fix(Flask): Mass fix for broken Werkzeug dependency (GoogleCloudPlatform#10714)

rsamborski · glasnt · web-flow · commit 3088c6495b56 · 2023-10-06T08:00:28.000+11:00
* fix(Flask): Mass fix for broken Werkzeug dependency * fix(Flask): Version and requirements tweaks * fix(Flask): Version and requirements tweaks * (chore): update Flask to 3.0.0 (GoogleCloudPlatform#10713) * Update Flask to 3.0.0 Many tests returning flaky due to url_quote being removed from werkzeug (previously deprecated). Flask 3.0.0 has Python 3.8+ support, so should be updatable. * revert (separate test failures) * chore: update Flask to 3.0.0 * fix(deps): Werkzeug tweaks * fix(deps): revert changes to avoid trigerring broken tests --------- Co-authored-by: Katie McLaughlin <katie@glasnt.com>
diff --git a/appengine/flexible/analytics/requirements.txt b/appengine/flexible/analytics/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
 requests[security]==2.31.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible/hello_world/requirements.txt b/appengine/flexible/hello_world/requirements.txt
@@ -1,2 +1,3 @@
 Flask==2.1.1
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible/twilio/requirements.txt b/appengine/flexible/twilio/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
 twilio==8.2.1
+Werkzeug==2.3.7
diff --git a/appengine/flexible/websockets/requirements.txt b/appengine/flexible/websockets/requirements.txt
@@ -3,3 +3,4 @@ Flask-Sockets==0.2.1
 gunicorn==20.1.0
 requests==2.31.0
 markupsafe===2.0.1
+Werkzeug==1.0.1;
diff --git a/appengine/flexible_python37_and_earlier/analytics/requirements.txt b/appengine/flexible_python37_and_earlier/analytics/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
 requests[security]==2.31.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/datastore/requirements.txt b/appengine/flexible_python37_and_earlier/datastore/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 google-cloud-datastore==2.15.2
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/disk/requirements.txt b/appengine/flexible_python37_and_earlier/disk/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/extending_runtime/requirements.txt b/appengine/flexible_python37_and_earlier/extending_runtime/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/hello_world/requirements.txt b/appengine/flexible_python37_and_earlier/hello_world/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/metadata/requirements.txt b/appengine/flexible_python37_and_earlier/metadata/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
 requests[security]==2.31.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/multiple_services/gateway-service/requirements.txt b/appengine/flexible_python37_and_earlier/multiple_services/gateway-service/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
 requests==2.31.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/multiple_services/static-service/requirements.txt b/appengine/flexible_python37_and_earlier/multiple_services/static-service/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
 requests==2.31.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/numpy/requirements.txt b/appengine/flexible_python37_and_earlier/numpy/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
 numpy==1.21.6
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/pubsub/requirements.txt b/appengine/flexible_python37_and_earlier/pubsub/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 google-cloud-pubsub==2.17.0
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/scipy/requirements.txt b/appengine/flexible_python37_and_earlier/scipy/requirements.txt
@@ -5,3 +5,4 @@ imageio==2.29.0
 numpy==1.21.6
 pillow==10.0.1
 scipy==1.7.3
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/static_files/requirements.txt b/appengine/flexible_python37_and_earlier/static_files/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/storage/requirements.txt b/appengine/flexible_python37_and_earlier/storage/requirements.txt
@@ -1,6 +1,6 @@
 Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
-werkzeug==2.3.6; python_version > '3.7'
+werkzeug==2.3.7; python_version > '3.7'
 werkzeug==2.0.3; python_version <= '3.7'
 google-cloud-storage==2.9.0
 gunicorn==20.1.0
diff --git a/appengine/flexible_python37_and_earlier/tasks/requirements.txt b/appengine/flexible_python37_and_earlier/tasks/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
 google-cloud-tasks==2.13.1
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/twilio/requirements.txt b/appengine/flexible_python37_and_earlier/twilio/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0; python_version > '3.6'
 Flask==2.0.3; python_version < '3.7'
 gunicorn==20.1.0
 twilio==8.2.1
+Werkzeug==2.3.7
diff --git a/appengine/flexible_python37_and_earlier/websockets/requirements.txt b/appengine/flexible_python37_and_earlier/websockets/requirements.txt
@@ -3,3 +3,4 @@ Flask-Sockets==0.2.1
 gunicorn==20.1.0
 requests==2.31.0
 markupsafe===2.0.1
+Werkzeug==1.0.1;
diff --git a/appengine/standard/analytics/requirements.txt b/appengine/standard/analytics/requirements.txt
@@ -2,3 +2,5 @@ Flask==1.1.4; python_version < '3.0'
 Flask==2.1.0; python_version > '3.0'
 requests==2.27.1
 requests-toolbelt==0.10.1
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/firebase/firenotes/backend/requirements.txt b/appengine/standard/firebase/firenotes/backend/requirements.txt
@@ -6,3 +6,5 @@ google-auth==2.17.3; python_version < '3.0'
 google-auth==2.17.3; python_version > '3.0'
 requests==2.27.1
 requests-toolbelt==0.10.1
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/firebase/firetactoe/requirements.txt b/appengine/standard/firebase/firetactoe/requirements.txt
@@ -5,3 +5,5 @@ requests-toolbelt==0.10.1
 google-auth==1.34.0; python_version < '3.0'
 google-auth==2.17.3; python_version > '3.0'
 functools32==3.2.3.post2; python_version < "3"
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/flask/tutorial/requirements.txt b/appengine/standard/flask/tutorial/requirements.txt
@@ -1,3 +1,4 @@
 Flask==1.1.4; python_version < '3.0'
 Flask==2.1.0; python_version > '3.0'
 Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/iap/requirements.txt b/appengine/standard/iap/requirements.txt
@@ -1,2 +1,4 @@
 Flask==1.1.4; python_version < '3.0'
 Flask==2.1.0; python_version > '3.0'
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/mailjet/requirements.txt b/appengine/standard/mailjet/requirements.txt
@@ -3,3 +3,5 @@ Flask==2.1.0; python_version > '3.0'
 requests==2.27.1
 requests-toolbelt==0.10.1
 mailjet-rest==1.3.4
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/migration/memorystore/requirements.txt b/appengine/standard/migration/memorystore/requirements.txt
@@ -2,3 +2,5 @@ redis==4.5.4; python_version > '3.0'
 redis<5; python_version < '3.0'
 Flask==1.1.4; python_version < '3.0'
 Flask==2.1.0; python_version > '3.0'
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/migration/ndb/overview/requirements.txt b/appengine/standard/migration/ndb/overview/requirements.txt
@@ -4,3 +4,5 @@ googleapis_common_protos
 google-cloud-ndb
 Flask==1.1.4; python_version < '3.0'
 Flask==2.1.0; python_version > '3.0'
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/migration/ndb/redis_cache/requirements.txt b/appengine/standard/migration/ndb/redis_cache/requirements.txt
@@ -4,3 +4,5 @@ googleapis_common_protos
 google-cloud-ndb
 Flask==1.1.4; python_version < '3.0'
 Flask==2.1.0; python_version > '3.0'
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/migration/storage/requirements.txt b/appengine/standard/migration/storage/requirements.txt
@@ -2,3 +2,5 @@ google-cloud-storage==1.44.0; python_version < '3.7'
 google-cloud-storage==2.8.0; python_version > '3.6'
 Flask==1.1.4; python_version < '3.0'
 Flask==2.1.0; python_version > '3.0'
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/migration/taskqueue/counter/requirements.txt b/appengine/standard/migration/taskqueue/counter/requirements.txt
@@ -4,3 +4,5 @@ google-cloud-datastore==2.15.1; python_version >= "3.0"
 google-cloud-datastore==1.15.5; python_version < "3.0"
 google-cloud-tasks==2.13.1; python_version >= "3.0"
 google-cloud-tasks==1.5.2; python_version < "3.0"
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/migration/taskqueue/pull-counter/requirements.txt b/appengine/standard/migration/taskqueue/pull-counter/requirements.txt
@@ -5,3 +5,5 @@ google-cloud-datastore<2 ; python_version < "3.0"
 google-cloud-pubsub==2.16.0 ; python_version >= "3.0"
 # 1.7.0 is the latest compatible version for Python 2.
 google-cloud-pubsub==1.7.2 ; python_version < "3.0"
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/migration/urlfetch/async/requirements.txt b/appengine/standard/migration/urlfetch/async/requirements.txt
@@ -3,3 +3,5 @@ Flask==2.1.0; python_version > '3.0'
 requests==2.27.1
 requests-futures==1.0.0
 requests-toolbelt==0.10.1
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/migration/urlfetch/requests/requirements.txt b/appengine/standard/migration/urlfetch/requests/requirements.txt
@@ -2,3 +2,5 @@ Flask==1.1.4; python_version < '3.0'
 Flask==2.1.0; python_version > '3.0'
 requests==2.27.1
 requests-toolbelt==0.10.1
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/ndb/transactions/requirements.txt b/appengine/standard/ndb/transactions/requirements.txt
@@ -1,2 +1,4 @@
 Flask==1.1.4; python_version < '3.0'
 Flask==2.1.0; python_version > '3.0'
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard/urlfetch/requests/requirements.txt b/appengine/standard/urlfetch/requests/requirements.txt
@@ -2,3 +2,5 @@ Flask==1.1.4; python_version < '3.0'
 Flask==2.1.0; python_version > '3.0'
 requests==2.27.1
 requests-toolbelt==0.10.1
+Werkzeug==1.0.1; python_version < '3.0'
+Werkzeug==2.3.7; python_version > '3.0'
diff --git a/appengine/standard_python3/bundled-services/blobstore/flask/requirements.txt b/appengine/standard_python3/bundled-services/blobstore/flask/requirements.txt
@@ -1,2 +1,3 @@
 Flask==2.0.1
-appengine-python-standard>=0.2.3
+appengine-python-standard>=0.2.3
+Werkzeug==2.3.7
diff --git a/appengine/standard_python3/bundled-services/deferred/flask/requirements.txt b/appengine/standard_python3/bundled-services/deferred/flask/requirements.txt
@@ -1,2 +1,3 @@
 Flask==2.0.1
-appengine-python-standard>=0.3.1
+appengine-python-standard>=0.3.1
+Werkzeug==2.3.7
diff --git a/appengine/standard_python3/bundled-services/mail/flask/requirements.txt b/appengine/standard_python3/bundled-services/mail/flask/requirements.txt
@@ -1,2 +1,3 @@
 Flask==2.1.2
-appengine-python-standard>=1.0.0
+appengine-python-standard>=1.0.0
+Werkzeug==2.3.7
diff --git a/bigquery/remote-function/document/requirements.txt b/bigquery/remote-function/document/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.2.2
 functions-framework==3.3.0
 google-cloud-documentai==2.15.0
+Werkzeug==2.3.7
diff --git a/bigquery/remote-function/translate/requirements.txt b/bigquery/remote-function/translate/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.2.2
 functions-framework==3.3.0
 google-cloud-translate==3.11.1
+Werkzeug==2.3.7
diff --git a/bigquery/remote-function/vision/requirements.txt b/bigquery/remote-function/vision/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.2.2
 functions-framework==3.3.0
 google-cloud-vision==3.4.2
+Werkzeug==2.3.7
diff --git a/cloud-media-livestream/keypublisher/requirements.txt b/cloud-media-livestream/keypublisher/requirements.txt
@@ -9,3 +9,4 @@ requests==2.31.0
 signxml==3.2.0
 pytest==7.3.1
 pytest-mock==3.10.0
+Werkzeug==2.3.7
diff --git a/cloud-sql/mysql/sqlalchemy/requirements.txt b/cloud-sql/mysql/sqlalchemy/requirements.txt
@@ -4,3 +4,4 @@ PyMySQL==1.1.0
 gunicorn==20.1.0
 cloud-sql-python-connector==1.2.4
 functions-framework==3.3.0
+Werkzeug==2.3.7
diff --git a/cloud-sql/postgres/sqlalchemy/requirements.txt b/cloud-sql/postgres/sqlalchemy/requirements.txt
@@ -4,3 +4,4 @@ SQLAlchemy==2.0.17
 cloud-sql-python-connector==1.2.4
 gunicorn==20.1.0
 functions-framework==3.3.0
+Werkzeug==2.3.7
diff --git a/cloud-sql/sql-server/sqlalchemy/requirements.txt b/cloud-sql/sql-server/sqlalchemy/requirements.txt
@@ -6,3 +6,4 @@ SQLAlchemy==2.0.17
 cloud-sql-python-connector==1.2.4
 sqlalchemy-pytds==1.0.0
 functions-framework==3.3.0
+Werkzeug==2.3.7
diff --git a/cloud_scheduler/snippets/requirements.txt b/cloud_scheduler/snippets/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.2.3
 gunicorn==20.1.0
 google-cloud-scheduler==2.11.0
+Werkzeug==2.3.7
diff --git a/compute/managed-instances/demo/requirements.txt b/compute/managed-instances/demo/requirements.txt
@@ -1,2 +1,3 @@
 Flask==2.1.0
 requests==2.31.0
+Werkzeug==2.3.7
diff --git a/datastore/cloud-ndb/requirements.txt b/datastore/cloud-ndb/requirements.txt
@@ -2,3 +2,4 @@
 google-cloud-ndb==2.2.1
 # [END ndb_version]
 Flask==2.1.0
+Werkzeug==2.3.7
diff --git a/dialogflow-cx/requirements.txt b/dialogflow-cx/requirements.txt
@@ -1,4 +1,5 @@
 google-cloud-dialogflow-cx==1.21.0
 Flask==2.2.2
 python-dateutil==2.8.2
-functions-framework==3.3.0
+functions-framework==3.3.0
+Werkzeug==2.3.7
diff --git a/dialogflow/requirements.txt b/dialogflow/requirements.txt
@@ -3,3 +3,4 @@ Flask==2.2.2
 pyaudio==0.2.13
 termcolor==2.3.0
 functions-framework==3.3.0
+Werkzeug==2.3.7
diff --git a/endpoints/getting-started/requirements.txt b/endpoints/getting-started/requirements.txt
@@ -6,3 +6,4 @@ pyyaml==6.0
 requests==2.31.0
 google-auth==2.19.1
 google-auth-oauthlib==1.0.0
+Werkzeug==2.3.7
diff --git a/eventarc/audit_iam/requirements.txt b/eventarc/audit_iam/requirements.txt
@@ -2,4 +2,4 @@ Flask==3.0.0
 gunicorn==20.1.0
 google-events==0.10.0
 cloudevents==1.9.0
-googleapis-common-protos==1.59.0
+googleapis-common-protos==1.59.0
diff --git a/eventarc/storage_handler/requirements.txt b/eventarc/storage_handler/requirements.txt
@@ -1,4 +1,4 @@
 Flask==3.0.0
 gunicorn==20.1.0
 google-events==0.7.0
-cloudevents==1.9.0
+cloudevents==1.9.0
diff --git a/functions/v2/response_streaming/requirements.txt b/functions/v2/response_streaming/requirements.txt
@@ -1,4 +1,5 @@
 Flask==2.2.2
 functions-framework==3.3.0
 google-cloud-bigquery==3.11.4
-pytest==7.2.1
+pytest==7.2.1
+Werkzeug==2.3.7
diff --git a/iap/app_engine_app/requirements.txt b/iap/app_engine_app/requirements.txt
@@ -1 +1,2 @@
 Flask==2.1.0
+Werkzeug==2.3.7
diff --git a/iap/requirements.txt b/iap/requirements.txt
@@ -4,3 +4,4 @@ google-auth==2.19.1
 gunicorn==20.1.0
 requests==2.31.0
 requests-toolbelt==1.0.0
+Werkzeug==2.3.7
diff --git a/memorystore/redis/requirements.txt b/memorystore/redis/requirements.txt
@@ -14,4 +14,5 @@
 Flask==2.1.0
 gunicorn==20.1.0
 redis==5.0.0
+Werkzeug==2.3.7
 # [END memorystore_requirements]
diff --git a/monitoring/opencensus/requirements.txt b/monitoring/opencensus/requirements.txt
@@ -8,3 +8,4 @@ opencensus-ext-prometheus==0.2.1
 prometheus-client==0.17.0
 prometheus-flask-exporter==0.22.4
 requests==2.31.0
+Werkzeug==2.3.7
diff --git a/monitoring/prometheus/requirements.txt b/monitoring/prometheus/requirements.txt
@@ -5,3 +5,4 @@ googleapis-common-protos==1.59.1
 prometheus-client==0.17.0
 prometheus-flask-exporter==0.22.4
 requests==2.31.0
+Werkzeug==2.3.7
diff --git a/people-and-planet-ai/geospatial-classification/serving_app/requirements.txt b/people-and-planet-ai/geospatial-classification/serving_app/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.3.0
 gunicorn==20.1.0
 tensorflow==2.12.0
+Werkzeug==2.3.7
diff --git a/people-and-planet-ai/land-cover-classification/serving/requirements.txt b/people-and-planet-ai/land-cover-classification/serving/requirements.txt
@@ -3,3 +3,4 @@ Flask==2.2.2
 earthengine-api==0.1.358
 gunicorn==20.1.0
 tensorflow==2.12.0
+Werkzeug==2.3.7
diff --git a/people-and-planet-ai/timeseries-classification/requirements.txt b/people-and-planet-ai/timeseries-classification/requirements.txt
@@ -4,3 +4,4 @@ google-cloud-aiplatform==1.25.0
 gunicorn==20.1.0
 pandas==2.0.1
 tensorflow==2.12.0
+Werkzeug==2.3.7
diff --git a/people-and-planet-ai/weather-forecasting/serving/requirements.txt b/people-and-planet-ai/weather-forecasting/serving/requirements.txt
@@ -1,5 +1,6 @@
 Flask==2.2.2
 gunicorn==20.1.0
+Werkzeug==2.3.7
 
 # Local packages.
 ./weather-data
diff --git a/profiler/appengine/flexible/requirements.txt b/profiler/appengine/flexible/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.2.3
 gunicorn==20.1.0
 google-cloud-profiler==4.0.0
+Werkzeug==2.3.7
diff --git a/profiler/appengine/standard_python37/requirements.txt b/profiler/appengine/standard_python37/requirements.txt
@@ -1,2 +1,3 @@
 Flask==2.2.3
 google-cloud-profiler==4.0.0
+Werkzeug==2.3.7
diff --git a/run/hello-broken/requirements.txt b/run/hello-broken/requirements.txt
@@ -3,3 +3,4 @@ pytest==7.0.1; python_version > "3.0"
 # pin pytest to 4.6.11 for Python2.
 pytest==7.0.1; python_version < "3.0"
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/run/helloworld/requirements.txt b/run/helloworld/requirements.txt
@@ -1,2 +1,3 @@
 Flask==2.1.0
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/run/logging-manual/requirements.txt b/run/logging-manual/requirements.txt
@@ -3,3 +3,4 @@ pytest==7.0.1; python_version > "3.0"
 # pin pytest to 4.6.11 for Python2.
 pytest==7.0.1; python_version < "3.0"
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/run/markdown-preview/editor/requirements.txt b/run/markdown-preview/editor/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0
 gunicorn==20.1.0
 google-auth==2.19.1
 requests==2.31.0
+Werkzeug==2.3.7
diff --git a/run/markdown-preview/renderer/requirements.txt b/run/markdown-preview/renderer/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.1.0
 gunicorn==20.1.0
 Markdown==3.4.3
 bleach==6.0.0
+Werkzeug==2.3.7
diff --git a/run/pubsub/requirements.txt b/run/pubsub/requirements.txt
@@ -3,3 +3,4 @@ pytest==7.0.1; python_version > "3.0"
 # pin pytest to 4.6.11 for Python2.
 pytest==7.0.1; python_version < "3.0"
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/run/service-auth/requirements.txt b/run/service-auth/requirements.txt
@@ -1,4 +1,5 @@
 google-auth==2.19.1
 requests==2.31.0
 Flask==2.1.2
-gunicorn==20.1.0
+gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/run/system-package/requirements.txt b/run/system-package/requirements.txt
@@ -1,3 +1,4 @@
 Flask==2.1.0
 pytest==7.0.1
 gunicorn==20.1.0
+Werkzeug==2.3.7
diff --git a/trace/cloud-trace-demo-app-opentelemetry/app/requirements.txt b/trace/cloud-trace-demo-app-opentelemetry/app/requirements.txt
diff --git a/trace/trace-python-sample-opentelemetry/requirements.txt b/trace/trace-python-sample-opentelemetry/requirements.txt

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`Flask==2.1.1`
`2`	`2`	`gunicorn==20.1.0`
	`3`	`+Werkzeug==2.3.7`