Update dependencies and add tests for empty file field

[uncle-lv]

Pin flask-marshmallow==1.2.1 for two important bug fixes below:

• Fix File field when it receives an empty value
• Fix validate.FileSize to handle SpooledTemporaryFile

Pin flask==2.2.0 and werkzeug==2.2.0 because flask-marshmallow updated min version of flask.

Pin Flask-HTTPAuth==4.4.0 because safe_str_cmp is deprecated and has been removed in Werkzeug 2.1.

Update flake8 hook to 7.0.0 to be compatible with python3.12.

Add a test for empty file field.

[greyli]

You don't need to update this file. This file kept the minimal version supported by APIFlask and will only be used in testing.

[uncle-lv]

If I don't update this file, the new test will fail.

        rv = client.post(
            '/',
            data={
                'image': '',
            },
            content_type='multipart/form-data'
        )
>       assert rv.status_code == 200
E       assert 422 == 200
E         +422
E         -200

tests/test_fields.py:54: AssertionError

[greyli]

You can skip this test based on the version of flask-marshmallow. Example:

apiflask/examples/test_examples.py

Line 118 in 4992f8e

@pytest.mark.skipif(flask_sqlalchemy.__version__ < '3',

[uncle-lv]

flask_marshmallow has no attribute __version__. I'll make a pr for it.

AttributeError: module 'flask_marshmallow' has no attribute '__version__'

[greyli]

Use importlib.metadata:

>>> from importlib.metadata import version
>>> version('flask')
'2.3.3'
>>> version('flask-marshmallow')
'0.15.0'

[greyli]

BTW, could you help update the reference of flask_sqlalchemy.__version__ and change to use importlib.metadata.version?

That variable is deprecated.

[greyli]

Why did you revert the changes to the requirement files? It's fine to update them (except the min-versions.*).

[uncle-lv]

Why did you revert the changes to the requirement files? It's fine to update them (except the min-versions.*).

Because in the end no dependencies are updated.