0.53.7

changedetectionio/__init__.py

@@ -2,7 +2,7 @@
 
 # Read more https://github.com/dgtlmoon/changedetection.io/wiki
 # Semver means never use .01, or 00. Should be .1.
-__version__ = '0.53.5'
+__version__ = '0.53.7'
 
 from changedetectionio.strtobool import strtobool
 from json.decoder import JSONDecodeError

changedetectionio/flask_app.py

@@ -27,7 +27,6 @@ from flask import (
     session,
     url_for,
 )
-from flask_compress import Compress as FlaskCompress
 from flask_restful import abort, Api
 from flask_cors import CORS
 
@@ -74,14 +73,14 @@ CORS(app)
 # There's also a bug between flask compress and socketio that causes some kind of slow memory leak
 # It's better to use compression on your reverse proxy (nginx etc) instead.
 if strtobool(os.getenv("FLASK_ENABLE_COMPRESSION")):
+    from flask_compress import Compress as FlaskCompress
     app.config['COMPRESS_MIN_SIZE'] = 2096
     app.config['COMPRESS_MIMETYPES'] = ['text/html', 'text/css', 'text/javascript', 'application/json', 'application/javascript', 'image/svg+xml']
     # Use gzip only - smaller memory footprint than zstd/brotli (4-8KB vs 200-500KB contexts)
     app.config['COMPRESS_ALGORITHM'] = ['gzip']
+    compress = FlaskCompress()
+    compress.init_app(app)
 
-compress = FlaskCompress()
-
-compress.init_app(app)
 app.config['TEMPLATES_AUTO_RELOAD'] = False
 
 

changedetectionio/realtime/socket_server.py

@@ -198,26 +198,11 @@ def handle_watch_update(socketio, **kwargs):
     except Exception as e:
         logger.error(f"Socket.IO error in handle_watch_update: {str(e)}")
 
-
-def _patch_flask_request_context_session():
-    """Flask 3.1 removed the session setter from RequestContext, but Flask-SocketIO 5.6.0
-    still assigns to it directly (ctx.session = ...).  Restore a setter that writes the
-    private _session attribute so the two libraries work together.
-    """
-    from flask.ctx import RequestContext
-    if getattr(RequestContext.session, 'fset', None) is not None:
-        return  # Already has a setter (future Flask version restored it)
-    original_prop = RequestContext.session
-    RequestContext.session = original_prop.setter(lambda self, value: setattr(self, '_session', value))
-
-
 def init_socketio(app, datastore):
     """Initialize SocketIO with the main Flask app"""
     import platform
     import sys
 
-    _patch_flask_request_context_session()
-
     # Platform-specific async_mode selection for better stability
     system = platform.system().lower()
     python_version = sys.version_info

requirements.txt

@@ -1,27 +1,21 @@
-# eventlet>=0.38.0  # Removed - replaced with threading mode for better Python 3.12+ compatibility
 feedgen~=1.0
 feedparser~=6.0  # For parsing RSS/Atom feeds
 flask-compress
-# 0.6.3 included compatibility fix for werkzeug 3.x (2.x had deprecation of url handlers)
 flask-login>=0.6.3
 flask-paginate
-flask_restful
-flask_cors # For the Chrome extension to operate
-# janus # No longer needed - using pure threading.Queue for multi-loop support
-flask_wtf~=1.2
-# Flask 3.1 removed the session setter on RequestContext; the patch in
-# changedetectionio/realtime/socket_server.py restores it so Flask-SocketIO works.
-# Require >=3.1 so the patch is always needed; <4 guards against unknown breaking changes.
+flask-socketio>=5.6.1,<6 # Re #3910
 flask>=3.1,<4
-# Flask-SocketIO 5.x still does ctx.session = ... directly; the patch above handles it.
-# >=5.5.0 ensures the threading async_mode we rely on is available.
-flask-socketio>=5.5.0,<6
-python-socketio>=5.11.0,<6
-python-engineio>=4.9.0,<5
+flask_cors # For the Chrome extension to operate
+flask_restful
+flask_wtf~=1.2
 inscriptis~=2.2
+python-engineio>=4.9.0,<5
+python-socketio>=5.11.0,<6
 pytz
 timeago~=1.0
 validators~=0.35
+werkzeug==3.1.6
+
 
 # Set these versions together to avoid a RequestsDependencyWarning
 # >= 2.26 also adds Brotli support if brotli is installed
@@ -103,12 +97,8 @@ pytest ~=9.0
 pytest-flask ~=1.3
 pytest-mock ~=3.15
 
-# Anything 4.0 and up but not 5.0
-jsonschema ~= 4.26
-
 # OpenAPI validation support
-openapi-core[flask] >= 0.19.0
-
+openapi-core[flask] ~= 0.22
 
 loguru
 
@@ -130,8 +120,7 @@ greenlet >= 3.0.3
 # Default SOCKETIO_MODE=threading is recommended for better compatibility
 gevent
 
-# Previously pinned for flask_expects_json (removed 2026-02). Unpinning for now.
-referencing
+referencing  # Don't pin — jsonschema-path (required by openapi-core>=0.18) caps referencing<0.37.0, so pinning 0.37.0 forces openapi-core back to 0.17.2. Revisit once jsonschema-path>=0.3.5 relaxes the cap.
 
 # For conditions
 panzi-json-logic