From 2e8d92941eabc5516257d9782ca769a6cdbc6638 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 20 Feb 2026 23:08:21 +0000
Subject: [PATCH] Bump flask

Bumps [flask](https://github.com/pallets/flask) from 2.3.3 to 3.1.3.
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/flask/compare/2.3.3...3.1.3)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../resources/uv/pyproject.toml                          | 2 +-
 .../resources/uv/uv.lock                                 | 9 +++++----
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/test/Microsoft.ComponentDetection.VerificationTests/resources/uv/pyproject.toml b/test/Microsoft.ComponentDetection.VerificationTests/resources/uv/pyproject.toml
index f79d996bb..e71e63398 100644
--- a/test/Microsoft.ComponentDetection.VerificationTests/resources/uv/pyproject.toml
+++ b/test/Microsoft.ComponentDetection.VerificationTests/resources/uv/pyproject.toml
@@ -6,7 +6,7 @@ authors = []
 requires-python  = "==3.9.*"
 dependencies = [
     "azure-identity==1.17.1",
-    "flask>2,<3",
+    "flask>2,<4",
     "requests>=2.32.0",
 ]
 
diff --git a/test/Microsoft.ComponentDetection.VerificationTests/resources/uv/uv.lock b/test/Microsoft.ComponentDetection.VerificationTests/resources/uv/uv.lock
index f2ad46ace..98047713d 100644
--- a/test/Microsoft.ComponentDetection.VerificationTests/resources/uv/uv.lock
+++ b/test/Microsoft.ComponentDetection.VerificationTests/resources/uv/uv.lock
@@ -135,7 +135,7 @@ dev = [
 [package.metadata]
 requires-dist = [
     { name = "azure-identity", specifier = "==1.17.1" },
-    { name = "flask", specifier = ">2,<3" },
+    { name = "flask", specifier = ">2,<4" },
     { name = "requests", specifier = ">=2.32.0" },
 ]
 
@@ -225,7 +225,7 @@ wheels = [
 
 [[package]]
 name = "flask"
-version = "2.3.3"
+version = "3.1.3"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "blinker" },
@@ -233,11 +233,12 @@ dependencies = [
     { name = "importlib-metadata" },
     { name = "itsdangerous" },
     { name = "jinja2" },
+    { name = "markupsafe" },
     { name = "werkzeug" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/46/b7/4ace17e37abd9c21715dea5ee11774a25e404c486a7893fa18e764326ead/flask-2.3.3.tar.gz", hash = "sha256:09c347a92aa7ff4a8e7f3206795f30d826654baf38b873d0744cd571ca609efc", size = 672756, upload-time = "2023-08-21T19:52:35.012Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/26/00/35d85dcce6c57fdc871f3867d465d780f302a175ea360f62533f12b27e2b/flask-3.1.3.tar.gz", hash = "sha256:0ef0e52b8a9cd932855379197dd8f94047b359ca0a78695144304cb45f87c9eb", size = 759004, upload-time = "2026-02-19T05:00:57.678Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/fd/56/26f0be8adc2b4257df20c1c4260ddd0aa396cf8e75d90ab2f7ff99bc34f9/flask-2.3.3-py3-none-any.whl", hash = "sha256:f69fcd559dc907ed196ab9df0e48471709175e696d6e698dd4dbe940f96ce66b", size = 96112, upload-time = "2023-08-21T19:52:33.115Z" },
+    { url = "https://files.pythonhosted.org/packages/7f/9c/34f6962f9b9e9c71f6e5ed806e0d0ff03c9d1b0b2340088a0cf4bce09b18/flask-3.1.3-py3-none-any.whl", hash = "sha256:f4bcbefc124291925f1a26446da31a5178f9483862233b23c0c96a20701f670c", size = 103424, upload-time = "2026-02-19T05:00:56.027Z" },
 ]
 
 [[package]]