这是indexloc提供的服务,不要输入任何密码
Skip to content

Conversation

@dependabot-preview
Copy link
Contributor

Bumps werkzeug from 1.0.0 to 1.0.1.

Release notes

Sourced from werkzeug's releases.

1.0.1

Changelog

Sourced from werkzeug's changelog.

Version 1.0.1

Released 2020-03-31

  • Make the argument to RequestRedirect.get_response optional. 1718
  • Only allow a single access control allow origin value. 1723
  • Fix crash when trying to parse a non-existent Content Security Policy header. 1731
  • http_date zero fills years < 1000 to always output four digits. 1739
  • Fix missing local variables in interactive debugger console. 1746
  • Fix passing file-like objects like io.BytesIO to FileStorage.save. 1733
Commits
  • 1dde4b1 release version 1.0.1
  • 1527e05 Merge pull request #1743 from Dreamsorcerer/patch-1
  • a9ba22a Add missing documentation about None return type.
  • 244b486 Merge pull request #1734 from alexa-infra/fix-filestorage-save-bytes-io
  • c341a0a fix os.fspath call on file-like objects
  • 32f3b07 Merge pull request #1741 from mbertoldi/1.0.x
  • c761ff8 fix locals in InteractiveConsole
  • 6ff5cd1 Merge pull request #1740 from nicolary/hf-zfill_4_year_dump_date
  • b70df18 zfill year < 1000
  • 8568bed Merge pull request #1736 from magula/1.0.x
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/master/CHANGES.rst)
- [Commits](pallets/werkzeug@1.0.0...1.0.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview dependabot-preview bot added type: dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 1, 2020
@josegonzalez josegonzalez merged commit d82ad0a into master Apr 1, 2020
@josegonzalez josegonzalez deleted the dependabot/pip/tests/apps/python-flask/werkzeug-1.0.1 branch April 1, 2020 16:37
josegonzalez added a commit that referenced this pull request Apr 3, 2020
# History

## 0.20.1

Install/update via the bootstrap script:

```shell
wget https://raw.githubusercontent.com/dokku/dokku/v0.20.1/bootstrap.sh
sudo DOKKU_TAG=v0.20.1 bash bootstrap.sh
```

### Bug Fixes

- #3916: @josegonzalez Change error exit to warning when no apps exist

### New Features

- #3918: @josegonzalez Upgrade herokuish to 0.5.11
- #3915: @josegonzalez Add ability to check if a plugin has been installed
- #3914: @josegonzalez Add ability to change or disable the access/error log path
- #3913: @josegonzalez Upgrade herokuish

### Documentation

- #3907: @josegonzalez Add sponsoring link to issue template
- #3904: @jazzzz Update dokku-apt entry
- #3902: @josegonzalez Remove extra commas from network docs

### Other

- #3909: @dependabot-preview[bot] chore(deps): bump werkzeug from 1.0.0 to 1.0.1 in /tests/apps/python-flask
- #3903: @dependabot-preview[bot] chore(deps-dev): bump heroku/heroku-buildpack-php from 172 to 173 in /tests/apps/php
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

python Pull requests that update Python code type: dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants