Skip to content

Bump flask from 1.1.1 to 2.2.5 in /extra/libcbor/doc/source - #5

Closed
dependabot[bot] wants to merge 1 commit into
8.0from
dependabot/pip/extra/libcbor/doc/source/flask-2.2.5
Closed

Bump flask from 1.1.1 to 2.2.5 in /extra/libcbor/doc/source#5
dependabot[bot] wants to merge 1 commit into
8.0from
dependabot/pip/extra/libcbor/doc/source/flask-2.2.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2023

Copy link
Copy Markdown

Bumps flask from 1.1.1 to 2.2.5.

Release notes

Sourced from flask's releases.

2.2.5

This is a security fix release for the 2.2.x release branch. Note that 2.3.x is the currently supported release branch; please upgrade to the latest version if possible.

2.2.4

This is a fix release for the 2.2.x release branch.

2.2.3

This is a fix release for the 2.2.x release branch.

2.2.2

This is a fix release for the 2.2.0 feature release.

2.2.1

This is a fix release for the 2.2.0 feature release.

2.2.0

This is a feature release, which includes new features and removes previously deprecated code. The 2.2.x branch is now the supported bug fix branch, the 2.1.x branch will become a tag marking the end of support for that branch. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades.

2.1.3

2.1.2

This is a fix release for the 2.1.0 feature release.

2.1.1

This is a fix release for the 2.1.0 feature release.

... (truncated)

Changelog

Sourced from flask's changelog.

Version 2.2.5

Released 2023-05-02

  • Update for compatibility with Werkzeug 2.3.3.
  • Set Vary: Cookie header when the session is accessed, modified, or refreshed.

Version 2.2.4

Released 2023-04-25

  • Update for compatibility with Werkzeug 2.3.

Version 2.2.3

Released 2023-02-15

  • Autoescape is enabled by default for .svg template files. :issue:4831
  • Fix the type of template_folder to accept pathlib.Path. :issue:4892
  • Add --debug option to the flask run command. :issue:4777

Version 2.2.2

Released 2022-08-08

  • Update Werkzeug dependency to >= 2.2.2. This includes fixes related to the new faster router, header parsing, and the development server. :pr:4754
  • Fix the default value for app.env to be "production". This attribute remains deprecated. :issue:4740

Version 2.2.1

Released 2022-08-03

  • Setting or accessing json_encoder or json_decoder raises a deprecation warning. :issue:4732

Version 2.2.0

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [flask](https://github.com/pallets/flask) from 1.1.1 to 2.2.5.
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@1.1.1...2.2.5)

---
updated-dependencies:
- dependency-name: flask
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 21, 2023
@dependabot @github

dependabot Bot commented on behalf of github May 6, 2024

Copy link
Copy Markdown
Author

Superseded by #14.

@dependabot dependabot Bot closed this May 6, 2024
@dependabot
dependabot Bot deleted the dependabot/pip/extra/libcbor/doc/source/flask-2.2.5 branch May 6, 2024 15:15
ben-thul pushed a commit that referenced this pull request Aug 19, 2026
https://perconadev.atlassian.net/browse/PS-11242

percona.clone_consistent_snapshot crashed in a debug build with:

  [InnoDB] Assertion failure: trx0sys.cc:821:
           prev_trx == nullptr || prev_trx->id > trx->id
   #5 trx_sys_validate_trx_list  trx0sys.cc:821
   #6 trx_erase_lists            trx0trx.cc:1838
   #8 trx_commit_in_memory       trx0trx.cc:2009
   ...
  #21 Clone_persist_gtid::write_to_table  clone0repl.cc:475
  #24 clone_gtid_thread                   clone0repl.cc:723

trx_sys->rw_trx_list is required to be ordered by descending trx->id,
and trx_sys_validate_trx_list() (UNIV_DEBUG only) enforces it on every
erase.

The consistent snapshot clone-view feature preallocates a transaction
id for a donor read-only transaction (ReadView::clone() in read0read.cc).
When that donor is later promoted to read-write via trx_set_rw_mode() ->
trx_assign_id_for_rw(), it reuses the preallocated id, which - as the
existing comment notes - "might not be received in ascending order" and
can therefore be smaller than ids handed out to other transactions in
the meantime.

trx_assign_id_for_rw() already accounts for this when maintaining the
sorted rw_trx_ids vector (the std::upper_bound insert), but
trx_add_to_rw_trx_list() always did UT_LIST_ADD_FIRST, which assumes the
new id is the greatest. Prepending an out-of-order preallocated id breaks
the descending-id ordering of rw_trx_list. The corruption goes unnoticed
at insertion time because trx_set_rw_mode() (unlike trx_start_low()) has
no post-insert validation, and is only caught later when an unrelated
transaction - here the clone GTID persister thread - commits and runs the
validation during trx_erase_lists().

Fix trx_add_to_rw_trx_list() to insert a transaction carrying a
preallocated_id at the position that preserves descending-id order,
mirroring the rw_trx_ids handling. The common case (a freshly allocated
id, which is always the greatest) keeps the O(1) prepend, so there is no
hot-path regression.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants