search

Living-with-machines / lwmdb

A django-based library for managing the Living with Machines newspapers metadata database schema
https://living-with-machines.github.io/lwmdb/
MIT License
2 stars 0 forks source link

Bump django from 4.1.3 to 4.1.6 in /metadata #72

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps django from 4.1.3 to 4.1.6.

Commits
  • f4909f7 [4.1.x] Bumped version for 4.1.6 release.
  • 9d7bd5a [4.1.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Ac...
  • d3edac6 [4.1.x] Bumped versions in pre-commit and npm configurations.
  • a5a36da [4.1.x] Fixed E501 flake8 error.
  • f586c12 [4.1.x] Fixed #34180 -- Added note about resetting language in test tear-downs.
  • 26b7a25 [4.1.x] Fixed #34291 -- Fixed Meta.constraints validation crash on UniqueCons...
  • bc48c7d [4.1.x] Adjusted release notes for 4.1.6, 4.0.9, and 3.2.17.
  • bb59ef7 [4.1.x] Set date and added stub release notes for 4.1.6, 4.0.9, and 3.2.17.
  • c1bf918 [4.1.x] Corrected passenv value for tox 4.0.6+.
  • 2a32d39 [4.1.x] Fixed #34242 -- Doc'd that primary key is set to None when deleting o...
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Living-with-machines/lib_metadata_db/network/alerts).
dependabot[bot] commented 1 year ago

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

kallewesterling commented 1 year ago

Looks like it failed but only because it cannot resolve poetry.lock + pyproject.toml, which seems fine? We can just bump it in there? What do you say, @griff-rees ?

griff-rees commented 1 year ago

I think it's because of the folder structure change. Applicable to the other pull requests as well. I'm trying to sort a local branch, should then be able to sort these, apologies.