deps: bump the django group across 1 directory with 8 updates#77
Closed
dependabot[bot] wants to merge 1 commit into
Closed
deps: bump the django group across 1 directory with 8 updates#77dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Updates the requirements on [django](https://github.com/django/django), [django-allauth](https://github.com/sponsors/pennersr), [django-import-export](https://github.com/django-import-export/django-import-export), [django-parler](https://github.com/edoburu/django-parler), [django-guardian](https://github.com/django-guardian/django-guardian), [django-polymorphic](https://github.com/django-commons/django-polymorphic), [django-flex-menus](https://github.com/SamuelJennings/django-flex-menus) and [django-hijack](https://github.com/django-hijack/django-hijack) to permit the latest version. Updates `django` from 5.2.12 to 5.2.14 - [Commits](django/django@5.2.12...5.2.14) Updates `django-allauth` from 65.14.3 to 65.16.1 - [Commits](https://github.com/sponsors/pennersr/commits) Updates `django-import-export` from 4.4.0 to 4.4.1 - [Release notes](https://github.com/django-import-export/django-import-export/releases) - [Changelog](https://github.com/django-import-export/django-import-export/blob/main/docs/changelog.rst) - [Commits](django-import-export/django-import-export@4.4.0...4.4.1) Updates `django-parler` from 2.3 to 2.4 - [Release notes](https://github.com/edoburu/django-parler/releases) - [Changelog](https://github.com/django-parler/django-parler/blob/master/CHANGES.rst) - [Commits](django-parler/django-parler@v2.3...v2.4) Updates `django-guardian` from 3.3.0 to 3.3.1 - [Release notes](https://github.com/django-guardian/django-guardian/releases) - [Commits](django-guardian/django-guardian@3.3.0...3.3.1) Updates `django-polymorphic` from 4.11.2 to 4.11.3 - [Release notes](https://github.com/django-commons/django-polymorphic/releases) - [Commits](django-commons/django-polymorphic@v4.11.2...v4.11.3) Updates `django-flex-menus` to 0.4.2 - [Release notes](https://github.com/SamuelJennings/django-flex-menus/releases) - [Commits](django-mvp/django-flex-menus@v0.4.0...v0.4.2) Updates `django-hijack` from 3.7.6 to 3.7.8 - [Release notes](https://github.com/django-hijack/django-hijack/releases) - [Changelog](https://github.com/django-hijack/django-hijack/blob/master/docs/release-button.png) - [Commits](django-hijack/django-hijack@3.7.6...3.7.8) --- updated-dependencies: - dependency-name: django dependency-version: 5.2.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: django - dependency-name: django-allauth dependency-version: 65.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: django - dependency-name: django-import-export dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: django - dependency-name: django-parler dependency-version: '2.4' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: django - dependency-name: django-guardian dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: django - dependency-name: django-polymorphic dependency-version: 4.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: django - dependency-name: django-flex-menus dependency-version: 0.4.2 dependency-type: direct:production dependency-group: django - dependency-name: django-hijack dependency-version: 3.7.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: django ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
👀 Manual Review RequiredReason: Requires manual review (critical package or major/minor update) This dependency update requires manual review before merging. Please:
|
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on django, django-allauth, django-import-export, django-parler, django-guardian, django-polymorphic, django-flex-menus and django-hijack to permit the latest version.
Updates
djangofrom 5.2.12 to 5.2.14Commits
024c26b[5.2.x] Bumped version for 5.2.14 release.2115d4e[5.2.x] Fixed CVE-2026-6907 -- Prevented caching of requests when Vary header...47cf968[5.2.x] Fixed CVE-2026-35192 -- Ensured Vary header is sent when setting sess...2ec27ed[5.2.x] Fixed CVE-2026-5766 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE in Memory...ed18840[5.2.x] Fixed typo in stub release notes for 5.2.14.de3f622[5.2.x] Added stub release notes and release date for 5.2.14.fb61c8a[5.2.x] Refs CVE-2026-4292 -- Isolated new test in AdminViewListEditable.bd1a758[5.2.x] Fixed two issues in release helper scripts/verify_release.sh.da57aaa[5.2.x] Added CVE-2026-3902, CVE-2026-4277, CVE-2026-4292, CVE-2026-33033, an...c9a8bdb[5.2.x] Post-release version bump.Updates
django-allauthfrom 65.14.3 to 65.16.1Commits
Updates
django-import-exportfrom 4.4.0 to 4.4.1Release notes
Sourced from django-import-export's releases.
Changelog
Sourced from django-import-export's changelog.
Commits
f4cfc4dupdated changelogUpdates
django-parlerfrom 2.3 to 2.4Release notes
Sourced from django-parler's releases.
Changelog
Sourced from django-parler's changelog.
Commits
60e9841fix: Syntax in pypi actions (#376)85d0020Install Django in publish-to-live-pypi workflow (#375)101fdedchore: Add GitHub Actions workflow for publishing to PyPI (#374)2b0bf19Update changelog for version 2.4 release datee676606fix: drop Django 5.0 support; admin uses log_deletions (added in 5.1) (#370)01893a3Fix documentation for django-polymorphic imports (#317)f85c705chore: Enhance tests workflow with coverage reporting (#372)72dd293Bump djangorestframework from 3.12.4 to 3.15.2 in /docs/_ext/djangodummy (#371)40d00c2Bump django from 2.2.24 to 3.2.24 in /docs/_ext/djangodummy (#349)eef87cefallback to Meta.formfield_callback (#352)Updates
django-guardianfrom 3.3.0 to 3.3.1Release notes
Sourced from django-guardian's releases.
Commits
55d47baMerge pull request #979 from django-guardian/version-update-3-3-1fefaa91minor version update8ea54bbFix Issue 966 (#976)ec417f9429 document how to migrate from generic object permissions to direct foreign...5667e5bAdd release process documentation (#977)582fc93Merge pull request #975 from django-guardian/dependabot/github_actions/github...16abffcBump astral-sh/setup-uv from 5 to 7 in the github-actions group4dba1aaMerge pull request #971 from jmwhitworth/docs/fix-group-model3cf3beeMerge pull request #970 from django-guardian/auto-update-coverage-badge5cbcf7dFix indentation in code exampleUpdates
django-polymorphicfrom 4.11.2 to 4.11.3Release notes
Sourced from django-polymorphic's releases.
Commits
866c93ffix release workflow98c2b67move codecov from token to oidc46efb98fix release workflow, spellcheck0651e8bupdate setup-just action814abcaupgrade lock file, upgrade type checking, cut release for django-commons4e977e6Update CODE_OF_CONDUCT.md from django-commons7c07349jazzband -> django-commons updates61b460cBump the gha-updates group with 7 updates77c8730Bump cryptography from 46.0.6 to 46.0.70913418Bump pytest from 9.0.2 to 9.0.3Updates
django-flex-menusto 0.4.2Release notes
Sourced from django-flex-menus's releases.
Commits
fb4742dupdate release workflow44c3e26update release woe3f7094update build.yml175dd85update build.yml86910d1Release v0.4.20add13cupdate gitignore120407eremove api docsc1e8b62new release4914800refactor: move flex_menu out of src/ layoutae894ccupdate docs build commandUpdates
django-hijackfrom 3.7.6 to 3.7.8Release notes
Sourced from django-hijack's releases.
Commits
37ab9a2Fix #823 -- Prevent stale request.user copy in hijack middleware (#893)ba7a008Bump ruff from 0.15.10 to 0.15.11e65176cBump ruff from 0.15.9 to 0.15.10e1888e0Bump ruff from 0.15.8 to 0.15.9cc2fedeBump global-jsdom from 28.0.0 to 29.0.0c33ac49Bump jsdom from 28.1.0 to 29.0.1416235fBump codecov/codecov-action from 5 to 6e53f7e5Bump ruff from 0.15.7 to 0.15.8b8b01cfFix existing and all relevant project links6cbc23aBump ruff from 0.15.6 to 0.15.7Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions