[PR #255] [MERGED] fix: bump werkzeug to 3.1.4 for CVE-2025-66221 #264

Closed
opened 2026-02-15 21:16:29 -05:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/langgenius/dify-plugin-sdks/pull/255
Author: @kenwoodjw
Created: 12/3/2025
Status: Merged
Merged: 12/7/2025
Merged by: @Yeuoly

Base: mainHead: main


📝 Commits (1)

  • 5c25938 Bump Werkzeug to 3.1.4 for CVE-2025-66221

📊 Changes

3 files changed (+311 additions, -322 deletions)

View changed files

📝 python/pdm.lock (+297 -212)
📝 python/pyproject.toml (+1 -1)
📝 python/uv.lock (+13 -109)

📄 Description

Pull Request Checklist

fix CVE-2025-66221
Thank you for your contribution! Before submitting your PR, please make sure you have completed the following checks:

Compatibility Check

  • I have checked whether this change affects the backward compatibility of the plugin declared in README.md
  • I have checked whether this change affects the forward compatibility of the plugin declared in README.md
  • If this change introduces a breaking change, I have discussed it with the project maintainer and specified the release version in the README.md
  • I have described the compatibility impact and the corresponding version number in the PR description
  • I have checked whether the plugin version is updated in the README.md

Available Checks

  • Code has passed local tests
  • Relevant documentation has been updated (if necessary)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/langgenius/dify-plugin-sdks/pull/255 **Author:** [@kenwoodjw](https://github.com/kenwoodjw) **Created:** 12/3/2025 **Status:** ✅ Merged **Merged:** 12/7/2025 **Merged by:** [@Yeuoly](https://github.com/Yeuoly) **Base:** `main` ← **Head:** `main` --- ### 📝 Commits (1) - [`5c25938`](https://github.com/langgenius/dify-plugin-sdks/commit/5c25938f9b4583c26a3362f10d2055a1da9da93e) Bump Werkzeug to 3.1.4 for CVE-2025-66221 ### 📊 Changes **3 files changed** (+311 additions, -322 deletions) <details> <summary>View changed files</summary> 📝 `python/pdm.lock` (+297 -212) 📝 `python/pyproject.toml` (+1 -1) 📝 `python/uv.lock` (+13 -109) </details> ### 📄 Description # Pull Request Checklist fix CVE-2025-66221 Thank you for your contribution! Before submitting your PR, please make sure you have completed the following checks: ## Compatibility Check - [x] I have checked whether this change affects the **backward compatibility** of the plugin declared in `README.md` - [x] I have checked whether this change affects the **forward compatibility** of the plugin declared in `README.md` - [x] If this change introduces a breaking change, I have discussed it with the project maintainer and specified the release version in the `README.md` - [x] I have described the compatibility impact and the corresponding version number in the PR description - [x] I have checked whether the plugin version is updated in the `README.md` ## Available Checks - [x] Code has passed local tests - [ ] Relevant documentation has been updated (if necessary) --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-15 21:16:29 -05:00
yindo closed this issue 2026-02-15 21:16:29 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/dify-plugin-sdks#264