Bump flask-compress from 1.20 to 1.23 in the minor-and-patch group

[dependabot]

Bumps the minor-and-patch group with 1 update: flask-compress.

Updates flask-compress from 1.20 to 1.23

Changelog

Sourced from flask-compress's changelog.

1.23 (2025-11-06)

• add gzip to supported algorithms for streaming responses, but not in the COMPRESS_ALGORITHM_STREAMING default values, so users have to explicitly enable it
• add Windows and MacOS to the list of platforms tested on GitHub Actions

1.22 (2025-11-04)

• fix possible RuntimeError when applying compression to a streaming endpoint
• no longer apply make_conditional to streaming responses, as it had the effect of buffering the entire response, which defeats the purpose of streaming responses, unless the request.endpoint is in a new COMPRESS_STREAMING_ENDPOINT_CONDITIONAL config option, which defaults to ["static"]

As serving static content with Flask is using streaming responses, we wanted to preserve the correct handling of conditional requests (i.e. 304 Not Modified responses) for static content, while avoiding buffering the entire response when compressing streaming responses for other endpoints

1.21 (2025-11-04, yanked)

• compressing streaming responses is now supported:
  • the previous behavior was:
    • if COMPRESS_STREAMS was True (the default), streaming responses were compressed in 1 sitting using response.get_data(), meaning streaming responses were compressed but not streamed
    • if COMPRESS_STREAMS was False, streaming responses were not compressed at all
  • the new behavior is:
    • if COMPRESS_STREAMS is True, streaming responses are compressed chunk-by-chunk using response.iter_encoded(), which means that streaming responses are compressed and streamed
    • if COMPRESS_STREAMS is False, streaming responses are not compressed at all, as before.
  • we have a new COMPRESS_ALGORITHM_STREAMING config option to specify the compression algorithm to use for streaming responses, which defaults to ["zstd", "br", "deflate"], as "gzip" is not suitable for streaming compression.
  • ⚠️ serving static content with Flask is actually using streaming responses, so if you enable streaming compression, static content will be compressed chunk-by-chunk as well, which may not be what you want.

Commits

• 0099046 Bump to version 1.23
• c9095b7 Add Windows and MacOS to CI (#71)
• 7f7f0bf Update documentation with recent changes
• 776555f Update pre-commit config to remove isort
• 600367b Add gzip as a not-by-default available streaming algorithm
• 4e04b4d Add actual tests to check that compressed content matches original data
• c1909a9 Add proper test for static endpoints exceptions for conditional requests (wit...
• f7209fd Improve changelog
• 79d51d1 Rename COMPRESS_EVALUATE_CONDITIONAL_REQUEST_STREAMING_ENDPOINT to COMPRESS_S...
• 9313b45 Fix streaming not really streaming because of make_conditional
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}