← Back to issue list

fix: fix minimum version of Flask used in tutorial

View original Github issue

Metadata

Project
rockcraft
Number
#872
Type
pull request
State
merged
Author
tigarmo
Labels
—
Created
Updated
Closed

Current evaluation

Merged to update the tutorial's minimum Flask version to 2.3.2, resolving security vulnerabilities and CVEs. Approved by three reviewers, passed CI checks, and applied a single-line dependency change.

Suggested action: —

No scores available.

Issue body

Versions <2.3.2 are subject to https://osv.dev/vulnerability/GHSA-m2qf-hxjv-5gpq and other CVEs. - [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? ---

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — — Merged to update the tutorial's minimum Flask version to 2.3.2, resolving security vulnerabilities and CVEs. Approved by three reviewers, passed CI checks, and applied a single-line dependency change.
qwen3.6-35b-a3b-mtp-q6 — — Merged an update to the tutorial's minimum Flask version requirement, raising it to 2.3.2 to mitigate security vulnerabilities including GHSA-m2qf-hxjv-5gpq and related CVEs.
qwen3.6-35b-a3b-mtp-q6 — — Merged an update raising the tutorial's minimum Flask version to 2.3.2, resolving security vulnerabilities including GHSA-m2qf-hxjv-5gpq and related CVEs.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#1471 ci: upgrade flask craft-parts merged Merged to upgrade Flask and resolve an OSV vulnerability. Approved by two reviewers and passed CI checks. Updates the CI dependency version to address the security advisory without skipping test directories.
75%
#646 fix(docs/tutorial/flask.rst): fixed misspelt filename in tutorial rockcraft merged Merged a fix correcting a misspelled filename in the Flask tutorial documentation. Approved by two reviewers and passed CI checks.
70%
#518 fix: the flask-framework init template rockcraft merged Merged an update to the flask-framework init template to correct outdated information. Approved by two reviewers with a minimal two-line change across one file.
70%