search

digitalfabrik / lunes-cms

The back end for the Lunes vocabulary trainer. Front end: https://github.com/digitalfabrik/lunes-app.
https://lunes.app
Apache License 2.0
20 stars 8 forks source link

Bump the dependencies group across 1 directory with 22 updates #527

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the dependencies group with 22 updates in the / directory:

Package From To
django 3.2.21 3.2.25
django-jazzmin 2.6.0 3.0.0
django-mptt 0.15.0 0.16.0
django-qr-code 3.1.1 4.0.1
djangorestframework 3.14.0 3.15.1
drf-spectacular 0.26.5 0.27.2
ipython 8.16.0 8.24.0
pillow 10.0.1 10.3.0
psycopg2 2.9.8 2.9.9
black 23.9.1 24.4.2
bumpver 2023.1126 2023.1129
pre-commit 3.4.0 3.7.1
pylint-django 2.5.3 2.5.5
shellcheck-py 0.9.0.6 0.10.0.1
twine 4.0.2 5.0.0
sphinx 7.2.6 7.3.7
sphinx-rtd-theme 1.3.0 2.0.0
sphinx-last-updated-by-git 0.3.6 0.3.7
pytest-cov 4.1.0 5.0.0
pytest-django 4.5.2 4.8.0
pytest-icdiff 0.8 0.9
pytest-xdist 3.3.1 3.6.1

Updates django from 3.2.21 to 3.2.25

Commits
  • c98eca3 [3.2.x] Bumped version for 3.2.25 release.
  • 072963e [3.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().
  • 2ad2676 [3.2.x] Added release date for 3.2.25.
  • fc41af6 [3.2.x] Fixed #35172 -- Fixed intcomma for string floats.
  • b9170b4 [3.2.x] Added CVE-2024-24680 to security archive.
  • e5350a9 [3.2.x] Post release version bump.
  • f5c8808 [3.2.x] Bumped version for 3.2.24 release.
  • c1171ff [3.2.x] Fixed CVE-2024-24680 -- Mitigated potential DoS in intcomma template ...
  • 9dc3456 [3.2.x] Added stub release notes 3.2.24.
  • 90eae45 [3.2.x] Fixed documented alias of smart_text().
  • Additional commits viewable in compare view


Updates django-jazzmin from 2.6.0 to 3.0.0

Release notes

Sourced from django-jazzmin's releases.

v3.0.0 🌈

Breaking Changes

  • Drop support for Python 3.6 & 3.7
  • Drop support for Django 2.2, 3.0 & 3.1

New Features

  • Add support for Python 3.11 & 3.12
  • Add support for Django 5.0

What's Changed

New Contributors

Full Changelog: https://github.com/farridav/django-jazzmin/compare/v2.6.1...v3.0.0

v2.6.2 🌈

Deprecation

This is the last version to officially support Python 3.6 and 3.7, as well as Django 2 and 3.

What's Changed

New Contributors

Full Changelog: https://github.com/farridav/django-jazzmin/compare/v2.6.1...v2.6.2

v2.6.1 🌈

Commits
  • dc355ba Merge pull request #509 from PavelPancocha/fix/warning_logger_when_imagefield...
  • 11ca70e Properly handle empty file field
  • 78824ee Merge pull request #560 from farridav/dependabot/pip/ipython-8.10.0
  • bc17232 Bump ipython from 7.34.0 to 8.10.0
  • 4b1d0f2 Merge pull request #557 from farridav/dependabot/pip/werkzeug-2.3.8
  • 6380cff Bump werkzeug from 2.2.3 to 2.3.8
  • 4150ac7 Merge pull request #551 from samiashi/bump-python-django
  • 700caf0 Format files using ruff
  • 05cafb2 Add Django 5.0 support
  • ca3317e Add mypy & ruff cache to gitignore
  • Additional commits viewable in compare view


Updates django-mptt from 0.15.0 to 0.16.0

Changelog

Sourced from django-mptt's changelog.

========== Change log

Next version

0.16

  • Fixed get_cached_trees if there are multiple trees in the queryset.
  • Added support for Python 3.12, Django 5.0.
  • Added codespell and ruff checks to the CI.
  • Fixed rebuilding using custom managers not named objects.

0.15

  • Since I unfortunately still depend on django-mptt in prehistoric projects I took it upon me to make it runnable again. This doesn't mean I want to maintain the package.
  • Added Django 4.2.
  • Dropped Python < 3.9, Django < 3.2.
  • Started using ruff and more rules.
  • Dropped the index_together check on Django 5 and better. Django 5 only supports Meta.indexes.
  • Optimized tree rebuilding.
  • Added support for the Django admin theme switcher.
  • Switched to hatchling.

0.14

  • Merged the docs/upgrade.rst file into the main CHANGELOG.rst.
  • Fixed the Sphinx autodoc configuration to also work locally. Ensured that readthedocs is able to build the docs again.
  • Fixed a bug where DraggableMPTTAdmin assumed that the user model's primary key is called id.
  • Ensured that we do not install the tests.myapp package.
  • Added dark mode support to the draggable model admin.
  • Started using pre-commit, for the fun of it.

0.13

  • MARKED THE PROJECT AS UNMAINTAINED, WHICH IT STILL IS
  • Reformatted everything using black, isort etc.

... (truncated)

Commits


Updates django-qr-code from 3.1.1 to 4.0.1

Changelog

Sourced from django-qr-code's changelog.

4.0.1 (2024-01-04)

  • Upgrade dependencies, and drop support for Pydantic <2.5, Django<4.2, Python 3.8
  • Remove dependency to pytz.
  • Add support for Python 3.12.
  • Add support for Django 5.0.
  • Introduce support for floating point size QR code modules.
  • Introduce embedded Base64 SVG image as data URI.
  • Behavior change: white background is no longer interpreted as transparent for SVG output (#41). If you want to avoid path fill of SVG to reduce the size of the SVG image, you have to explicitly set light_color to None in QRCodeOptions.

3.1.2 (2023-04-10)

  • Fix bug in WifiConfig data class (#43).
  • Fix typo in documentation (#45)
  • Add support for Django 4.1 and Django 4.2.
  • Add support for Python 3.11.
Commits


Updates djangorestframework from 3.14.0 to 3.15.1

Release notes

Sourced from djangorestframework's releases.

Version 3.15.1

What's Changed

New Contributors

Full Changelog: https://github.com/encode/django-rest-framework/compare/3.15.0...3.15.1

Commits
  • 3285916 Version 3.15.1 (#9339)
  • eb361d2 SearchFilter.get_search_terms returns list. (#9338)
  • 400b4c5 Revert "Fix NamespaceVersioning ignoring DEFAULT_VERSION on non-None namespac...
  • 4ef3aaf Revert #9030 (#9333)
  • 4f10c4e Revert "Fix Respect can_read_model permission in DjangoModelPermissions (#8...
  • a4d5807 Revert "feat: Add some changes to ValidationError to support django style vad...
  • da78a14 Revert "Re-prefetch related objects after updating (#8043)" (#9327)
  • 0e4ed81 Revert "feat: Add some changes to ValidationError to support django style vad...
  • 56a5b35 Add drf-sendables to third-party-packages.md (#9261)
  • d7c8dcf Revert PR that adds autocomplete_fields to TokenAdmin, as this break some use...
  • Additional commits viewable in compare view


Updates drf-spectacular from 0.26.5 to 0.27.2

Release notes

Sourced from drf-spectacular's releases.

0.27.2

Important notes

  • Some bugfixes and some functionality gaps closed.

PRs

New Contributors

Full Changelog: https://github.com/tfranzel/drf-spectacular/compare/0.27.1...0.27.2

0.27.1

Important notes

  • Fixed some OAS 3.1 corner cases and added support for Webhooks (3.1) in addition to existing Callbacks

PRs

New Contributors

Full Changelog: https://github.com/tfranzel/drf-spectacular/compare/0.27.0...0.27.1

... (truncated)

Changelog

Sourced from drf-spectacular's changelog.

0.27.2 (2024-04-01)

  • fix non-translated enum override hash [#1198](https://github.com/tfranzel/drf-spectacular/issues/1198) <https://github.com/tfranzel/drf-spectacular/issues/1198>_
  • higher order hints for @​extend_schema_field (case 2) [#1174](https://github.com/tfranzel/drf-spectacular/issues/1174) <https://github.com/tfranzel/drf-spectacular/issues/1174>_ [#1212](https://github.com/tfranzel/drf-spectacular/issues/1212) <https://github.com/tfranzel/drf-spectacular/issues/1212>_
  • Add support for TypeAliasType ([#1214](https://github.com/tfranzel/drf-spectacular/issues/1214) <https://github.com/tfranzel/drf-spectacular/issues/1214>_) [igorgaming]
  • DRF 3.15 counteract new assertion for tests
  • Add a specific Action Wrapper for OAuth Authorization requests [#1190](https://github.com/tfranzel/drf-spectacular/issues/1190) <https://github.com/tfranzel/drf-spectacular/issues/1190>_ [Bram Esposito]
  • Update SWAGGER_UI_DIST settings.rst [Alfie Day]
  • fix custom http_method_names for actions [#1184](https://github.com/tfranzel/drf-spectacular/issues/1184) <https://github.com/tfranzel/drf-spectacular/issues/1184>_
  • Add support for direct usage of higher order hints [#1174](https://github.com/tfranzel/drf-spectacular/issues/1174) <https://github.com/tfranzel/drf-spectacular/issues/1174>_
  • Document extend_schema_view support for @action ([#1178](https://github.com/tfranzel/drf-spectacular/issues/1178) <https://github.com/tfranzel/drf-spectacular/issues/1178>_) [johnthagen]
  • remove official 3.6 support due to upstream breakage.
  • Add auth extension for django-rest-knox [Callum Gare]
  • fix yaml encoder for OrderedDict objects [#1158](https://github.com/tfranzel/drf-spectacular/issues/1158) <https://github.com/tfranzel/drf-spectacular/issues/1158>_
  • fix linter warning [#1158](https://github.com/tfranzel/drf-spectacular/issues/1158) <https://github.com/tfranzel/drf-spectacular/issues/1158>_
  • Update link to redoc settings [Andrey Otto]
  • Add tags support to OpenApiWebhook [Federico Bond]
  • set Cross-Origin-Opener-Policy on Swagger-UI view [ftsell]

Breaking changes / important additions:

  • Some bugfixes and some functionality gaps closed.

0.27.1 (2024-01-18)

  • differentiate test cases for 3.1 null cases [#1139](https://github.com/tfranzel/drf-spectacular/issues/1139) <https://github.com/tfranzel/drf-spectacular/issues/1139>_
  • add enum suffix setting [Jonny Beaumont]
  • Fix handling of metadata when using OAS 3.1 [Viicos]
  • Provide all fixed field names for the components object [Sergei Maertens]
  • coerse Decimal to float format explicitly [#1134](https://github.com/tfranzel/drf-spectacular/issues/1134) <https://github.com/tfranzel/drf-spectacular/issues/1134>_
  • bugfix test [#1133](https://github.com/tfranzel/drf-spectacular/issues/1133) <https://github.com/tfranzel/drf-spectacular/issues/1133>_
  • add OAS 3.1 null translation case [#1133](https://github.com/tfranzel/drf-spectacular/issues/1133) <https://github.com/tfranzel/drf-spectacular/issues/1133>_
  • Add OpenAPI 3.1 webhook support [Federico Bond]
  • add OAS 3.1 null case

Breaking changes / important additions:

  • Fixed some OAS 3.1 corner cases and added support for Webhooks (3.1) in addition to existing Callbacks

0.27.0 (2023-12-12)

  • improve mypy typing [#600](https://github.com/tfranzel/drf-spectacular/issues/600) <https://github.com/tfranzel/drf-spectacular/issues/600>_
  • add django 5 to test suite and adapt to changes [#1126](https://github.com/tfranzel/drf-spectacular/issues/1126) <https://github.com/tfranzel/drf-spectacular/issues/1126>_
  • Use correctly allowed http methods for schema generation [Jekel]
  • OAS 3.1
  • Fix Enum collision with same choices & varying labels [#790](https://github.com/tfranzel/drf-spectacular/issues/790) <https://github.com/tfranzel/drf-spectacular/issues/790>_ [#1104](https://github.com/tfranzel/drf-spectacular/issues/1104) <https://github.com/tfranzel/drf-spectacular/issues/1104>_
  • Undo adding middleware [Jelmer Draaijer]

... (truncated)

Commits


Updates ipython from 8.16.0 to 8.24.0

Commits


Updates pillow from 10.0.1 to 10.3.0

Release notes

Sourced from pillow's releases.

10.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html

Changes

... (truncated)

Changelog

Sourced from pillow's changelog.

10.3.0 (2024-04-01)

  • CVE-2024-28219: Use strncpy to avoid buffer overflow #7928 [radarhere, hugovk]

  • Deprecate eval(), replacing it with lambda_eval() and unsafe_eval() #7927 [radarhere, hugovk]

  • Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883 [radarhere]

  • Add --report argument to __main__.py to omit supported formats #7818 [nulano, radarhere, hugovk]

  • Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, #7920 [radarhere]

  • Fix editable installation with custom build backend and configuration options #7658 [nulano, radarhere]

  • Fix putdata() for I;16N on big-endian #7209 [Yay295, hugovk, radarhere]

  • Determine MPO size from markers, not EXIF data #7884 [radarhere]

  • Improved conversion from RGB to RGBa, LA and La #7888 [radarhere]

  • Support FITS images with GZIP_1 compression #7894 [radarhere]

  • Use I;16 mode for 9-bit JPEG 2000 images #7900 [scaramallion, radarhere]

  • Raise ValueError if kmeans is negative #7891 [radarhere]

  • Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893 [radarhere]

  • Raise ValueError for negative values when loading P1-P3 PPM images #7882 [radarhere]

  • Added reading of JPEG2000 palettes #7870 [radarhere]

  • Added alpha_quality argument when saving WebP images #7872 [radarhere]

... (truncated)

Commits
  • 5c89d88 10.3.0 version bump
  • 63cbfcf Update CHANGES.rst [ci skip]
  • 2776126 Merge pull request #7928 from python-pillow/lcms
  • aeb51cb Merge branch 'main' into lcms
  • 5beb0b6 Update CHANGES.rst [ci skip]
  • cac6ffa Merge pull request #7927 from python-pillow/imagemath
  • f5eeeac Name as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated eval
  • facf3af Added release notes
  • 2a93aba Use strncpy to avoid buffer overflow
  • a670597 Update CHANGES.rst [ci skip]
  • Additional commits viewable in compare view


Updates psycopg2 from 2.9.8 to 2.9.9

Changelog

Sourced from psycopg2's changelog.

Current release

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.12.
  • Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
  • Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
  • Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Package manylinux 2014 for aarch64 and ppc64le platforms, in order to include libpq 15 in the binary package (:ticket:[#1396](https://github.com/psycopg/psycopg2/issues/1396)).
  • Wheel package bundled with OpenSSL 1.1.1t.

What's new in psycopg 2.9.5 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.11.
  • Add support for rowcount in MERGE statements in binary packages (:ticket:[#1497](https://github.com/psycopg/psycopg2/issues/1497)).
  • Wheel package bundled with OpenSSL 1.1.1r and PostgreSQL 15 libpq.

What's new in psycopg 2.9.4 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix ~psycopg2.extras.register_composite(), ~psycopg2.extras.register_range() with customized :sql:search_path (:ticket:[#1487](https://github.com/psycopg/psycopg2/issues/1487)).
  • Handle correctly composite types with names or in schemas requiring escape.

... (truncated)

Commits
  • ad5bee7 chore: bump version number to 2.9.9
  • 37d1de1 chore: add support for Python 3.12
  • abf2723 chore: drop support for Python 3.6
  • 2da65a7 chore: drop leftover Python 2.7 import aliases from setup.py
  • 3fa60fd chore: bump doc requirement complained by dependabot
  • 1c1484e ci: better interaction with scaleway build server
  • c81cec6 chore: bump to next dev release
  • 7fe8cb7 chore: bump docs requirements dependabot complains about
  • See full diff in compare view


Updates black from 23.9.1 to 24.4.2

Release notes

Sourced from black's releases.

24.4.2

This is a bugfix release to fix two regressions in the new f-string parser introduced in 24.4.1.

Parser

  • Fix regression where certain complex f-strings failed to parse (#4332)

Performance

  • Fix bad performance on certain complex string literals (#4331)

24.4.1

Highlights

  • Add support for the new Python 3.12 f-string syntax introduced by PEP 701 (#3822)

Stable style

  • Fix crash involving indented dummy functions containing newlines (#4318)

Parser

  • Add support for type parameter defaults, a new syntactic feature added to Python 3.13 by PEP 696 (#4327)

Integrations

  • Github Action now works even when git archive is skipped (#4313)

24.4.0

Stable style

  • Fix unwanted crashes caused by AST equivalency check (#4290)

Preview style

  • if guards in case blocks are now wrapped in parentheses when the line is too long. (#4269)
  • Stop moving multiline strings to a new line unless inside brackets (#4289)

Integrations

  • Add a new option use_pyproject to the GitHub Action psf/black. This will read the Black version from pyproject.toml. (#4294)

24.3.0

Highlights

... (truncated)

Changelog

Sourced from black's changelog.

24.4.2

This is a bugfix release to fix two regressions in the new f-string parser introduced in 24.4.1.

Parser

  • Fix regression where certain complex f-strings failed to parse (#4332)

Performance

  • Fix bad performance on certain complex string literals (#4331)

24.4.1

Highlights

  • Add support for the new Python 3.12 f-string syntax introduced by PEP 701 (#3822)

Stable style

  • Fix crash involving indented dummy functions containing newlines (#4318)

Parser

  • Add support for type parameter defaults, a new syntactic feature added to Python 3.13 by PEP 696 (#4327)

Integrations

  • Github Action now works even when git archive is skipped (#4313)

24.4.0

Stable style

  • Fix unwanted crashes caused by AST equivalency check (#4290)

Preview style

  • if guards in case blocks are now wrapped in parentheses when the line is too long. (#4269)
  • Stop moving multiline strings to a new line unless inside brackets (#4289)

Integrations

  • Add a new option use_pyproject to the GitHub Action psf/black. This will read the Black version from pyproject.toml. (#4294)

24.3.0

... (truncated)

Commits