Repository navigation
Bump the minor-and-patch group across 6 directories with 6 updates - #327
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the minor-and-patch group with 1 update in the /frameworks/python/django-asgi directory: [django](https://github.com/django/django). Bumps the minor-and-patch group with 2 updates in the /frameworks/python/django-rest-framework directory: [django](https://github.com/django/django) and [djangorestframework](https://github.com/encode/django-rest-framework). Bumps the minor-and-patch group with 3 updates in the /frameworks/python/fastapi directory: [cachetools](https://github.com/tkem/cachetools), [fastapi](https://github.com/fastapi/fastapi) and [pydantic](https://github.com/pydantic/pydantic). Bumps the minor-and-patch group with 1 update in the /frameworks/python/flask directory: [pydantic](https://github.com/pydantic/pydantic). Bumps the minor-and-patch group with 3 updates in the /frameworks/python/sanic directory: [cachetools](https://github.com/tkem/cachetools), [pydantic](https://github.com/pydantic/pydantic) and [microsoft-kiota-bundle](https://github.com/microsoft/kiota-python). Bumps the minor-and-patch group with 3 updates in the /frameworks/python/starlette directory: [cachetools](https://github.com/tkem/cachetools), [pydantic](https://github.com/pydantic/pydantic) and [microsoft-kiota-bundle](https://github.com/microsoft/kiota-python). Updates `django` from 6.1.1 to 6.1.2 - [Commits](django/django@6.1.1...6.1.2) Updates `django` from 6.1.1 to 6.1.2 - [Commits](django/django@6.1.1...6.1.2) Updates `djangorestframework` from 3.18.1 to 3.18.3 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](encode/django-rest-framework@3.18.1...3.18.3) Updates `cachetools` from 7.2.0 to 7.2.1 - [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst) - [Commits](tkem/cachetools@v7.2.0...v7.2.1) Updates `fastapi` from 0.142.2 to 0.143.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.142.2...0.143.0) Updates `pydantic` from 2.13.5 to 2.14.0 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.13.5...v2.14.0) Updates `pydantic` from 2.13.5 to 2.14.0 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.13.5...v2.14.0) Updates `cachetools` from 7.2.0 to 7.2.1 - [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst) - [Commits](tkem/cachetools@v7.2.0...v7.2.1) Updates `pydantic` from 2.13.5 to 2.14.0 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.13.5...v2.14.0) Updates `microsoft-kiota-bundle` from 1.14.1 to 1.14.2 - [Release notes](https://github.com/microsoft/kiota-python/releases) - [Commits](microsoft/kiota-python@microsoft-kiota-bundle-v1.14.1...microsoft-kiota-bundle-v1.14.2) Updates `cachetools` from 7.2.0 to 7.2.1 - [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst) - [Commits](tkem/cachetools@v7.2.0...v7.2.1) Updates `pydantic` from 2.13.5 to 2.14.0 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.13.5...v2.14.0) Updates `microsoft-kiota-bundle` from 1.14.1 to 1.14.2 - [Release notes](https://github.com/microsoft/kiota-python/releases) - [Commits](microsoft/kiota-python@microsoft-kiota-bundle-v1.14.1...microsoft-kiota-bundle-v1.14.2) --- updated-dependencies: - dependency-name: django dependency-version: 6.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: django dependency-version: 6.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: djangorestframework dependency-version: 3.18.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: cachetools dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: fastapi dependency-version: 0.143.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pydantic dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pydantic dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: cachetools dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: pydantic dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: microsoft-kiota-bundle dependency-version: 1.14.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: cachetools dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: pydantic dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: microsoft-kiota-bundle dependency-version: 1.14.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/uv/frameworks/python/django-asgi/minor-and-patch-709cb8028c
branch
October 19, 2026 19:15
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch group with 1 update in the /frameworks/python/django-asgi directory: django.
Bumps the minor-and-patch group with 2 updates in the /frameworks/python/django-rest-framework directory: django and djangorestframework.
Bumps the minor-and-patch group with 3 updates in the /frameworks/python/fastapi directory: cachetools, fastapi and pydantic.
Bumps the minor-and-patch group with 1 update in the /frameworks/python/flask directory: pydantic.
Bumps the minor-and-patch group with 3 updates in the /frameworks/python/sanic directory: cachetools, pydantic and microsoft-kiota-bundle.
Bumps the minor-and-patch group with 3 updates in the /frameworks/python/starlette directory: cachetools, pydantic and microsoft-kiota-bundle.
Updates
djangofrom 6.1.1 to 6.1.2Commits
2212534[6.1.x] Bumped version for 6.1.2 release.75d401a[6.1.x] Refs CVE-2026-15830 -- Fixed WKB geometry collection limit bypasses.cce6c57[6.1.x] Fixed CVE-2026-87975 -- Prevented forging actions in model formsets w...4e77ef1[6.1.x] Fixed CVE-2026-87890 -- Blocked bytes in spatial lookups.de56dee[6.1.x] Fixed CVE-2026-84429 -- Simplified parse_header_parameters by leverag...7e878b0[6.1.x] Fixed CVE-2026-77050 -- Prevented memory exhaustion in get_supported_...d8cf296[6.1.x] Fixed #37322 -- Avoided transforms on spatial fields with srid=None.71084d6[6.1.x] Fixed #37377 -- Fixed JSONField __in crash/wrong result for Value() p...e34d776[6.1.x] Fixed #37386 -- Observed delete_confirmation_max_display=0 for inlines.25872ef[6.1.x] Fixed #37361 -- Fixed permission renames for chained RenameModel oper...Updates
djangofrom 6.1.1 to 6.1.2Commits
2212534[6.1.x] Bumped version for 6.1.2 release.75d401a[6.1.x] Refs CVE-2026-15830 -- Fixed WKB geometry collection limit bypasses.cce6c57[6.1.x] Fixed CVE-2026-87975 -- Prevented forging actions in model formsets w...4e77ef1[6.1.x] Fixed CVE-2026-87890 -- Blocked bytes in spatial lookups.de56dee[6.1.x] Fixed CVE-2026-84429 -- Simplified parse_header_parameters by leverag...7e878b0[6.1.x] Fixed CVE-2026-77050 -- Prevented memory exhaustion in get_supported_...d8cf296[6.1.x] Fixed #37322 -- Avoided transforms on spatial fields with srid=None.71084d6[6.1.x] Fixed #37377 -- Fixed JSONField __in crash/wrong result for Value() p...e34d776[6.1.x] Fixed #37386 -- Observed delete_confirmation_max_display=0 for inlines.25872ef[6.1.x] Fixed #37361 -- Fixed permission renames for chained RenameModel oper...Updates
djangorestframeworkfrom 3.18.1 to 3.18.3Release notes
Sourced from djangorestframework's releases.
Commits
1af5b55Prepare release 3.18.3 (#10067)e140de7Restore order_by_precedence from 3.18.1 (#10066)7195f7eBump the pre-commit group across 1 directory with 2 updates (#10063)69694a1Prepare release 3.18.2 (#10065)af3fabfMerge commit from fork3c26345Merge commit from fork148ab65Merge commit from fork3d18900Fix CI that broke due to latest Django bugfix (#10064)d6c4564Improve teardown of test modifying INSTALLED_APPS (#10056)41764f1Bump codecov/codecov-action in the github-actions group (#10058)Updates
cachetoolsfrom 7.2.0 to 7.2.1Changelog
Sourced from cachetools's changelog.
Commits
9976f1aRelease v7.2.1.ffe21c4Fix #430: Honor falsey getsizeof callables (#431)110fe5dBump codecov/codecov-action11153c9Prefer pyright file-level comments over relaxing rules globally.bcf9e81Fix #423: Detect an empty RRCache before calling choice.eadb91cdocs: clarify that unbounded TTL caches still expire entriesUpdates
fastapifrom 0.142.2 to 0.143.0Release notes
Sourced from fastapi's releases.
... (truncated)
Commits
f5c6e9b🔖 Release version 0.143.0 (#16477)182c8b8📝 Update release notesaf889e4💥 Require opt-in for automatic OpenTelemetry exporter setup (#16476)9269f17🔖 Release version 0.142.4 (#16471)78ede01📝 Update release notes4e31a07🐛 Isolate FastAPI telemetry for excluded requests (#16470)cb8dabc🔖 Release version 0.142.3 (#16469)787dc56📝 Update release notes6eae2f3🐛 Cache OpenTelemetry tracers to preserve warning deduplication (#16468)94918c1📝 Update release notesUpdates
pydanticfrom 2.13.5 to 2.14.0Release notes
Sourced from pydantic's releases.
... (truncated)
Changelog
Sourced from pydantic's changelog.
... (truncated)
Commits
fcdefa7Correct v2.14.0 release date (#13952)c821eacRevert "Respect config inTypeAdapter.json_schemas()(#13890)" (#13951)a656b75Prepare release v2.14.0 (#13948)b4028f9Avoid validating URL prefix multiple times in multi host URLs (#13945)69ed168Reject large exponents inFractionvalidation (#13944)895c0c2Fix datetime parsing in custom validator examples (#13931)d2cbaaaBump virtualenv from 20.36.1 to 21.7.13 (#13943)3fbc25aBumppydantic-coredependencies (#13942)027b5c7Rebuild incomplete types during serialization inference (#13922)2706d1fHandle exceptions duringDecimalvalidation (#13940)Updates
pydanticfrom 2.13.5 to 2.14.0Release notes
Sourced from pydantic's releases.
... (truncated)
Changelog
Sourced from pydantic's changelog.
... (truncated)
Commits
fcdefa7Correct v2.14.0 release date (#13952)c821eacRevert "Respect config inTypeAdapter.json_schemas()(#13890)" (#13951)a656b75Prepare release v2.14.0 (#13948)b4028f9Avoid validating URL prefix multiple times in multi host URLs (#13945)69ed168Reject large exponents inFractionvalidation (#13944)895c0c2Fix datetime parsing in custom validator examples (#13931)d2cbaaaBump virtualenv from 20.36.1 to 21.7.13 (#13943)3fbc25aBumppydantic-coredependencies (#13942)027b5c7Rebuild incomplete types during serialization inference (#13922)2706d1fHandle exceptions duringDecimalvalidation (#13940)Updates
cachetoolsfrom 7.2.0 to 7.2.1Changelog
Sourced from cachetools's changelog.
Commits
9976f1aRelease v7.2.1.ffe21c4Fix #430: Honor falsey getsizeof callables (#431)110fe5dBump codecov/codecov-action11153c9Prefer pyright file-level comments over relaxing rules globally.bcf9e81Fix #423: Detect an empty RRCache before calling choice.eadb91cdocs: clarify that unbounded TTL caches still expire entriesUpdates
pydanticfrom 2.13.5 to 2.14.0Release notes
Sourced from pydantic's releases.