Sourced from flask's releases.

1.1.2

1.1.x is the last version to support Python 2.7 and Python 3.5. It also contains deprecation warnings for code that will be removed in 2.0. Please pay attention to deprecation warnings in your project!

This release contains a couple bug fixes.

• Changelog: https://flask.palletsprojects.com/en/1.1.x/changelog/#version-1-1-2

Sourced from flask's changelog.

Version 1.1.2

Released 2020-04-03

• Work around an issue when running the flask command with an external debugger on Windows. 3297
• The static route will not catch all URLs if the Flask static_folder argument ends with a slash. 3452

Version 1.1.1

Released 2019-07-08

• The flask.json_available flag was added back for compatibility with some extensions. It will raise a deprecation warning when used, and will be removed in version 2.0.0. 3288

Version 1.1.0

Released 2019-07-04

• Bump minimum Werkzeug version to >= 0.15.
• Drop support for Python 3.4.
• Error handlers for InternalServerError or 500 will always be passed an instance of InternalServerError. If they are invoked due to an unhandled exception, that original exception is now available as e.original_exception rather than being passed directly to the handler. The same is true if the handler is for the base HTTPException. This makes error handler behavior more consistent. 3266
  • Flask.finalize_request is called for all unhandled exceptions even if there is no 500 error handler.
• Flask.logger takes the same name as Flask.name (the value passed as Flask(import_name). This reverts 1.0's behavior of always logging to "flask.app", in order to support multiple apps in the same process. A warning will be shown if old configuration is detected that needs to be moved. 2866
• flask.RequestContext.copy includes the current session object in the request context copy. This prevents session pointing to an out-of-date object. 2935
• Using built-in RequestContext, unprintable Unicode characters in Host header will result in a HTTP 400 response and not HTTP 500 as previously. 2994
• send_file supports ~os.PathLike objects as described in PEP 0519, to support pathlib in Python 3. 3059
• send_file supports ~io.BytesIO partial content. 2957
• open_resource accepts the "rt" file mode. This still does the same thing as "r". 3163
• The MethodView.methods attribute set in a base class is used by subclasses. 3138
• Flask.jinja_options is a dict instead of an ImmutableDict to allow easier configuration. Changes must still be made before creating the environment. 3190
• Flask's JSONMixin for the request and response wrappers was moved into Werkzeug. Use Werkzeug's version with Flask-specific support. This bumps the Werkzeug dependency to >= 0.15. 3125
• The flask command entry point is simplified to take advantage of Werkzeug 0.15's better reloader support. This bumps the Werkzeug dependency to >= 0.15. 3022
• Support static_url_path that ends with a forward slash. 3134
• Support empty static_folder without requiring setting an empty static_url_path as well. 3124
• jsonify supports dataclasses.dataclass objects. 3195
• Allow customizing the Flask.url_map_class used for routing. 3069
• The development server port can be set to 0, which tells the OS to pick an available port. 2926
• The return value from cli.load_dotenv is more consistent with the documentation. It will return False if python-dotenv is not installed, or if the given path isn't a file. 2937
• Signaling support has a stub for the connect_via method when the Blinker library is not installed. 3208
• Add an --extra-files option to the flask run CLI command to specify extra files that will trigger the reloader on change. 2897
• Allow returning a dictionary from a view function. Similar to how returning a string will produce a text/html response, returning a dict will call jsonify to produce a application/json response. 3111
• Blueprints have a cli Click group like app.cli. CLI commands registered with a blueprint will be available as a group under the flask command. 1357.
• When using the test client as a context manager (with client:), all preserved request contexts are popped when the block exits, ensuring nested contexts are cleaned up correctly. 3157
• Show a better error message when the view return type is not supported. 3214
• flask.testing.make_test_environ_builder() has been deprecated in favour of a new class flask.testing.EnvironBuilder. 3232
• The flask run command no longer fails if Python is not built with SSL support. Using the --cert option will show an appropriate error message. 3211
• URL matching now occurs after the request context is pushed, rather than when it's created. This allows custom URL converters to access the app and request contexts, such as to query a database for an id. 3088

... (truncated)

• 93dd170 release version 1.1.2
• 4024a4a update deprecation versions
• f991a89 Merge pull request #3541 from jeenuv/clarify-static
• 4548e00 clarify static_folder is relative to root_path
• c6a619a update CLI docs IDE integration
• ac9589c Merge pull request #3530 from valleygtc/docs-fix
• bcf0a95 Merge pull request #3544 from mattc41190/patch-2
• 1736e01 Grammar and clarity fix
• 80a597b Merge pull request #3543 from mattc41190/patch-1
• 8fc723c itty bitty typo
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)