Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps the django group with 6 updates in the /api directory:

Package From To
django 5.1.2 5.2.7
django-environ 0.11.2 0.12.0
psycopg2-binary 2.9.10 2.9.11
djangorestframework 3.15.2 3.16.1
djangorestframework-jsonapi 7.0.2 8.0.0
django-filter 24.3 25.2

Updates django from 5.1.2 to 5.2.7

Commits
  • 3cff320 [5.2.x] Bumped version for 5.2.7 release.
  • ed8fc39 [5.2.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal v...
  • 52fbae0 [5.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggre...
  • 1794cbf [5.2.x] Made cosmetic edits to 5.2.7 release notes.
  • 81625a1 [5.2.x] Fixed #36587 -- Clarified usage of list.insert() for upload handlers.
  • 6f3813e [5.2.x] Fixed #35877, Refs #36128 -- Documented unique constraint when migrat...
  • 10a2d3b [5.2.x] Added stub release notes and release date for 5.2.7, 5.1.13, and 4.2.25.
  • b2773a3 [5.2.x] Refs #25508 -- Used QuerySet.repr in docs/ref/contrib/postgres/se...
  • 7554c54 [5.2.x] Fixed #36581 -- Updated serialization examples from XML to JSON.
  • 2a2936c [5.2.x] Updated translations from Transifex.
  • Additional commits viewable in compare view

Updates django-environ from 0.11.2 to 0.12.0

Release notes

Sourced from django-environ's releases.

v0.12.0

Fixed Include prefix in the ImproperlyConfigured error message #513.

Added Add support for Python 3.12 and 3.13 #538.

Add support for Django 5.1 #535.

Add support for Django CockroachDB driver #509.

Add support for Django Channels #266.

Changed Disabled inline comments handling by default due to potential side effects. While the feature itself is useful, the project’s philosophy dictates that it should not be enabled by default for all users #499.

Removed Removed support of Python 3.6, 3.7 and 3.8 #538.

Removed support of Django 1.x. #538.

Changelog

Sourced from django-environ's changelog.

v0.12.0_ - 8-November-2024

Fixed +++++

  • Include prefix in the ImproperlyConfigured error message [#513](https://github.com/joke2k/django-environ/issues/513) <https://github.com/joke2k/django-environ/issues/513>_.

Added +++++

  • Add support for Python 3.12 and 3.13 [#538](https://github.com/joke2k/django-environ/issues/538) <https://github.com/joke2k/django-environ/issues/538>_.
  • Add support for Django 5.1 [#535](https://github.com/joke2k/django-environ/issues/535) <https://github.com/joke2k/django-environ/issues/535>_.
  • Add support for Django CockroachDB driver [#509](https://github.com/joke2k/django-environ/issues/509) <https://github.com/joke2k/django-environ/issues/509>_.
  • Add support for Django Channels [#266](https://github.com/joke2k/django-environ/issues/266) <https://github.com/joke2k/django-environ/issues/266>_.

Changed +++++++

  • Disabled inline comments handling by default due to potential side effects. While the feature itself is useful, the project's philosophy dictates that it should not be enabled by default for all users [#499](https://github.com/joke2k/django-environ/issues/499) <https://github.com/joke2k/django-environ/issues/499>_.

Removed +++++++

  • Removed support of Python 3.6, 3.7 and 3.8 [#538](https://github.com/joke2k/django-environ/issues/538) <https://github.com/joke2k/django-environ/issues/538>_.
  • Removed support of Django 1.x. [#538](https://github.com/joke2k/django-environ/issues/538) <https://github.com/joke2k/django-environ/issues/538>_.
Commits

Updates psycopg2-binary from 2.9.10 to 2.9.11

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.14.
  • Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).
  • ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.
  • Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.13.
  • Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).
  • ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.
  • Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.12.
  • Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
  • Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
  • Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

... (truncated)

Commits
  • fd9ae8c chore: bump to version 2.9.11
  • d923840 chore: update docs requirements
  • d42dc71 Merge branch 'fix-1791'
  • 4fde656 fix: avoid failed assert passing more arguments than placeholders
  • 8308c19 fix: drop warning about the use of deprecated PyWeakref_GetObject function
  • 1a1eabf build(deps): bump actions/github-script from 7 to 8
  • 897af8b build(deps): bump peter-evans/repository-dispatch from 3 to 4
  • ceefd30 build(deps): bump actions/checkout from 4 to 5
  • 4dc5854 build(deps): bump actions/setup-python from 5 to 6
  • 1945788 Merge pull request #1802 from edgarrmondragon/cp314-wheels
  • Additional commits viewable in compare view

Updates djangorestframework from 3.15.2 to 3.16.1

Release notes

Sourced from djangorestframework's releases.

v3.16.1

This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.

Minor changes

  • Cleanup optional backports.zoneinfo dependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.

Bug fixes

  • Fix regression in unique_together validation with SerializerMethodField in #9712
  • Fix UniqueTogetherValidator to handle fields with source attribute in #9688
  • Drop HTML line breaks on long headers in browsable API in #9438

Translations

  • Add Kazakh locale support in #9713
  • Update translations for Korean translations in #9571
  • Update German translations in #9676
  • Update Chinese translations in #9675
  • Update Arabic translations-sal in #9595
  • Update Persian translations in #9576
  • Update Spanish translations in #9701
  • Update Turkish Translations in #9749
  • Fix some typos in Brazilian Portuguese translations in #9673

Documentation

  • Removed reference to GitHub Issues and Discussions in #9660
  • Add drf-restwind and update outdated images in browsable-api.md in #9680
  • Updated funding page to represent current scope in #9686
  • Fix broken Heroku JSON Schema link in #9693
  • Update Django documentation links to use stable version in #9698
  • Expand docs on unique constraints cause 'required=True' in #9725
  • Revert extension back from djangorestframework-guardian2 to djangorestframework-guardian in #9734
  • Add note to tutorial about required request in serializer context when using HyperlinkedModelSerializer in #9732

Internal changes

  • Update GitHub Actions to use Ubuntu 24.04 for testing in #9677
  • Update test matrix to use Django 5.2 stable version in #9679
  • Add pyupgrade to pre-commit hooks in #9682
  • Fix test with Django 5 when pytz is available in #9715

New Contributors

... (truncated)

Commits
  • de018df Prepare 3.16.1 release (#9752)
  • a7d050f Turkish Translation updates (#9749)
  • 853969c Fix test with Django 5 when pytz is available (#9715)
  • 2ae8c11 Add note to tutorial about required request in serializer context when using ...
  • 70e54f4 Revert docs back to djangorestframework-guardian (#9734)
  • 3038494 Document that unique constraints cause required=True in ModelSerializer (#9...
  • 4bb46c2 Add Kazakh(kk) locale support (#9713)
  • e454758 Fix regression in unique_together validation with SerializerMethodField (#9712)
  • 33d59fe Update Spanish translations (#9701)
  • c0202a0 Update Django documentation links to use stable version (#9698)
  • Additional commits viewable in compare view

Updates djangorestframework-jsonapi from 7.0.2 to 8.0.0

Release notes

Sourced from djangorestframework-jsonapi's releases.

v8.0.0

What's changed

See changelog for details.

New Contributors

Full Changelog: django-json-api/django-rest-framework-json-api@v7.1.0...v8.0.0

v7.1.0

What's Changed

See changelog for details.

New Contributors

Full Changelog: django-json-api/django-rest-framework-json-api@v7.0.2...v7.1.0

Changelog

Sourced from djangorestframework-jsonapi's changelog.

[8.0.0] - 2025-07-24

Added

  • Added support for Django REST framework 3.16.
  • Added support for Django 5.2.

Fixed

  • Ensured that compound documents' include query parameter fully support JSON_API_FORMAT_FIELD_NAMES.
  • Ensured that sparse fieldset's fields query parameter fully supports JSON_API_FORMAT_FIELD_NAMES.

Changed

  • Set minimum required version of optional Polymorphic Models for Django to 4.0.0.

Removed

  • Removed support for Python 3.8.
  • Removed support for Django REST framework 3.14.
  • Removed support for Django 5.0.
  • Removed built-in support for generating OpenAPI schema. Use drf-spectacular-json-api instead.

[7.1.0] - 2024-10-25

This is the last release supporting Python 3.8, Django 5.0 and Django REST framework 3.14.

Fixed

  • Handled zero as a valid ID for resource (regression since 6.1.0)
  • Ensured that patching a To-Many relationship with the RelationshipView correctly raises request error when passing in None. For emptying a To-Many relationship an empty array should be used as per JSON:API spec

Added

  • Added support for Django 5.1
  • Added support for Python 3.13

Deprecated

Commits

Updates django-filter from 24.3 to 25.2

Changelog

Sourced from django-filter's changelog.

Version 25.2 (2025-10-05)

  • Added testing for Django 6.0.

  • Dropped support for Django <5.2 LTS

  • Dropped support for Python 3.9.

Version 25.1 (2025-02-14)

  • Removed the in-built API schema generation methods, which have been deprecated since v23.2.

    You should use drf-spectacular <https://drf-spectacular.readthedocs.io/en/latest/>_ for generating OpenAPI schemas with DRF.

  • Dropped support for EOL Python 3.8.

  • Added testing against Python 3.13.

  • Added official support for Django 5.2.

Commits
  • 17ec565 Bumped version for 25.2 release.
  • 9b4b8fd Updated testing for Django 6.0. (#1730)
  • 1b07b3e Bump actions/setup-python from 5 to 6 in the github-actions group (#1726)
  • 27a1168 Bump the github-actions group with 2 updates (#1722)
  • 7f59b6f Add drf as optional dependencies (#1724)
  • 635343e Add reference anchors to filter types to facilitate intersphinx refs (#1706)
  • 7b3176e Document steps for postgres full text search (#1704)
  • 27dd672 Updated Change notes for 25.1 release.
  • 2ea3817 Added Trove classifier for Django 5.2.
  • 4d2306c Replaced hardcoded pks in tests (#1703)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the django group with 6 updates in the /api directory:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `5.1.2` | `5.2.7` |
| [django-environ](https://github.com/joke2k/django-environ) | `0.11.2` | `0.12.0` |
| [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.11` |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.15.2` | `3.16.1` |
| [djangorestframework-jsonapi](https://github.com/django-json-api/django-rest-framework-json-api) | `7.0.2` | `8.0.0` |
| [django-filter](https://github.com/carltongibson/django-filter) | `24.3` | `25.2` |



Updates `django` from 5.1.2 to 5.2.7
- [Commits](django/django@5.1.2...5.2.7)

Updates `django-environ` from 0.11.2 to 0.12.0
- [Release notes](https://github.com/joke2k/django-environ/releases)
- [Changelog](https://github.com/joke2k/django-environ/blob/main/CHANGELOG.rst)
- [Commits](joke2k/django-environ@v0.11.2...v0.12.0)

Updates `psycopg2-binary` from 2.9.10 to 2.9.11
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.10...2.9.11)

Updates `djangorestframework` from 3.15.2 to 3.16.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.15.2...3.16.1)

Updates `djangorestframework-jsonapi` from 7.0.2 to 8.0.0
- [Release notes](https://github.com/django-json-api/django-rest-framework-json-api/releases)
- [Changelog](https://github.com/django-json-api/django-rest-framework-json-api/blob/main/CHANGELOG.md)
- [Commits](django-json-api/django-rest-framework-json-api@v7.0.2...v8.0.0)

Updates `django-filter` from 24.3 to 25.2
- [Release notes](https://github.com/carltongibson/django-filter/releases)
- [Changelog](https://github.com/carltongibson/django-filter/blob/main/CHANGES.rst)
- [Commits](carltongibson/django-filter@24.3...25.2)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: django-environ
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: psycopg2-binary
  dependency-version: 2.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: django
- dependency-name: djangorestframework
  dependency-version: 3.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: djangorestframework-jsonapi
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: django
- dependency-name: django-filter
  dependency-version: '25.2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: django
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 13, 2025
@dependabot dependabot bot requested a review from c0rydoras as a code owner October 13, 2025 10:49
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 13, 2025
@derrabauke
Copy link
Member

@dependabot rebase

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 6, 2025

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants