Skip to content

Conversation

@dependabot-preview
Copy link
Contributor

@dependabot-preview dependabot-preview bot commented Aug 1, 2019

Bumps werkzeug from 0.15.4 to 0.15.5.

Release notes

Sourced from werkzeug's releases.

0.15.5

Changelog

Sourced from werkzeug's changelog.

Version 0.15.5

Released 2019-07-17

  • Fix a TypeError due to changes to ast.Module in Python 3.8. 1551
  • Fix a C assertion failure in debug builds of some Python 2.7 releases. 1553
  • ~exceptions.BadRequestKeyError adds the KeyError message to the description if e.show_exception is set to True. This is a more secure default than the original 0.15.0 behavior and makes it easier to control without losing information. 1592
  • Upgrade the debugger to jQuery 3.4.1. 1581
  • Work around an issue in some external debuggers that caused the reloader to fail. 1607
  • Work around an issue where the reloader couldn't introspect a setuptools script installed as an egg. 1600
  • The reloader will use sys.executable even if the script is marked executable, reverting a behavior intended for NixOS introduced in 0.15. The reloader should no longer cause OSError: [Errno 8] Exec format error. 1482, 1580
  • SharedDataMiddleware safely handles paths with Windows drive names. 1589
Commits
  • 8cfab30 release version 0.15.5
  • d1f5fab update project links
  • 726b25b Merge pull request #1613 from pallets/revert-nixos-reloader-check
  • 1f532b8 don't detect executable file for reloader
  • a8d26bf Merge pull request #1612 from pallets/shared-data
  • acc999e SharedDataMiddleware uses safe_join
  • 8afe4eb Merge pull request #1582 from Cerebus/fix/1581-jquery-3.4.1
  • e0de4a4 Merge pull request #1601 from pokoli/reloader_package
  • ec68771 update to jQuery 3.4.1
  • 7a01660 explain reloader workaround for egg script
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will not automatically merge this PR because it includes an out-of-range update to a development dependency.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it). To ignore the version in this PR you can just close it
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Aug 1, 2019
@dependabot-preview dependabot-preview bot force-pushed the dependabot/pip/werkzeug-0.15.5 branch from e6ba04e to cdf9d11 Compare August 7, 2019 15:42
@dependabot-preview dependabot-preview bot force-pushed the dependabot/pip/werkzeug-0.15.5 branch from cdf9d11 to 3697c2d Compare September 1, 2019 05:20
@dependabot-preview dependabot-preview bot force-pushed the dependabot/pip/werkzeug-0.15.5 branch from 3697c2d to 7e81845 Compare September 1, 2019 05:25
@dependabot-preview
Copy link
Contributor Author

Superseded by #174.

@dependabot-preview dependabot-preview bot deleted the dependabot/pip/werkzeug-0.15.5 branch October 1, 2019 09:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants