Update dependency Werkzeug to v3.1.9 #189

Merged

renovate-bot merged 1 commit from renovate/werkzeug-3.x into master

2026-09-27 22:01:59 +02:00

renovate-bot commented

2026-09-27 22:00:35 +02:00

Collaborator

This PR contains the following updates:

Package	Change	Age	Confidence
Werkzeug (changelog)	`==3.1.8` → `==3.1.9`

Release Notes

pallets/werkzeug (Werkzeug)

`v3.1.9`

Compare Source

Released 2026-09-27

safe_join on Windows does not allow special devices names with empty ADS
markers on NTFS. :ghsa:g6x2-hccm-hh4m
ProfilerMiddleware uses profiling.tracing on Python 3.15.
:issue:3207
uri_to_iri and iri_to_uri preserve empty username, password, and
port 0. :issue:3189
Improve performance of parse_options_header. :pr:3231
Improve performance of parse_etags. :pr:3231
Improve performance of parse_cookie. :pr:3231
get_host also checks that the port is in the valid range. :pr:3236
The int URL converter returns a 404 instead of 500 error when the value
is longer than sys.get_int_max_str_digits(). :issue:3237
Improve debugger PIN generation from cgroup data inside Podman.
:issue:3245
Authorization parsing basic auth disallows non-base64 characters.
:pr:3248
application/x-www-form-urlencoded form data is no longer limited to
max_form_memory_size, only max_content_length. :pr:3251
LimitedStream.readinto does not resize the buffer when it reads less
than the remaining size. :pr:3253
Rules with 10 or more converters in a single part assign matched values
correctly. :pr:3254
The invalid Range suffix length -0 is no longer accepted. :pr:3255

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [Werkzeug](https://github.com/pallets/werkzeug) ([changelog](https://werkzeug.palletsprojects.com/page/changes/)) | `==3.1.8` → `==3.1.9` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/werkzeug/3.1.9?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/werkzeug/3.1.8/3.1.9?slim=true) | --- ### Release Notes <details> <summary>pallets/werkzeug (Werkzeug)</summary> ### [`v3.1.9`](https://github.com/pallets/werkzeug/blob/HEAD/CHANGES.rst#Version-319) [Compare Source](https://github.com/pallets/werkzeug/compare/3.1.8...3.1.9) Released 2026-09-27 - `safe_join` on Windows does not allow special devices names with empty ADS markers on NTFS. :ghsa:`g6x2-hccm-hh4m` - `ProfilerMiddleware` uses `profiling.tracing` on Python 3.15. :issue:`3207` - `uri_to_iri` and `iri_to_uri` preserve empty username, password, and port 0. :issue:`3189` - Improve performance of `parse_options_header`. :pr:`3231` - Improve performance of `parse_etags`. :pr:`3231` - Improve performance of `parse_cookie`. :pr:`3231` - `get_host` also checks that the port is in the valid range. :pr:`3236` - The `int` URL converter returns a 404 instead of 500 error when the value is longer than `sys.get_int_max_str_digits()`. :issue:`3237` - Improve debugger PIN generation from cgroup data inside Podman. :issue:`3245` - `Authorization` parsing `basic` auth disallows non-base64 characters. :pr:`3248` - `application/x-www-form-urlencoded` form data is no longer limited to `max_form_memory_size`, only `max_content_length`. :pr:`3251` - `LimitedStream.readinto` does not resize the buffer when it reads less than the remaining size. :pr:`3253` - Rules with 10 or more converters in a single part assign matched values correctly. :pr:`3254` - The invalid `Range` suffix length `-0` is no longer accepted. :pr:`3255` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-09-27 22:00:35 +02:00

Update dependency Werkzeug to v3.1.9

Python formatting PEP8 / Python-PEP8 (push) Successful in 12s

Details

Renovate / forgejo (push) Successful in 14s

Details

Test / test (push) Successful in 17s

Details

Test / test (pull_request) Successful in 17s

Details

b556ea690c