Repository navigation
Bump the all-pip-dependencies group in /infra with 5 updates - #663
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the all-pip-dependencies group in /infra with 5 updates: | Package | From | To | | --- | --- | --- | | [boto3](https://github.com/boto/boto3) | `1.43.108` | `1.43.111` | | [django](https://github.com/django/django) | `6.1.1` | `6.1.2` | | [selenium](https://github.com/SeleniumHQ/Selenium) | `4.50.0` | `4.51.0` | | [pylint](https://github.com/pylint-dev/pylint) | `4.1.2` | `4.1.3` | | [djangorestframework](https://github.com/encode/django-rest-framework) | `3.18.1` | `3.18.3` | Updates `boto3` from 1.43.108 to 1.43.111 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.108...1.43.111) Updates `django` from 6.1.1 to 6.1.2 - [Commits](django/django@6.1.1...6.1.2) Updates `selenium` from 4.50.0 to 4.51.0 - [Release notes](https://github.com/SeleniumHQ/Selenium/releases) - [Commits](SeleniumHQ/selenium@selenium-4.50.0...selenium-4.51.0) Updates `pylint` from 4.1.2 to 4.1.3 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v4.1.2...v4.1.3) Updates `djangorestframework` from 3.18.1 to 3.18.3 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](encode/django-rest-framework@3.18.1...3.18.3) --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.43.111 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-pip-dependencies - dependency-name: django dependency-version: 6.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-pip-dependencies - dependency-name: selenium dependency-version: 4.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-pip-dependencies - dependency-name: pylint dependency-version: 4.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-pip-dependencies - dependency-name: djangorestframework dependency-version: 3.18.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-pip-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the all-pip-dependencies group in /infra with 5 updates:
1.43.1081.43.1116.1.16.1.24.50.04.51.04.1.24.1.33.18.13.18.3Updates
boto3from 1.43.108 to 1.43.111Commits
c14ee96Merge branch 'release-1.43.111'2309640Bumping version to 1.43.1111d6d2d9Add changelog entries from botocored948ed5Merge branch 'release-1.43.110'9b19947Merge branch 'release-1.43.110' into developdedcde7Bumping version to 1.43.110e09fb1dAdd changelog entries from botocore76f85a7Bump https://github.com/astral-sh/ruff-pre-commit (#4856)8afafecMerge branch 'release-1.43.109'1a2fc5cMerge branch 'release-1.43.109' into developUpdates
djangofrom 6.1.1 to 6.1.2Commits
2212534[6.1.x] Bumped version for 6.1.2 release.75d401a[6.1.x] Refs CVE-2026-15830 -- Fixed WKB geometry collection limit bypasses.cce6c57[6.1.x] Fixed CVE-2026-87975 -- Prevented forging actions in model formsets w...4e77ef1[6.1.x] Fixed CVE-2026-87890 -- Blocked bytes in spatial lookups.de56dee[6.1.x] Fixed CVE-2026-84429 -- Simplified parse_header_parameters by leverag...7e878b0[6.1.x] Fixed CVE-2026-77050 -- Prevented memory exhaustion in get_supported_...d8cf296[6.1.x] Fixed #37322 -- Avoided transforms on spatial fields with srid=None.71084d6[6.1.x] Fixed #37377 -- Fixed JSONField __in crash/wrong result for Value() p...e34d776[6.1.x] Fixed #37386 -- Observed delete_confirmation_max_display=0 for inlines.25872ef[6.1.x] Fixed #37361 -- Fixed permission renames for chained RenameModel oper...Updates
seleniumfrom 4.50.0 to 4.51.0Release notes
Sourced from selenium's releases.
... (truncated)
Commits
35c5fab[build] Prepare for release of selenium-4.51.0 (#18149)8f7503a[build] Automated Browser Version Update (major) with CDP (#18131)f3a43a5[build] remove the Windows session settle sleeps now that Selenium Manager co...1915426[build] Automated Selenium Manager Updateaf27a30[build] add stub mode option for using selenium manager with bazel (#18135)953b27b[rb] drop Safari captureScreenshot guard now that Safari Technology Preview 2...bffbdaf[java] manage state in tests not in global hooks (#18142)73b2084[java][bidi] Update tests to use converter functions (#18146)73ccf58[java] Do not pass a bare --proxy to Selenium Manager (#18089)55c6cb9[build] restore support for 32-bit Windows Selenium ManagerUpdates
pylintfrom 4.1.2 to 4.1.3Release notes
Sourced from pylint's releases.
... (truncated)
Commits
e75de10Bump pylint to 4.1.3, update changelog (#11637)591f6e2[Backport maintenance/4.1.x] Fix protected-access false positive through a su...a537920[Backport maintenance/4.1.x] Ignore discard variable type redefinitions (#11635)4a8f61c[Backport maintenance/4.1.x] Fix duplicate-code crash when min-similarity-lin...41fa1c4[Backport maintenance/4.1.x] [pyreverse] Fix hang/RecursionError with --all-a...a05e2f3[Backport maintenance/4.1.x] Fixused-before-assignmentfalse positive for ...ea7996b[Backport maintenance/4.1.x] Error when several output formats write to stdou...479c037[Backport maintenance/4.1.x] Fix IndexError when Enum init has no argumen...e6aa780[Backport maintenance/4.1.x] Fix unreachable false positive for raising gener...fc58d0b[Backport maintenance/4.1.x] Fix pyreverse crash on classes with EmptyNode in...Updates
djangorestframeworkfrom 3.18.1 to 3.18.3Release notes
Sourced from djangorestframework's releases.
Commits
1af5b55Prepare release 3.18.3 (#10067)e140de7Restore order_by_precedence from 3.18.1 (#10066)7195f7eBump the pre-commit group across 1 directory with 2 updates (#10063)69694a1Prepare release 3.18.2 (#10065)af3fabfMerge commit from fork3c26345Merge commit from fork148ab65Merge commit from fork3d18900Fix CI that broke due to latest Django bugfix (#10064)d6c4564Improve teardown of test modifying INSTALLED_APPS (#10056)41764f1Bump codecov/codecov-action in the github-actions group (#10058)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions