Bump the pip group with 5 updates #95
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the pip group with 5 updates: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `5.1.4` | `5.1.5` | | [django-import-export](https://github.com/django-import-export/django-import-export) | `4.3.3` | `4.3.4` | | [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar) | `4.4.6` | `5.0.1` | | [referencing](https://github.com/python-jsonschema/referencing) | `0.35.1` | `0.36.1` | | [virtualenv](https://github.com/pypa/virtualenv) | `20.28.1` | `20.29.1` | Updates `django` from 5.1.4 to 5.1.5 - [Commits](django/django@5.1.4...5.1.5) Updates `django-import-export` from 4.3.3 to 4.3.4 - [Release notes](https://github.com/django-import-export/django-import-export/releases) - [Changelog](https://github.com/django-import-export/django-import-export/blob/main/docs/changelog.rst) - [Commits](django-import-export/django-import-export@4.3.3...4.3.4) Updates `django-debug-toolbar` from 4.4.6 to 5.0.1 - [Release notes](https://github.com/django-commons/django-debug-toolbar/releases) - [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst) - [Commits](django-commons/django-debug-toolbar@4.4.6...5.0.1) Updates `referencing` from 0.35.1 to 0.36.1 - [Release notes](https://github.com/python-jsonschema/referencing/releases) - [Changelog](https://github.com/python-jsonschema/referencing/blob/main/docs/changes.rst) - [Commits](python-jsonschema/referencing@v0.35.1...v0.36.1) Updates `virtualenv` from 20.28.1 to 20.29.1 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@20.28.1...20.29.1) --- updated-dependencies: - dependency-name: django dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: django-import-export dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: django-debug-toolbar dependency-type: direct:development update-type: version-update:semver-major dependency-group: pip - dependency-name: referencing dependency-type: indirect update-type: version-update:semver-minor dependency-group: pip - dependency-name: virtualenv dependency-type: indirect update-type: version-update:semver-minor dependency-group: pip ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
dependabot
bot
requested review from
TheSuperiorStanislav and
Eg0ra
as code owners
Pull Request Test Coverage Report for Build 12858910414Details
💛 - Coveralls |
TheSuperiorStanislav
approved these changes
Jan 20, 2025
NikAzanov
approved these changes
Jan 20, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the pip group with 5 updates:
5.1.45.1.54.3.34.3.44.4.65.0.10.35.10.36.120.28.120.29.1Updates
djangofrom 5.1.4 to 5.1.5Commits
3d3d7f5[5.1.x] Bumped version for 5.1.5 release.4806731[5.1.x] Fixed CVE-2024-56374 -- Mitigated potential DoS in IPv6 validation.d6749de[5.1.x] Made cosmetic edits to 5.1.5 release notes.b325864[5.1.x] Fixed #36077 -- Corrected docs on pk value where Model.save() execute...8d81c47[5.1.x] Fixed #35999 -- Removed #django IRC channel references where appropri...6b9d5ac[5.1.x] Strengthened wording on supported Python versions in FAQ.0966cc7[5.1.x] Added stub release notes and release date for 5.1.5, 5.0.11, and 4.2.18.638547b[5.1.x] Fixed typo in tutorial 5.2ee6ca6[5.1.x] Fixed #34856 -- Fixed references to index_together in historical migr...85c3550[5.1.x] Refs #27236 -- Removed references to index_together from ModelState.f...Updates
django-import-exportfrom 4.3.3 to 4.3.4Release notes
Sourced from django-import-export's releases.
Changelog
Sourced from django-import-export's changelog.
Commits
b7618f4updated changelogfd43521[pre-commit.ci] pre-commit autoupdate (#2024)226a883Update choose_import_resource_class description of BaseImportMixin in mixins....dcd15bfAdded the ability to use datasets created from queryset.values() (#2011)feda368[pre-commit.ci] pre-commit autoupdate (#2015)dba76eaUse stacklevel=2 for declarative field warning (#2016)Updates
django-debug-toolbarfrom 4.4.6 to 5.0.1Release notes
Sourced from django-debug-toolbar's releases.
... (truncated)
Changelog
Sourced from django-debug-toolbar's changelog.
Commits
345b760Reverting back to tags GHA trigger.b6ae021Version 5.0.18d365cdRemove unnecessary trigger for releasing new versions.5620e0eCorrect the trusted publisher release GHA version.43d56b8Support pushing to test pypi on every push.f0c61d4Update release workflows to latest trusted publisher GHA.0e55ae7Version 5.0.0d7fb357[pre-commit.ci] pre-commit autoupdate4ab012dUpdated Troubleshooting documentation: simpler mimetype workaround for .js fi...cda70d3Documented experimental async support.Updates
referencingfrom 0.35.1 to 0.36.1Release notes
Sourced from referencing's releases.
Changelog
Sourced from referencing's changelog.
Commits
35d571dMerge pull request #211 from lukasmasuch/add-typing-extensions-min-version-pin710f893Add lower bound pin for typing-extensions4db2000Merge pull request #210 from python-jsonschema/dependabot/submodules/suite-d0...1fd94c2Bump suite frome8a1874tod01bb7ae8f5bd8Add the uv lockfile.7159c97And uv in the build noxenv.4158241More uv in CI.d47a5e1Merge pull request #207 from python-jsonschema/pre-commit-ci-update-config148a943Merge pull request #208 from python-jsonschema/dependabot/submodules/suite-e8...7708e25Bump suite fromb319a5dtoe8a1874Updates
virtualenvfrom 20.28.1 to 20.29.1Release notes
Sourced from virtualenv's releases.
Changelog
Sourced from virtualenv's changelog.
Commits
e07c0c3release 20.29.161bee9fAdd changelog for PyInfo fixfd0dc85Change PyInfo cache versioning mechanism (#2827)56ef466Merge pull request #2826 from DK96-OS/cli-precedence-2285caf03a2Merge pull request #2824 from pypa/release-20.29.00f6dc41release 20.29.0ea5e5cbUpgrade embeded setuptools (#2823)b00d59cAdd free-threaded Python support (#2809)bc7a91aMerge pull request #2821 from filiplajszczak/cli-precedence-228511995e7Merge pull request #2819 from pypa/pre-commit-ci-update-configDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions