VULN UPGRADE: Werkzeug (major → 3.1.4)

requirements.in

@@ -1,5 +1,5 @@
 Flask==2.0.3
-Werkzeug==2.0.3
+Werkzeug==3.1.4
 Flask-SQLAlchemy==2.5.1
 Flask-Caching==2.0.2
 Flask-Migrate==2.5.3

requirements.txt

@@ -1,17 +1,11 @@
-#
-# This file is autogenerated by pip-compile with Python 3.9
-# by the following command:
-#
-#    ./scripts/pip-compile.sh
-#
+# This file was autogenerated by uv via the following command:
+#    uv pip compile requirements.in -o requirements.txt
 alembic==1.4.3
     # via
     #   dataset
     #   flask-migrate
 aniso8601==8.0.0
     # via flask-restx
-async-timeout==4.0.2
-    # via redis
 attrs==20.3.0
     # via jsonschema
 babel==2.12.1
@@ -75,7 +69,7 @@ flask-sqlalchemy==2.5.1
     #   flask-migrate
 freezegun==1.2.2
     # via -r requirements.in
-gevent==24.11.1
+gevent==23.9.1
     # via -r requirements.in
 greenlet==3.1.1
     # via
@@ -103,6 +97,7 @@ markupsafe==2.1.3
     # via
     #   jinja2
     #   mako
+    #   werkzeug
     #   wtforms
 marshmallow==2.20.2
     # via
@@ -123,7 +118,7 @@ pycparser==2.20
     # via cffi
 pydantic==1.6.2
     # via -r requirements.in
-pymysql[rsa]==1.0.2
+pymysql==1.0.2
     # via -r requirements.in
 pyrsistent==0.17.3
     # via jsonschema
@@ -148,6 +143,12 @@ requests==2.28.1
     # via -r requirements.in
 s3transfer==0.3.3
     # via boto3
+setuptools==80.9.0
+    # via
+    #   gunicorn
+    #   jsonschema
+    #   zope-event
+    #   zope-interface
 six==1.15.0
     # via
     #   flask-marshmallow
@@ -170,7 +171,7 @@ urllib3==1.25.11
     # via
     #   botocore
     #   requests
-werkzeug==2.0.3
+werkzeug==3.1.4
     # via
     #   -r requirements.in
     #   flask
@@ -181,6 +182,3 @@ zope-event==4.5.0
     # via gevent
 zope-interface==5.2.0
     # via gevent
-
-# The following packages are considered to be unsafe in a requirements file:
-# setuptools