Skip to content

chore(deps): bump the django group in /backend with 4 updates - #58

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/django-2380d80b4d
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/django-2380d80b4d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown

Bumps the django group in /backend with 4 updates: django, djangorestframework, django-cors-headers and django-storages.

Updates django from 5.2.15 to 6.1.1

Commits
  • 249b13d [6.1.x] Bumped version for 6.1.1 release.
  • 5f26fa8 [6.1.x] Added release date for 6.1.1.
  • fdcf78a [6.1.x] Added remaining community package mentions to the documentation.
  • 7241568 [6.1.x] Fixed #37222 -- Fixed QuerySet.distinct() crash on duplicated selecti...
  • ef3fc80 [6.1.x] Fixed #37312, Refs #36605 -- Fixed annotation preservation and key se...
  • b09cb6b [6.1.x] Clarified scope of object-level admin view permissions.
  • a6d3aa2 [6.1.x] Corrected heading hierarchy in the admin actions documentation.
  • 9031d41 [6.1.x] Clarified object-level permission checks in admin actions.
  • fc805c6 [6.1.x] Fixed #37311 -- Prevented consumption of rhs iterators in annotation ...
  • 4b0185a [6.1.x] Fixed #37300 -- Preserved parent instance hints on custom Prefetch qu...
  • Additional commits viewable in compare view

Updates djangorestframework from 3.16.1 to 3.18.1

Release notes

Sourced from djangorestframework's releases.

3.18.1

What's Changed

Bug fixes

Other changes

New Contributors

Full Changelog: encode/django-rest-framework@3.18.0...3.18.1

3.18.0

What's Changed

Breaking changes

Features

Bug fixes

Other changes

New Contributors

... (truncated)

Commits
  • dd23495 Prepare release 3.18.1 (#10036)
  • cb1fb66 Install gettext in prepare-release
  • 858f1fc Reject non-finite values (nan, inf) in FloatField (#9998)
  • ea695cd Ensure translations are up to date when preparing release
  • 0406c6e Update pygments requirement from >=2.17,<2.21 to ==2.21.* in the optional gro...
  • 8c92e89 Expand deprecation classes and review deprecation policy (#10034)
  • 3157a6a Update pytest config to native TOML format from v9 (#10035)
  • 4f77428 Fixing issue #9484 (#10033)
  • f17d70f Fix int64 format detection for negative IntegerField minimums in Open API s...
  • 5668281 Add a compatibility setting for ListSerializer error formats (#10027)
  • Additional commits viewable in compare view

Updates django-cors-headers from 4.4.0 to 4.9.0

Changelog

Sourced from django-cors-headers's changelog.

4.9.0 (2025-09-18)

  • Support Django 6.0.

4.8.0 (2025-09-08)

  • Support Python 3.14.

4.7.0 (2025-02-06)

  • Support Django 5.2.

4.6.0 (2024-10-29)

  • Drop Django 3.2 to 4.1 support.

4.5.0 (2024-10-12)

  • Drop Python 3.8 support.

  • Support Python 3.13.

Commits

Updates django-storages from 1.14.4 to 1.14.6

Changelog

Sourced from django-storages's changelog.

1.14.6 (2025-04-01)


Google Cloud

  • Add option to sign URLs via IAM Blob API ([#1427](https://github.com/jschneier/django-storages/issues/1427)_)

S3

  • Fix exists calls when using SSE-C ([#1451](https://github.com/jschneier/django-storages/issues/1451)_)
  • Default url_protocol to https: if set to None ([#1483](https://github.com/jschneier/django-storages/issues/1483)_)

.. _#1427: jschneier/django-storages#1427 .. _#1451: jschneier/django-storages#1451 .. _#1483: jschneier/django-storages#1483

1.14.5 (2025-02-15)


General

  • Revert exists() behavior to pre-1.14.4 semantics with additional hardening for Django versions < 4.2 to fix CVE-2024-39330. This change matches the eventual behavior Django itself shipped with. ([#1484](https://github.com/jschneier/django-storages/issues/1484), [#1486](https://github.com/jschneier/django-storages/issues/1486))
  • Add support for Django 5.1 ([#1444](https://github.com/jschneier/django-storages/issues/1444)_)

Azure

  • Deprecated: The setting AZURE_API_VERSION/api_version setting is deprecated in favor of the new AZURE_CLIENT_OPTIONS setting. A future version will remove support for this setting.
  • Add AZURE_CLIENT_OPTIONS settings to enable customization of all BlobServiceClient parameters such as api_version and all retry* options. ([#1432](https://github.com/jschneier/django-storages/issues/1432)_)

Dropbox

  • As part of the above hardening fix a bug was uncovered whereby a root_path setting would be applied multiple times during save() ([#1484](https://github.com/jschneier/django-storages/issues/1484)_)
  • Fix setting OAuth2 access token via env var ([#1452](https://github.com/jschneier/django-storages/issues/1452)_)

FTP

  • Fix incorrect exists() results due to an errant appended slash ([#1438](https://github.com/jschneier/django-storages/issues/1438)_)

Google Cloud

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the django group in /backend with 4 updates: [django](https://github.com/django/django), [djangorestframework](https://github.com/encode/django-rest-framework), [django-cors-headers](https://github.com/adamchainz/django-cors-headers) and [django-storages](https://github.com/jschneier/django-storages).


Updates `django` from 5.2.15 to 6.1.1
- [Commits](django/django@5.2.15...6.1.1)

Updates `djangorestframework` from 3.16.1 to 3.18.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.16.1...3.18.1)

Updates `django-cors-headers` from 4.4.0 to 4.9.0
- [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst)
- [Commits](adamchainz/django-cors-headers@4.4.0...4.9.0)

Updates `django-storages` from 1.14.4 to 1.14.6
- [Changelog](https://github.com/jschneier/django-storages/blob/master/CHANGELOG.rst)
- [Commits](jschneier/django-storages@1.14.4...1.14.6)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: django
- dependency-name: djangorestframework
  dependency-version: 3.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: django-cors-headers
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: django
- dependency-name: django-storages
  dependency-version: 1.14.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: django
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 28, 2026
@vercel

vercel Bot commented Sep 28, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
draftly Ready Ready Preview Sep 28, 2026 11:55pm UTC

This branch was successfully deployed

1 active deployment
Preview — ef8f2bcb Deployed Sep 28, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants