chore(deps): update dependency flask-caching to v2.5.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Flask-Caching (changelog)	==2.4.1 → ==2.5.0

---

Release Notes

pallets-eco/flask-caching (Flask-Caching)

v2.5.0

Compare Source

Released 2026-08-24

• Specifying timeouts now also works with datetime.timedelta. :issue:266
• Add config option CACHE_SERIALIZER to set the cachelib serializer the backend uses.
  :issue:209
• cachelib backends can now be configured directly via CACHE_TYPE="cachelib.ValkeyCache.
  :pr:668
• @cached and @memoize now go through the public Cache proxy methods
  (get, set, has, delete, delete_many, get_many and
  set_many) instead of calling the backend directly. :issue:417
• Document that CACHE_REDIS_HOST accepts an already created redis.Redis
  client instead of a host name, which allows sharing a connection pool with
  other extensions and the application. :issue:629
• Send Signals for cache hits and misses. :pr:#237 and :pr:667
• Include key_prefix when building @cached(query_string=True) cache
  keys. :issue:302
• Add Cache.delete_cached() and extend make_cache_key() with path and query_args
  arguments to make deleting views decorated with cached(query_string=True) possible.
  :issue:243
• Use hashlib.sha256 instead of hashlib.md5 for hashing the cache keys.
  This changes the generated keys, so entries cached by an earlier version become
  obsolete. If you wish to still use hashlib.md5 set the config
  CACHE_HASH_METHOD = hashlib.md5. :pr:563
• Add CACHE_HASH_METHOD to set the hash method used for the cache keys of
  @cached and @memoize.
• Drop support for Python 3.10 and require cachelib 0.17.0+
• CACHE_IGNORE_ERRORS is now used by every backend instead of only
  SimpleCache and FileSystemCache.
• The delete_many method is now used from cachelib. A key
  that does not exist counts as deleted, and with CACHE_IGNORE_ERRORS set to
  False a RuntimeError is raised if the key could not be deleted.
• Clarify docs about decorator order regarding @staticmethod and @classmethod
  when memoizing. :issue:440
• Remove the deprecated lowercase CACHE_TYPE names (null, simple,
  filesystem, redis, redissentinel, rediscluster, uwsgi,
  memcached, gaememcached, saslmemcached and
  spreadsaslmemcached)
• Call @memoize forced_update callbacks once per decorated function
  call instead of once while making the key and again before cache lookup.
  :issue:387
• Add an is_stale option to @cached and @memoize. It is called on a
  cache hit with the cached value. Unlike forced_update it uses the value itself
  to check whether the cache is stale. Can be used in combination with forced_update
  :issue:392
• @cached now caches an HTTPException raised by the view (i.e. through abort()).
  This exception will now be re-raises on a cache hit. Use response_filter,
  to keep the exception out of the cache. :issue:444
• Fix a @memoize cache-key collision when a parameter has a falsy
  default (e.g. 0, "", False): calling with the default was
  keyed the same as passing None, returning the wrong cached result.
  :pr:656
• @cached and @memoize now preserve the wrapped function's
  signature and expose uncached, cache_timeout, make_cache_key
delete_memoized to type checkers.
• Fix @cached(response_hit_indication=True) appending a new
  after_request function to the app on every request.
• Fix a view returning an iterator of strings, for example when using
  flask.stream_template it previously returned a list of JSON strings instead
  of the rendered template. :issue:511
• Fix __caching_id__ never being usable. @memoize silently ignored that
  and ran the function uncached.
• Add CACHE_FILE_HASH_METHOD config option to FileSystemCache to allow
  using a different hash function for cache keys. :pr:660
• Add pool_size and pool_blocking to make MemcachedCache backends
  thread-safe. :pr:663
• Modify SimpleCache docs as it's now thread-safe using an RLock for all
  operations. :pr:663
• delete_memoized now takes the instance from a bound method, so
  cache.delete_memoized(obj.method, 1) deletes the cache for
  obj.method(1) instead of silently deleting nothing.
  The current behaviour by passing the instance keeps working as well.
  :issue:554
• The {% cache %} Jinja tag no longer propagates backend errors. If the
  cache is unavailable, the block is rendered normally instead of raising,
  matching the existing behavior of @memoize. :issue:564 :pr:565
• Fix @memoize invalidating a function's entire cache by not updating the
  memoize version key's timeout. It is now refreshed each time an entry is written,
  with that entry's own timeout. :issue:531

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.