Skip to content

Refreeze requirements#440

Merged
klssmith merged 2 commits into
mainfrom
ks-bump-reqs
Jun 4, 2026
Merged

Refreeze requirements#440
klssmith merged 2 commits into
mainfrom
ks-bump-reqs

Conversation

@klssmith

@klssmith klssmith commented Jun 3, 2026

Copy link
Copy Markdown
Contributor

Bumps notifications-utils to bring in a change which stops the version of Gunicorn we use being one that is not compatible with our code, then updates all sub-dependencies apart from Werkzeug. Bumping Werkzeug from 3.1.6 to 3.1.8 causes the unit tests to fail, so will need more investigation.

klssmith added 2 commits June 3, 2026 12:08
 ## 117.0.2

* Restrict Gunicorn to versions <= 26.0.0, since version 26.0.0 dropped Eventlet support

 ## 117.0.1

* Small speed improvements to `validate_and_format_email_address`

 ## 117.0.0

* Remove StatsD client

 ## 116.1.0

* Add `interruptible_io` moodule.
* `RecipientCSV`: use `InterruptibleIterableList` for cached rows property

 ## 116.0.0

* Add `BaseSMSTemplate.count_of_characters_above_limit`
* Add `BaseSMSTemplate.non_gsm_characters`
* Add `BaseSMSTemplate.count_of_characters_above_previous_fragment_boundary`
* Fix edge case where wrong fragment count would be shown with Welsh placeholder name
* Removes `notifications_utils.template.get_sms_fragment_count` (not used outside this repo)
* Removes `notifications_utils.template.non_gsm_characters` (not used outside this repo)
* Removes `notifications_utils.template.count_extended_gsm_chars` (not used outside this repo)

 ## 115.4.1

Add `dir="auto"` attribute to sms_preview_template message wrapper

 ## 115.4.0

* `RedisClient`: allow configuration of `socket_timeout` and `socket_connect_timeout` parameters
  via flask config vars `REDIS_SOCKET_TIMEOUT` and `REDIS_SOCKET_CONNECT_TIMEOUT` respectively.
* `RedisClient`: use `HardEventletTimeout` as default `always_raise` exception.

 ## 115.3.1

* Fix easily-and-accidentally-exploited ReDoS vulnerabilities in `remove_whitespace_before_punctuation`
  and `replace_hyphens_with_en_dashes`.

***

Complete changes: alphagov/notifications-utils@115.3.0...117.0.2
This updates all subdependencies apart from Werkzeug. Bumping Werkzeug
from 3.1.6 to 3.1.8 causes the unit tests to fail, so will need more
investigation.
@klssmith klssmith merged commit 3c6e6ba into main Jun 4, 2026
7 checks passed
@klssmith klssmith deleted the ks-bump-reqs branch June 4, 2026 09:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants