chore(deps): bump flask-compress from 1.17 to 1.24

[dependabot]

Bumps flask-compress from 1.17 to 1.24.

Changelog

Sourced from flask-compress's changelog.

1.24 (2026-03-31)

• add mypy annotations and mark it as checkable, #76 by @​orborde
• enable trusted publishing, allowing GitHub Actions to publish releases to PyPI without long lived credentials, #78 by @​alexprengere

1.23 (2025-11-06)

• add gzip to supported algorithms for streaming responses, but not in the COMPRESS_ALGORITHM_STREAMING default values, so users have to explicitly enable it
• add Windows and MacOS to the list of platforms tested on GitHub Actions

1.22 (2025-11-04)

• fix possible RuntimeError when applying compression to a streaming endpoint
• no longer apply make_conditional to streaming responses, as it had the effect of buffering the entire response, which defeats the purpose of streaming responses, unless the request.endpoint is in a new COMPRESS_STREAMING_ENDPOINT_CONDITIONAL config option, which defaults to ["static"]

As serving static content with Flask is using streaming responses, we wanted to preserve the correct handling of conditional requests (i.e. 304 Not Modified responses) for static content, while avoiding buffering the entire response when compressing streaming responses for other endpoints

1.21 (2025-11-04, yanked)

• compressing streaming responses is now supported:
  • the previous behavior was:
    • if COMPRESS_STREAMS was True (the default), streaming responses were compressed in 1 sitting using response.get_data(), meaning streaming responses were compressed but not streamed
    • if COMPRESS_STREAMS was False, streaming responses were not compressed at all
  • the new behavior is:
    • if COMPRESS_STREAMS is True, streaming responses are compressed chunk-by-chunk using response.iter_encoded(), which means that streaming responses are compressed and streamed
    • if COMPRESS_STREAMS is False, streaming responses are not compressed at all, as before.
  • we have a new COMPRESS_ALGORITHM_STREAMING config option to specify the compression algorithm to use for streaming responses, which defaults to ["zstd", "br", "deflate"], as "gzip" is not suitable for streaming compression.
  • ⚠️ serving static content with Flask is actually using streaming responses, so if you enable streaming compression, static content will be compressed chunk-by-chunk as well, which may not be what you want.

1.20 (2025-10-20)

• the new COMPRESS_EVALUATE_CONDITIONAL_REQUEST config option is now True by default

1.19 (2025-10-20)

• Use backports.zstd instead of pyzstd, #63 by @​alexprengere
• Add new behaviours to improve Etag compatibility, #67, by @​jlopex
  • weak etags are no longer modified by flask-compress
  • add new COMPRESS_EVALUATE_CONDITIONAL_REQUEST config option to call response.make_conditional(request) after compression, this ensures that 304 Not Modified responses are correctly generated when the client sends conditional requests with If-None-Match (defaults to False)

1.18 (2025-07-11)

• Support, and test against, Python 3.14, see #61 by @​kurtmckee
• Migrate from zstandard to pyzstd, which is now included in the Python 3.14 standard library, also part of #61
• Restore flask_compress.DictCache() that is needed to configure Flask-Compress with caching, without relying on Flask-Caching

Commits

• f20d36c Bump to version 1.24
• f457a00 Enable trusted publishing
• 0e029ee Bump the github-actions group with 2 updates (#77)
• 4ab0b11 Add mypy annotations and mark it as checkable. (#76)
• 310a6be Bump the github-actions group across 1 directory with 3 updates (#73)
• 8bb8ce6 Pre-commit autoupdate
• 0099046 Bump to version 1.23
• c9095b7 Add Windows and MacOS to CI (#71)
• 7f7f0bf Update documentation with recent changes
• 776555f Update pre-commit config to remove isort
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[bito-code-review]

Code Review Agent Run #655dea

Actionable Suggestions - 0

Review Details

• Files reviewed - 1 · Commit Range: a592f00..a592f00

  • pyproject.toml
• Files skipped - 0
• Tools

  • Whispers (Secret Scanner) - ✔︎ Successful
  • Detect-secrets (Secret Scanner) - ✔︎ Successful

---

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

• /review - Manually triggers a full AI review.

• /pause - Pauses automatic reviews on this pull request.

• /resume - Resumes automatic reviews.

• /resolve - Marks all Bito-posted review comments as resolved.

• /abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Superset You can customize the agent settings here or contact your Bito workspace admin at evan@preset.io.

Documentation & Help

• Customize agent settings
• Review rules
• General documentation
• FAQ

AI Code Review powered by

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.29%. Comparing base (cc8edd2) to head (e2398fa).
⚠️ Report is 3 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #42346      +/-   ##
==========================================
- Coverage   65.29%   65.29%   -0.01%     
==========================================
  Files        2794     2794              
  Lines      157265   157271       +6     
  Branches    35956    35957       +1     
==========================================
- Hits       102689   102687       -2     
- Misses      52599    52606       +7     
- Partials     1977     1978       +1     

Flag	Coverage Δ
hive	38.48% <ø> (-0.01%)	⬇️
mysql	57.70% <ø> (-0.01%)	⬇️
postgres	57.74% <ø> (-0.01%)	⬇️
presto	40.41% <ø> (-0.01%)	⬇️
python	59.15% <ø> (-0.01%)	⬇️
sqlite	57.37% <ø> (-0.01%)	⬇️
unit	100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[bito-code-review]

Code Review Agent Run #3d401f

Actionable Suggestions - 0

Additional Suggestions - 1

• requirements/development.txt - 1

  • Stale constraint reference · Line 67-70
    The comment `# -c requirements/base-constraint.txt` references a file that doesn't exist in the repository. This transient constraint file is created and deleted by `scripts/uv-pip-compile.sh` (lines 71-77) to keep base/development versions in sync. Stale constraint references create maintenance confusion.

Review Details

• Files reviewed - 3 · Commit Range: a592f00..e2398fa

  • requirements/base.txt
  • requirements/development.txt
  • pyproject.toml
• Files skipped - 0
• Tools

  • Whispers (Secret Scanner) - ✔︎ Successful
  • Detect-secrets (Secret Scanner) - ✔︎ Successful

---

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

• /review - Manually triggers a full AI review.

• /pause - Pauses automatic reviews on this pull request.

• /resume - Resumes automatic reviews.

• /resolve - Marks all Bito-posted review comments as resolved.

• /abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Superset You can customize the agent settings here or contact your Bito workspace admin at evan@preset.io.

Documentation & Help

• Customize agent settings
• Review rules
• General documentation
• FAQ

AI Code Review powered by