Chore/bump werkzeug 3.0.3

[george42-ctds]

JIRA ticket: PPS-1184

New Features

Breaking Changes

Bug Fixes

Improvements

Dependency updates

• werkzeug to 3.0.3
• jinja2 to 3.1.4
• cryptography to 42.0.7

Deployment changes

[github-actions]

The style in this PR agrees with black. ✔️

This formatting comment was generated automatically by a script in uc-cdis/wool.

[MaribelleHGomez]

I'm only seeing changes for the lock file?

[george42-ctds]

Yes, correct, only bumping a few dependencies in the lock file.

[MaribelleHGomez]

Yes, correct, only bumping a few dependencies in the lock file.

so we're choosing not to change the toml file, and changing the lock file instead?

[george42-ctds]

Yes, the minimal update is to just have changes in the lock file, or do a "re-lock". The relevant packages (werkzeug, etc.) are not direct dependencies and are not listed in the pyproject.toml. The "re-locking" was sufficient to bump up these packages by a patch version or minor version. Sometimes you have to start bumping versions in the pyproject.toml to bump up sub-dependencies but that is not required in this case.

[george42-ctds]

Poetry will still utilize the pyproject.toml to determine which versions to install. Everything will still adhere to the rules in the proproject.toml.