Skip to content

fix(deps): bump werkzeug from 3.1.8 to 3.1.9 - #391

Closed
TFT444 wants to merge 1 commit into
devfrom
fix/deps-werkzeug-3.1.9
Closed

TFT444 wants to merge 1 commit into
devfrom
fix/deps-werkzeug-3.1.9

Conversation

@TFT444

@TFT444 TFT444 commented Oct 14, 2026

Copy link
Copy Markdown
Collaborator

Bumps Werkzeug from 3.1.8 to 3.1.9.

Fixes Dependabot alerts #65 and #66: safe_join() allows Windows special device names in Werkzeug 3.1.8 and earlier.

Changes

  • requirements.txt: werkzeug 3.1.8 -> 3.1.9
  • requirements-dev.txt: werkzeug 3.1.8 -> 3.1.9

References

Fixes Dependabot alerts #65 and #66 (Werkzeug safe_join() allows
Windows special device names).

Signed-off-by: Tanvir Farhad <tamimtarafder12@gmail.com>
@TFT444
TFT444 requested a review from Vishnu2707 as a code owner October 14, 2026 22:21
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
pip/werkzeug 3.1.9 UnknownUnknown

Scanned Files

  • requirements.txt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants