chore(deps): bump flower from 2.0.1 to 2.1.0

[dependabot]

Bumps flower from 2.0.1 to 2.1.0.

Release notes

Sourced from flower's releases.

v2.1.0

Features

• Added read-only mode for the UI and API by @​MrEarle #1468
• Updated the UI with a responsive design
• Added persistent dark mode with light and system theme options
• Added a browser favicon by @​rolfws #1502
• Improved task search with boolean operators and field filters
• Preserved task-table preferences across visits by @​fretman92 #1333
• Added TLS support for Redis Sentinel by @​cyberjunk #1327
• Added AMQPS support for RabbitMQ connections by @​borland667
• Updated and auto-provisioned the Grafana dashboard

Performance and reliability

• Moved blocking broker and control operations off the I/O loop
• Made Redis queue inspection asynchronous and pipelined
• Prevented duplicate worker inspections
• Fixed broker connection leaks #1490
• Purged stale offline-worker Prometheus metrics #1128
• Persisted dashboard counters across restarts #787
• Improved handling of missing custom configuration files

Bug fixes

• Fixed Redis SSL configurations #1177
• Fixed percent-encoded IPv6 broker addresses #1220
• Stopped exposing broker alternate URLs in worker statistics #1512
• Fixed broker page rendering when queue inspection fails by @​alexei #1501
• Fixed autoscaling response interpolation by @​funkyrailroad #1427
• Improved GitHub OAuth errors when email access is unavailable by @​bysiber #1486
• Prevented authentication failures while rendering error pages #1268, #1499
• Fixed task search for non-string values #1401
• Fixed task state filters to require the state prefix by @​AleksaMCode #1516
• Fixed worker names in timeout and rate-limit error responses by @​phanky1 #1506
• Fixed startup banner output when using a dynamic port #1449
• Fixed worker active-task totals when counts are null by @​M4RC0Sx #1511
• Fixed undefined worker pool grow and shrink values by @​daydaychen #1324

Documentation

• Documented custom authentication providers #1344
• Fixed the GitLab authentication handler name by @​Saluev #1325
• Fixed the persistent database CLI example by @​hatamiarash7 #1326
• Fixed the Grafana example URL by @​NiclasvanEyk #1345
• Fixed the nginx reverse-proxy example by @​titovanton
• Added the GitHub repository link to the documentation by @​PamelaM
• Fixed the documented database filename by @​WilliamDEdwards #1494
• Fixed the documented max tasks default by @​masahiro331 #1415

... (truncated)

Changelog

Sourced from flower's changelog.

Flower 2.1.0

Features

• Added read-only mode for the UI and API #1468 by @​MrEarle.
• Updated the UI with a responsive design.
• Added persistent dark mode with light and system theme options.
• Added a browser favicon #1502 by @​rolfws.
• Improved task search with boolean operators and field filters.
• Preserved task-table preferences across visits #1333 by @​fretman92.
• Added TLS support for Redis Sentinel #1327 by @​cyberjunk.
• Added AMQPS support for RabbitMQ connections by @​borland667.
• Updated and auto-provisioned the Grafana dashboard.
• Enabled API access in the Docker Compose demo.

Performance and reliability

• Moved blocking broker and control operations off the I/O loop.
• Made Redis queue inspection asynchronous and pipelined.
• Prevented duplicate worker inspections.
• Fixed broker connection leaks #1490.
• Purged stale offline-worker Prometheus metrics #1128.
• Persisted dashboard counters across restarts #787.
• Improved handling of missing custom configuration files.
• Fixed startup banner output when using a dynamic port #1449.
• Fixed worker active-task totals when counts are null #1511 by @​M4RC0Sx.
• Fixed undefined worker pool grow and shrink values #1324 by @​daydaychen.

Bug fixes

• Fixed Redis SSL configurations #1177.
• Fixed percent-encoded IPv6 broker addresses #1220.
• Stopped exposing broker alternate URLs in worker statistics #1512.
• Fixed broker page rendering when queue inspection fails #1501 by @​alexei.
• Fixed autoscaling response interpolation #1427 by @​funkyrailroad.
• Improved GitHub OAuth errors when email access is unavailable #1486 by @​bysiber.
• Prevented authentication failures while rendering error pages #1268, #1499.
• Fixed task search for non-string values #1401.
• Fixed task state filters to require the state prefix #1516 by @​AleksaMCode.
• Fixed worker names in timeout and rate-limit error responses #1506 by @​phanky1.

Documentation

• Documented custom authentication providers #1344.
• Corrected the GitLab authentication handler name #1325 by @​Saluev.
• Fixed the persistent database CLI example #1326 by @​hatamiarash7.
• Fixed the Grafana example URL #1345 by @​NiclasvanEyk.
• Corrected the nginx reverse-proxy example by @​titovanton.
• Added the GitHub repository link to the documentation by @​PamelaM.
• Corrected the documented database filename #1494 by @​WilliamDEdwards.

... (truncated)

Commits

• 3597bd1 Set release version
• d083f73 Update documentation for 2.1.0
• b58869b Merge remote-tracking branch 'origin/master' into 2.0
• e6cf8ef Add Python 3.13 and 3.14 support
• 8ecede9 Document custom authentication providers
• 00d310b Persist dashboard counters across restarts
• 0a51160 Purge offline workers from metrics
• 72a09c8 Prevent duplicate worker inspections
• 17ead90 Make Redis queue inspection non-blocking
• b11ddcb Update blocking operation handling
• Additional commits viewable in compare view

[claude]

Review

This PR is a single-line Dependabot dependency bump: flower 2.0.1 → 2.1.0 in requirements/base.txt. No application code is touched.

Findings: none.

• Code quality / bugs: N/A — no logic changes, no call sites affected.
• Security: Bumping to a newer patch/minor version is generally a security-positive (or neutral) change; flower's release notes for 2.1.0 list additive features, reliability/perf fixes, and bug fixes, with nothing that appears to be a breaking change relevant to how this repo invokes flower (no custom flower config beyond the version pin here).
• Test coverage: Not applicable for a monitoring-tool dependency bump — flower isn't part of the application's runtime code path or test suite.
• Performance: No impact expected; flower is only used for Celery task monitoring/dashboarding.

Nothing blocking — looks safe to merge as a routine dependency update.

[JSv4]

@dependabot rebase

[claude]

Review

This is a routine Dependabot dependency bump (flower 2.0.1 → 2.1.0 in requirements/base.txt) — 1 line changed, no application code touched. There's nothing to flag on code quality, bugs, performance, or test coverage since no logic changed.

Findings: none.

One non-blocking operational note for whoever merges this: flower 2.1.0 is a substantial release with UI/auth-relevant changes worth a quick sanity check post-upgrade, not a code defect:

• New read-only mode for the UI and API (Read only mode mher/flower#1468)
• Auth-adjacent fixes: "Prevented authentication failures while rendering error pages" (Uncaught exception in write_error mher/flower#1268, Simplify Auth0 JWT validation and remove excessive logging #1499) and improved GitHub OAuth error handling (Handle 403 error when GitHub app lacks email permission mher/flower#1486)
• General UI overhaul (responsive design, dark mode)

If OpenContracts' docker-compose/production.yml flower service configuration relies on specific default auth/access behavior, it's worth a quick manual check that the Flower dashboard still authenticates/authorizes as expected after upgrading. No changelog fragment needed per repo convention (routine dependency patch bumps are exempt).