Skip to content

Scheduled weekly dependency update for week 34 - #335

Closed
pyup-bot wants to merge 4 commits into
masterfrom
pyup-scheduled-update-2026-08-24
Closed

Scheduled weekly dependency update for week 34#335
pyup-bot wants to merge 4 commits into
masterfrom
pyup-scheduled-update-2026-08-24

Conversation

@pyup-bot

Copy link
Copy Markdown
Collaborator

Update gunicorn from 20.1.0 to 26.2.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

Update Flask from 2.2.2 to 3.1.3.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

Update flask-cors from 3.0.10 to 6.0.5.

Changelog

4.0.1

Security
* Address [CVE-2024-1681](https://github.com/advisories/GHSA-84pr-m4jr-85g5) which is a log injection vulnerability when the log level is set to debug by aneshujevic in https://github.com/corydolphin/flask-cors/pull/351

4.0.0

* Remove support for Python versions older than 3.8 by WAKayser in https://github.com/corydolphin/flask-cors/pull/330
* Add GHA tooling by corydolphin in https://github.com/corydolphin/flask-cors/pull/331

3.1.01

* Include examples to specify that schema and port must be included in … by YPCrumble in https://github.com/corydolphin/flask-cors/pull/294
* two small changes to the documentation, based on issue 290 by bbbart in https://github.com/corydolphin/flask-cors/pull/291
* Fix typo by sunarch in https://github.com/corydolphin/flask-cors/pull/304
* FIX: typo in CSRF by sattamjh in https://github.com/corydolphin/flask-cors/pull/315
* Test against recent Python versions by pylipp in https://github.com/corydolphin/flask-cors/pull/314
* Correct spelling mistakes by EdwardBetts in https://github.com/corydolphin/flask-cors/pull/311
* 'Access-Control-Allow-Private-Network = true' header for http response by chelo-kjml in https://github.com/corydolphin/flask-cors/pull/318
* docs: Fix a few typos by timgates42 in https://github.com/corydolphin/flask-cors/pull/323
* [Docs] Fix typo in configuration documentation by sachit-shroff in https://github.com/corydolphin/flask-cors/pull/316
Links

Update imagesize from 1.4.1 to 2.0.1.

Changelog

2.0.1

- Optimize metadata parsing and HTTP range reads.
- Fix JPEG2000 box parsing.
- Accept single-quoted SVG dimensions.
- Return positive heights for top-down BMP images.
- Remove the upper Python version cap, migrate packaging to pyproject.toml,
and add Python 3.15 CI coverage.
- Bump the package version to 2.0.1 and add recent feedback contributors to
the README.

Related issues:
https://github.com/shibukawa/imagesize_py/issues/64
https://github.com/shibukawa/imagesize_py/issues/83
https://github.com/shibukawa/imagesize_py/issues/84

Related pull requests:
https://github.com/shibukawa/imagesize_py/pull/86
https://github.com/shibukawa/imagesize_py/pull/87
https://github.com/shibukawa/imagesize_py/pull/88
https://github.com/shibukawa/imagesize_py/pull/89
https://github.com/shibukawa/imagesize_py/pull/90
https://github.com/shibukawa/imagesize_py/pull/91
https://github.com/shibukawa/imagesize_py/pull/92
Links

@pyup-bot

Copy link
Copy Markdown
Collaborator Author

Closing this in favor of #336

@pyup-bot pyup-bot closed this Aug 31, 2026
@guangrei
guangrei deleted the pyup-scheduled-update-2026-08-24 branch August 31, 2026 16:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant