Merge pull request #2538 from plotly/flask-upper-bound

Upper bound on Flask and Werkzeug versions

Author: alexcjohnson

Diff for: CHANGELOG.md

@@ -4,6 +4,10 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [UNRELEASED]
 
+## Changed
+
+- [#2538](https://github.com/plotly/dash/pull/2538) Add an upper bound to Flask and Werkzeug versions at `<2.2.3` because we expect the Dash ecosystem to be incompatible with the next minor release of Flask (this excludes the current latest Flask release 2.3.x). We will raise the upper bound to `<2.4` after we fix incompatibilities elsewhere in the Dash ecosystem.
+
 ## Fixed
 
 - [#2508](https://github.com/plotly/dash/pull/2508) Fix error message, when callback output has different length than spec
@@ -13,11 +17,13 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 ## Updated
 
-- [#2533](https://github.com/plotly/dash/pull/2533) Update Plotly.js to v2.23.1 from v2.20.0.
+- [#2533](https://github.com/plotly/dash/pull/2533) and [#2538](https://github.com/plotly/dash/pull/2538) Update Plotly.js to v2.23.2 from v2.20.0.
   - Feature release [2.23.0](https://github.com/plotly/plotly.js/releases/tag/v2.23.0) adds legend/colorbar xref/yref.
   - Feature release [2.22.0](https://github.com/plotly/plotly.js/releases/tag/v2.22.0) adds `legend` references to traces.
-  - Feature release [2.21.0](https://github.com/plotly/plotly.js/releases/tag/v2.21.0) adds label.texttemplate to parametric shapes.
-  - Patch release [2.23.1](https://github.com/plotly/plotly.js/releases/tag/v2.23.1) fix heatmap rendering on iOS and Safari when zsmooth is set to false.
+  - Feature release [2.21.0](https://github.com/plotly/plotly.js/releases/tag/v2.21.0) adds `label.texttemplate` to parametric shapes.
+  - Patch releases [2.23.1](https://github.com/plotly/plotly.js/releases/tag/v2.23.1) and [2.23.2](https://github.com/plotly/plotly.js/releases/tag/v2.23.2) fix heatmap rendering on iOS and Safari when zsmooth is set to false and shape text when drawing a new shape.
+
+- [#2538](https://github.com/plotly/dash/pull/2538) Update JS dependencies in dcc, html, dash-table, dash-renderer, and dash
 
 ## [2.9.3] - 2023-04-13
 

Diff for: components/dash-core-components/package-lock.json

@@ -45,19 +45,19 @@
     "d3-format": "^1.4.5",
     "fast-isnumeric": "^1.1.4",
     "file-saver": "^2.0.5",
-    "highlight.js": "^11.6.0",
+    "highlight.js": "^11.8.0",
     "mathjax": "^3.2.2",
     "moment": "^2.29.4",
     "node-polyfill-webpack-plugin": "^2.0.1",
-    "plotly.js-dist-min": "2.23.1",
+    "plotly.js-dist-min": "2.23.2",
     "prop-types": "^15.8.1",
-    "ramda": "^0.28.0",
+    "ramda": "^0.29.0",
     "rc-slider": "^9.7.5",
     "react-addons-shallow-compare": "^15.6.3",
     "react-dates": "^21.8.0",
     "react-docgen": "^5.4.3",
     "react-dropzone": "^4.1.2",
-    "react-fast-compare": "^3.2.0",
+    "react-fast-compare": "^3.2.2",
     "react-markdown": "^4.3.1",
     "react-resize-detector": "^6.7.6",
     "react-select-fast-filter-options": "^0.2.3",
@@ -66,32 +66,32 @@
     "uniqid": "^5.4.0"
   },
   "devDependencies": {
-    "@babel/cli": "^7.19.3",
-    "@babel/core": "^7.19.6",
+    "@babel/cli": "^7.21.5",
+    "@babel/core": "^7.21.8",
     "@babel/plugin-syntax-dynamic-import": "^7.8.3",
-    "@babel/preset-env": "^7.19.4",
+    "@babel/preset-env": "^7.21.5",
     "@babel/preset-react": "^7.18.6",
     "@plotly/dash-component-plugins": "^1.2.3",
     "@plotly/webpack-dash-dynamic-import": "^1.3.0",
-    "babel-loader": "^8.2.5",
+    "babel-loader": "^9.1.2",
     "component-playground": "^3.2.1",
     "copyfiles": "^2.4.1",
-    "css-loader": "^6.7.1",
-    "es-check": "^7.0.1",
-    "eslint": "^8.26.0",
-    "eslint-config-prettier": "^8.5.0",
-    "eslint-plugin-import": "^2.26.0",
-    "eslint-plugin-react": "^7.31.10",
+    "css-loader": "^6.7.4",
+    "es-check": "^7.1.1",
+    "eslint": "^8.41.0",
+    "eslint-config-prettier": "^8.8.0",
+    "eslint-plugin-import": "^2.27.5",
+    "eslint-plugin-react": "^7.32.2",
     "identity-obj-proxy": "^3.0.0",
     "npm-run-all": "^4.1.5",
-    "prettier": "^2.7.1",
+    "prettier": "^2.8.8",
     "react": "^16.14.0",
     "react-dom": "^16.14.0",
     "react-jsx-parser": "1.21.0",
-    "style-loader": "^3.3.1",
+    "style-loader": "^3.3.3",
     "styled-jsx": "^3.4.4",
-    "webpack": "^5.76.2",
-    "webpack-cli": "^4.10.0"
+    "webpack": "^5.83.1",
+    "webpack-cli": "^5.1.1"
   },
   "files": [
     "/dash_core_components/*{.js,.map}",