setup.py: bump flask version

opendatacube / datacube-explorer

Web-based exploration of Open Data Cube collections

Apache License 2.0

54 stars 31 forks source link

Closed pjonsson closed 7 months ago

pjonsson commented 7 months ago

Update flask to 2.2.5 to fix CVE-2023-30861 and restrict Werkzeug to <3 to fix:

ImportError: cannot import name 'url_quote' from 'werkzeug.urls' (/usr/local/lib/python3.8/dist-packages/werkzeug/urls.py)

in the integration tests.

pjonsson commented 7 months ago

@omad I'm not sure bumping flask version caused a schema validation failure, do you know if the CI tests have passed recently?