Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 12, 2025

Bumps the django group with 5 updates in the /api directory:

Package From To
django 5.1.2 5.2.6
django-environ 0.11.2 0.12.0
djangorestframework 3.15.2 3.16.1
djangorestframework-jsonapi 7.0.2 8.0.0
django-filter 24.3 25.1

Updates django from 5.1.2 to 5.2.6

Commits
  • 75c4403 [5.2.x] Bumped version for 5.2.6 release.
  • 4c044fc [5.2.x] Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL inject...
  • e87ca3d [5.2.x] Made cosmetic edits to 5.2.6 release notes.
  • ebec2c9 [5.2.x] Removed unused import in docs/ref/models/expressions.txt example.
  • ace59cb [5.2.x] Fixed #36431 -- Returned tuples for multi-column ForeignObject in val...
  • 16a12a9 [5.2.x] Fixed #35831 -- Documented the model form meta API in model form refe...
  • 51753bc [5.2.x] Added stub release notes and release date for 5.2.6, 5.1.12, and 4.2.24.
  • a486455 [5.2.x] Corrected definition of "needsinfo" triage stage in contributing guide.
  • f8e572e [5.2.x] Removed reference to flake8 file exclusions.
  • 9c9ed6f [5.2.x] Refs #35530 -- Corrected deprecation message in auth.alogin().
  • Additional commits viewable in compare view

Updates django-environ from 0.11.2 to 0.12.0

Release notes

Sourced from django-environ's releases.

v0.12.0

Fixed Include prefix in the ImproperlyConfigured error message #513.

Added Add support for Python 3.12 and 3.13 #538.

Add support for Django 5.1 #535.

Add support for Django CockroachDB driver #509.

Add support for Django Channels #266.

Changed Disabled inline comments handling by default due to potential side effects. While the feature itself is useful, the project’s philosophy dictates that it should not be enabled by default for all users #499.

Removed Removed support of Python 3.6, 3.7 and 3.8 #538.

Removed support of Django 1.x. #538.

Changelog

Sourced from django-environ's changelog.

v0.12.0_ - 8-November-2024

Fixed +++++

  • Include prefix in the ImproperlyConfigured error message [#513](https://github.com/joke2k/django-environ/issues/513) <https://github.com/joke2k/django-environ/issues/513>_.

Added +++++

  • Add support for Python 3.12 and 3.13 [#538](https://github.com/joke2k/django-environ/issues/538) <https://github.com/joke2k/django-environ/issues/538>_.
  • Add support for Django 5.1 [#535](https://github.com/joke2k/django-environ/issues/535) <https://github.com/joke2k/django-environ/issues/535>_.
  • Add support for Django CockroachDB driver [#509](https://github.com/joke2k/django-environ/issues/509) <https://github.com/joke2k/django-environ/issues/509>_.
  • Add support for Django Channels [#266](https://github.com/joke2k/django-environ/issues/266) <https://github.com/joke2k/django-environ/issues/266>_.

Changed +++++++

  • Disabled inline comments handling by default due to potential side effects. While the feature itself is useful, the project's philosophy dictates that it should not be enabled by default for all users [#499](https://github.com/joke2k/django-environ/issues/499) <https://github.com/joke2k/django-environ/issues/499>_.

Removed +++++++

  • Removed support of Python 3.6, 3.7 and 3.8 [#538](https://github.com/joke2k/django-environ/issues/538) <https://github.com/joke2k/django-environ/issues/538>_.
  • Removed support of Django 1.x. [#538](https://github.com/joke2k/django-environ/issues/538) <https://github.com/joke2k/django-environ/issues/538>_.
Commits

Updates djangorestframework from 3.15.2 to 3.16.1

Release notes

Sourced from djangorestframework's releases.

v3.16.1

This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.

Minor changes

  • Cleanup optional backports.zoneinfo dependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.

Bug fixes

  • Fix regression in unique_together validation with SerializerMethodField in #9712
  • Fix UniqueTogetherValidator to handle fields with source attribute in #9688
  • Drop HTML line breaks on long headers in browsable API in #9438

Translations

  • Add Kazakh locale support in #9713
  • Update translations for Korean translations in #9571
  • Update German translations in #9676
  • Update Chinese translations in #9675
  • Update Arabic translations-sal in #9595
  • Update Persian translations in #9576
  • Update Spanish translations in #9701
  • Update Turkish Translations in #9749
  • Fix some typos in Brazilian Portuguese translations in #9673

Documentation

  • Removed reference to GitHub Issues and Discussions in #9660
  • Add drf-restwind and update outdated images in browsable-api.md in #9680
  • Updated funding page to represent current scope in #9686
  • Fix broken Heroku JSON Schema link in #9693
  • Update Django documentation links to use stable version in #9698
  • Expand docs on unique constraints cause 'required=True' in #9725
  • Revert extension back from djangorestframework-guardian2 to djangorestframework-guardian in #9734
  • Add note to tutorial about required request in serializer context when using HyperlinkedModelSerializer in #9732

Internal changes

  • Update GitHub Actions to use Ubuntu 24.04 for testing in #9677
  • Update test matrix to use Django 5.2 stable version in #9679
  • Add pyupgrade to pre-commit hooks in #9682
  • Fix test with Django 5 when pytz is available in #9715

New Contributors

... (truncated)

Commits
  • de018df Prepare 3.16.1 release (#9752)
  • a7d050f Turkish Translation updates (#9749)
  • 853969c Fix test with Django 5 when pytz is available (#9715)
  • 2ae8c11 Add note to tutorial about required request in serializer context when using ...
  • 70e54f4 Revert docs back to djangorestframework-guardian (#9734)
  • 3038494 Document that unique constraints cause required=True in ModelSerializer (#9...
  • 4bb46c2 Add Kazakh(kk) locale support (#9713)
  • e454758 Fix regression in unique_together validation with SerializerMethodField (#9712)
  • 33d59fe Update Spanish translations (#9701)
  • c0202a0 Update Django documentation links to use stable version (#9698)
  • Additional commits viewable in compare view

Updates djangorestframework-jsonapi from 7.0.2 to 8.0.0

Release notes

Sourced from djangorestframework-jsonapi's releases.

v8.0.0

What's changed

See changelog for details.

New Contributors

Full Changelog: django-json-api/django-rest-framework-json-api@v7.1.0...v8.0.0

v7.1.0

What's Changed

See changelog for details.

New Contributors

Full Changelog: django-json-api/django-rest-framework-json-api@v7.0.2...v7.1.0

Changelog

Sourced from djangorestframework-jsonapi's changelog.

[8.0.0] - 2025-07-24

Added

  • Added support for Django REST framework 3.16.
  • Added support for Django 5.2.

Fixed

  • Ensured that compound documents' include query parameter fully support JSON_API_FORMAT_FIELD_NAMES.
  • Ensured that sparse fieldset's fields query parameter fully supports JSON_API_FORMAT_FIELD_NAMES.

Changed

  • Set minimum required version of optional Polymorphic Models for Django to 4.0.0.

Removed

  • Removed support for Python 3.8.
  • Removed support for Django REST framework 3.14.
  • Removed support for Django 5.0.
  • Removed built-in support for generating OpenAPI schema. Use drf-spectacular-json-api instead.

[7.1.0] - 2024-10-25

This is the last release supporting Python 3.8, Django 5.0 and Django REST framework 3.14.

Fixed

  • Handled zero as a valid ID for resource (regression since 6.1.0)
  • Ensured that patching a To-Many relationship with the RelationshipView correctly raises request error when passing in None. For emptying a To-Many relationship an empty array should be used as per JSON:API spec

Added

  • Added support for Django 5.1
  • Added support for Python 3.13

Deprecated

Commits

Updates django-filter from 24.3 to 25.1

Changelog

Sourced from django-filter's changelog.

Version 25.1 (2025-02-14)

  • Removed the in-built API schema generation methods, which have been deprecated since v23.2.

    You should use drf-spectacular <https://drf-spectacular.readthedocs.io/en/latest/>_ for generating OpenAPI schemas with DRF.

  • Dropped support for EOL Python 3.8.

  • Added testing against Python 3.13.

  • Added official support for Django 5.2.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the django group with 5 updates in the /api directory:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `5.1.2` | `5.2.6` |
| [django-environ](https://github.com/joke2k/django-environ) | `0.11.2` | `0.12.0` |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.15.2` | `3.16.1` |
| [djangorestframework-jsonapi](https://github.com/django-json-api/django-rest-framework-json-api) | `7.0.2` | `8.0.0` |
| [django-filter](https://github.com/carltongibson/django-filter) | `24.3` | `25.1` |



Updates `django` from 5.1.2 to 5.2.6
- [Commits](django/django@5.1.2...5.2.6)

Updates `django-environ` from 0.11.2 to 0.12.0
- [Release notes](https://github.com/joke2k/django-environ/releases)
- [Changelog](https://github.com/joke2k/django-environ/blob/main/CHANGELOG.rst)
- [Commits](joke2k/django-environ@v0.11.2...v0.12.0)

Updates `djangorestframework` from 3.15.2 to 3.16.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.15.2...3.16.1)

Updates `djangorestframework-jsonapi` from 7.0.2 to 8.0.0
- [Release notes](https://github.com/django-json-api/django-rest-framework-json-api/releases)
- [Changelog](https://github.com/django-json-api/django-rest-framework-json-api/blob/main/CHANGELOG.md)
- [Commits](django-json-api/django-rest-framework-json-api@v7.0.2...v8.0.0)

Updates `django-filter` from 24.3 to 25.1
- [Release notes](https://github.com/carltongibson/django-filter/releases)
- [Changelog](https://github.com/carltongibson/django-filter/blob/main/CHANGES.rst)
- [Commits](carltongibson/django-filter@24.3...25.1)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: django-environ
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: djangorestframework
  dependency-version: 3.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: djangorestframework-jsonapi
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: django
- dependency-name: django-filter
  dependency-version: '25.1'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: django
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 12, 2025
@dependabot dependabot bot requested a review from c0rydoras as a code owner September 12, 2025 10:12
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 12, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 16, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants