🔧 MAINTAIN: Pin itsdangerous

[chrisjsewell]

itsdangerous just released 2.1.0, which drops itsdangerous.json: https://itsdangerous.palletsprojects.com/en/2.1.x/changes/#version-2-1-0
This is incompatible with flask 1.x (in the rest extra)

Incidentally, whilst looking at this, I noted that aiida-core actually only installs flask<=1.1.2, because that has no upper pins on dependencies, whereas aiida-core is incompatible with flask>=1.1.3 because of the click/jinja upper versions it pins:
https://github.com/pallets/flask/blob/c04b0de558fe8e1ccb8edb4525d40e725ae9a24d/setup.py#L55-L59
(flask v2 is also out)

Given the rest code is eventually intended to be deprecated for aiida-restapi, I wouldn't be too worried though

[codecov]

Codecov Report

Merging #5365 (03f7d8e) into develop (da5f9b0) will increase coverage by 0.01%.
The diff coverage is n/a.

@@             Coverage Diff             @@
##           develop    #5365      +/-   ##
===========================================
+ Coverage    79.46%   79.46%   +0.01%     
===========================================
  Files          513      513              
  Lines        36755    36755              
===========================================
+ Hits         29202    29203       +1     
+ Misses        7553     7552       -1     

Impacted Files	Coverage Δ
aiida/transports/plugins/local.py	81.71% <0.00%> (+0.26%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update da5f9b0...03f7d8e. Read the comment docs.

[sphuber]

Would the REST API be compatible with flask 2.0? If so, might make more sense to just update to that no? Please hold with merging for a bit

[sphuber]

I checked updating to flask~=2.0 here and tests work, so I would actually advise that. That version of flask has been out for almost a year

Looks like updating flask might be an option based on sphuber's test.

[sphuber]

Superseded by #5366