Changelog
*Sourced from [flask's changelog](https://github.com/pallets/flask/blob/master/CHANGES.rst).*
> Version 1.0.3
> =============
>
> Unreleased
>
> - send\_file encodes filenames as ASCII instead of Latin-1 (ISO-8859-1). This fixes compatibility with Gunicorn, which is stricter about header encodings than PEP 3333. ([\#2766](https://github-redirect.dependabot.com/pallets/flask/issues/2766))
> - Allow custom CLIs using `FlaskGroup` to set the debug flag without it always being overwritten based on environment variables. ([\#2765](https://github-redirect.dependabot.com/pallets/flask/pull/2765))
> - `flask --version` outputs Werkzeug's version and simplifies the Python version. ([\#2825](https://github-redirect.dependabot.com/pallets/flask/pull/2825))
> - send\_file handles an `attachment_filename` that is a native Python 2 string (bytes) with UTF-8 coded bytes. ([\#2933](https://github-redirect.dependabot.com/pallets/flask/issues/2933))
> - A catch-all error handler registered for `HTTPException` will not handle `RoutingException`, which is used internally during routing. This fixes the unexpected behavior that had been introduced in 1.0. ([\#2986](https://github-redirect.dependabot.com/pallets/flask/pull/2986))
Commits
- [`99660cc`](https://github.com/pallets/flask/commit/99660cc40984015cbbcd27d1cdc19376b2536443) release version 1.0.3
- [`3dc84ec`](https://github.com/pallets/flask/commit/3dc84ec4609de0c08fd159ebe991453309952fa8) Merge pull request [#3206](https://github-redirect.dependabot.com/pallets/flask/issues/3206) from pallets/test-client-json
- [`a4f0f19`](https://github.com/pallets/flask/commit/a4f0f197962b27a002c45f5e27b13a8d4a27ee63) don't push app context for test client json
- [`f2c8540`](https://github.com/pallets/flask/commit/f2c854060adf021347a6c4217fdb06a77a38bf58) Merge pull request [#3169](https://github-redirect.dependabot.com/pallets/flask/issues/3169) from DamianSkrzypczak/3168-improve-warning-about-dev...
- [`e2f4b53`](https://github.com/pallets/flask/commit/e2f4b53396f4676978f86492dae5d3952446df89) Fix dev-server warning message readability ([#3168](https://github-redirect.dependabot.com/pallets/flask/issues/3168))
- [`ab3f922`](https://github.com/pallets/flask/commit/ab3f92253388df031d2947a5a76c980cba7cb694) Merge pull request [#3154](https://github-redirect.dependabot.com/pallets/flask/issues/3154) from brunoais/more-explicit-session-transaction
- [`6142aa6`](https://github.com/pallets/flask/commit/6142aa64ae4d0957d735b6b86c5abe15fea06504) More explicit explanation: session testing
- [`55801b5`](https://github.com/pallets/flask/commit/55801b5653bd5c290b10731c80bc15456e261217) Merge pull request [#3166](https://github-redirect.dependabot.com/pallets/flask/issues/3166) from mekarpeles/refactor/unused-url_join
- [`ac78da0`](https://github.com/pallets/flask/commit/ac78da0bb02fc5c07c896a77d3fc2b32e7924407) removed unused reference to url_join
- [`814a7ea`](https://github.com/pallets/flask/commit/814a7ea96f1f0aa124537cee98fed0955ebbf6c4) Merge pull request [#3204](https://github-redirect.dependabot.com/pallets/flask/issues/3204) from pallets/azure
- Additional commits viewable in [compare view](https://github.com/pallets/flask/compare/1.0.2...1.0.3)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
If all status checks pass Dependabot will automatically merge this pull request.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
Bumps flask from 1.0.2 to 1.0.3.
Changelog
*Sourced from [flask's changelog](https://github.com/pallets/flask/blob/master/CHANGES.rst).* > Version 1.0.3 > ============= > > Unreleased > > - send\_file encodes filenames as ASCII instead of Latin-1 (ISO-8859-1). This fixes compatibility with Gunicorn, which is stricter about header encodings than PEP 3333. ([\#2766](https://github-redirect.dependabot.com/pallets/flask/issues/2766)) > - Allow custom CLIs using `FlaskGroup` to set the debug flag without it always being overwritten based on environment variables. ([\#2765](https://github-redirect.dependabot.com/pallets/flask/pull/2765)) > - `flask --version` outputs Werkzeug's version and simplifies the Python version. ([\#2825](https://github-redirect.dependabot.com/pallets/flask/pull/2825)) > - send\_file handles an `attachment_filename` that is a native Python 2 string (bytes) with UTF-8 coded bytes. ([\#2933](https://github-redirect.dependabot.com/pallets/flask/issues/2933)) > - A catch-all error handler registered for `HTTPException` will not handle `RoutingException`, which is used internally during routing. This fixes the unexpected behavior that had been introduced in 1.0. ([\#2986](https://github-redirect.dependabot.com/pallets/flask/pull/2986))Commits
- [`99660cc`](https://github.com/pallets/flask/commit/99660cc40984015cbbcd27d1cdc19376b2536443) release version 1.0.3 - [`3dc84ec`](https://github.com/pallets/flask/commit/3dc84ec4609de0c08fd159ebe991453309952fa8) Merge pull request [#3206](https://github-redirect.dependabot.com/pallets/flask/issues/3206) from pallets/test-client-json - [`a4f0f19`](https://github.com/pallets/flask/commit/a4f0f197962b27a002c45f5e27b13a8d4a27ee63) don't push app context for test client json - [`f2c8540`](https://github.com/pallets/flask/commit/f2c854060adf021347a6c4217fdb06a77a38bf58) Merge pull request [#3169](https://github-redirect.dependabot.com/pallets/flask/issues/3169) from DamianSkrzypczak/3168-improve-warning-about-dev... - [`e2f4b53`](https://github.com/pallets/flask/commit/e2f4b53396f4676978f86492dae5d3952446df89) Fix dev-server warning message readability ([#3168](https://github-redirect.dependabot.com/pallets/flask/issues/3168)) - [`ab3f922`](https://github.com/pallets/flask/commit/ab3f92253388df031d2947a5a76c980cba7cb694) Merge pull request [#3154](https://github-redirect.dependabot.com/pallets/flask/issues/3154) from brunoais/more-explicit-session-transaction - [`6142aa6`](https://github.com/pallets/flask/commit/6142aa64ae4d0957d735b6b86c5abe15fea06504) More explicit explanation: session testing - [`55801b5`](https://github.com/pallets/flask/commit/55801b5653bd5c290b10731c80bc15456e261217) Merge pull request [#3166](https://github-redirect.dependabot.com/pallets/flask/issues/3166) from mekarpeles/refactor/unused-url_join - [`ac78da0`](https://github.com/pallets/flask/commit/ac78da0bb02fc5c07c896a77d3fc2b32e7924407) removed unused reference to url_join - [`814a7ea`](https://github.com/pallets/flask/commit/814a7ea96f1f0aa124537cee98fed0955ebbf6c4) Merge pull request [#3204](https://github-redirect.dependabot.com/pallets/flask/issues/3204) from pallets/azure - Additional commits viewable in [compare view](https://github.com/pallets/flask/compare/1.0.2...1.0.3)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.If all status checks pass Dependabot will automatically merge this pull request.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.