chore(deps): bump the python-packages group across 1 directory with 4 updates by dependabot[bot] · Pull Request #3 · masterivanic/Bank-service

dependabot · 2025-11-10T15:05:23Z

Bumps the python-packages group with 4 updates in the / directory: django, drf-spectacular, pytest and rpds-py.

Updates django from 5.2.7 to 5.2.8

Commits

47fe39a [5.2.x] Bumped version for 5.2.8 release.
ac9fcf6 [5.2.x] Refs CVE-2025-64459 -- Avoided propagating invalid arguments to Q on ...
6703f36 [5.2.x] Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via th...
4f5d904 [5.2.x] Fixed CVE-2025-64458 -- Mitigated potential DoS in HttpResponseRedire...
cbdf128 [5.2.x] Fixed #36704 -- Fixed system check error for proxy model with a compo...
6775888 [5.2.x] Fixed #36696 -- Fixed NameError when inspecting functions with deferr...
d5dfffa [5.2.x] Added stub release notes and release date for 5.2.8, 5.1.14, and 4.2.26.
368f955 [5.2.x] Fixed #36681 -- Removed English pluralization bias from example in do...
71267c9 [5.2.x] Fixed #35095 -- Clarified Swiss number formatting in docs/topics/i18n...
9b37bd5 [5.2.x] Made RemoteTestResultTest.test_pickle_errors_detection() compatible w...
Additional commits viewable in compare view

Updates drf-spectacular from 0.28.0 to 0.29.0

Release notes

Sourced from drf-spectacular's releases.

0.29.0

Thank you for all the patience with the release!

Important notes

Finally fixed the memory leak thanks to @artKucher.

Another performance improvement is the usage of the C versions of yaml, if available.

Apart from that, there are a lot of small improvements and bugfixes.

PRs

Link to SerializerMethod docs by @johnthagen in tfranzel/drf-spectacular#1377

Document Django 5.1 support in README by @johnthagen in tfranzel/drf-spectacular#1376

Bump django from 4.2.11 to 4.2.18 in /requirements by @dependabot[bot] in tfranzel/drf-spectacular#1366

Document how to lazily annotate a recursive SerializerMethod by @johnthagen in tfranzel/drf-spectacular#1384

Fix docs compile issue and update some old code by @mikemanger in tfranzel/drf-spectacular#1389

Add allauth's DRF token auth #1401 by @tfranzel in tfranzel/drf-spectacular#1404

Bump django from 4.2.18 to 4.2.20 in /requirements by @dependabot[bot] in tfranzel/drf-spectacular#1403

Allow setting callable for ENUM_NAME_OVERRIDES by @q0w in tfranzel/drf-spectacular#1406

fix: correct port mapping for the container in README by @mbienkowsk in tfranzel/drf-spectacular#1408

Fix python 3.11 slice index by @yegorLitvinov in tfranzel/drf-spectacular#1411

Add Django REST framework 3.16 support by @pauloxnet in tfranzel/drf-spectacular#1420

fixes prefix estimation on windows by @originell in tfranzel/drf-spectacular#1440

Bump django from 4.2.20 to 4.2.24 in /requirements by @dependabot[bot] in tfranzel/drf-spectacular#1451

fix: sort list to produce same hash by @florianvazelle in tfranzel/drf-spectacular#1433

Add typing.Generic to default lib_doc_excludes by @maxhowald in tfranzel/drf-spectacular#1429

Fix DecimalField with decimal_places and max_digits equal. by @keter2002 in tfranzel/drf-spectacular#1457

Fix default for array types by @TheSuperiorStanislav in tfranzel/drf-spectacular#1437

Bump django from 4.2.24 to 4.2.25 in /requirements by @dependabot[bot] in tfranzel/drf-spectacular#1458

Fix OpenApiViewExtension not providing view instance under self.target by @astro-stan in tfranzel/drf-spectacular#1405

Enhance bug report template with instructions for better clarity. by @Antoliny0919 in tfranzel/drf-spectacular#1357

Add option to overwrite serializer description #1463 by @tfranzel in tfranzel/drf-spectacular#1464

Improve to_filter_name support for django_filter by @matwey in tfranzel/drf-spectacular#1446

fix: camelize tuples/fixed length array by @CharString in tfranzel/drf-spectacular#1432

Fix memory leak by @artKucher in tfranzel/drf-spectacular#1416

fix: add check condition, that serializer meta has model attribute by @kritohanzo in tfranzel/drf-spectacular#1397

[django-filter] Add null_label if set in ChoiceFilter by @epou in tfranzel/drf-spectacular#1450

Add l18n handling for Decimal field #1466 by @tfranzel in tfranzel/drf-spectacular#1467

New Contributors

@mikemanger made their first contribution in tfranzel/drf-spectacular#1389

@mbienkowsk made their first contribution in tfranzel/drf-spectacular#1408

@yegorLitvinov made their first contribution in tfranzel/drf-spectacular#1411

@pauloxnet made their first contribution in tfranzel/drf-spectacular#1420

@originell made their first contribution in tfranzel/drf-spectacular#1440

@florianvazelle made their first contribution in tfranzel/drf-spectacular#1433

@maxhowald made their first contribution in tfranzel/drf-spectacular#1429

@keter2002 made their first contribution in tfranzel/drf-spectacular#1457

@TheSuperiorStanislav made their first contribution in tfranzel/drf-spectacular#1437

@astro-stan made their first contribution in tfranzel/drf-spectacular#1405

... (truncated)

Changelog

Sourced from drf-spectacular's changelog.

0.29.0 (2025-11-01)

Add l18n handling for Decimal field [#1466](https://github.com/tfranzel/drf-spectacular/issues/1466) <https://github.com/tfranzel/drf-spectacular/issues/1466>_

Fix LogoutSerializer for JWT/dj_rest_auth [#1392](https://github.com/tfranzel/drf-spectacular/issues/1392) <https://github.com/tfranzel/drf-spectacular/issues/1392>_

fix: support token blacklist feature in rest_auth [Bart van Andel]

[django-filter] Add null_label if set in ChoiceFilter ([#1450](https://github.com/tfranzel/drf-spectacular/issues/1450) <https://github.com/tfranzel/drf-spectacular/issues/1450>_) [Enric Pou]

fix: camelize tuples/fixed length array ([#1432](https://github.com/tfranzel/drf-spectacular/issues/1432) <https://github.com/tfranzel/drf-spectacular/issues/1432>_) [Chris Wesseling]

Fix items:False case in enum hook [#1432](https://github.com/tfranzel/drf-spectacular/issues/1432) <https://github.com/tfranzel/drf-spectacular/issues/1432>_

Add option to overwrite serializer description [#1463](https://github.com/tfranzel/drf-spectacular/issues/1463) <https://github.com/tfranzel/drf-spectacular/issues/1463>_

Fix OpenApiViewExtension not providing view instance under self.target ([#1405](https://github.com/tfranzel/drf-spectacular/issues/1405) <https://github.com/tfranzel/drf-spectacular/issues/1405>_) [astro-stan]

Move list default fix to source of the problem [#1436](https://github.com/tfranzel/drf-spectacular/issues/1436) <https://github.com/tfranzel/drf-spectacular/issues/1436>_

Improve confusing doc [#1461](https://github.com/tfranzel/drf-spectacular/issues/1461) <https://github.com/tfranzel/drf-spectacular/issues/1461>_

Add assert to pagination test [#1459](https://github.com/tfranzel/drf-spectacular/issues/1459) <https://github.com/tfranzel/drf-spectacular/issues/1459>_

fix SafeString handling for picky CDumper ([#1435](https://github.com/tfranzel/drf-spectacular/issues/1435) <https://github.com/tfranzel/drf-spectacular/issues/1435>_)

Remove EOL 3.7 from suite; pydantic not updated for <=3.8

Fix DecimalField with decimal_places and max_digits equal. [keter2002]

fix test for i18n changes on DRF ([#1444](https://github.com/tfranzel/drf-spectacular/issues/1444) <https://github.com/tfranzel/drf-spectacular/issues/1444>_)

Improve to_filter_name support for django_filter [Matwey V. Kornilov]

fixes prefix estimation on windows [Luis Nell]

Fix default for array types [Stanislav Khlud]

fix: use CSafeDumper for render yaml if available [florian]

fix: sort list to produce same hash [florian]

Add typing.Generic to default lib_doc_excludes [Max Howald]

Add get_doc test for class that inherits from Generic [Max Howald]

Add Django REST framework 3.16 support [Paolo Melchiorre]

Fix memory leak [artemkucher]

Fix python 3.11 slice index [Egor Litvinov]

fix: correct port mapping for the container in README [Maksym Bieńkowski]

Update docs [q0w]

Allow setting callable for ENUM_NAME_OVERRIDES [q0w]

Add allauth's DRF token auth [#1401](https://github.com/tfranzel/drf-spectacular/issues/1401) <https://github.com/tfranzel/drf-spectacular/issues/1401>_

update away from retired GH worker image

add condition to check, that serializer Meta has model attribute [aliev_vt]

Fix docs compile issue and update some old code ([#1389](https://github.com/tfranzel/drf-spectacular/issues/1389) <https://github.com/tfranzel/drf-spectacular/issues/1389>_) [Mike Manger]

Fix location of @extend_schema_field [johnthagen]

Remove reference to non-exposed lazy_serializer [johnthagen]

Document how to lazily define a recursive SerializerMethod [johnthagen]

Link to SerializerMethod docs [johnthagen]

Document Django 5.1 support in README [johnthagen]

Bump django from 4.2.11 to 4.2.18 in /requirements [dependabot[bot]]

Enhance bug report template with instructions for better clarity [antoliny0919]

add pydantic computed field to tests [#1354](https://github.com/tfranzel/drf-spectacular/issues/1354) <https://github.com/tfranzel/drf-spectacular/issues/1354>_

Breaking changes / important additions:

Finally fixed the memory leak thanks to @artKucher.

Another performance improvement is the usage of the C versions of yaml, if available.

Apart from that, there are a lot of small improvements and bugfixes.

Commits

7a7a1f2 disable py3.8 target due to pyproject.toml issues
ff7a62b fix docs
e58143b version bump
e40b287 Renovate project setup #1162
62fc98b Merge pull request #1467 from tfranzel/decimal_l18n
d7247a5 Add l18n handling for Decimal field #1466
5221afd Merge branch '#1392'
88302fa Fix LogoutSerializer for JWT/dj_rest_auth #1392
f7138e3 fix: support token blacklist feature in rest_auth
2c71a35 [django-filter] Add null_label if set in ChoiceFilter (#1450)
Additional commits viewable in compare view

Updates pytest from 8.4.2 to 9.0.0

Release notes

Sourced from pytest's releases.

9.0.0

pytest 9.0.0 (2025-11-05)

New features
#1367: Support for subtests has been added.

subtests <subtests> are an alternative to parametrization, useful in situations where the parametrization values are not all known at collection time.

Example:
def contains_docstring(p: Path) -> bool:
    """Return True if the given Python file contains a top-level docstring."""
    ...
def test_py_files_contain_docstring(subtests: pytest.Subtests) -> None:
for path in Path.cwd().glob("*.py"):
with subtests.test(path=str(path)):
assert contains_docstring(path)
Each assert failure or error is caught by the context manager and reported individually, giving a clear picture of all files that are missing a docstring.

In addition, unittest.TestCase.subTest is now also supported.

This feature was originally implemented as a separate plugin in pytest-subtests, but since then has been merged into the core.

[!NOTE] This feature is experimental and will likely evolve in future releases. By that we mean that we might change how subtests are reported on failure, but the functionality and how to use it are stable.
#13743: Added support for native TOML configuration files.

While pytest, since version 6, supports configuration in pyproject.toml files under [tool.pytest.ini_options], it does so in an "INI compatibility mode", where all configuration values are treated as strings or list of strings. Now, pytest supports the native TOML data model.

In pyproject.toml, the native TOML configuration is under the [tool.pytest] table.
# pyproject.toml
[tool.pytest]
minversion = "9.0"
addopts = ["-ra", "-q"]
testpaths = [
    "tests",
    "integration",
]

... (truncated)

Commits

f4b0fd2 Prepare release version 9.0.0
52d8e68 Merge pull request #13889 from bluetech/regendoc-restore
d6d3e4a doc: fixes for regendoc
7cb3974 doc: restore missing "# content of pytest.toml" regendoc commands
5ae9e47 build(deps): Bump django in /testing/plugins_integration (#13881)
adb3658 Merge pull request #13864 from bluetech/config-cleanups-2
a28c08e Merge pull request #13875 from bluetech/ci-tweaks
a250954 ci: split publish-to-pypi and push-tag jobs
ebc152f ci: update setup python's from 3.11 or 3.* to 3.13
dfd796f ci: move running update-plugin-list script to tox
Additional commits viewable in compare view

Updates rpds-py from 0.27.1 to 0.28.0

Release notes

Sourced from rpds-py's releases.

v0.28.0

What's Changed

Bump PyO3 to 0.27

Full Changelog: crate-py/rpds@v0.27.1...v0.28.0

Commits

d0f13a4 Tag a release.
e2da079 Re-enable a style rule now that we don't support 3.9.
fb8248a Update to PyO3 0.27.1.
591c05c Remove running pip-audit from CI.
695572c Drop pypy3.10. Upstream recommends & supports pypy3.11.
4c61c84 Drop support for 3.9, which is EOL.
ca38469 Update requirements.
09cd0d7 Merge pull request #188 from crate-py/dependabot/github_actions/github/codeql...
f6ce54f Merge pull request #189 from crate-py/dependabot/github_actions/astral-sh/set...
288ea49 Bump astral-sh/setup-uv from 7.1.0 to 7.1.1
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the python-packages group with 4 updates in the / directory: [django](https://github.com/django/django), [drf-spectacular](https://github.com/tfranzel/drf-spectacular), [pytest](https://github.com/pytest-dev/pytest) and [rpds-py](https://github.com/crate-py/rpds). Updates `django` from 5.2.7 to 5.2.8 - [Commits](django/django@5.2.7...5.2.8) Updates `drf-spectacular` from 0.28.0 to 0.29.0 - [Release notes](https://github.com/tfranzel/drf-spectacular/releases) - [Changelog](https://github.com/tfranzel/drf-spectacular/blob/master/CHANGELOG.rst) - [Commits](tfranzel/drf-spectacular@0.28.0...0.29.0) Updates `pytest` from 8.4.2 to 9.0.0 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.0.0) Updates `rpds-py` from 0.27.1 to 0.28.0 - [Release notes](https://github.com/crate-py/rpds/releases) - [Commits](crate-py/rpds@v0.27.1...v0.28.0) --- updated-dependencies: - dependency-name: django dependency-version: 5.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: drf-spectacular dependency-version: 0.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pytest dependency-version: 9.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python-packages - dependency-name: rpds-py dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-11-17T13:47:19Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

dependabot · 2025-11-24T14:35:02Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 10, 2025

dependabot bot closed this Nov 24, 2025

dependabot bot deleted the dependabot/pip/python-packages-c692d0e87a branch November 24, 2025 14:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the python-packages group across 1 directory with 4 updates#3

chore(deps): bump the python-packages group across 1 directory with 4 updates#3
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-packages-c692d0e87a

dependabot bot commented on behalf of github Nov 10, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Nov 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.29.0

Important notes

PRs

New Contributors

0.29.0 (2025-11-01)

9.0.0

pytest 9.0.0 (2025-11-05)

New features

v0.28.0

What's Changed

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

dependabot bot commented on behalf of github Nov 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Nov 10, 2025 •

edited

Loading