry-resource-detector-azure	0.1.0	0.1.4
opentelemetry-sdk	1.21.0	1.24.0
opentelemetry-semantic-conventions	0.42b0	0.45b0
opentelemetry-util-http	0.42b0	0.45b0
packaging	23.2	24.0
pandas	2.1.3	2.2.2
pandas-stubs	2.1.1.230928	2.2.1.240316
pycparser	2.21	2.22
pydantic	2.5.2	2.7.0
pydantic-core	2.14.5	2.18.1
python-dateutil	2.8.2	2.9.0.post0
pytz	2023.3.post1	2024.1
quart	0.19.4	0.19.5
regex	2023.10.3	2024.4.16
requests-oauthlib	1.3.1	2.0.0
sniffio	1.3.0	1.3.1
tiktoken	0.5.2	0.6.0
tqdm	4.66.1	4.66.2
types-pytz	2023.3.1.1	2024.1.0.20240417
typing-extensions	4.8.0	4.11.0
tzdata	2023.3	2024.1
urllib3	2.1.0	2.2.1
uvicorn	0.24.0.post1	0.29.0
werkzeug	3.0.1	3.0.2
zipp	3.17.0	3.18.1
azure-ai-formrecognizer	3.3.2	3.3.3
pypdf	3.17.1	4.2.0

Updates aiohttp from 3.9.1 to 3.9.5

Release notes

Sourced from aiohttp's releases.

3.9.5

Bug fixes

• Fixed "Unclosed client session" when initialization of :py:class:~aiohttp.ClientSession fails -- by :user:NewGlad.

  Related issues and pull requests on GitHub: #8253.

• Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.

  Related issues and pull requests on GitHub: #8332.

• Added default Content-Disposition in multipart/form-data responses to avoid broken form-data responses -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub: #8335.

---

3.9.4

Bug fixes

• The asynchronous internals now set the underlying causes when assigning exceptions to the future objects -- by :user:webknjaz.

  Related issues and pull requests on GitHub: #8089.

• Treated values of Accept-Encoding header as case-insensitive when checking for gzip files -- by :user:steverep.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.9.5 (2024-04-16)

Bug fixes

• Fixed "Unclosed client session" when initialization of :py:class:~aiohttp.ClientSession fails -- by :user:NewGlad.

  Related issues and pull requests on GitHub: :issue:8253.

• Fixed regression (from :pr:8280) with adding Content-Disposition to the form-data part after appending to writer -- by :user:Dreamsorcerer/:user:Olegt0rr.

  Related issues and pull requests on GitHub: :issue:8332.

• Added default Content-Disposition in multipart/form-data responses to avoid broken form-data responses -- by :user:Dreamsorcerer.

  Related issues and pull requests on GitHub: :issue:8335.

---

3.9.4 (2024-04-11)

Bug fixes

• The asynchronous internals now set the underlying causes when assigning exceptions to the future objects -- by :user:webknjaz.

  Related issues and pull requests on GitHub: :issue:8089.

... (truncated)

Commits

• b844d42 Release v3.9.5 (#8340)
• 0415a4c Patchback/backports/3.9/5fd29467fb63efdfae1ace280cec36b1f8139567/pr 8290 (#8311)
• f21c6f2 [PR #8335/5a6949da backport][3.9] Add Content-Disposition automatically (#8336)
• 7eecdff [PR #8332/482e6cdf backport][3.9] Add set_content_disposition test (#8333)
• 82fbe64 [PR #8324/4a8fd08b backport][3.9] Add missing changelogs (#8330)
• 01df7ec Bump version
• 7917ae2 Merge 3.1
• b3397c7 Release v3.9.4 (#8201)
• a7e240a [PR #8320/9ba9a4e5 backport][3.9] Fix Python parser to mark responses without...
• 2833552 Escape filenames and paths in HTML when generating index pages (#8317) (#8319)
• Additional commits viewable in compare view

Updates anyio from 3.7.1 to 4.3.0

Release notes

Sourced from anyio's releases.

4.3.0

• Added support for the Python 3.12 walk_up keyword argument in anyio.Path.relative_to() (PR by Colin Taylor)

• Fixed passing total_tokens to anyio.CapacityLimiter() as a keyword argument not working on the trio backend (#515)

• Fixed Process.aclose() not performing the minimum level of necessary cleanup when cancelled. Previously:

  • Cancellation of Process.aclose() could leak an orphan process
  • Cancellation of run_process() could very briefly leak an orphan process.
  • Cancellation of Process.aclose() or run_process() on Trio could leave standard streams unclosed

  (PR by Ganden Schaffner)

• Fixed Process.stdin.aclose(), Process.stdout.aclose(), and Process.stderr.aclose() not including a checkpoint on asyncio (PR by Ganden Schaffner)

• Fixed documentation on how to provide your own typed attributes

4.2.0

• Add support for byte-based paths in connect_unix, create_unix_listeners, create_unix_datagram_socket, and create_connected_unix_datagram_socket. (PR by Lura Skye)

• Enabled the Event and CapacityLimiter classes to be instantiated outside an event loop thread

• Broadly improved/fixed the type annotations. Among other things, many functions and methods that take variadic positional arguments now make use of PEP 646 TypeVarTuple to allow the positional arguments to be validated by static type checkers. These changes affected numerous methods and functions, including:

  • anyio.run()
  • TaskGroup.start_soon()
  • anyio.from_thread.run()
  • anyio.from_thread.run_sync()
  • anyio.to_thread.run_sync()
  • anyio.to_process.run_sync()
  • BlockingPortal.call()
  • BlockingPortal.start_task_soon()
  • BlockingPortal.start_task()

  (also resolves #560)

• Fixed various type annotations of anyio.Path to match Typeshed:

  • anyio.Path.__lt__()
  • anyio.Path.__le__()
  • anyio.Path.__gt__()
  • anyio.Path.__ge__()
  • anyio.Path.__truediv__()
  • anyio.Path.__rtruediv__()
  • anyio.Path.hardlink_to()
  • anyio.Path.samefile()
  • anyio.Path.symlink_to()
  • anyio.Path.with_segments()

  (PR by Ganden Schaffner)

... (truncated)

Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

• Added the BlockingPortalProvider class to aid with constructing synchronous counterparts to asynchronous interfaces that would otherwise require multiple blocking portals
• Fixed erroneous RuntimeError: called 'started' twice on the same task status when cancelling a task in a TaskGroup created with the start() method before the first checkpoint is reached after calling task_status.started() ([#706](https://github.com/agronholm/anyio/issues/706) <https://github.com/agronholm/anyio/issues/706>_; PR by Dominik Schwabe)
• Fixed cancellation delivery on asyncio incrementing the wrong cancel scope's cancellation counter when cascading a cancel operation to a child scope, thus failing to uncancel the host task ([#716](https://github.com/agronholm/anyio/issues/716) <https://github.com/agronholm/anyio/issues/716>_)
• Fixed erroneous TypedAttributeLookupError if a typed attribute getter raises KeyError
• Fixed the asyncio backend not respecting the PYTHONASYNCIODEBUG environment variable when setting the debug flag in anyio.run()
• Fixed SocketStream.receive() not detecting EOF on asyncio if there is also data in the read buffer ([#701](https://github.com/agronholm/anyio/issues/701) <https://github.com/agronholm/anyio/issues/701>_)
• Emit a ResourceWarning for MemoryObjectReceiveStream and MemoryObjectSendStream that were garbage collected without being closed (PR by Andrey Kazantcev)

4.3.0

• Added support for the Python 3.12 walk_up keyword argument in anyio.Path.relative_to() (PR by Colin Taylor)

• Fixed passing total_tokens to anyio.CapacityLimiter() as a keyword argument not working on the trio backend ([#515](https://github.com/agronholm/anyio/issues/515) <https://github.com/agronholm/anyio/issues/515>_)

• Fixed Process.aclose() not performing the minimum level of necessary cleanup when cancelled. Previously:

  • Cancellation of Process.aclose() could leak an orphan process
  • Cancellation of run_process() could very briefly leak an orphan process.
  • Cancellation of Process.aclose() or run_process() on Trio could leave standard streams unclosed

  (PR by Ganden Schaffner)

• Fixed Process.stdin.aclose(), Process.stdout.aclose(), and Process.stderr.aclose() not including a checkpoint on asyncio (PR by Ganden Schaffner)

• Fixed documentation on how to provide your own typed attributes

4.2.0

... (truncated)

Commits

• 437a7e3 Bumped up the version
• 1ce32e5 Updated the upload/download artifact actions
• d39c837 [pre-commit.ci] pre-commit autoupdate (#690)
• ba48ea8 Added the network marker to some tests that need DNS (#687)
• 5426f7b Remove conditionals and workarounds for Python interpreter versions 3.7 and o...
• 7565f31 [pre-commit.ci] pre-commit autoupdate (#684)
• 137de70 Fixed documentation on providing custom typed attributes (#683)
• 8b8806c Fixed typo (#681)
• 1e60219 Fixed run_process() and open_process().__aexit__ leaking an orphan proces...
• 3f14df8 [pre-commit.ci] pre-commit autoupdate (#676)
• Additional commits viewable in compare view

Updates asgiref from 3.7.2 to 3.8.1

Changelog

Sourced from asgiref's changelog.

3.8.1 (2024-03-22)

• Fixes a regression in 3.8.0 affecting nested task cancellation inside sync_to_async.

3.8.0 (2024-03-20)

• Adds support for Python 3.12.

• Drops support for (end-of-life) Python 3.7.

• Fixes task cancellation propagation to subtasks when using synchronous Django middleware.

• Allows nesting sync_to_async via asyncio.wait_for.

• Corrects WSGI adapter handling of root path.

• Handles case where "client" is None in WsgiToAsgi adapter.

Commits

• e38d3c3 Releasing 3.8.1
• 8769434 Raise exception if exec_coro is done.
• 852344e Add tox.ini to MANIFEST.in
• f710647 Fix a rST problem in the pathsend extension documentation
• 4c28385 Releasing 3.8.0
• 4209b6c Correct WSGI adapter handling of root path.
• 8cf847a Update error-on-send text in main spec
• 8108512 Move variable initialization in AsyncToSync from init to call (#440)
• 6f02daa Clarify send error behaviour more clearly
• 0503c2c Fix task cancellation propagation to subtasks when using sync middleware (#435)
• Additional commits viewable in compare view

Updates attrs from 23.1.0 to 23.2.0

Commits

• See full diff in compare view

Updates azure-core from 1.29.5 to 1.30.1

Commits

• b2a421e port retry-after fix into corehttp (#34536)
• 3d314d8 update release date (#34521)
• 3b099aa move core perf files to azure-core folder (#34441)
• 4694379 [Corehttp] Prepare changelog (#34439)
• 3faad9c accept float "retry-after" (#34253)
• c6876ec [corehttp] use typeguard for HTTPPolicy/SansIOHTTPPolicy check not isinstance...
• 9cda4c0 [corehttp] Misc updates (#34394)
• 143d2ff [Corehttp] Add code snippets to docstrings (#33207)
• 1b2c59c [OTel Plugin] Improve live test coverage (#34323)
• 3bc2067 [OTel plugin] Add new schema version (#34089)
• Additional commits viewable in compare view

Updates azure-identity from 1.15.0 to 1.16.0

Release notes

Sourced from azure-identity's releases.

azure-identity_1.16.0

1.16.0 (2024-04-09)

Other Changes

• For IMDS requests in ManagedIdentityCredential, the retry backoff factor was reduced from 2 to 0.8 in order to avoid excessive retry delays and improve responsiveness. Users can customize this setting with the retry_backoff_factor parameter: ManagedIdentityCredential(retry_backoff_factor=2). (#35070)

azure-identity_1.16.0b2

1.16.0b2 (2024-03-05)

Features Added

• Added pickling support. (#34134)

Bugs Fixed

• Fixed an issue in AzurePowerShellCredential where if pwsh isn't available and the Command Prompt language is not English, it would not fall back to powershell. (#34271)

Commits

• 95c5f2a Update release dates (#35091)
• c58bfa7 [Identity] Adjust IMDS retry backoff (#35070)
• 6680ffc [Identity] Update broker docs (#35032)
• 1ade699 [Identity] Update live test config (#35019)
• 66efa24 Update Authorization Code client_secret kwarg usage (#34862)
• 6f79b4d Fix WAM default account code sample (#35007)
• 4348985 Update default broker account sample (#35003)
• 0527e86 [skip ci] Delete azure-devtools and deps/references
• fcaa29d Update Azure AD and docs.microsoft.com links (#34913)
• 9ea120e rename use_operating_system_account to use_default_broker_account (#34833)
• Additional commits viewable in compare view

Updates azure-monitor-opentelemetry from 1.1.1 to 1.4.0

Release notes

Sourced from azure-monitor-opentelemetry's releases.

azure-monitor-opentelemetry_1.4.0

1.4.0 (2024-04-09)

Features Added

• Adding diagnostic warning when distro detects RP attach (#34971)
• Added resource parameter (#34900)

Other Changes

• Updated FastAPI sample (#34738)
• Refactored constants and utils (#35066)

Commits

• 3519fdf Distro 1.4.0 (#35076)
• d625542 Increment package version after release of azure-monitor-opentelemetry-export...
• d51635b Resource param (#34900)
• 85b34b7 changelog (#35088)
• 6dbbc92 Refactor constants (#35066)
• 394dc9a Adding diagnostic log for distro + attach (#34971)
• 78dac20 Change meta data service timeout to 200ms (#35039)
• d0a759e Update README.md (#35004)
• 4ed19c3 Increment package version after release of azure-monitor-query (#35000)
• ab6b74f [Monitor Query] Prepare GA release (#34993)
• Additional commits viewable in compare view

Updates azure-monitor-opentelemetry-exporter from 1.0.0b19 to 1.0.0b24

Release notes

Sourced from azure-monitor-opentelemetry-exporter's releases.

azure-monitor-opentelemetry-exporter_1.0.0b24

1.0.0b24 (2024-04-05)

Features Added

• Add live metrics collection of requests/dependencies/exceptions (#34673)
• Add live metrics collection of cpu time/process memory (#34735)
• Add live metrics collection feature detection to statsbeat (#34752)

Breaking Changes

• Rename Statbeat environments variables to use APPLICATIONINSIGHTS_* (#34742)

Bugs Fixed

• Reduce vm metadata service timeout to 200ms (#35039)

Other Changes

• Updated FastAPI sample (#34738)
• Set up branching logic for attach function (#35066)

Commits

• 85b34b7 changelog (#35088)
• 6dbbc92 Refactor constants (#35066)
• 394dc9a Adding diagnostic log for distro + attach (#34971)
• 78dac20 Change meta data service timeout to 200ms (#35039)
• d0a759e Update README.md (#35004)
• 4ed19c3 Increment package version after release of azure-monitor-query (#35000)
• ab6b74f [Monitor Query] Prepare GA release (#34993)
• ccaf592 [Monitor Query] Update filter docstrings (#34974)
• 65a743b [Monitor-Query] Docstring tweaks (#34972)
• 0527e86 [skip ci] Delete azure-devtools and deps/references
• Additional commits viewable in compare view

Updates azure-storage-blob from 12.19.0 to 12.19.1

Release notes

Sourced from azure-storage-blob's releases.

azure-storage-blob_12.19.1

12.19.1 (2024-03-04)

Bugs Fixed

• Fixed an issue where under rare circumstances, full downloads of sparse Page Blobs could result in the downloaded content containing up to one "chunk" of extra \x00 at the end due to an optimization error.

Commits

• 18e691a [Storage] Prepare hotfix release (#34608)
• See full diff in compare view

Updates certifi from 2023.11.17 to 2024.2.2

Commits

• 45eb611 2024.02.02 (#266)
• 83f4f04 fix leaking certificate issue (#265)
• bbf2208 Bump actions/upload-artifact from 4.2.0 to 4.3.0 (#264)
• 9e837a5 Bump actions/upload-artifact from 4.1.0 to 4.2.0 (#262)
• 05d071b Bump actions/upload-artifact from 4.0.0 to 4.1.0 (#261)
• 2a3088a Bump actions/download-artifact from 4.1.0 to 4.1.1 (#260)
• d4ca66e Bump actions/upload-artifact from 3.1.3 to 4.0.0 (#258)
• 5d15663 Bump actions/download-artifact from 3.0.2 to 4.1.0 (#257)
• d66ef9d Bump actions/setup-python from 4.7.1 to 5.0.0 (#256)
• 8f0d412 Bump pypa/gh-action-pypi-publish from 1.8.10 to 1.8.11 (#255)
• Additional commits viewable in compare view

Updates cryptography from 41.0.7 to 42.0.5

Changelog

Sourced from cryptography's changelog.

42.0.5 - 2024-02-23

* Limit the number of name constraint checks that will be performed in
  :mod:`X.509 path validation <cryptography.x509.verification>` to protect
  against denial of service attacks.
* Upgrade ``pyo3`` version, which fixes building on PowerPC.
.. _v42-0-4:
42.0.4 - 2024-02-20

• Fixed a null-pointer-dereference and segfault that could occur when creating a PKCS#12 bundle. Credit to Alexander-Programming for reporting the issue. CVE-2024-26130
• Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields SMIMECapabilities and SignatureAlgorithmIdentifier should now be correctly encoded according to the definitions in :rfc:2633 :rfc:3370.

.. _v42-0-3:

42.0.3 - 2024-02-15

* Fixed an initialization issue that caused key loading failures for some
  users.
.. _v42-0-2:
42.0.2 - 2024-01-30

• Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.1.
• Fixed an issue that prevented the use of Python buffer protocol objects in sign and verify methods on asymmetric keys.
• Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey.exchange, X25519PrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.x25519.X25519PrivateKey.exchange, X448PrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.x448.X448PrivateKey.exchange, and DHPrivateKey :meth:~cryptography.hazmat.primitives.asymmetric.dh.DHPrivateKey.exchange.

.. _v42-0-1:

42.0.1 - 2024-01-24

</tr></table> 

... (truncated)

Commits

• 33833f0 Release 42.0.5 (#10470)
• 4be53bf Added a budget for NC checks to protect against DoS (#10467) (#10468)
• 8e9de30 Bump pyo3 from 0.20.2 to 0.20.3 in /src/rust (#10462) (#10465)
• fe18470 Bump for 42.0.4 release (#10445)
• aaa2dd0 Fix ASN.1 issues in PKCS#7 and S/MIME signing (#10373) (#10442)
• 7a4d012 Fixes #10422 -- don't crash when a PKCS#12 key and cert don't match (#10423) ...
• df314bb backport actions m1 switch to 42.0.x (#10415)
• c49a7a5 changelog and version bump for 42.0.3 (#10396)
• 396bcf6 fix provider loading take two (#10390) (#10395)
• 0e0e46f backport: initialize openssl's legacy provider in rust (#10323) (#10333)
• Additional commits viewable in compare view

Updates distro from 1.8.0 to 1.9.0

Release notes

Sourced from distro's releases.

v1.9.0

ENHANCEMENTS:

• Refactor distro.info() method to return an InfoDict [#360]
• Ignore the file /etc/board-release [#353]
• Ignore the file /etc/ec2_version [#359]

RELEASE:

• Run Python 3.6 on Ubuntu 20.04 for CI and bump isort [#355]

TESTS:

• Test on modern versions of CPython and PyPy and macOS [#362]
• Add support for ALT Linux Server 10.1 distribution [#354]
• Add Debian Testing to the tests [#356]
• Update ArchLinux resource for tests [#352]

Changelog

Sourced from distro's changelog.

1.9.0 (2023.12.19)

ENHANCEMENTS:

• Refactor distro.info() method to return an InfoDict [#360]
• Ignore the file '/etc/board-release' [#353]
• Ignore the file '/etc/ec2_version' [#359]

RELEASE:

• Run Python 3.6 on Ubuntu 20.04 for CI and bump isort [#355]

TESTS:

• Test on modern versions of CPython and PyPy and macOS [#362]
• Add support for ALT Linux Server 10.1 distribution [#354]
• Add Debian Testing to the tests [#356]
• Update archlinux resource for tests [#352]

Commits

• 8d88a2d Optimize some repo metastuff and prepare v1.9.0 (#364)
• 95ffcb6 Actions(deps): Bump actions/setup-python from 4 to 5 (#363)
• 6a487e9 Test on modern versions of CPython and PyPy and macOS (#362)
• 6ce9eb6 Actions(deps): Bump actions/checkout from 3 to 4 (#361)
• 2804e55 Refactor distro.info() method to return an InfoDict (#360)
• c443f12 Ignore the file '/etc/ec2_version'
• 59e6e07 Add Debian Testing to the tests (#356)
• 5fc214c Ignore the file '/etc/board-release' (#353)
• 40ecdd9 Add support for ALT Linux Server 10.1 distribution (#354)
• 16ae9cb Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355)
• Additional commits viewable in compare view

Updates fixedint from 0.1.6 to 0.2.0

Changelog

Sourced from fixedint's changelog.

v0.2.0, 2020-09-16: Add type hints (GH #4) Removed the broken MutableFixedInt.itruediv Added base argument to FixedInt constructor

Commits

• c6f9439 Version bump to v0.2.0
• 035bdca Add py.typed and .pyi files to setup.py
• b25aadc Documentation updates
• 418c239 Add type hints. Fixes #4.
• d2dbd20 Remove MutableFixedInt.itruediv (doesn't make sense), add base argument t...
• See full diff in compare view

Updates flask from 3.0.0 to 3.0.3

Release notes

Sourced from flask's releases.

3.0.3

This is a fix release for the 3.0.x feature branch.

PyPI: https://pypi.org/project/Flask/3.0.3/ Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-3 Milestone: https://github.com/pallets/flask/milestone/35?closed=1

• The default hashlib.sha1 may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. #5448
• Don't initialize the cli attribute in the sansio scaffold, but rather in the Flask concrete class. #5270

3.0.2

This is a fix release for the 3.0.x feature release branch. It fixes bugs but does not otherwise change behavior and should not result in breaking changes.

• Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3.0.2
• Milestone: https://github.com/pallets/flask/milestone/34?closed=1
• PyPI: https://pypi.org/project/Flask/3.0.2/

3.0.1

This is a fix release for the 3.0.x feature release branch.

Fixes an issue where using other JSON providers, such as flask-orjson, previously caused loaded session data to have an incorrect format in some cases.

• Changes: https://flask.palletsprojects.com/en/3.0.x/changes/#version-3-0-1
• Milestone: https://github.com/pallets/flask/milestone/32?closed=1
• PyPI: https://pypi.org/project/Flask/3.0.1/

Changelog

Sourced from flask's changelog.

Version 3.0.3

Released 2024-04-07

• The default hashlib.sha1 may not be available in FIPS builds. Don't access it at import time so the developer has time to change the default. :issue:5448
• Don't initialize the cli attribute in the sansio scaffold, but rather in the Flask concrete class. :pr:5270

Version 3.0.2

Released 2024-02-03

• Correct type for jinja_loader property. :issue:5388
• Fix error with --extra-files and --exclude-patterns CLI options. :issue:5391

Version 3.0.1

Released 2024-01-18

• Correct type for path argument to send_file. :issue:5230
• Fix a typo in an error message for the flask run --key option. :pr:5344
• Session data is untagged without relying on the built-in json.loads object_hook. This allows other JSON providers that don't implement that. :issue:5381
• Address more type findings when using mypy strict mode. :pr:5383

Commits

• c12a5d8 release version 3.0.3
• 5e22cc9 Don't set the cli attribute in the sansio scaffold (#5270)
• 5fdce4c Don't set the cli attribute in the sansio scaffold
• adb7dd9 don't access app.logger when configuring app.logger
• b739390 support FIPS builds without SHA-1 (#5460)
• db46111 access sha1 lazily
• 7320e31 start version 3.0.3
• 87d5f5b update project files (#5457)
• d5e321b release version 3.0.2 (#5403)
• d203059 release version 3.0.2
• Additional commits viewable in compare view

Updates frozenlist from 1.4.0 to 1.4.1

Release notes

Sourced from frozenlist's releases.

1.4.1

Packaging updates and notes for downstreams

• Declared Python 3.12 and PyPy 3.8-3.10 supported officially in the distribution package metadata.

  Related issues and pull requests on GitHub: #553.

• Replaced the packaging is replaced from an old-fashioned :file:setup.py to an in-tree :pep:517 build backend -- by :user:webknjaz.

  Whenever the end-users or downstream packagers need to build frozenlist from source (a Git checkout or an sdist), they may pass a config_settings flag pure-python. If this flag is not set, a C-extension will be built and included into the distribution.

  Here is how this can be done with pip:

  .. code-block:: console

  $ python3 -m pip install . --config-settings=pure-python=
  

  This will also work with -e | --editable.

  The same can be achieved via pypa/build:

  .. code-block:: console

  $ python3 -m build --config-setting=pure-python=
  

  Adding -w | --wheel can force pypa/build produce a wheel from source directly, as opposed to building an sdist and then building from it.

  Related issues and pull requests on GitHub: #560.

Contributor-facing changes

• It is now possible to request line tracing in Cython builds using the with-cython-tracing :pep:517 config setting -- :user:webknjaz.

  This can be used in CI and development environment to measure coverage on Cython modules, but is not normally useful to the end-users or

... (truncated)

Changelog

Sourced from frozenlist's changelog.

1.4.1 (2023-12-15)

Packaging updates and notes for downstreams

• Declared Python 3.12 and PyPy 3.8-3.10 supported officially in the distribution package metadata.

  Related issues and pull requests on GitHub: :issue:553.

• Replaced the packaging is replaced from an old-fashioned :file:setup.py to an in-tree :pep:517 build backend -- by :user:webknjaz.

  Whenever the end-users or downstream packagers need to build frozenlist from source (a Git checkout or an sdist), they may pass a config_settings flag pure-python. If this flag is not set, a C-...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.