Skip to content
This repository was archived by the owner on Oct 1, 2025. It is now read-only.

Bump the patches group across 1 directory with 6 updates#3417

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/patches-8c7f4da9f7
Closed

Bump the patches group across 1 directory with 6 updates#3417
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/patches-8c7f4da9f7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Sep 22, 2025 •
edited
Loading

Bumps the patches group with 6 updates in the / directory:

Package From To
django 5.2.5 5.2.6
django-cors-headers 4.7.0 4.9.0
google-api-python-client 2.178.0 2.182.0
wiki 0.12.0 0.12.1
auth0-python 4.10.0 4.13.0
boto3 1.40.6 1.40.35

Updates django from 5.2.5 to 5.2.6

Commits
  • 75c4403 [5.2.x] Bumped version for 5.2.6 release.
  • 4c044fc [5.2.x] Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL inject...
  • e87ca3d [5.2.x] Made cosmetic edits to 5.2.6 release notes.
  • ebec2c9 [5.2.x] Removed unused import in docs/ref/models/expressions.txt example.
  • ace59cb [5.2.x] Fixed #36431 -- Returned tuples for multi-column ForeignObject in val...
  • 16a12a9 [5.2.x] Fixed #35831 -- Documented the model form meta API in model form refe...
  • 51753bc [5.2.x] Added stub release notes and release date for 5.2.6, 5.1.12, and 4.2.24.
  • a486455 [5.2.x] Corrected definition of "needsinfo" triage stage in contributing guide.
  • f8e572e [5.2.x] Removed reference to flake8 file exclusions.
  • 9c9ed6f [5.2.x] Refs #35530 -- Corrected deprecation message in auth.alogin().
  • Additional commits viewable in compare view

Updates django-cors-headers from 4.7.0 to 4.9.0

Changelog

Sourced from django-cors-headers's changelog.

4.9.0 (2025-09-18)

  • Support Django 6.0.

4.8.0 (2025-09-08)

  • Support Python 3.14.
Commits

Updates google-api-python-client from 2.178.0 to 2.182.0

Release notes

Sourced from google-api-python-client's releases.

v2.182.0

2.182.0 (2025-09-16)

Features

... (truncated)

Commits

Updates wiki from 0.12.0 to 0.12.1

Changelog

Sourced from wiki's changelog.

0.12.1

Released on 2025-09-15

Security


* XSS attack possible through attachment revision summary :url-issue:`1399` (ryan-esty)

Fixed



* Fix history info on logged IPs for anonymous users :url-issue:`1389` (Martin Müller)

Changed




    

  • Python-Markdown upgraded to 3.9 :url-issue:1401 (Benjamin Balder Bach)
Commits

Updates auth0-python from 4.10.0 to 4.13.0

Release notes

Sourced from auth0-python's releases.

4.13.0

Added

  • fix(backchannel): expose headers on slow_down errors (HTTP 429s) #744 (pmalouin)

4.12.0

Added

4.11.0

Added

Fixed

Changelog

Sourced from auth0-python's changelog.

4.13.0 (2025-09-17)

Full Changelog

Added

  • fix(backchannel): expose headers on slow_down errors (HTTP 429s) #744 (pmalouin)

4.12.0 (2025-09-15)

Full Changelog

Added

4.11.0 (2025-09-11)

Full Changelog

Added

Fixed

Commits
  • 0f6dbea Release 4.13.0 (#745)
  • b107c06 fix(backchannel): expose headers on slow_down errors (HTTP 429s) (#744)
  • 4fdcd26 fix(backchannel): expose headers on slow_down errors (HTTP 429s)
  • 612c26e chore(deps): bump pyopenssl from 25.1.0 to 25.2.0 (#738)
  • 9fed19a chore(deps): bump aiosignal from 1.3.2 to 1.4.0 (#736)
  • 8c305e2 chore(deps): bump frozenlist from 1.5.0 to 1.7.0 (#735)
  • ddae82e chore(deps): bump pycparser from 2.21 to 2.23 (#734)
  • 9542c4f Release 4.12.0 (#733)
  • e22c2bf Release 4.12.0
  • 1acf635 Updates for CIBA with email (#720)
  • Additional commits viewable in compare view

Updates boto3 from 1.40.6 to 1.40.35

Commits
  • 22fa3d5 Merge branch 'release-1.40.35'
  • 021298e Bumping version to 1.40.35
  • 02961e6 Add changelog entries from botocore
  • 1564e42 Merge branch 'release-1.40.34'
  • b5c8399 Merge branch 'release-1.40.34' into develop
  • dd6d06b Bumping version to 1.40.34
  • 80c94bf Add changelog entries from botocore
  • 910767f Merge branch 'release-1.40.33'
  • 09242b8 Merge branch 'release-1.40.33' into develop
  • 74901ab Bumping version to 1.40.33
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the patches group across 1 directory with 6 updates
7722e51 
Bumps the patches group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `5.2.5` | `5.2.6` |
| [django-cors-headers](https://github.com/adamchainz/django-cors-headers) | `4.7.0` | `4.9.0` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.178.0` | `2.182.0` |
| [wiki](https://github.com/django-wiki/django-wiki) | `0.12.0` | `0.12.1` |
| [auth0-python](https://github.com/auth0/auth0-python) | `4.10.0` | `4.13.0` |
| [boto3](https://github.com/boto/boto3) | `1.40.6` | `1.40.35` |



Updates `django` from 5.2.5 to 5.2.6
- [Commits](django/django@5.2.5...5.2.6)

Updates `django-cors-headers` from 4.7.0 to 4.9.0
- [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst)
- [Commits](adamchainz/django-cors-headers@4.7.0...4.9.0)

Updates `google-api-python-client` from 2.178.0 to 2.182.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.178.0...v2.182.0)

Updates `wiki` from 0.12.0 to 0.12.1
- [Release notes](https://github.com/django-wiki/django-wiki/releases)
- [Changelog](https://github.com/django-wiki/django-wiki/blob/main/docs/release_notes.rst)
- [Commits](https://github.com/django-wiki/django-wiki/commits)

Updates `auth0-python` from 4.10.0 to 4.13.0
- [Release notes](https://github.com/auth0/auth0-python/releases)
- [Changelog](https://github.com/auth0/auth0-python/blob/master/CHANGELOG.md)
- [Commits](auth0/auth0-python@4.10.0...4.13.0)

Updates `boto3` from 1.40.6 to 1.40.35
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.6...1.40.35)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: django-cors-headers
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: google-api-python-client
  dependency-version: 2.182.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: wiki
  dependency-version: 0.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: auth0-python
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: boto3
  dependency-version: 1.40.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 22, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Sep 29, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 29, 2025
@dependabot dependabot Bot deleted the dependabot/uv/patches-8c7f4da9f7 branch September 29, 2025 06:25
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants