James Addison
fb54159861
secret key rotation: fix key list ordering
...
The `itsdangerous` serializer interface[1] expects keys to be
provided with the oldest key at index zero and the active signing key
at the end of the list.
We document[2] that `SECRET_KEY_FALLBACKS` should be configured with
the most recent first (at index zero), so to achieve the expected
behaviour, those should be inserted in reverse-order at the head of
the list.
[1] - https://itsdangerous.palletsprojects.com/en/stable/serializer/#itsdangerous.serializer.Serializer
[2] - https://flask.palletsprojects.com/en/stable/config/#SECRET_KEY_FALLBACKS
2025-05-12 18:30:27 -07:00
David Lord
bc143499cf
Merge branch 'stable'
2025-05-11 18:08:43 -07:00
David Lord
941efd4a36
use uv ( #5727 )
2025-05-11 18:04:35 -07:00
David Lord
0109e496f6
use uv
2025-05-11 17:58:53 -07:00
David Lord
11c45eeba3
update dev dependencies
2025-05-11 05:58:48 -07:00
David Lord
b78b5a210b
Merge branch 'stable'
2025-03-30 13:17:17 -07:00
David Lord
e785166507
Async Iterable Response ( #5659 )
2025-03-30 13:15:54 -07:00
CoolCat467
410e5ab7ed
Accept AsyncIterable for responses
2025-03-30 13:14:25 -07:00
David Lord
bfffe87d4c
add ghsa links
2025-03-29 15:57:16 -07:00
David Lord
73ce26c3e8
remove tests about deprecated pkgutil.get_loader ( #5702 )
2025-03-29 15:45:11 -07:00
David Lord
41ec5760a2
remove tests about deprecated pkgutil.get_loader
2025-03-29 15:42:58 -07:00
David Lord
2732c4db66
add endpoint name in favicon example ( #5701 )
2025-03-29 15:32:28 -07:00
David Lord
c94d2a77db
add endpoint name in favicon example
2025-03-29 15:30:56 -07:00
David Lord
315ebc1176
better type checking during deprecation ( #5700 )
2025-03-29 15:28:27 -07:00
David Lord
7d5d187458
better type checking during deprecation
2025-03-29 15:23:34 -07:00
David Lord
c7c8dc38ea
Remove HTTP Public Key Pinning from docs ( #5695 )
2025-03-29 15:17:48 -07:00
black
2ae36c8dd5
Remove HTTP Public Key Pinning from docs
...
The header is considered obsolete and no longer supported by any major
browser. MDN link is dead.
2025-03-29 15:16:24 -07:00
David Lord
5ea0ab8ea2
Handle help arg by itself the same as no args ( #5674 )
2025-03-29 15:15:04 -07:00
George Waters
da60039486
Handle help arg by itself the same as no args
...
When the 'flask' command is used with only the '--help' parameter, this
change will make sure to try and load the app before the help callback
is run. This was previously only being done when the 'flask' command was
used by itself. This meant when passing in '--help', any custom commands
were not getting shown in the help message. With this change, custom
commands will be included in the help message when running 'flask' on
the command line by itself or with the '--help' parameter.
2025-03-29 15:13:23 -07:00
David Lord
08c480b3b3
Update app factory docs ( #5671 )
2025-03-29 15:10:55 -07:00
kotvkvante
f51a23839a
fix bash cli syntax error and app name
2025-03-29 15:09:26 -07:00
David Lord
04b070fa26
Fix typo in the docs ( #5650 )
2025-03-29 14:49:06 -07:00
zhuangzhuang
75a8327cfd
Update mongoengine.rst
2025-03-29 14:47:41 -07:00
David Lord
165af0a090
update dev dependencies
2025-03-29 14:44:59 -07:00
David Lord
235c52fa10
fix rtd build
2025-03-29 14:37:13 -07:00
David Lord
f61172b8dd
Merge branch 'stable'
2025-01-05 09:10:00 -08:00
David Lord
959052fb8d
use global contributing guide
...
Remove the per-project files so we don't have to
keep them in sync. GitHub's UI links to everything
except the contributing guide, so add a section
about that to the readme.
(cherry picked from commit 60a11a730e
2025-01-05 09:09:33 -08:00
David Lord
5b525e9797
markdown formatting
...
(cherry picked from commit 6b361ce06b
2025-01-05 09:09:32 -08:00
David Lord
60a11a730e
use global contributing guide
...
Remove the per-project files so we don't have to
keep them in sync. GitHub's UI links to everything
except the contributing guide, so add a section
about that to the readme.
2025-01-05 09:02:41 -08:00
David Lord
6b361ce06b
markdown formatting
2025-01-05 09:01:49 -08:00
David Lord
6b054f8f38
Merge branch 'stable'
2024-11-23 17:54:29 -08:00
David Lord
f2674c5bb4
fix type hint for cli_runner.invoke ( #5647 )
2024-11-23 17:52:56 -08:00
kurtatter
54c3f87af9
fix type hint for cli_runner.invoke
2024-11-23 17:50:40 -08:00
David Lord
ea08f155d8
update __version__ deprecation ( #5649 )
2024-11-23 16:06:37 -08:00
David Lord
b394a994e6
update __version__ deprecation
2024-11-23 16:03:47 -08:00
David Lord
dcbe86bd15
start version 3.1.1
2024-11-23 16:01:16 -08:00
David Lord
d5b7a05ab2
remove previously deprecated code ( #5648 )
2024-11-23 15:59:30 -08:00
David Lord
d22bfcd4cf
remove previously deprecated code
2024-11-23 15:41:36 -08:00
David Lord
4fec712f32
start version 3.2.0
2024-11-23 15:33:38 -08:00
David Lord
18ffe1eaf6
add gettext config for docs
2024-11-20 19:37:06 -08:00
David Lord
bc098406af
release version 3.1.0 ( #5640 )
2024-11-13 10:27:38 -08:00
David Lord
ab81496641
release version 3.1.0
2024-11-13 10:20:07 -08:00
David Lord
70602a196a
remove test pypi
2024-11-13 09:23:24 -08:00
David Lord
6748a09341
update dev dependencies
2024-11-13 08:48:10 -08:00
David Lord
22c48a738b
Merge remote-tracking branch 'origin/stable'
2024-11-13 08:43:48 -08:00
David Lord
2eab96a32a
use generic bases for session ( #5638 )
2024-11-13 08:27:11 -08:00
David Lord
f49dbfd3e4
use generic bases for session
2024-11-13 08:22:57 -08:00
David Lord
7b21d43d4c
configure and check request.trusted_hosts ( #5637 )
2024-11-12 21:03:23 -08:00
David Lord
4f7156f2c3
configure and check trusted_hosts
2024-11-12 21:01:55 -08:00
David Lord
10bdf61a0f
setting SERVER_NAME does not restrict routing for both subdomain_matching and host_matching ( #5634 )
2024-11-12 10:13:39 -08:00
