From ae47c8953197e7a5ae8494ae67da5c64b6e41b0d Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 6 Aug 2026 01:01:53 +0000 Subject: [PATCH] fix(deps): restore the werkzeug version floor Commit 1ec22db removed the werkzeug>=3.1.6,<4.0.0 pin along with the genuinely-unused packages, but this one was a version floor on Flask's transitive dependency, not a phantom: Flask 3.1.3 itself only requires werkzeug>=3.1.0, so dropping the pin let fresh installs resolve 3.1.0-3.1.5. Restored with a comment explaining why it exists. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01SXb4mKcAkVaxkeTb3YnAdr --- web_interface/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/web_interface/requirements.txt b/web_interface/requirements.txt index f04386e7..223a0b83 100644 --- a/web_interface/requirements.txt +++ b/web_interface/requirements.txt @@ -4,6 +4,7 @@ # Web framework flask>=3.1.3,<4.0.0 +werkzeug>=3.1.6,<4.0.0 # Flask transitive; pinned to keep a security floor above Flask's own >=3.1.0 flask-limiter>=3.5.0,<4.0.0 # Rate limiting (prevent accidental abuse) flask-compress>=1.14 # gzip/brotli response compression (big win for the large JS/HTML over WiFi) jinja2>=3.1.0,<4.0.0 # Flask transitive, but imported directly (TemplateNotFound)