Bump the action-deps group across 1 directory with 3 updates
Type: Pull Request
State: Closed
Association: Contributor
Comments: 1
(10 months ago)
(10 months ago)
(10 months ago)
dependencies python backend
Bumps the action-deps group with 3 updates in the /backend directory: flask, redis and sqlalchemy.
Updates flask from 3.1.1 to 3.1.2
Release notes
Sourced from flask's releases.
3.1.2
This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.
PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1
Changelog
Sourced from flask's changelog.
Version 3.1.2
Released 2025-08-19
stream_with_contextdoes not fail inside async views. :issue:5774- When using
follow_redirectsin the test client, the final state ofsessionis correct. :issue:5786- Relax type hint for passing bytes IO to
send_file. :issue:5776
Commits
2c1b30drelease version 3.1.21292419Update GitHub Actions workflow for artifact handling (#5795)4dd52caUpdate GitHub Actions workflow for artifact handling55c6255update dev dependenciesd8259ebuse Jinja name consistently38b4c1erefactor stream_with_context for async views (#5799)9822a03refactor stream_with_context for async views49b7e7bsecurity docs for TRUSTED_HOSTS (#5798)b228ca3security docs for TRUSTED_HOSTSff64079update flask-talisman link- Additional commits viewable in compare view
Updates redis from 6.2.0 to 6.4.0
Release notes
Sourced from redis's releases.
6.4.0
Changes
🚀 New Features
- Added epsilon property to the vsim command (#3723)
🧰 Maintenance
- Updating the latest Redis image for github pipeline testing (#3726)
We'd like to thank all the contributors who worked on this release!
@htemelski-redis@elena-kolevska@petyaslavova@vladvildanov6.3.0
Changes
🚀 New Features
- Add support for new BITOP operations: DIFF, DIFF1, ANDOR, ONE (#3690)
- Support new VAMANA vector index type (#3702)
- Add new stream commands (#3711)
- add async Retry eq and hash & fix ExponentialWithJitterBackoff eq (#3668)
🐛 Bug Fixes
- Fixing sentinel command execution to allow returning of actual responses when meaningful - behaviour controlled by 'return_responses' argument. (#3191)
- Annotate deprecated_args decorator to preserve wrapped function type signature (#3701)
- Fix ConnectionPool to raise MaxConnectionsError instead of Connection… (#3698)
- add async Retry eq and hash & fix ExponentialWithJitterBackoff eq (#3668)
- SentinelManagedConnection searches for new master upon connection failure (#3560) (#3601)
🧰 Maintenance
- fix: avoid instantiating a connection on repr_ (#3653)
- Fixing the return type hint for the transaction method in the standalone client. (#3660)
- Bump rojopolis/spellcheck-github-actions from 0.48.0 to 0.49.0 (#3665)
- Dropping integration tests with Redis 6.2 from pipeline actions. (#3659)
- Remove deprecated arg from call to ClusterPipeline (#3670)
- TransactionStrategy reset: UNWATCH only when status is watching (#3671)
- KeyT for set operations (#3190)
- Removing references to old docs site 'https://redis-py.readthedocs.io/' replaced by 'https://redis.readthedocs.io/' (#3674)
- Removing unnecessary check for tests using AsyncMock (#3432)
- Updating test images for github pipeline execution (#3678)
- Updating the latest Redis image for pipeline testing (#3695)
- Bump rojopolis/spellcheck-github-actions from 0.49.0 to 0.51.0 (#3689)
- DOC-5225 testable probabilistic dt examples (#3691)
- Update README.md (#3699)
- Convert the value to int type only if it exists in CLIENT INFO (#3688)
- Fix compatibility with latest pytest-asyncio version(1.1.0) (#3708)
- DOC-5424 time series examples (#3705)
- Adding information in connection pool class doc string for available SSLConnection class, that can be used for SSL connections (#3710)
... (truncated)
Commits
fff669dUpdated package version43ce2a4Updating the latest Redis image for github pipeline testing (#3726)64426cbAdded epsilon property to the vsim command (#3723)67ab74dAdd new stream commands (#3711)4c9512bAdding information in connection pool class doc string for available SSLConne...31399edSentinelManagedConnection searches for new master upon connection failure (#3...7291debadd async Retry__eq__and__hash__& fix ExponentialWithJitterBackof...4cf094fFix ConnectionPool to raise MaxConnectionsError instead of Connection… (#3698)a001416DOC-5424 time series examples (#3705)2b1ff53Fix compatibility with latest pytest-asyncio version(1.1.0) (#3708)- Additional commits viewable in compare view
Updates sqlalchemy from 2.0.41 to 2.0.43
Release notes
Sourced from sqlalchemy's releases.
2.0.43
Released: August 11, 2025
orm
[orm] [bug] Fixed issue where using the
post_updatefeature would apply incorrect "pre-fetched" values to the ORM objects after a multi-row UPDATE process completed. These "pre-fetched" values would come from any column that had anColumn.onupdatecallable or a version id generator used byorm.Mapper.version_id_generator; for a version id generator that delivered random identifiers like timestamps or UUIDs, this incorrect data would lead to a DELETE statement against those same rows to fail in the next step.References: #12748
[orm] [bug] Fixed issue where
_orm.mapped_column.use_existing_columnparameter in_orm.mapped_column()would not work when the_orm.mapped_column()is used inside of anAnnotatedtype alias in polymorphic inheritance scenarios. The parameter is now properly recognized and processed during declarative mapping configuration.References: #12787
[orm] [bug] Improved the implementation of the
_orm.selectin_polymorphic()inheritance loader strategy to properly render the IN expressions using chunks of 500 records each, in the same manner as that of the_orm.selectinload()relationship loader strategy. Previously, the IN expression would be arbitrarily large, leading to failures on databases that have limits on the size of IN expressions including Oracle Database.References: #12790
engine
[engine] [usecase] Added new parameter
create_engine.skip_autocommit_rollbackwhich provides for a per-dialect feature of preventing the DBAPI.rollback()from being called under any circumstances, if the connection is detected as being in "autocommit" mode. This improves upon a critical performance issue identified in MySQL dialects where the network overhead of the.rollback()call remains prohibitive even if autocommit mode is set.References: #12784
postgresql
... (truncated)
Commits
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
1
2
+68
-68
Package Dependencies
Technical Details
| ID: | 5812372 |
| UUID: | 2774324147 |
| Node ID: | PR_kwDOMqijUM6lXNOz |
| Host: | GitHub |
| Repository: | zakerby/python-react-template |
| Mergeable: | Yes |
| Merge State: | Unstable |
| Rebaseable: | Yes |