Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deps: Bump the python-packages group with 2 updates #819

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 19, 2023

Bumps the python-packages group with 2 updates: django and djangorestframework.

Updates django from 2.2.28 to 4.2.5

Commits
  • b8b2f74 [4.2.x] Bumped version for 4.2.5 release.
  • 9c51b4d [4.2.x] Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding....
  • acfb427 [4.2.x] Fixed #34803 -- Fixed queryset crash when filtering againts deeply ne...
  • 55a0b9c [4.2.x] Added stub release notes and release date for 4.2.5, 4.1.11, and 3.2.21.
  • 8e8c318 [4.2.x] Avoided counting exceptions in AsyncClient docs.
  • dcb9d7a [4.2.x] Improved formset docs by using a set instead of a list in the custom ...
  • f55b420 [4.2.x] Fixed #34781 -- Updated logging ref docs for django.server's request ...
  • 46b2b08 [4.2.x] Fixed #34779 -- Avoided unnecessary selection of non-nullable m2m fie...
  • d34db66 [4.2.x] Fixed #34773 -- Fixed syncing DEFAULT_FILE_STORAGE/STATICFILES_STORAG...
  • a22aeef [4.2.x] Fixed #15799 -- Doc'd that Storage._open() should raise FileNotFoundE...
  • Additional commits viewable in compare view

Updates djangorestframework from 3.11.2 to 3.14.0

Release notes

Sourced from djangorestframework's releases.

Version 3.14.0

  • Django 2.2 is no longer supported. #8662
  • Django 4.1 compatibility. #8591
  • Add --api-version CLI option to generateschema management command. #8663
  • Enforce is_valid(raise_exception=False) as a keyword-only argument. #7952
  • Stop calling set_context on Validators. #8589
  • Return NotImplemented from ErrorDetails.__ne__. #8538
  • Don't evaluate DateTimeField.default_timezone when a custom timezone is set. #8531
  • Make relative URLs clickable in Browseable API. #8464
  • Support ManyRelatedField falling back to the default value when the attribute specified by dot notation doesn't exist. Matches ManyRelatedField.get_attribute to Field.get_attribute. #7574
  • Make schemas.openapi.get_reference public. #7515
  • Make ReturnDict support dict union operators on Python 3.9 and later. #8302
  • Update throttling to check if request.user is set before checking if the user is authenticated. #8370

Version 3.13.1

  • Revert schema naming changes with function based @api_view. #8297

Version 3.13.0

  • Django 4.0 compatability. #8178
  • Add max_length and min_length options to ListSerializer. #8165
  • Add get_request_serializer and get_response_serializer hooks to AutoSchema. #7424
  • Fix OpenAPI representation of null-able read only fields. #8116
  • Respect UNICODE_JSON setting in API schema outputs. #7991
  • Fix for RemoteUserAuthentication. #7158
  • Make Field constructors keyword-only. #7632

3.12.4

No release notes provided.

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
django [>= 3.a, < 4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 2 updates: [django](https://github.com/django/django) and [djangorestframework](https://github.com/encode/django-rest-framework).


Updates `django` from 2.2.28 to 4.2.5
- [Commits](django/django@2.2.28...4.2.5)

Updates `djangorestframework` from 3.11.2 to 3.14.0
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.11.2...3.14.0)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: djangorestframework
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner September 19, 2023 09:05
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 19, 2023
@greenbonebot greenbonebot enabled auto-merge (squash) September 19, 2023 09:06
auto-merge was automatically disabled September 19, 2023 09:06

Pull request was closed

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 19, 2023

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

@bjoernricks bjoernricks deleted the dependabot/pip/main/python-packages-49a51d2d33 branch September 19, 2023 09:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant