Bump the all-uv-dependencies group with 7 updates#2
Merged
Conversation
Bumps the all-uv-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [dj-database-url](https://github.com/jazzband/dj-database-url) | `2.3.0` | `3.1.2` | | [django](https://github.com/django/django) | `5.1.7` | `6.0.5` | | [django-bootstrap4](https://github.com/zostera/django-bootstrap4) | `25.1` | `26.1` | | [gunicorn](https://github.com/benoitc/gunicorn) | `23.0.0` | `26.0.0` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.0` | `1.2.2` | | [whitenoise](https://github.com/evansd/whitenoise) | `6.9.0` | `6.12.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.11.2` | `0.15.13` | Updates `dj-database-url` from 2.3.0 to 3.1.2 - [Release notes](https://github.com/jazzband/dj-database-url/releases) - [Changelog](https://github.com/jazzband/dj-database-url/blob/master/CHANGELOG.md) - [Commits](jazzband/dj-database-url@v2.3.0...v3.1.2) Updates `django` from 5.1.7 to 6.0.5 - [Commits](django/django@5.1.7...6.0.5) Updates `django-bootstrap4` from 25.1 to 26.1 - [Release notes](https://github.com/zostera/django-bootstrap4/releases) - [Changelog](https://github.com/zostera/django-bootstrap4/blob/main/CHANGELOG.md) - [Commits](zostera/django-bootstrap4@v25.1...v26.1) Updates `gunicorn` from 23.0.0 to 26.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@23.0.0...26.0.0) Updates `python-dotenv` from 1.1.0 to 1.2.2 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.1.0...v1.2.2) Updates `whitenoise` from 6.9.0 to 6.12.0 - [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst) - [Commits](evansd/whitenoise@6.9.0...6.12.0) Updates `ruff` from 0.11.2 to 0.15.13 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.11.2...0.15.13) --- updated-dependencies: - dependency-name: dj-database-url dependency-version: 3.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-uv-dependencies - dependency-name: django dependency-version: 6.0.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-uv-dependencies - dependency-name: django-bootstrap4 dependency-version: '26.1' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-uv-dependencies - dependency-name: gunicorn dependency-version: 26.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-uv-dependencies - dependency-name: python-dotenv dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-uv-dependencies - dependency-name: whitenoise dependency-version: 6.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-uv-dependencies - dependency-name: ruff dependency-version: 0.15.13 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-uv-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the all-uv-dependencies group with 7 updates:
2.3.03.1.25.1.76.0.525.126.123.0.026.0.01.1.01.2.26.9.06.12.00.11.20.15.13Updates
dj-database-urlfrom 2.3.0 to 3.1.2Release notes
Sourced from dj-database-url's releases.
... (truncated)
Changelog
Sourced from dj-database-url's changelog.
Commits
e77149f[pre-commit.ci] pre-commit autoupdate (#297)6beffe6Fix a regression in adding tests/ dir to source packagef9c3130Bump wheel from 0.45.1 to 0.46.2 (#296)5337838Bump urllib3 from 2.6.2 to 2.6.3 (#295)6fc3664Bump django from 5.2.9 to 5.2.11 (#294)19805c9Bump cryptography from 46.0.3 to 46.0.5 (#293)1b102cdUpdate project URLs in pyproject.tomle41afda[pre-commit.ci] pre-commit autoupdate (#291)dba6077Update .pre-commit-config.yaml to use pinned version numbers. (#289)e6f4cccAdd pytest to dependenciesUpdates
djangofrom 5.1.7 to 6.0.5Commits
8f8ad09[6.0.x] Bumped version for 6.0.5 release.44ad76e[6.0.x] Fixed CVE-2026-6907 -- Prevented caching of requests when Vary header...1b0184a[6.0.x] Fixed CVE-2026-35192 -- Ensured Vary header is sent when setting sess...ad8f9e1[6.0.x] Fixed CVE-2026-5766 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE in Memory...990ab01[6.0.x] Fixed #37039 -- Removed outdated note from QuerySet.iterator() docs.f0c269f[6.0.x] Fixed typo in stub release notes for 5.2.14.8bcd15b[6.0.x] Fixed #37067 -- Added trailing slash in django_file_prefixes().3cdec64[6.0.x] Refs CVE-2026-25674 -- Clarified role of umask in upload permissions.5dd5c70[6.0.x] Added stub release notes and release date for 6.0.5 and 5.2.14.8ee7341[6.0.x] Refs #373, #34122 -- Removed warning that ForeignObject is an interna...Updates
django-bootstrap4from 25.1 to 26.1Changelog
Sourced from django-bootstrap4's changelog.
Commits
08d76f8Release 26.1 (#844)eeecd54Refactor release workflow to tag-based publishing via GitHub Actions (#843)46098e5Remove tests folder from coverage source (#842)43ca23cUpdate package from django-marina (#841)667fcf8Update package from django-marina (#840)0ccf672Bump actions/checkout from 5 to 6 (#838)245e3c0Update justfile (#839)859fa57Update justfile, uv, tox and GitHub Actions (#837)d76fa23Release 25.3 (#836)1341c14Remove support for Python 3.9 (EOL) (#835)Updates
gunicornfrom 23.0.0 to 26.0.0Release notes
Sourced from gunicorn's releases.
... (truncated)
Commits
5d819cfrelease: 26.0.0b45c70dMerge pull request #3611 from zc-mattcen/docs-typo99c8d48Merge pull request #3623 from benoitc/chore/drop-eventlet-add-h2-uvloop-test-...5a655afMerge pull request #3622 from benoitc/test/docker-port-and-ipv4-fixes201df19chore: remove eventlet worker; add h2 and uvloop to test depsf4ac8e1test: pass action name to dirty client and stabilize after TTOU spam54d38aftest: unblock docker fixtures on macOS hosts68843c8Merge pull request #3621 from benoitc/fix/asgi-preserve-content-length-on-hea...31f2618Merge pull request #3620 from benoitc/fix/asgi-proxy-protocol-trust-and-parsing41ec752fix: keep Content-Length on HEAD and 304 responsesUpdates
python-dotenvfrom 1.1.0 to 1.2.2Release notes
Sourced from python-dotenv's releases.
... (truncated)
Changelog
Sourced from python-dotenv's changelog.
... (truncated)
Commits
36004e0Bump version: 1.2.1 → 1.2.2eb20252docs: update changelog for v1.2.2790c5c0Merge commit from fork43340daRemove the use ofshin tests (#612)09d7ceedocs: clarify override behavior and document FIFO support (#610)c8de288ci: improve workflow efficiency with best practices (#609)7bd9e3dAdd Windows testing to CI (#604)1baaf04Drop Python 3.9 support and update to PyPy 3.11 (#608)4a22cf8ci: enable testing on Python 3.14t (free-threaded) (#588)e2e8e77Fix license specifier (#597)Updates
whitenoisefrom 6.9.0 to 6.12.0Changelog
Sourced from whitenoise's changelog.
Commits
1e3a30bVersion 6.12.0bc4c738Merge pull request #684 from evansd/use-commonpath505ed8dUseos.path.commonpath()to identify child pathsb6d8ed4Upgrade dependencies (#683)edc79de[pre-commit.ci] pre-commit autoupdate (#682)79fb2f1Bump the github-actions group with 2 updates (#680)2b245df[pre-commit.ci] pre-commit autoupdate (#681)dcb50f3Upgrade dependencies (#678)1c4a746[pre-commit.ci] pre-commit autoupdate (#677)e7f970aBump actions/checkout from 5 to 6 in the github-actions group (#676)Updates
rufffrom 0.11.2 to 0.15.13Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
2afb467Bump 0.15.13 (#25157)3008796[ty] classify TypeVar semantic tokens as type parameters (#24891)79470e3[isort] Avoid constructingglob::Patterns for literal known modules (#25123)2522549Remove shellcheck from prek (#25154)7db7170[ty] Support TypedDict key completions in incomplete, anonymous contexts (#25...bb3dd53[ty] Run full iteration analysis on narrowed typevars (#25143)828cdb7[ty] Isolate file-watching test environment (#25151)89e1d86[ty] Preserve TypedDict keys through dict unpacking (#24523)86f3064[ty] Avoid accessingargs[0]forstatic_assert(#25149)ed819f9[ty] Treat custom enum__new__values as dynamic (#25136)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions