Skip to content
This repository was archived by the owner on Oct 10, 2025. It is now read-only.

build(deps): bump werkzeug from 2.0.1 to 3.0.6 in /tunneling/python #227

Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

build(deps): bump werkzeug from 2.0.1 to 3.0.6 in /tunneling/python #227

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion tunneling/python/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,4 +10,4 @@ MarkupSafe==2.0.1
requests==2.26.0
six==1.16.0
urllib3==1.26.7
Werkzeug==2.0.1
Werkzeug==3.0.6
Copy link

@seer-by-sentry seer-by-sentry bot Oct 9, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Potential bug: The specified version of Flask (2.0.1) is incompatible with Werkzeug (3.0.0), which will cause a fatal ImportError on application startup.

  • Description: The application's dependencies specify Flask==2.0.1 and Werkzeug==3.0.0. However, Werkzeug 3.0.0 introduced breaking changes, including the removal of the url_quote function from werkzeug.urls. Flask 2.0.1 requires this function and attempts to import it during its initialization. This version mismatch will cause a fatal ImportError when the application attempts to start, preventing it from ever running.

  • Suggested fix: To resolve the version conflict, either downgrade Werkzeug to a version compatible with Flask 2.0.1 by pinning it to Werkzeug<3.0.0, or upgrade Flask to a version that supports Werkzeug 3.x, such as Flask>=2.2.5.
    severity: 1.0, confidence: 1.0

Did we get this right? 👍 / 👎 to inform future reviews.