chore(deps): update all dependencies (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
Werkzeug (changelog)	>= 2.3.7, < 3.0.0 -> >=3.1.3, <3.2.0						major
actions/checkout	v2 -> v4					action	major
flask (changelog)	==2.3.3 -> ==3.1.0						major
gevent (changelog)	==21.12.0 -> ==24.11.1						major
greenlet	==1.1.2 -> ==3.1.1						major
markupsafe (changelog)	>= 1.0, < 2.2.0 -> >=3, <4						major
release-drafter/release-drafter	v5 -> v6					action	major

---

Release Notes

actions/checkout (actions/checkout)

v4

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v3

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

pallets/flask (flask)

v3.1.0

Compare Source

Released 2024-11-13

• Drop support for Python 3.8. :pr:5623
• Update minimum dependency versions to latest feature releases.
  Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. :pr:5624,5633
• Provide a configuration option to control automatic option
  responses. :pr:5496
• Flask.open_resource/open_instance_resource and
  Blueprint.open_resource take an encoding parameter to use when
  opening in text mode. It defaults to utf-8. :issue:5504
• Request.max_content_length can be customized per-request instead of only
  through the MAX_CONTENT_LENGTH config. Added
  MAX_FORM_MEMORY_SIZE and MAX_FORM_PARTS config. Added documentation
  about resource limits to the security page. :issue:5625
• Add support for the Partitioned cookie attribute (CHIPS), with the
  SESSION_COOKIE_PARTITIONED config. :issue:5472
• -e path takes precedence over default .env and .flaskenv files.
  load_dotenv loads default files in addition to a path unless
  load_defaults=False is passed. :issue:5628
• Support key rotation with the SECRET_KEY_FALLBACKS config, a list of old
  secret keys that can still be used for unsigning. Extensions will need to
  add support. :issue:5621
• Fix how setting host_matching=True or subdomain_matching=False
  interacts with SERVER_NAME. Setting SERVER_NAME no longer restricts
  requests to only that domain. :issue:5553
• Request.trusted_hosts is checked during routing, and can be set through
  the TRUSTED_HOSTS config. :issue:5636

v3.0.3

Compare Source

Released 2024-04-07

• The default hashlib.sha1 may not be available in FIPS builds. Don't
  access it at import time so the developer has time to change the default.
  :issue:5448
• Don't initialize the cli attribute in the sansio scaffold, but rather in
  the Flask concrete class. :pr:5270

v3.0.2

Compare Source

Released 2024-02-03

• Correct type for jinja_loader property. :issue:5388
• Fix error with --extra-files and --exclude-patterns CLI options.
  :issue:5391

v3.0.1

Compare Source

Released 2024-01-18

• Correct type for path argument to send_file. :issue:5230
• Fix a typo in an error message for the flask run --key option. :pr:5344
• Session data is untagged without relying on the built-in json.loads
object_hook. This allows other JSON providers that don't implement that.
  :issue:5381
• Address more type findings when using mypy strict mode. :pr:5383

v3.0.0

Compare Source

Released 2023-09-30

• Remove previously deprecated code. :pr:5223
• Deprecate the __version__ attribute. Use feature detection, or
  importlib.metadata.version("flask"), instead. :issue:5230
• Restructure the code such that the Flask (app) and Blueprint
  classes have Sans-IO bases. :pr:5127
• Allow self as an argument to url_for. :pr:5264
• Require Werkzeug >= 3.0.0.

pallets/markupsafe (markupsafe)

v3.0.2

Compare Source

Released 2024-10-18

• Fix compatibility when __str__ returns a str subclass. :issue:472
• Build requires setuptools >= 70.1. :issue:475

v3.0.1

Compare Source

Released 2024-10-08

• Address compiler warnings that became errors in GCC 14. :issue:466
• Fix compatibility with proxy objects. :issue:467

v3.0.0

Compare Source

Released 2024-10-07

• Support Python 3.13 and its experimental free-threaded build. :pr:461
• Drop support for Python 3.7 and 3.8.
• Use modern packaging metadata with pyproject.toml instead of setup.cfg.
  :pr:348
• Change distutils imports to setuptools. :pr:399
• Use deferred evaluation of annotations. :pr:400
• Update signatures for Markup methods to match str signatures. Use
  positional-only arguments. :pr:400
• Some str methods on Markup no longer escape their argument:
  strip, lstrip, rstrip, removeprefix, removesuffix,
  partition, and rpartition; replace only escapes its new
  argument. These methods are conceptually linked to search methods such as
  in, find, and index, which already do not escape their argument.
  :issue:401
• The __version__ attribute is deprecated. Use feature detection, or
  importlib.metadata.version("markupsafe"), instead. :pr:402
• Speed up escaping plain strings by 40%. :pr:434
• Simplify speedups implementation. :pr:437

release-drafter/release-drafter (release-drafter/release-drafter)

v6

Compare Source

---

Configuration

📅 Schedule: Branch creation - "on the first day of january" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.