Bump sqlparse from 0.4.1 to 0.4.2

[dependabot[bot]]

Bumps sqlparse from 0.4.1 to 0.4.2.

Changelog

Sourced from sqlparse's changelog.

Release 0.4.2 (Sep 10, 2021)

Notable Changes

• IMPORTANT: This release fixes a security vulnerability in the strip comments filter. In this filter a regular expression that was vulnerable to ReDOS (Regular Expression Denial of Service) was used. See the security advisory for details: https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-p5w8-wqhj-9hhf The vulnerability was discovered by @​erik-krogh and @​yoff from GitHub Security Lab (GHSL). Thanks for reporting!

Enhancements

• Add ELSIF as keyword (issue584).
• Add CONFLICT and ON_ERROR_STOP keywords (pr595, by j-martin).

Bug Fixes

• Fix parsing of backticks (issue588).
• Fix parsing of scientific number (issue399).

Commits

• b1f76f6 Update changelog.
• 3eec44e Update Changelog and bump version.
• 8238a9e Optimize regular expression for identifying line breaks in comments.
• e660467 Fix parsing of scientific numbers (fixes #399).
• 23d2993 Update authors and changelog.
• acc2810 keyword, add ON_ERROR_STOP
• 282bcf1 keyword, add CONFLICT to postgres keywords
• 63885dd Add ELSIF as keyword (fixes #584).
• e575ae2 Fix parsing of backticks (fixes #588).
• fe39072 Switch back to development mode.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/bartTC/django-attachments/network/alerts).

[atodorov]

@bartTC this update looks important. However Travis CI jobs haven't been executed b/c Travis has migrated their .org service to .com and updated the interface a bit.

Can you login to https://travis-ci.org/github/bartTC/django-attachments and see if you get any migration hints, etc? From what I know you'd have to grant access to this repository to the Travis CI GitHub application.