Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 5, 2025

Bumps flask-babel from 1.0.0 to 4.0.0.

Release notes

Sourced from flask-babel's releases.

v4.0.0

  • Dropped support for end-of-life Python 3.7. Support PyPy 3.9
  • Replace deprecated locked_cached_property decorator with cached_property (#230)

v3.1.0

  • Documentation and packaging improvements. (#226, #223, #218, #217, #215)
  • Don't return the default locale twice (#219)
  • Fix tests breaking against babel 12.2, which changed localized times to use non-breaking-spaces. Babel 12.2 or greater is now required. (#222)
  • Relax version requirements for dependencies. (#227, #225)

v3.0.1 Bugfix Release

Small bugfix for the get_locale() behaviour when the default locale is returned.

v3.0.0

Major version bump as this version removes support for Python 3.5 and 3.6, along with multiple major breaking changes. Hope you've been following SemVer :)

  • Dropped support for end-of-life Python 3.5 and 3.6, added tests for 3.10 and 3.11.
  • Fixes to documentation to address outdated links and settings (#204, 201)
  • Jinja version 3 or greater is now required (released 2021)
  • Removed Babel._date_formats, use the public Babel.date_formats instead.
  • list_translations() always returns the default locale, even if it does not exist. (#75)
  • Add lazy_npgettext() (#68)
  • Babel.locale_selector and Babel.timezone_selector no longer exist. They must be provided either when the Babel() object is created or when init_app() is called. This is to support having a single Babel object for multiple Flask apps (#107) as well as to simplify settings and multi-threaded state.
  • Most configuration options can be passed directly through init_app().

v2.0.0

Starting with version 2, flask-babel drops official support for Python2. Python versions 3.5 through 3.9-beta1 are tested and supported, as well as pypy3.

  • Tests moved from unittest to pytest (#163)
  • Domain and caching support from Flask-BabelEx (#163)
  • Documentation moved from python-hosted to Github Pages.
  • CI moved from Travisci to Github Actions
  • Small documentation improvements.
  • Removed uncessary checks on get_translations() (#127, #126)
  • localeselector and timezoneselector can be changed after creation.
Changelog

Sourced from flask-babel's changelog.

v3.1.0

  • Documentation and packaging improvements. (#226, #223, #218, #217, #215)
  • Don't return the default locale twice (#219)
  • Fix tests breaking against babel 12.2, which changed localized times to use non-breaking-spaces. Babel 12.2 or greater is now required. (#222)
  • Relax version requirements for dependencies. (#227, #225)

v3.0.0

Major version bump as this version removes support for Python 3.5 and 3.6, along with multiple major breaking changes. Hope you've been following SemVer :)

  • Dropped support for end-of-life Python 3.5 and 3.6, added tests for 3.10 and 3.11.
  • Fixes to documentation to address outdated links and settings (#204, 201)
  • Jinja version 3 or greater is now required (released 2021)
  • Removed Babel._date_formats, use the public Babel.date_formats instead.
  • list_translations() always returns the default locale, even if it does not exist. (#75)
  • Add lazy_npgettext() (#68)
  • Babel.locale_selector and Babel.timezone_selector no longer exist. They must be provided either when the Babel() object is created or when init_app() is called. This is to support having a single Babel object for multiple Flask apps (#107) as well as to simplify settings and multi-threaded state.
  • Most configuration options can be passed directly through init_app().

v2.0.0

Starting with version 2, flask-babel drops official support for Python2. Python versions 3.5 through 3.9-beta1 are tested and supported, as well as pypy3.

  • Tests moved from unittest to pytest (#163)
  • Domain and caching support from Flask-BabelEx (#163)
  • Documentation moved from python-hosted to Github Pages.
  • CI moved from Travisci to Github Actions
  • Small documentation improvements.
  • Removed uncessary checks on get_translations() (#127, #126)
  • localeselector and timezoneselector can be changed after creation.
Commits
  • a754ead Bump version: 3.1.1 → 4.0.0
  • d42f50c Dropping Python 3.7 support, adding PyPy 3.9.
  • db5c2a1 Bump version: 3.1.0 → 3.1.1
  • 6ca29cd Merge branch 'jkittner-flask-2-3-deprecation'
  • 346a45a Merge branch 'flask-2-3-deprecation' of github.com:jkittner/flask-babel into ...
  • dad9165 Explicit app factory test.
  • 38f15cd Release triggered on public, not creation.
  • 414a5a3 replace deprecated locked_cached_property decorator with cached_property
  • 69d3340 Bump version: 3.0.1 → 3.1.0
  • 2c706cb Update changelog.
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 5, 2025
@github-actions
Copy link

github-actions bot commented May 5, 2025

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 22a50bf.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

requirements.txt

PackageVersionLicenseIssue Type
Flask-Babel4.0.0NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
pip/Flask-Babel 4.0.0 🟢 4
Details
CheckScoreReason
Code-Review⚠️ 2Found 6/25 approved changesets -- score normalized to 2
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • requirements.txt

@github-actions github-actions bot enabled auto-merge (rebase) May 5, 2025 04:13
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from a701b9e to 03860ad Compare May 5, 2025 04:17
Bumps [flask-babel](https://github.com/python-babel/flask-babel) from 1.0.0 to 4.0.0.
- [Release notes](https://github.com/python-babel/flask-babel/releases)
- [Changelog](https://github.com/python-babel/flask-babel/blob/master/CHANGELOG)
- [Commits](python-babel/flask-babel@v1.0.0...v4.0.0)

---
updated-dependencies:
- dependency-name: flask-babel
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from 03860ad to 8d2c16f Compare May 8, 2025 10:47
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from 8d2c16f to 6811a16 Compare May 12, 2025 04:03
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from 6811a16 to 71b93af Compare May 14, 2025 19:44
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from 71b93af to 7407df1 Compare May 19, 2025 04:06
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from 7407df1 to ced71fd Compare May 19, 2025 21:46
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from ced71fd to fb5e9eb Compare May 19, 2025 21:49
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from fb5e9eb to 4666ea1 Compare May 23, 2025 19:31
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from 4666ea1 to ba0a1d5 Compare May 26, 2025 03:46
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from ba0a1d5 to 60fcee3 Compare May 30, 2025 09:35
Bumps [flask-babel](https://github.com/python-babel/flask-babel) from 1.0.0 to 4.0.0.
- [Release notes](https://github.com/python-babel/flask-babel/releases)
- [Changelog](https://github.com/python-babel/flask-babel/blob/master/CHANGELOG)
- [Commits](python-babel/flask-babel@v1.0.0...v4.0.0)

---
updated-dependencies:
- dependency-name: flask-babel
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/flask-babel-4.0.0 branch from 60fcee3 to 8b4b4d9 Compare June 2, 2025 04:15
github-actions[bot]
github-actions bot previously approved these changes Jun 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants