suburbanmtman opened a new pull request #4739: [AIRFLOW-3923] Update flask-admin dependency to 1.5.3 URL: https://github.com/apache/airflow/pull/4739 ### Jira - [ X] My PR addresses the following [AIRFLOW-3923](https://issues.apache.org/jira/browse/AIRFLOW/3923) issues and references them in the PR title. ### Description - [X ] Here are some details about my PR, including screenshots of any UI changes: - Resolves security vulnerabilities detected in safety for flask-admin 1.5.2: 36746 36437 Release notes for 1.5.3: - Fixed XSS vulnerability - Support nested categories in the navbar menu - SQLAlchemy -- sort on multiple columns with column_default_sort -- sort on related models in column_sortable_list -- fix: inline model forms can now also be used for models with multiple primary keys -- support for using mapped column_property - Upgrade Leaflet and Leaflet.draw plugins, used for geoalchemy integration - Specify minimum_input_length for ajax widget - Peewee: support composite keys - MongoEngine: when searching/filtering the input is now regarded as case-insensitive by default - FileAdmin -- handle special characters in filename -- fix a bug with listing directories on Windows -- avoid raising an exception when unknown sort parameter is encountered -- WTForms 3 support ### Tests - [ X] My PR adds the following unit tests __OR__ does not need testing for this extremely good reason: Airflow usage of flask-admin does not appear to touch any of the changes introduced by 1.5.3 ### Commits - [ X] My commits all reference Jira issues in their subject lines, and I have squashed multiple commits if they address the same issue. In addition, my commits follow the guidelines from "[How to write a good git commit message](http://chris.beams.io/posts/git-commit/)": 1. Subject is separated from body by a blank line 1. Subject is limited to 50 characters (not including Jira issue reference) 1. Subject does not end with a period 1. Subject uses the imperative mood ("add", not "adding") 1. Body wraps at 72 characters 1. Body explains "what" and "why", not "how" ### Documentation - [X ] In case of new functionality, my PR adds documentation that describes how to use it. - When adding new operators/hooks/sensors, the autoclass documentation generation needs to be added. - All the public functions and the classes in the PR contain docstrings that explain what it does ### Code Quality - [X] Passes `flake8`
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
