chore(deps): bump the python-packages group with 4 updates#6
Merged
masterivanic merged 1 commit intomainfrom Dec 18, 2025
Merged
Conversation
Bumps the python-packages group with 4 updates: [django](https://github.com/django/django), [drf-spectacular](https://github.com/tfranzel/drf-spectacular), [dependency-injector](https://github.com/ets-labs/python-dependency-injector) and [mypy](https://github.com/python/mypy). Updates `django` from 5.2.7 to 5.2.9 - [Commits](django/django@5.2.7...5.2.9) Updates `drf-spectacular` from 0.28.0 to 0.29.0 - [Release notes](https://github.com/tfranzel/drf-spectacular/releases) - [Changelog](https://github.com/tfranzel/drf-spectacular/blob/master/CHANGELOG.rst) - [Commits](tfranzel/drf-spectacular@0.28.0...0.29.0) Updates `dependency-injector` from 4.48.2 to 4.48.3 - [Release notes](https://github.com/ets-labs/python-dependency-injector/releases) - [Commits](ets-labs/python-dependency-injector@4.48.2...4.48.3) Updates `mypy` from 1.19.0 to 1.19.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.19.0...v1.19.1) --- updated-dependencies: - dependency-name: django dependency-version: 5.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: drf-spectacular dependency-version: 0.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: dependency-injector dependency-version: 4.48.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: mypy dependency-version: 1.19.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the python-packages group with 4 updates: django, drf-spectacular, dependency-injector and mypy.
Updates
djangofrom 5.2.7 to 5.2.9Commits
c14b756[5.2.x] Bumped version for 5.2.9 release.99e7d22[5.2.x] Fixed CVE-2025-64460 -- Corrected quadratic inner text accumulation i...479415c[5.2.x] Fixed CVE-2025-13372 -- Protected FilteredRelation against SQL inject...da1dfe6[5.2.x] Fixed #36712 -- Evaluated type annotations lazily in template tag reg...e2ddec4[5.2.x] Refs #36743 -- Corrected docstring for DisallowedRedirect.b83ee61[5.2.x] Closed temporary files in OverwritingStorageTests.test_save_overwrite...645dc99[5.2.x] Refs #35535 -- Used intended decorator in test_simple_block_tag_paren...8558605[5.2.x] Added link to Python Pickle documentation in docs/topics/cache.txt.de1dc3a[5.2.x] Fixed outdated redis-py link in cache docs.ee92d41[5.2.x] Highlighted community package upgrade utilities in docs/howto/upgrade...Updates
drf-spectacularfrom 0.28.0 to 0.29.0Release notes
Sourced from drf-spectacular's releases.
... (truncated)
Changelog
Sourced from drf-spectacular's changelog.
Commits
7a7a1f2disable py3.8 target due to pyproject.toml issuesff7a62bfix docse58143bversion bumpe40b287Renovate project setup #116262fc98bMerge pull request #1467 from tfranzel/decimal_l18nd7247a5Add l18n handling for Decimal field #14665221afdMerge branch '#1392'88302faFix LogoutSerializer for JWT/dj_rest_auth #1392f7138e3fix: support token blacklist feature in rest_auth2c71a35[django-filter] Add null_label if set in ChoiceFilter (#1450)Updates
dependency-injectorfrom 4.48.2 to 4.48.3Release notes
Sourced from dependency-injector's releases.
Commits
1510a84Bump version51f8187Allow annotated marker to be anywhere in the annotation list (#939)244deeeRetrofit assert_type for Aggregate and Callable (#935)d72d07cImprove type annotations in providers009a86dImporve dict typings18e3252Allow explicit typing on Selector using TypeVar with default Any (#932)059f78bFix FastDepends v3 compatibility (#933)9d3a432Fix providers.Resource missing overloads for AbstractContextManager and Abstr...Updates
mypyfrom 1.19.0 to 1.19.1Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
412c19aBump version to 1.19.120aea0aUpdate changelog for 1.19.1 (#20414)2b23b50Serialize raw errors in cache metas (#20372)f60f90fFail on PyPy in main instead of setup.py (#20389)58d485bFail with an explicit error on PyPy (#20384)a4b31a2Allowtypes.NoneTypein match cases (#20383)8a6eff4[mypyc] fix generator regression with empty tuple (#20371)70eceeaFix noncommutative joins with bounded TypeVars (#20345)3890fc4Fix crash involving Unpack-ed TypeVarTuple (#20323)c93d917Fix crash on star import of redefinition (#20333)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions