From 94c97b7bb0ebd2beaea11864fb7126561c046e7d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 2 Apr 2026 20:52:39 +0000 Subject: [PATCH] chore(deps): bump flask Bumps [flask](https://github.com/pallets/flask) from 2.2.5 to 3.1.3. - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/flask/compare/2.2.5...3.1.3) --- updated-dependencies: - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .../rl/autorl_bench/benchmarks/webshop/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rdagent/scenarios/rl/autorl_bench/benchmarks/webshop/requirements.txt b/rdagent/scenarios/rl/autorl_bench/benchmarks/webshop/requirements.txt index 136c97bb..10780bb3 100644 --- a/rdagent/scenarios/rl/autorl_bench/benchmarks/webshop/requirements.txt +++ b/rdagent/scenarios/rl/autorl_bench/benchmarks/webshop/requirements.txt @@ -27,5 +27,5 @@ spacy==3.7.2 # Note: Flask/Werkzeug pinned to 2.x (Flask 3.x incompatible with WebShop) # Security Note: CVE-2024-34069 affects Werkzeug debugger (dev mode only) # Mitigation: Never run with debug=True in production; benchmark runs locally -flask==2.2.5 +flask==3.1.3 Werkzeug==2.3.8 # Latest 2.x with security patches \ No newline at end of file