chore(deps): bump flask-compress from 1.17 to 1.23

[dependabot]

Bumps flask-compress from 1.17 to 1.23.

Changelog

Sourced from flask-compress's changelog.

1.23 (2025-11-06)

• add gzip to supported algorithms for streaming responses, but not in the COMPRESS_ALGORITHM_STREAMING default values, so users have to explicitly enable it
• add Windows and MacOS to the list of platforms tested on GitHub Actions

1.22 (2025-11-04)

• fix possible RuntimeError when applying compression to a streaming endpoint
• no longer apply make_conditional to streaming responses, as it had the effect of buffering the entire response, which defeats the purpose of streaming responses, unless the request.endpoint is in a new COMPRESS_STREAMING_ENDPOINT_CONDITIONAL config option, which defaults to ["static"]

As serving static content with Flask is using streaming responses, we wanted to preserve the correct handling of conditional requests (i.e. 304 Not Modified responses) for static content, while avoiding buffering the entire response when compressing streaming responses for other endpoints

1.21 (2025-11-04, yanked)

• compressing streaming responses is now supported:
  • the previous behavior was:
    • if COMPRESS_STREAMS was True (the default), streaming responses were compressed in 1 sitting using response.get_data(), meaning streaming responses were compressed but not streamed
    • if COMPRESS_STREAMS was False, streaming responses were not compressed at all
  • the new behavior is:
    • if COMPRESS_STREAMS is True, streaming responses are compressed chunk-by-chunk using response.iter_encoded(), which means that streaming responses are compressed and streamed
    • if COMPRESS_STREAMS is False, streaming responses are not compressed at all, as before.
  • we have a new COMPRESS_ALGORITHM_STREAMING config option to specify the compression algorithm to use for streaming responses, which defaults to ["zstd", "br", "deflate"], as "gzip" is not suitable for streaming compression.
  • ⚠️ serving static content with Flask is actually using streaming responses, so if you enable streaming compression, static content will be compressed chunk-by-chunk as well, which may not be what you want.

1.20 (2025-10-20)

• the new COMPRESS_EVALUATE_CONDITIONAL_REQUEST config option is now True by default

1.19 (2025-10-20)

• Use backports.zstd instead of pyzstd, #63 by @​alexprengere
• Add new behaviours to improve Etag compatibility, #67, by @​jlopex
  • weak etags are no longer modified by flask-compress
  • add new COMPRESS_EVALUATE_CONDITIONAL_REQUEST config option to call response.make_conditional(request) after compression, this ensures that 304 Not Modified responses are correctly generated when the client sends conditional requests with If-None-Match (defaults to False)

1.18 (2025-07-11)

• Support, and test against, Python 3.14, see #61 by @​kurtmckee
• Migrate from zstandard to pyzstd, which is now included in the Python 3.14 standard library, also part of #61
• Restore flask_compress.DictCache() that is needed to configure Flask-Compress with caching, without relying on Flask-Caching

Commits

• 0099046 Bump to version 1.23
• c9095b7 Add Windows and MacOS to CI (#71)
• 7f7f0bf Update documentation with recent changes
• 776555f Update pre-commit config to remove isort
• 600367b Add gzip as a not-by-default available streaming algorithm
• 4e04b4d Add actual tests to check that compressed content matches original data
• c1909a9 Add proper test for static endpoints exceptions for conditional requests (wit...
• f7209fd Improve changelog
• 79d51d1 Rename COMPRESS_EVALUATE_CONDITIONAL_REQUEST_STREAMING_ENDPOINT to COMPRESS_S...
• 9313b45 Fix streaming not really streaming because of make_conditional
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.05%. Comparing base (25eb362) to head (14f018f).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1234   +/-   ##
=======================================
  Coverage   64.05%   64.05%           
=======================================
  Files          40       40           
  Lines        2462     2462           
=======================================
  Hits         1577     1577           
  Misses        885      885           

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 25eb362...14f018f. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.