Bumping Flash and Werkzeug due to security risks

[swetoast]

Flask==2.2.5

2.2.5

This is a security fix release for the 2.2.x release branch. Note that 2.3.x is the currently supported release branch; please upgrade to the latest version if possible.

    Security advisory: [GHSA-m2qf-hxjv-5gpq](https://github.com/pallets/flask/security/advisories/GHSA-m2qf-hxjv-5gpq), [CVE-2023-30861](https://github.com/advisories/GHSA-m2qf-hxjv-5gpq)
    Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-5
    Milestone: https://github.com/pallets/flask/milestone/30?closed=1

2.2.4

This is a fix release for the 2.2.x release branch.

    Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-4
    Milestone: https://github.com/pallets/flask/milestone/27?closed=1

2.2.3

This is a fix release for the 2.2.x release branch.

    Changes: https://flask.palletsprojects.com/en/2.2.x/changes/#version-2-2-3
    Milestone: https://github.com/pallets/flask/milestone/26?closed=1

Changelog

Sourced from flask's changelog.

Version 2.2.5

Released 2023-05-02

    Update for compatibility with Werkzeug 2.3.3.
    Set Vary: Cookie header when the session is accessed, modified, or refreshed.

Version 2.2.4

Released 2023-04-25

    Update for compatibility with Werkzeug 2.3.

Version 2.2.3

Released 2023-02-15

    Autoescape is enabled by default for .svg template files. :issue:4831
    Fix the type of template_folder to accept pathlib.Path. :issue:4892
    Add --debug option to the flask run command. :issue:4777

Werkzeug==3.0.3

Bump werkzeug from 2.2.2 to 3.0.3

Bumps werkzeug from 2.2.2 to 3.0.3.

• Release notes
• Changelog
• Commits

---

updated-dependencies:

• dependency-name: werkzeug
  dependency-type: direct:production