OpenUpSA / pmgbilltracker

Bill Tracking Application for the Parliamentary Monitoring Group
Apache License 2.0
5 stars 2 forks source link

Bump flask-admin from 1.0.7 to 1.5.3 in /requirements #49

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps flask-admin from 1.0.7 to 1.5.3.

Release notes

Sourced from flask-admin's releases.

v1.5.3

  • Fixed XSS vulnerability
  • Support nested categories in the navbar menu
  • SQLAlchemy
    • sort on multiple columns with column_default_sort
    • sort on related models in column_sortable_list
    • fix: inline model forms can now also be used for models with multiple primary keys
    • support for using mapped column_property
  • Upgrade Leaflet and Leaflet.draw plugins, used for geoalchemy integration
  • Specify minimum_input_length for ajax widget
  • Peewee: support composite keys
  • MongoEngine: when searching/filtering the input is now regarded as case-insensitive by default
  • FileAdmin
    • handle special characters in filename
    • fix a bug with listing directories on Windows
    • avoid raising an exception when unknown sort parameter is encountered
  • WTForms 3 support

1.5.2

  • Fixed XSS vulnerability
  • Fixed Peewee support
  • Added detail view column formatters
  • Updated Flask-Login example to work with the newer version of the library
  • Various SQLAlchemy-related fixes
  • Various Windows related fixes for the file admin

v1.5.0

  • Fixed CSRF generation logic for multi-process deployments
  • Added WTForms >= 3.0 support
  • Flask-Admin would not recursively save inline models, allowing arbitrary nesting
  • Added configuration properties that allow injection of additional CSS and JS dependencies into templates without overriding them
  • SQLAlchemy backend
    • Updated hybrid property detection using new SQLAlchemy APIs
    • Added support for association proxies
    • Added support for remote hybrid properties filters
    • Added support for ARRAY column type
  • Localization-related fixes
  • MongoEngine backend is now properly formats model labels
  • Improved Google App Engine support:
    • Added TextProperty, KeyProperty and SelectField support
    • Added support for form_args, excluded_columns, page_size and after_model_update
  • Fixed URL generation with localized named filters
  • FileAdmin has Bootstrap 2 support now
  • Geoalchemy support fixes
    • Use Google Places (by default) for place search
  • Updated translations
  • Bug fixes

... (truncated)

Changelog

Sourced from flask-admin's changelog.

1.5.3

  • Fixed XSS vulnerability
  • Support nested categories in the navbar menu
  • SQLAlchemy
    • sort on multiple columns with column_default_sort
    • sort on related models in column_sortable_list
    • show searchable fields in search input's placeholder text
    • fix: inline model forms can now also be used for models with multiple primary keys
    • support for using mapped column_property
  • Upgrade Leaflet and Leaflet.draw plugins, used for geoalchemy integration
  • Specify minimum_input_length for ajax widget
  • Peewee: support composite keys
  • MongoEngine: when searching/filtering the input is now regarded as case-insensitive by default
  • FileAdmin
    • handle special characters in filename
    • fix a bug with listing directories on Windows
    • avoid raising an exception when unknown sort parameter is encountered
  • WTForms 3 support

1.5.2

  • Fixed XSS vulnerability
  • Fixed Peewee support
  • Added detail view column formatters
  • Updated Flask-Login example to work with the newer version of the library
  • Various SQLAlchemy-related fixes
  • Various Windows related fixes for the file admin

1.5.1

  • Dropped Python 2.6 support
  • Fixed SQLAlchemy >= 1.2 compatibility
  • Fixed Pewee 3.0 compatibility
  • Fixed max year for a combo date inline editor
  • Lots of small bug fixes

1.5.0

  • Fixed CSRF generation logic for multi-process deployments
  • Added WTForms >= 3.0 support
  • Flask-Admin would not recursively save inline models, allowing arbitrary nesting
  • Added configuration properties that allow injection of additional CSS and JS dependencies into templates without overriding them
  • SQLAlchemy backend
    • Updated hybrid property detection using new SQLAlchemy APIs
    • Added support for association proxies

... (truncated)

Commits
  • 0528221 Bumped version, updated changelog
  • 8af10e0 Merge pull request #1699 from lbhsot/master
  • 1939762 Merge pull request #1779 from alanhamlett/master
  • c4715f0 fix flake8
  • 402e9a7 use Markupsafe to support WTForms 3
  • 829c24d Merge pull request #1751 from nurockplayer/master
  • 801a50b Merge pull request #1756 from GrayAn/checkboxlist
  • ff861de escape_html function was removed as non-existent in the too old and
  • dddfca9 SQLA fields API is now shown in the documentation
  • 2d6f7dd Alternative field for many-to-many relationship, appears as list of
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/OpenUpSA/pmgbilltracker/network/alerts).