Build(deps): Bump werkzeug from 3.1.7 to 3.1.8 by dependabot[bot] · Pull Request #5391 · Netflix/lemur

dependabot · 2026-04-06T15:19:26Z

Bumps werkzeug from 3.1.7 to 3.1.8.

Release notes

3.1.8

This is the Werkzeug 3.1.8 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Werkzeug/3.1.8/ Changes: https://werkzeug.palletsprojects.com/page/changes/#version-3-1-8 Milestone: https://github.com/pallets/werkzeug/milestone/45?closed=1

Request.host and get_host return the empty string if the header is missing or has invalid characters. #3142

Changelog

Sourced from werkzeug's changelog.

Version 3.1.8

Released 2026-04-02

Request.host and get_host return the empty string if the header is missing or has invalid characters. :issue:3142

Commits

c1a26b4 release version 3.1.8
7926f0b relax get_host strictness (#3148)
deab88f relax get_host strictness
65eb639 start version 3.1.8
7720b76 release version 3.1.7 (#3135)
See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
werkzeug	[>= 2.1.a, < 2.2]
werkzeug	[>= 2.2.a, < 2.3]

coveralls · 2026-04-06T15:27:00Z

Coverage is 60.861% — dependabot/pip/werkzeug-3.1.8 into main. No base build found for main.

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.1.7 to 3.1.8. - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@3.1.7...3.1.8) --- updated-dependencies: - dependency-name: werkzeug dependency-version: 3.1.8 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 6, 2026

dependabot bot requested review from charhate, douglasc-nflx, hosssha, jmcrawford45 and jtschladen as code owners April 6, 2026 15:19

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 6, 2026

github-actions bot approved these changes Apr 6, 2026

View reviewed changes

github-actions bot enabled auto-merge April 6, 2026 15:19

jmcrawford45 approved these changes Apr 7, 2026

View reviewed changes

dependabot bot force-pushed the dependabot/pip/werkzeug-3.1.8 branch from ed0d4f8 to d4df7e5 Compare April 7, 2026 15:50