deps: bump the django group across 1 directory with 8 updates#79
Open
dependabot[bot] wants to merge 1 commit into
Open
deps: bump the django group across 1 directory with 8 updates#79dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the django group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `5.2.12` | `5.2.15` | | [django-allauth](https://github.com/sponsors/pennersr) | `65.14.3` | `65.18.0` | | [django-import-export](https://github.com/django-import-export/django-import-export) | `4.4.0` | `4.4.1` | | [django-parler](https://github.com/edoburu/django-parler) | `2.3` | `2.4` | | [django-lifecycle](https://github.com/rsinger86/django-lifecycle) | `1.2.7` | `1.3.0` | | [django-guardian](https://github.com/django-guardian/django-guardian) | `3.3.0` | `3.3.2` | | [django-polymorphic](https://github.com/django-commons/django-polymorphic) | `4.11.2` | `4.11.5` | | [django-hijack](https://github.com/django-hijack/django-hijack) | `3.7.6` | `3.7.8` | Updates `django` from 5.2.12 to 5.2.15 - [Commits](django/django@5.2.12...5.2.15) Updates `django-allauth` from 65.14.3 to 65.18.0 - [Commits](https://github.com/sponsors/pennersr/commits) Updates `django-import-export` from 4.4.0 to 4.4.1 - [Release notes](https://github.com/django-import-export/django-import-export/releases) - [Changelog](https://github.com/django-import-export/django-import-export/blob/main/docs/changelog.rst) - [Commits](django-import-export/django-import-export@4.4.0...4.4.1) Updates `django-parler` from 2.3 to 2.4 - [Release notes](https://github.com/edoburu/django-parler/releases) - [Changelog](https://github.com/django-parler/django-parler/blob/master/CHANGES.rst) - [Commits](django-parler/django-parler@v2.3...v2.4) Updates `django-lifecycle` from 1.2.7 to 1.3.0 - [Release notes](https://github.com/rsinger86/django-lifecycle/releases) - [Changelog](https://github.com/rsinger86/django-lifecycle/blob/master/CHANGELOG.md) - [Commits](rsinger86/django-lifecycle@1.2.7...1.3.0) Updates `django-guardian` from 3.3.0 to 3.3.2 - [Release notes](https://github.com/django-guardian/django-guardian/releases) - [Commits](django-guardian/django-guardian@3.3.0...3.3.2) Updates `django-polymorphic` from 4.11.2 to 4.11.5 - [Release notes](https://github.com/django-commons/django-polymorphic/releases) - [Commits](django-commons/django-polymorphic@v4.11.2...v4.11.5) Updates `django-hijack` from 3.7.6 to 3.7.8 - [Release notes](https://github.com/django-hijack/django-hijack/releases) - [Changelog](https://github.com/django-hijack/django-hijack/blob/master/docs/release-button.png) - [Commits](django-hijack/django-hijack@3.7.6...3.7.8) --- updated-dependencies: - dependency-name: django dependency-version: 5.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: django - dependency-name: django-allauth dependency-version: 65.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: django - dependency-name: django-import-export dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: django - dependency-name: django-parler dependency-version: '2.4' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: django - dependency-name: django-lifecycle dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: django - dependency-name: django-guardian dependency-version: 3.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: django - dependency-name: django-polymorphic dependency-version: 4.11.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: django - dependency-name: django-hijack dependency-version: 3.7.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: django ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
👀 Manual Review RequiredReason: Requires manual review (critical package or major/minor update) This dependency update requires manual review before merging. Please:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the django group with 8 updates in the / directory:
5.2.125.2.1565.14.365.18.04.4.04.4.12.32.41.2.71.3.03.3.03.3.24.11.24.11.53.7.63.7.8Updates
djangofrom 5.2.12 to 5.2.15Commits
21e9840[5.2.x] Bumped version for 5.2.15 release.9b62b0a[5.2.x] Fixed CVE-2026-48587 -- Ignored whitespace padding when checking Vary...050a3dc[5.2.x] Fixed CVE-2026-35193 -- Varied on Authorization when caching non-publ...366d9ae[5.2.x] Fixed CVE-2026-8404 -- Used Cache-Control directives case-insensitive...4e47d2b[5.2.x] Fixed CVE-2026-7666 -- Delayed setting SMTP connection until fully co...594360c[5.2.x] Fixed CVE-2026-6873 -- Prevented signed cookie salt namespace collisi...e074d83[5.2.x] Included commit hash in checksum file when building artifacts for rel...c502754[5.2.x] Updated links to severity levels in release notes.72f5b41[5.2.x] Added stub release notes and release date for 5.2.15.7084825[5.2.x] Refs #35844 -- Ran further selenium tests with --parallel=1.Updates
django-allauthfrom 65.14.3 to 65.18.0Commits
Updates
django-import-exportfrom 4.4.0 to 4.4.1Release notes
Sourced from django-import-export's releases.
Changelog
Sourced from django-import-export's changelog.
Commits
f4cfc4dupdated changelogUpdates
django-parlerfrom 2.3 to 2.4Release notes
Sourced from django-parler's releases.
Changelog
Sourced from django-parler's changelog.
Commits
60e9841fix: Syntax in pypi actions (#376)85d0020Install Django in publish-to-live-pypi workflow (#375)101fdedchore: Add GitHub Actions workflow for publishing to PyPI (#374)2b0bf19Update changelog for version 2.4 release datee676606fix: drop Django 5.0 support; admin uses log_deletions (added in 5.1) (#370)01893a3Fix documentation for django-polymorphic imports (#317)f85c705chore: Enhance tests workflow with coverage reporting (#372)72dd293Bump djangorestframework from 3.12.4 to 3.15.2 in /docs/_ext/djangodummy (#371)40d00c2Bump django from 2.2.24 to 3.2.24 in /docs/_ext/djangodummy (#349)eef87cefallback to Meta.formfield_callback (#352)Updates
django-lifecyclefrom 1.2.7 to 1.3.0Release notes
Sourced from django-lifecycle's releases.
Changelog
Sourced from django-lifecycle's changelog.
Commits
0021726chore: Bump version to 1.3.0f1cee0bMerge pull request #185 from marciomazza/fix/missing-pypi-versions2c5c416Update supported Python/Django versions and fix badgesUpdates
django-guardianfrom 3.3.0 to 3.3.2Release notes
Sourced from django-guardian's releases.
Commits
ad73590Merge pull request #997 from django-guardian/3_3_2_version_bumpcb664c7Bump version to 3.3.2a23ab07Merge pull request #996 from marko1olo/fix-rtd-testing-badge-fetch6f400c4Avoid external Actions badge in docs9fde55eMerge pull request #991 from jacobtylerwalls/jtw/remove-querycea2abfMerge branch 'main' into jtw/remove-queryfadf39bMerge pull request #993 from django-guardian/dependabot/github_actions/github...dc370d0Bump the github-actions group with 2 updates3c4db78Address review.cd59107Remove a query in prefetch_perms() #813Updates
django-polymorphicfrom 4.11.2 to 4.11.5Release notes
Sourced from django-polymorphic's releases.
Commits
c60b16bFix concurrency setting on reusable workflowsb72b987add one additional test, update changelog, bump version5a7fe54Potential fix for pull request findingff11ac8fix: return first PolymorphicParentModelAdmin5b16d49revert playwright browser install change, address review findings47ebd5bfix testsf76dbf6add remaining tests for coverage94415bdremove name on code cov upload75607d5format all workflows387a4c1pin docker images, add zizmor configUpdates
django-hijackfrom 3.7.6 to 3.7.8Release notes
Sourced from django-hijack's releases.
Commits
37ab9a2Fix #823 -- Prevent stale request.user copy in hijack middleware (#893)ba7a008Bump ruff from 0.15.10 to 0.15.11e65176cBump ruff from 0.15.9 to 0.15.10e1888e0Bump ruff from 0.15.8 to 0.15.9cc2fedeBump global-jsdom from 28.0.0 to 29.0.0c33ac49Bump jsdom from 28.1.0 to 29.0.1416235fBump codecov/codecov-action from 5 to 6e53f7e5Bump ruff from 0.15.7 to 0.15.8b8b01cfFix existing and all relevant project links6cbc23aBump ruff from 0.15.6 to 0.15.7Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions