Update dependency MarkupSafe to v3#14006
Update dependency MarkupSafe to v3#14006renovate-bot wants to merge 1 commit intoGoogleCloudPlatform:mainfrom
Conversation
There was a problem hiding this comment.
Code Review
This pull request updates the MarkupSafe dependency to version 3.0.3 across multiple requirement files. The review highlights that this upgrade may introduce breaking changes and compatibility issues with older Python versions (3.7 and 3.8) and legacy frameworks like Flask==1.1.4. It is recommended to revert to markupsafe==2.1.5 to maintain stability in these environments.
| gunicorn==23.0.0 | ||
| requests==2.31.0 | ||
| markupsafe==2.0.1 | ||
| markupsafe==3.0.3 |
There was a problem hiding this comment.
Updating markupsafe to 3.0.3 is likely to cause compatibility issues in this legacy environment. MarkupSafe 3.0.0+ dropped support for Python 3.7 and 3.8, which are often used with Flask==1.1.4. Additionally, the major version bump introduces breaking changes in method signatures (positional-only arguments) and escaping behavior that may not be supported by the older versions of Flask and Werkzeug pinned here.
markupsafe==2.1.5
| pytest==8.2.0 | ||
| cloud-composer-dag-test-utils==1.0.0 | ||
| markupsafe==2.1.2 | ||
| markupsafe==3.0.3 |
There was a problem hiding this comment.
MarkupSafe 3.0.0+ drops support for Python 3.7 and 3.8. As this sample is for an older Airflow summit, it may be intended for environments using these Python versions. Upgrading to 3.0.3 will cause installation failures on those runtimes.
markupsafe==2.1.5
This PR contains the following updates:
==2.1.3→==3.0.3==2.1.2→==3.0.3==2.0.1→==3.0.3Release Notes
pallets/markupsafe (MarkupSafe)
v3.0.3Compare Source
Released 2025-09-27
__version__raisesDeprecationWarninginstead ofUserWarning.:issue:
487489) for the C extension.:issue:
494485503505v3.0.2Compare Source
Released 2024-10-18
__str__returns astrsubclass. :issue:472475v3.0.1Compare Source
Released 2024-10-08
466467v3.0.0Compare Source
Released 2024-10-07
461pyproject.tomlinstead ofsetup.cfg.:pr:
348distutilsimports tosetuptools. :pr:399400Markupmethods to matchstrsignatures. Usepositional-only arguments. :pr:
400strmethods onMarkupno longer escape their argument:strip,lstrip,rstrip,removeprefix,removesuffix,partition, andrpartition;replaceonly escapes itsnewargument. These methods are conceptually linked to search methods such as
in,find, andindex, which already do not escape their argument.:issue:
401__version__attribute is deprecated. Use feature detection, orimportlib.metadata.version("markupsafe"), instead. :pr:402434437v2.1.5Compare Source
Released 2024-02-02
striptagsnot collapsing spaces. :issue:417v2.1.4Compare Source
Released 2024-01-19
striptags, avoiding a performanceissue. :pr:
413Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Never, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.