Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the django group across 1 directory with 8 updates #897

Open
wants to merge 1 commit into
base: dependabot/dev
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 14, 2025

Updates the requirements on django-filter, django-cors-headers, django-environ, django, django-tiptap, djangorestframework, django-graphql-jwt and django-anymail[amazon_ses] to permit the latest version.
Updates django-filter from 22.1 to 24.3

Changelog

Sourced from django-filter's changelog.

Version 24.3 (2024-08-02)

  • Adds official support for Django 5.1.

  • Allow using dictionaries for grouped choices on Django 5.0+.

    Thanks to Sævar Öfjörð Magnússon.

  • Adds unknown_field_behavior FilterSet option to allowing warning and ignore behaviours for unknown field types during FilterSet generation.

    Thanks to Loes.

Version 24.2 (2024-03-27)

  • Fixed a regression in v23.4 where callable choices were incorrectly evaluated at filter instantiation, on Django versions prior to 5.0.

    Thanks to Craig de Stigter for the report and reproduce.

Version 24.1 (2024-03-08)

  • Updated supported Python and Django versions, and resolved upcoming Django deprecations.

    Required versions are now at least Python 3.8 and Django 4.2.

    Thanks to Michael Manganiello.

  • Allowed passing a FilterSet class to the filterset_factory().

    Thanks to Birger Schacht.

  • Set empty default value of filterset data to MultiValueDict.

    Thanks to Shlomo Gordon.

  • Preserve list values passed to the data dict in CSV widgets.

    Thanks to Bryan Brancotte.

  • Updates French and Ukrainian localisations.

    Thanks to Weblate.

Version 23.5 (2023-12-05)

... (truncated)

Commits

Updates django-cors-headers from 4.4.0 to 4.6.0

Changelog

Sourced from django-cors-headers's changelog.

4.6.0 (2024-10-29)

  • Drop Django 3.2 to 4.1 support.

4.5.0 (2024-10-12)

  • Drop Python 3.8 support.

  • Support Python 3.13.

Commits

Updates django-environ from 0.11.2 to 0.12.0

Changelog

Sourced from django-environ's changelog.

v0.12.0_ - 8-November-2024

Fixed +++++

  • Include prefix in the ImproperlyConfigured error message [#513](https://github.com/joke2k/django-environ/issues/513) <https://github.com/joke2k/django-environ/issues/513>_.

Added +++++

  • Add support for Python 3.12 and 3.13 [#538](https://github.com/joke2k/django-environ/issues/538) <https://github.com/joke2k/django-environ/issues/538>_.
  • Add support for Django 5.1 [#535](https://github.com/joke2k/django-environ/issues/535) <https://github.com/joke2k/django-environ/issues/535>_.
  • Add support for Django CockroachDB driver [#509](https://github.com/joke2k/django-environ/issues/509) <https://github.com/joke2k/django-environ/issues/509>_.
  • Add support for Django Channels [#266](https://github.com/joke2k/django-environ/issues/266) <https://github.com/joke2k/django-environ/issues/266>_.

Changed +++++++

  • Disabled inline comments handling by default due to potential side effects. While the feature itself is useful, the project's philosophy dictates that it should not be enabled by default for all users [#499](https://github.com/joke2k/django-environ/issues/499) <https://github.com/joke2k/django-environ/issues/499>_.

Removed +++++++

  • Removed support of Python 3.6, 3.7 and 3.8 [#538](https://github.com/joke2k/django-environ/issues/538) <https://github.com/joke2k/django-environ/issues/538>_.
  • Removed support of Django 1.x. [#538](https://github.com/joke2k/django-environ/issues/538) <https://github.com/joke2k/django-environ/issues/538>_.
Commits

Updates django to 5.1.5

Commits
  • 3d3d7f5 [5.1.x] Bumped version for 5.1.5 release.
  • 4806731 [5.1.x] Fixed CVE-2024-56374 -- Mitigated potential DoS in IPv6 validation.
  • d6749de [5.1.x] Made cosmetic edits to 5.1.5 release notes.
  • b325864 [5.1.x] Fixed #36077 -- Corrected docs on pk value where Model.save() execute...
  • 8d81c47 [5.1.x] Fixed #35999 -- Removed #django IRC channel references where appropri...
  • 6b9d5ac [5.1.x] Strengthened wording on supported Python versions in FAQ.
  • 0966cc7 [5.1.x] Added stub release notes and release date for 5.1.5, 5.0.11, and 4.2.18.
  • 638547b [5.1.x] Fixed typo in tutorial 5.
  • 2ee6ca6 [5.1.x] Fixed #34856 -- Fixed references to index_together in historical migr...
  • 85c3550 [5.1.x] Refs #27236 -- Removed references to index_together from ModelState.f...
  • Additional commits viewable in compare view

Updates django-tiptap from 0.0.10 to 0.0.18

Updates djangorestframework from 3.15.1 to 3.15.2

Release notes

Sourced from djangorestframework's releases.

3.15.2

What's Changed

New Contributors

Full Changelog: encode/django-rest-framework@3.15.1...3.15.2

Commits
  • c7a7eae Version 3.15.2 (#9439)
  • 3b41f01 Fix potential XSS vulnerability in break_long_headers template filter (#9435)
  • fe92f0d Add __hash__ method for permissions.OperandHolder class (#9417)
  • fbdab09 docs: Correct some evaluation results and a httpie option in Tutorial1 (#9421)
  • 36d5c0e tests: Check urlpatterns after cleanups (#9400)
  • 9d4ed05 Don't use Windows line endings
  • b34bde4 Fix typo in setup.cfg setting
  • ab681f2 Update requirements in docs
  • 2237724 bump pygments (security hygiene)
  • d58b8da Update deprecation hints
  • Additional commits viewable in compare view

Updates django-graphql-jwt from 0.3.0 to 0.4.0

Release notes

Sourced from django-graphql-jwt's releases.

v0.4.0 (2023-08-04)

  • Added german translation
  • Added support for any root query name

v0.3.4 (2021-08-12)

  • Added JSONWebTokenBackend.get_user method

v0.3.3 (2021-07-24)

  • Added Graphene V2 support

v0.3.2 (2021-04-09)

  • Added support for PyJWT>=2
  • Removed signals providing_args
  • Added JWT_COOKIE_SAMESITE setting
  • Added support for Graphene v3

v0.3.1 (2020-04-04)

  • Set JWT-refresh-token cookie on tokenAuth mutation
  • Read token/refresh-token from cookies (TokenAuth, Refresh, Verify and Revoke mutations)
  • Add refreshExpiredIn field
  • Add token payload to tokenAuth mutation
  • Add DeleteJSONWebTokenCookie and DeleteRefreshTokenCookie mutations
  • Add JWT_REUSE_REFRESH_TOKENS setting in order to reuse the refresh token instances
  • Add JWT_HIDE_TOKEN_FIELDS setting (prevent XSS exploitation)
  • Add JWT_CSRF_ROTATION setting
  • Add JWT_COOKIE_PATH and JWT_COOKIE_DOMAIN settings
  • Removed ugettext in favor of gettext
Changelog

Sourced from django-graphql-jwt's changelog.

0.4.0

  • Added german translation
  • Added support for any root query name

0.3.4

  • Added JSONWebTokenBackend.get_user method

0.3.3

  • Added Graphene V2 support

0.3.2

  • Added support for PyJWT>=2
  • Removed signals providing_args
  • Added JWT_COOKIE_SAMESITE setting
  • Added support for Graphene v3

0.3.1

  • Set JWT-refresh-token cookie on tokenAuth mutation
  • Read token/refresh-token from cookies (TokenAuth, Refresh, Verify and Revoke mutations)
  • Add refreshExpiresIn field
  • Add token payload to tokenAuth mutation
  • Add DeleteJSONWebTokenCookie and DeleteRefreshTokenCookie mutations
  • Add JWT_REUSE_REFRESH_TOKENS setting in order to reuse the refresh token instances
  • Add JWT_HIDE_TOKEN_FIELDS setting (prevent XSS exploitation)
  • Add JWT_CSRF_ROTATION setting
  • Add JWT_COOKIE_PATH and JWT_COOKIE_DOMAIN settings
  • Removed ugettext in favor of gettext
Commits

Updates django-anymail[amazon_ses] from 11.0.1 to 12.0

Release notes

Sourced from django-anymail[amazon_ses]'s releases.

v12.0

Changelog

v11.1

Changelog

Changelog

Sourced from django-anymail[amazon_ses]'s changelog.

v12.0

2024-09-09

Breaking changes


* Require **Django 4.0 or later** and Python 3.8 or later.

Features


* **Resend:** Add support for ``send_at``.

Fixes


* **Unisender Go:** Fix several problems in Anymail's Unisender Go status tracking
  webhook. Rework signature checking to fix false validation errors (particularly
  on &amp;quot;clicked&amp;quot; and &amp;quot;opened&amp;quot; events). Properly handle &amp;quot;use single event&amp;quot; webhook
  option. Correctly verify WEBHOOK_SECRET when set. Provide Unisender Go's
  ``delivery_status`` code and unsubscribe form ``comment`` in Anymail's
  ``event.description``. Treat soft bounces as &amp;quot;deferred&amp;quot; rather than &amp;quot;bounced&amp;quot;.
  (Thanks to `@MikeVL`_ for fixing the signature validation problem.)

Other
  • Mandrill (docs): Explain how cc and bcc handling depends on
    Mandrill's &quot;preserve recipients&quot; option. (Thanks to @dgilmanAIDENTIFIED_
    for reporting the issue.)

  • Postal (docs): Update links to Postal's new documentation site.
    (Thanks to @jmduke_.)

v11.1

2024-08-07

Features

  • Brevo: Support Brevo's new "Complaint," "Error" and "Loaded by proxy" tracking events. (Thanks to @originell_ for the update.)

Deprecations

&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/anymail/django-anymail/commit/35383c7140289e82b39ada5980077898aa07d18d&quot;&gt;&lt;code&gt;35383c7&lt;/code&gt;&lt;/a> Release 12.0</li>
<li><a href="https://github.com/anymail/django-anymail/commit/063fb08a588de7432107c640e9030b457ded7df7&quot;&gt;&lt;code&gt;063fb08&lt;/code&gt;&lt;/a> Amazon SES: add webhook extension points; close webhook boto3 clients</li>
<li><a href="https://github.com/anymail/django-anymail/commit/1da9011f50e9e3c178d7958a1ff21f8b73b2f797&quot;&gt;&lt;code&gt;1da9011&lt;/code&gt;&lt;/a> CI/CD: use Python 3.12 by default</li>
<li><a href="https://github.com/anymail/django-anymail/commit/0e020b21e2d1b8804ad85b98c0d9ba3d4a67cb77&quot;&gt;&lt;code&gt;0e020b2&lt;/code&gt;&lt;/a> Docs: update tooling</li>
<li><a href="https://github.com/anymail/django-anymail/commit/2324cb48a365605b1a500acebdc635b958555804&quot;&gt;&lt;code&gt;2324cb4&lt;/code&gt;&lt;/a> Drop Python 3.7</li>
<li><a href="https://github.com/anymail/django-anymail/commit/e4331d224955a7df8b09063f639304d58163660a&quot;&gt;&lt;code&gt;e4331d2&lt;/code&gt;&lt;/a> Unisender Go: Fix status tracking webhook and tests.</li>
<li><a href="https://github.com/anymail/django-anymail/commit/2f2a888f610ec37577ecbcad92959ef89fa0fe16&quot;&gt;&lt;code&gt;2f2a888&lt;/code&gt;&lt;/a> Resend: add support for send_at</li>
<li><a href="https://github.com/anymail/django-anymail/commit/af6eaea5657ff2a0d51f36f742c61b1785b9b63e&quot;&gt;&lt;code&gt;af6eaea&lt;/code&gt;&lt;/a> Docs: Note Mandrill's cc/bcc handling depends on preserve_recipients</li>
<li><a href="https://github.com/anymail/django-anymail/commit/03f5fb7641c3c13eba7b3dd471f768c4b39fbbe4&quot;&gt;&lt;code&gt;03f5fb7&lt;/code&gt;&lt;/a> Docs: Update outdated Postal links</li>
<li><a href="https://github.com/anymail/django-anymail/commit/397dcf5f8a6dcbdf84c0e769919a531559c3658e&quot;&gt;&lt;code&gt;397dcf5&lt;/code&gt;&lt;/a> Docs: prep for upcoming RTD build changes</li>
<li>Additional commits viewable in <a href="https://github.com/anymail/django-anymail/compare/v11.0.1...v12.0&quot;&gt;compare view</a></li>
</ul>
</details>

<br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Relating to project dependencies label Jan 14, 2025
@dependabot dependabot bot force-pushed the dependabot/pip/dependabot/dev/django-f302630c86 branch 2 times, most recently from 4e7a5e3 to ef93a67 Compare January 26, 2025 18:39
@dependabot dependabot bot force-pushed the dependabot/pip/dependabot/dev/django-f302630c86 branch from ef93a67 to 1d66ef8 Compare January 31, 2025 17:00
Updates the requirements on [django-filter](https://github.com/carltongibson/django-filter), [django-cors-headers](https://github.com/adamchainz/django-cors-headers), [django-environ](https://github.com/joke2k/django-environ), [django](https://github.com/django/django), [django-tiptap](), [djangorestframework](https://github.com/encode/django-rest-framework), [django-graphql-jwt](https://github.com/flavors/django-graphql-jwt) and [django-anymail[amazon_ses]](https://github.com/anymail/django-anymail) to permit the latest version.

Updates `django-filter` from 22.1 to 24.3
- [Release notes](https://github.com/carltongibson/django-filter/releases)
- [Changelog](https://github.com/carltongibson/django-filter/blob/main/CHANGES.rst)
- [Commits](carltongibson/django-filter@22.1...24.3)

Updates `django-cors-headers` from 4.4.0 to 4.6.0
- [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst)
- [Commits](adamchainz/django-cors-headers@4.4.0...4.6.0)

Updates `django-environ` from 0.11.2 to 0.12.0
- [Release notes](https://github.com/joke2k/django-environ/releases)
- [Changelog](https://github.com/joke2k/django-environ/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/joke2k/django-environ/commits)

Updates `django` to 5.1.5
- [Commits](django/django@1.0...5.1.5)

Updates `django-tiptap` from 0.0.10 to 0.0.18

Updates `djangorestframework` from 3.15.1 to 3.15.2
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.15.1...3.15.2)

Updates `django-graphql-jwt` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/flavors/django-graphql-jwt/releases)
- [Changelog](https://github.com/flavors/django-graphql-jwt/blob/main/CHANGELOG.rst)
- [Commits](flavors/django-graphql-jwt@0.3.0...0.4.0)

Updates `django-anymail[amazon_ses]` from 11.0.1 to 12.0
- [Release notes](https://github.com/anymail/django-anymail/releases)
- [Changelog](https://github.com/anymail/django-anymail/blob/main/CHANGELOG.rst)
- [Commits](anymail/django-anymail@v11.0.1...v12.0)

---
updated-dependencies:
- dependency-name: django-filter
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: django
- dependency-name: django-cors-headers
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: django-environ
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: django
  dependency-type: direct:production
  dependency-group: django
- dependency-name: django-tiptap
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: django
- dependency-name: djangorestframework
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: django
- dependency-name: django-graphql-jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: django-anymail[amazon_ses]
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: django
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/dependabot/dev/django-f302630c86 branch from 1d66ef8 to 65b66b5 Compare February 3, 2025 10:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Relating to project dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant