The go-to resource for upgrading Python, Django, Flask, and your dependencies.

All Articles

70 articles on upgrading Python, Django, Flask, and managing dependencies

FastAPI OpenAPI Schema Generation: Customizing Swagger UI with Custom CSS and Logo

FastAPI OpenAPI schema generation & Swagger UI customization: Add custom CSS, logo to /docs. Override schema info/tags, serve static files, production uvicorn. Benchmarks: Custom CSS adds 0.2ms latency. Code examples, pydantic models, swagger_ui_css_url. Keywords: 'fastapi custom swagger ui', 'fastapi swagger logo css', 'openapi schema customize fastapi', 'fastapi docs customization', 'swagger ui custom css fastapi'.

fastapi openapi swagger-ui css customization docs python api

Scaling FastAPI WebSockets to 10,000 Concurrent Connections with Uvicorn

Configure Uvicorn to handle up to 10,000 concurrent WebSocket connections in FastAPI applications. Covers multi-worker setup, system tuning (ulimit, sysctl), benchmarks showing 5ms p99 latency and 50k msg/s throughput on Python 3.13, verified with websocket-bench. Addresses common issues like connection refused and too many open files.

fastapi websocket uvicorn performance scalability concurrent-connections python asgi benchmark

Resolving 'python: command not found' After Installing Python 3.13 with asdf

Resolve 'python: command not found' after installing Python 3.13 with asdf. Step-by-step guide covering shims, PATH, shell setup, and troubleshooting.

python asdf installation troubleshooting python-3.13

Flask 3.1 to 4.0 Migration Guide: Breaking Changes in Werkzeug 3.0 Routing

Flask 3.1 to 4.0 migration guide: Fix Werkzeug 3.0 routing breaking changes including new state machine router, custom converters part_isolating=False, strict_slashes fixes, SERVER_NAME host_matching, UTF-8 charset removal. Code examples, steps, verification for seamless upgrade.

flask flask-4.0 flask-migration werkzeug-3.0 routing breaking-changes python web devops

Flask Application Factory Pattern: When to Use create_app() vs Global app Instance

Flask application factory pattern guide: create_app() vs global app instance. Use factory for testing, config/env separation, blueprints/extensions (80% production apps). Global for quick prototypes. Code examples, migration steps, pytest integration, circular import fixes. Flask 3.0+ best practices.

flask application-factory create_app factory-pattern global-app testing configuration blueprints extensions python flask-best-practices

Flask Framework Tutorial

Flask tutorial: installation, hello world app, routes, Jinja templates, WTForms, SQLAlchemy ORM, Blueprints, deployment to Heroku/Vercel.

flask flask-framework python-web tutorial microframework jinja2 sqlalchemy wtforms deployment beginner

Flask-Login Session Fixation Vulnerability: How to Regenerate Session IDs After Login

Flask-Login session fixation vuln: No auto session ID regen post-login → attacker hijacks via pre-auth session fixation (OWASP A5). Fix: session.regenerate() after login_user(). Code, audit, tests. Benchmarks: 0 vuln → secure.

flask flask-login security session-fixation owasp session-regeneration vulnerability python

Flask-SQLAlchemy 3.1: Migrating from db.Model to Declarative Base Syntax

Migrate your Flask-SQLAlchemy models from legacy db.Model to SQLAlchemy 2.0 declarative base syntax using Mapped and mapped_column. Fix post-upgrade TypeErrors, gain type hints and IDE support, ensure Alembic compatibility.

flask flask-sqlalchemy sqlalchemy-2.0 declarativebase mapped_column orm migration python database

Flask vs FastAPI for Real-Time WebSocket Applications: Latency Benchmarks

Flask vs FastAPI WebSocket benchmarks on Python 3.13 M2 Mac: compare latency and throughput for realtime apps. Includes code setups, py-spy analysis, uvicorn/gunicorn+SocketIO configs.

flask fastapi websocket latency benchmark realtime performance python uvicorn gunicorn socketio

How to Configure Flask Behind Nginx with X-Forwarded-For Headers for GDPR Logging

Configure Flask behind Nginx to preserve real client IP with X-Forwarded-For headers for GDPR logging. Covers Nginx proxy_set_header, Flask ProxyFix/werkzeug ProxyFix, Gunicorn --forwarded-allow-ips, Docker and Ubuntu setups.

flask nginx x-forwarded-for gdpr logging reverse-proxy proxy security python gunicorn deployment

How to Fix 422 Unprocessable Entity Validation Errors in FastAPI Request Bodies

Troubleshooting 422 Unprocessable Entity errors in FastAPI, caused by Pydantic validation failures in request bodies. Covers debugging techniques, common causes like type mismatches and missing fields, and practical solutions including optional fields, unions, validators, and error handling.

fastapi pydantic 422 validation-error request-body api debugging python

How to Fix Flaky pytest Tests Caused by Random Order Execution with pytest-randomly

pytest flaky tests random order fix: pytest-randomly shuffles execution order + seeds random, exposes hidden deps. Install pip, demo failing suite, reproduce w/ --randomly-seed=12345, fix w/ autouse fixtures. CI: --randomly-seed=last. Benchmarks detect 80% hidden flakiness. Keywords: 'fix flaky pytest tests', 'pytest-randomly tutorial', 'pytest random order execution', 'pytest flaky random seed', 'detect order dependent tests pytest'.

pytest testing flaky-tests pytest-randomly python ci-cd debugging random-seed

How to Fix ImportError: cannot import name 'escape' from 'jinja2' in Flask 2.3

Resolve ImportError: cannot import name 'escape' from 'jinja2' when upgrading to Flask 2.3. Step-by-step fixes, code examples, and best practices for Jinja2 compatibility.

flask jinja2 importerror python-error troubleshooting flask-2-3 jinja2-3-1

How to Fix Vulnerable Dependency Errors in requirements.txt for PCI DSS Compliance

PCI DSS compliance Python: Fix vulnerable dependencies in requirements.txt. Step-by-step guide using pip-audit, safety CLI, pip-tools/uv locking. Quarterly scans, exact pinning, hashes for Req 6.2.3 audits. Pass vulnerability scans – requirements.txt security best practices 2026.

python pci-dss vulnerabilities requirements.txt pip-audit safety compliance devsecops pip-tools uv

How to Pin Transitive Dependencies in requirements.txt to Pass Security Audits

Pin direct + transitive (indirect) dependencies in requirements.txt using pip-tools or uv pip-compile. Pass pip-audit, Safety CLI, Snyk scans with exact versions/hashes. Reproducible, secure Python builds without version drift.

python requirements.txt transitive-dependencies pip-tools pip-compile uv security-audit pip-audit safety-cli snyk dependencies devops ci-cd

How to Profile Flask Applications with py-spy Without Adding Code Instrumentation

py-spy Flask profiling no code changes: Attach to gunicorn PID, py-spy top reveals 90% CPU in slow endpoint loop, flamegraph.svg export. 5x speedup fixes. Benchmarks: 200req/s → 1000req/s. Keywords: 'profile flask app py-spy', 'flask performance without instrumentation', 'py-spy gunicorn flask', 'flask cpu profiler no decorators'.

flask profiling py-spy performance python gunicorn debugging

How to Reduce FastAPI JSON Response Time by 40% Using orjson Instead of stdlib json

FastAPI orjson integration: 40% faster JSON responses (28ms → 17ms p99 avg). Custom ORJSONResponse class, benchmarks uvicorn Python 3.13, 10k req/s load. Pydantic v2 auto-detects orjson. Keywords: fastapi orjson, fastapi json performance, reduce fastapi response time, python json optimization.

fastapi orjson performance json benchmark optimization python uvicorn pydantic

How to Set Up Python 3.13t (Free-Threaded Build) Using mise on macOS Sonoma

Step-by-step guide to installing the Python 3.13t free-threaded build using mise on macOS Sonoma (14) for Apple Silicon Macs.

python mise free-threaded 3.13t nogil macos-sonoma apple-silicon

How to Test Flask Endpoints That Require Authentication Without Hitting the Database

Flask auth endpoint testing without DB: Mock Flask-Login user_loader, pytest fixtures for test_client + fake user. Parallel-safe (500 tests/s), zero flakes/DB setup. Full app+tests code. Keywords: 'flask test authentication endpoints no database', 'pytest flask-login mock user', 'flask test_client login without db'.

flask testing pytest flask-login authentication mock testclient database python

How to Verify PGP Signatures for Python Packages Downloaded with pip

Verify PGP signatures Python packages pip: GPG check PyPI .asc files for cryptography requests wheels. Manual supply chain security beyond pip hashes. Step-by-step gpg --verify guide, key import, troubleshooting. PyPI package signature verification 2026.

python pip pgp gpg signature pypi security wheel supply-chain cryptography

Sponsored by Durable Programming

Need help maintaining or upgrading your Python application? Durable Programming specializes in keeping Python apps secure, performant, and up-to-date.

Hire Durable Programming