Skip to content
This repository was archived by the owner on Oct 1, 2025. It is now read-only.

Bump the patches group across 1 directory with 7 updates#3418

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/patches-9b4a33dfc8
Open

Bump the patches group across 1 directory with 7 updates#3418
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/patches-9b4a33dfc8

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps the patches group with 7 updates in the / directory:

Package From To
django 5.2.5 5.2.6
django-cors-headers 4.7.0 4.9.0
google-api-python-client 2.178.0 2.183.0
wiki 0.12.0 0.12.1
pyyaml 6.0.2 6.0.3
auth0-python 4.10.0 4.13.0
boto3 1.40.6 1.40.40

Updates django from 5.2.5 to 5.2.6

Commits
  • 75c4403 [5.2.x] Bumped version for 5.2.6 release.
  • 4c044fc [5.2.x] Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL inject...
  • e87ca3d [5.2.x] Made cosmetic edits to 5.2.6 release notes.
  • ebec2c9 [5.2.x] Removed unused import in docs/ref/models/expressions.txt example.
  • ace59cb [5.2.x] Fixed #36431 -- Returned tuples for multi-column ForeignObject in val...
  • 16a12a9 [5.2.x] Fixed #35831 -- Documented the model form meta API in model form refe...
  • 51753bc [5.2.x] Added stub release notes and release date for 5.2.6, 5.1.12, and 4.2.24.
  • a486455 [5.2.x] Corrected definition of "needsinfo" triage stage in contributing guide.
  • f8e572e [5.2.x] Removed reference to flake8 file exclusions.
  • 9c9ed6f [5.2.x] Refs #35530 -- Corrected deprecation message in auth.alogin().
  • Additional commits viewable in compare view

Updates django-cors-headers from 4.7.0 to 4.9.0

Changelog

Sourced from django-cors-headers's changelog.

4.9.0 (2025-09-18)

  • Support Django 6.0.

4.8.0 (2025-09-08)

  • Support Python 3.14.
Commits

Updates google-api-python-client from 2.178.0 to 2.183.0

Release notes

Sourced from google-api-python-client's releases.

v2.183.0

2.183.0 (2025-09-23)

Features

v2.182.0

2.182.0 (2025-09-16)

Features

... (truncated)

Commits

Updates wiki from 0.12.0 to 0.12.1

Changelog

Sourced from wiki's changelog.

0.12.1

Released on 2025-09-15

Security


* XSS attack possible through attachment revision summary :url-issue:`1399` (ryan-esty)

Fixed


* Fix history info on logged IPs for anonymous users :url-issue:`1389` (Martin Müller)

Changed

  • Python-Markdown upgraded to 3.9 :url-issue:1401 (Benjamin Balder Bach)
Commits

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)
Commits

Updates auth0-python from 4.10.0 to 4.13.0

Release notes

Sourced from auth0-python's releases.

4.13.0

Added

  • fix(backchannel): expose headers on slow_down errors (HTTP 429s) #744 (pmalouin)

4.12.0

Added

4.11.0

Added

Fixed

Changelog

Sourced from auth0-python's changelog.

4.13.0 (2025-09-17)

Full Changelog

Added

  • fix(backchannel): expose headers on slow_down errors (HTTP 429s) #744 (pmalouin)

4.12.0 (2025-09-15)

Full Changelog

Added

4.11.0 (2025-09-11)

Full Changelog

Added

Fixed

Commits
  • 0f6dbea Release 4.13.0 (#745)
  • b107c06 fix(backchannel): expose headers on slow_down errors (HTTP 429s) (#744)
  • 4fdcd26 fix(backchannel): expose headers on slow_down errors (HTTP 429s)
  • 612c26e chore(deps): bump pyopenssl from 25.1.0 to 25.2.0 (#738)
  • 9fed19a chore(deps): bump aiosignal from 1.3.2 to 1.4.0 (#736)
  • 8c305e2 chore(deps): bump frozenlist from 1.5.0 to 1.7.0 (#735)
  • ddae82e chore(deps): bump pycparser from 2.21 to 2.23 (#734)
  • 9542c4f Release 4.12.0 (#733)
  • e22c2bf Release 4.12.0
  • 1acf635 Updates for CIBA with email (#720)
  • Additional commits viewable in compare view

Updates boto3 from 1.40.6 to 1.40.40

Commits
  • 3515909 Merge branch 'release-1.40.40'
  • 1e46da3 Bumping version to 1.40.40
  • 53ccfb7 Add changelog entries from botocore
  • 71cfc75 Merge branch 'release-1.40.39'
  • d947110 Merge branch 'release-1.40.39' into develop
  • 5653e58 Bumping version to 1.40.39
  • eaaf3b0 Add changelog entries from botocore
  • c106f68 Merge branch 'release-1.40.38'
  • 9b063da Merge branch 'release-1.40.38' into develop
  • cc3dc1c Bumping version to 1.40.38
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patches group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `5.2.5` | `5.2.6` |
| [django-cors-headers](https://github.com/adamchainz/django-cors-headers) | `4.7.0` | `4.9.0` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.178.0` | `2.183.0` |
| [wiki](https://github.com/django-wiki/django-wiki) | `0.12.0` | `0.12.1` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [auth0-python](https://github.com/auth0/auth0-python) | `4.10.0` | `4.13.0` |
| [boto3](https://github.com/boto/boto3) | `1.40.6` | `1.40.40` |



Updates `django` from 5.2.5 to 5.2.6
- [Commits](django/django@5.2.5...5.2.6)

Updates `django-cors-headers` from 4.7.0 to 4.9.0
- [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst)
- [Commits](adamchainz/django-cors-headers@4.7.0...4.9.0)

Updates `google-api-python-client` from 2.178.0 to 2.183.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.178.0...v2.183.0)

Updates `wiki` from 0.12.0 to 0.12.1
- [Release notes](https://github.com/django-wiki/django-wiki/releases)
- [Changelog](https://github.com/django-wiki/django-wiki/blob/main/docs/release_notes.rst)
- [Commits](https://github.com/django-wiki/django-wiki/commits)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `auth0-python` from 4.10.0 to 4.13.0
- [Release notes](https://github.com/auth0/auth0-python/releases)
- [Changelog](https://github.com/auth0/auth0-python/blob/master/CHANGELOG.md)
- [Commits](auth0/auth0-python@4.10.0...4.13.0)

Updates `boto3` from 1.40.6 to 1.40.40
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.6...1.40.40)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: django-cors-headers
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: google-api-python-client
  dependency-version: 2.183.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: wiki
  dependency-version: 0.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: auth0-python
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: boto3
  dependency-version: 1.40.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 29, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants