Skip to content

python-werkzeug: bump to 3.1.6#28934

Merged
commodo merged 1 commit intoopenwrt:masterfrom
commodo:python-werkzeug-bump-3.1.6
Mar 23, 2026
Merged

python-werkzeug: bump to 3.1.6#28934
commodo merged 1 commit intoopenwrt:masterfrom
commodo:python-werkzeug-bump-3.1.6

Conversation

@commodo
Copy link
Contributor

@commodo commodo commented Mar 21, 2026

📦 Package Details

Maintainer: me

Description:

Changelog since 3.1.3:

  • v3.1.4: Fix special device name access on Windows in send_from_directory (security); fix multipart parser \r\n handling at chunk boundaries; improve Watchdog reloader CPU efficiency
  • v3.1.5: Extend Windows path protection against special device names (security); fix multipart form parser \r\n at chunk boundaries; fix AttributeError in DebuggedApplication with pin_security=False
  • v3.1.6: Block special device names in multi-segment paths on Windows via safe_join (security)

Add test.sh.

Full changelog:
https://werkzeug.palletsprojects.com/en/stable/changes/


🧪 Run Testing Details

  • OpenWrt Version:
  • OpenWrt Target/Subtarget:
  • OpenWrt Device:

✅ Formalities

  • I have reviewed the CONTRIBUTING.md file for detailed contributing guidelines.

Changelog since 3.1.3:
- v3.1.4: Fix special device name access on Windows in send_from_directory
  (security); fix multipart parser \r\n handling at chunk boundaries;
  improve Watchdog reloader CPU efficiency
- v3.1.5: Extend Windows path protection against special device names
  (security); fix multipart form parser \r\n at chunk boundaries; fix
  AttributeError in DebuggedApplication with pin_security=False
- v3.1.6: Block special device names in multi-segment paths on Windows
  via safe_join (security)

Add test.sh.

Full changelog:
https://werkzeug.palletsprojects.com/en/stable/changes/

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
@commodo commodo force-pushed the python-werkzeug-bump-3.1.6 branch from f9e09cc to 3b87c5b Compare March 23, 2026 11:54
@commodo commodo merged commit df0744b into openwrt:master Mar 23, 2026
12 checks passed
@commodo commodo deleted the python-werkzeug-bump-3.1.6 branch March 23, 2026 16:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant