Bump bottle from 0.10.9 to 0.12.19

[dependabot]

Bumps bottle from 0.10.9 to 0.12.19.

Changelog

Sourced from bottle's changelog.

.. highlight:: python .. currentmodule:: bottle

=========================== Release Notes and Changelog

Release 0.13

.. warning:: Not released yet.

.. rubric:: Dropped support for Python versions that reached their end-of-life.

Keeping up support for ancient Python versions hinders adaptation of new features and serves no real purpose. If you need support for older Python versions, you can stay on bottle-0.12. The updated list of tested and supported python releases is as follows:

• Python 2.7 (>= 2.7.3)
• Python 3.6
• Python 3.7
• Python 3.8
• Python 3.9
• PyPy 2.7
• PyPy 3.6
• PyPy 3.7

Support for Python 2.5 was marked as deprecated since 0.12. We decided to go a step further and also remove support for 2.6 and 3.1 to 3.5 even if it was never deprecated explicitly in bottle. This means that this release is not backwards compatible in Python <2.7.3 or <3.6 environments. Maintainers for distributions or systems that still use these old python versions should not update to Bottle 0.13 and stick with 0.12 instead.

.. rubric:: Stabilized APIs

• The documented API of the :class:ConfigDict class is now considered stable and ready to use.

.. rubric:: Deprecated APIs

• The old route syntax (/hello/:name) is deprecated in favor of the more readable and flexible /hello/<name> syntax.
• :meth:Bottle.mount now recognizes Bottle instance and will warn about parameters that are not compatible with the new mounting behavior. The old behavior (mount applications as WSGI callable) still works and is used as a fallback automatically.
• The undocumented :func:local_property helper is now deprecated.
• The server adapter for google app engine is not useful anymore and marked as deprecated.
• Bottle uses pickle to store arbitrary objects into signed cookies. This is safe, as long as the signature key remains a secret. Unfortunately, people tend to push code with signature keys to github all the time, so we decided to remove pickle-support from bottle. Signed cookies will now issue a deprecation warning if the value is not a string, and support for non-string values will be removed in 0.14. The global :func:cookie_encode, :func:cookie_decode and :func:is_cookie_encoded are now also deprecated. If you are using this feature, think about using json to serialize your objects before storing them into cookies, or switch to a session system that stores data server-side instead of client-side.

.. rubric:: Removed APIs (deprecated since 0.12)

• Plugins with the old API (api=1 or no api attribute) will no longer work.

• Parameter order of :meth:Bottle.mount changed in 0.10. The old order will now result in an error instead of a warning.

• The :class:ConfigDict class was introduced in 0.11 and changed during 0.12. These changes are now final.

  • Attribute access and assignment was removed due to high overhead and limited usability.

... (truncated)

Commits

• 1522198 Release of 0.12.19
• 57a2f22 Do not split query strings on ; anymore.
• 2d6acef Fix the Allow: header value in 405 "Method not allowed." response.
• 44b9cf8 Fix release steps in makefile
• 1d531f7 Release of 0.12.18
• 6927a6b Update build steps in makefile
• 774e1c7 fix #1181: digestmod parameter is now required since Python 3.8
• ce00d54 Fix: Two import-level DeprecationWarnings in 3.8
• bdbab79 fix #1181: digestmod parameter is now required since Python 3.8
• 099c4a2 #1177 Bug fix of missing regex escaped back slashes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Superseded by #8.