chore: bump the prod-deps group across 1 directory with 13 updates - #658
Open
dependabot[bot] wants to merge 1 commit into
Open
chore: bump the prod-deps group across 1 directory with 13 updates#658dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
force-pushed
the
dependabot/pip/app/prod-deps-45781332a5
branch
from
April 2, 2026 12:16
fbaa4b9 to
3619c73
Compare
dependabot
Bot
force-pushed
the
dependabot/pip/app/prod-deps-45781332a5
branch
from
April 9, 2026 12:16
3619c73 to
4369ac0
Compare
Bumps the prod-deps group with 13 updates in the /app directory: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `4.2.27` | `5.2.13` | | [django-extensions](https://github.com/django-extensions/django-extensions) | `3.2.3` | `4.1` | | [django-linear-migrations](https://github.com/adamchainz/django-linear-migrations) | `2.16.0` | `2.19.0` | | [django-phonenumber-field](https://github.com/stefanfoulis/django-phonenumber-field) | `8.0.0` | `8.4.0` | | [django-timezone-field](https://github.com/mfogel/django-timezone-field) | `7.0` | `7.2.1` | | [djangorestframework](https://github.com/encode/django-rest-framework) | `3.15.2` | `3.17.1` | | [drf-spectacular](https://github.com/tfranzel/drf-spectacular) | `0.28.0` | `0.29.0` | | [markdown](https://github.com/Python-Markdown/markdown) | `3.7` | `3.10.2` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.12` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.0.0` | `7.1.0` | | [pytest-django](https://github.com/pytest-dev/pytest-django) | `4.9.0` | `4.12.0` | | [pytest-xdist](https://github.com/pytest-dev/pytest-xdist) | `3.6.1` | `3.8.0` | | [tzdata](https://github.com/python/tzdata) | `2024.2` | `2026.2` | Updates `django` from 4.2.27 to 5.2.13 - [Commits](django/django@4.2.27...5.2.13) Updates `django-extensions` from 3.2.3 to 4.1 - [Release notes](https://github.com/django-extensions/django-extensions/releases) - [Changelog](https://github.com/django-extensions/django-extensions/blob/main/CHANGELOG.md) - [Commits](django-extensions/django-extensions@3.2.3...4.1) Updates `django-linear-migrations` from 2.16.0 to 2.19.0 - [Changelog](https://github.com/adamchainz/django-linear-migrations/blob/main/CHANGELOG.rst) - [Commits](adamchainz/django-linear-migrations@2.16.0...2.19.0) Updates `django-phonenumber-field` from 8.0.0 to 8.4.0 - [Release notes](https://github.com/stefanfoulis/django-phonenumber-field/releases) - [Changelog](https://github.com/django-phonenumber-field/django-phonenumber-field/blob/main/CHANGELOG.rst) - [Commits](django-phonenumber-field/django-phonenumber-field@8.0.0...8.4.0) Updates `django-timezone-field` from 7.0 to 7.2.1 - [Commits](mfogel/django-timezone-field@7.0...7.2.1) Updates `djangorestframework` from 3.15.2 to 3.17.1 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](encode/django-rest-framework@3.15.2...3.17.1) Updates `drf-spectacular` from 0.28.0 to 0.29.0 - [Release notes](https://github.com/tfranzel/drf-spectacular/releases) - [Changelog](https://github.com/tfranzel/drf-spectacular/blob/master/CHANGELOG.rst) - [Commits](tfranzel/drf-spectacular@0.28.0...0.29.0) Updates `markdown` from 3.7 to 3.10.2 - [Release notes](https://github.com/Python-Markdown/markdown/releases) - [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md) - [Commits](Python-Markdown/markdown@3.7...3.10.2) Updates `psycopg2-binary` from 2.9.10 to 2.9.12 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.10...2.9.12) Updates `pytest-cov` from 6.0.0 to 7.1.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v6.0.0...v7.1.0) Updates `pytest-django` from 4.9.0 to 4.12.0 - [Release notes](https://github.com/pytest-dev/pytest-django/releases) - [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst) - [Commits](pytest-dev/pytest-django@v4.9.0...v4.12.0) Updates `pytest-xdist` from 3.6.1 to 3.8.0 - [Release notes](https://github.com/pytest-dev/pytest-xdist/releases) - [Changelog](https://github.com/pytest-dev/pytest-xdist/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-xdist@v3.6.1...v3.8.0) Updates `tzdata` from 2024.2 to 2026.2 - [Release notes](https://github.com/python/tzdata/releases) - [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md) - [Commits](python/tzdata@2024.2...2026.2) --- updated-dependencies: - dependency-name: django dependency-version: 5.2.12 dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-deps - dependency-name: django-extensions dependency-version: '4.1' dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-deps - dependency-name: django-linear-migrations dependency-version: 2.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: django-phonenumber-field dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: django-timezone-field dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: djangorestframework dependency-version: 3.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: drf-spectacular dependency-version: 0.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: markdown dependency-version: 3.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: psycopg2-binary dependency-version: 2.9.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: pytest-cov dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-deps - dependency-name: pytest-django dependency-version: 4.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: pytest-xdist dependency-version: 3.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: tzdata dependency-version: '2025.3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-deps ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/pip/app/prod-deps-45781332a5
branch
from
April 30, 2026 12:18
4369ac0 to
0e2a23f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the prod-deps group with 13 updates in the /app directory:
4.2.275.2.133.2.34.12.16.02.19.08.0.08.4.07.07.2.13.15.23.17.10.28.00.29.03.73.10.22.9.102.9.126.0.07.1.04.9.04.12.03.6.13.8.02024.22026.2Updates
djangofrom 4.2.27 to 5.2.13Commits
7d831a9[5.2.x] Bumped version for 5.2.13 release.49e1e2b[5.2.x] Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body ...0b46789[5.2.x] Fixed CVE-2026-33033 -- Mitigated potential DoS in MultiPartParser.397c220[5.2.x] Fixed CVE-2026-4292 -- Disallowed instance creation via ModelAdmin.li...60ffa95[5.2.x] Fixed CVE-2026-4277 -- Checked add permissions in GenericInlineModelA...1cc2a76[5.2.x] Fixed CVE-2026-3902 -- Ignored headers with underscores in ASGIRequest.2a8a76a[5.2.x] Added stub release notes and release date for 5.2.13 and 4.2.30.90924f5[5.2.x] Bumped black to 26.3.1.0ee44c6[5.2.x] Applied Black's 2026 stable style.89b4d94[5.2.x] Combined scripts confirm_release.sh and test_new_version.sh into veri...Updates
django-extensionsfrom 3.2.3 to 4.1Release notes
Sourced from django-extensions's releases.
... (truncated)
Changelog
Sourced from django-extensions's changelog.
Commits
ad01551v4.12c3e914update CHANGELOGfb5b2afruff format7e978d2graph_models style per app (#1848)067064eavoid trying to serialize expressions when serializing default valuesa886068update CHANGELOGd824501Add show_permissions management command (#1920)934f93fbumped version numberc4577dfv4.07cdb43apyproject formattingUpdates
django-linear-migrationsfrom 2.16.0 to 2.19.0Changelog
Sourced from django-linear-migrations's changelog.
Commits
07db9d0Version 2.19.0ab3ea75Correct testing of Django 6.0 (#400)9039aaaSupport Django 6.0 (#399)4dcb191Version 2.18.0ad214caSupport tuples for Migration.dependencies in rebase_migration (#398)4bf6d3dSupport Python 3.14 (#397)17c484f[pre-commit.ci] pre-commit autoupdate (#396)003a8b6Bump the github-actions group with 2 updates (#395)3f71f49Upgrade dependencies (#394)b494fefUse uvx to run tox on GitHub Actions (#393)Updates
django-phonenumber-fieldfrom 8.0.0 to 8.4.0Release notes
Sourced from django-phonenumber-field's releases.
... (truncated)
Commits
7e7d0fcHandle empty values in SplitPhoneNumberField with max_lengthbb21997Bump actions/checkout from 5.0.1 to 6.0.03a29c91Pin GitHub actions to the commit hash82a6afaRemove Django 5.0 from metadata and test matrixb31ac84Update supported Python and Django versions7fa4ce8Bump actions/download-artifact from 5 to 6162b1afBump actions/upload-artifact from 4 to 5412517cSupport max_length argument for SplitPhoneNumberField3e11f80Allow configuring empty_value for SplitPhoneNumberFieldbb70de6translations: Remove line location from messages filesUpdates
django-timezone-fieldfrom 7.0 to 7.2.1Commits
8255408Release v7.2.1a09fd2fRelease v7.202be229Update lockfile of dev dependencies (#153)d7832deUpdate changelog83c1c90Support Django 6.0 (#150)4fb0dd1Run tests against Python 3.14 (#151)65401a3Officially support django 5.2 (#146)1bc5e7cAdd github FUNDING.yml31d7750Pin on poetry <2268095dRelease v7.1Updates
djangorestframeworkfrom 3.15.2 to 3.17.1Release notes
Sourced from djangorestframework's releases.
... (truncated)
Commits
22e231cPrepare bug fix release 3.17.1 (#9931)8e99b53Add condition to skip pushed tags from forks (#9924)c0407deFixHTMLFormRendererwith emptydatetimevalues (#9928)30d58a7Fix the book sizing in the documentation (#9926)6f03b79Tweak order of changes in release notes021ab56Bump version and update release notes for 3.17.0 (#9921)19ebad7Bump mkdocs-material[imaging] from 9.7.4 to 9.7.5 (#9923)f222c55Correct requires-python key in pyproject.toml7e7de6fRemove code fences from release checklistc599d30Update release processUpdates
drf-spectacularfrom 0.28.0 to 0.29.0Release notes
Sourced from drf-spectacular's releases.
... (truncated)
Changelog
Sourced from drf-spectacular's changelog.
Commits
7a7a1f2disable py3.8 target due to pyproject.toml issuesff7a62bfix docse58143bversion bumpe40b287Renovate project setup #116262fc98bMerge pull request #1467 from tfranzel/decimal_l18nd7247a5Add l18n handling for Decimal field #14665221afdMerge branch '#1392'88302faFix LogoutSerializer for JWT/dj_rest_auth #1392f7138e3fix: support token blacklist feature in rest_auth2c71a35[django-filter] Add null_label if set in ChoiceFilter (#1450)Updates
markdownfrom 3.7 to 3.10.2Release notes
Sourced from markdown's releases.
... (truncated)
Changelog
Sourced from markdown's changelog.