Update dependency flask-cors to v6 (from 4.0.1) - abandoned

[Erwan-loot]

This PR contains the following updates:

Package	Update	Change	OpenSSF
flask-cors	major	==4.0.1 -> ==6.0.1

---

Release Notes

corydolphin/flask-cors (flask-cors)

v6.0.1

Compare Source

What's Changed

• Invert regex sorting to make it correctly match the intent (sorting by specificity descending) #​391 by @​joshuamorton in #​392
• Fix README file extension in pyproject.toml by @​lafrech in #​386

New Contributors

• @​joshuamorton made their first contribution in #​392
• @​lafrech made their first contribution in #​386

Full Changelog: corydolphin/flask-cors@6.0.0...6.0.1

v6.0.0

Compare Source

Breaking

Path specificity ordering has changed to improve specificity. This may break users who expected the previous incorrect ordering.

• [CVE-2024-6839] Sort Paths by Regex Specificity by @​adrianosela in #​391
• [CVE-2024-6844] Replace use of (urllib) unquote_plus with unquote by @​adrianosela in #​389

What's Changed

• [CVE-2024-6866] Case Sensitive Request Path Matching by @​adrianosela in #​390

Full Changelog: corydolphin/flask-cors@5.0.1...6.0.0

v5.0.1

Compare Source

What's Changed

This primarily changes packaging to use uv and a new release pipeline, along with some small documentation improvements

• [Docs] Fix links to documentation by @​coren-frankel in #​369
• Fix minor typos by @​kkirsche in #​371
• Migrate packaging and environment management to use uv by @​corydolphin in #​377
• Fix release pipeline by @​corydolphin in #​378
• Always use trusted publishing by @​corydolphin in #​379
• Workaround license publishing issue by @​corydolphin in #​380
• Fix packaging: missing source files by @​corydolphin in #​381

New Contributors

• @​coren-frankel made their first contribution in #​369
• @​kkirsche made their first contribution in #​371

Full Changelog: corydolphin/flask-cors@5.0.0...5.0.01

v5.0.0

Compare Source

What's Changed

• Breaking: Change default to disable private network access by @​corydolphin in #​368
  This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71

Full Changelog: corydolphin/flask-cors@4.0.2...5.0.0

v4.0.2

Compare Source

What's Changed

• Bump requests from 2.31.0 to 2.32.0 in /docs by @​dependabot in #​358
• Backwards Compatible Fix for CVE-2024-6221 by @​adrianosela in #​363
• Add unit tests for Private-Network by @​corydolphin in #​367

New Contributors

• @​dependabot made their first contribution in #​358
• @​adrianosela made their first contribution in #​363

Full Changelog: corydolphin/flask-cors@4.0.1...4.0.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[Erwan-loot]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

[Erwan-loot]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.