djangonaut-space / wagtail-indymeet

Djangonaut Space site
MIT License
13 stars 9 forks source link

Bump the dependencies group in /requirements with 14 updates #346

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps the dependencies group in /requirements with 14 updates:

Package From To
django-anymail 9.0 10.3
django-debug-toolbar 4.2.0 4.3.0
django-tailwind 3.6.0 3.8.0
python-dotenv 0.21.1 1.0.1
typing-extensions 4.6.3 4.10.0
urllib3 1.26.18 2.2.1
wagtail 4.1.9 5.0.5
whitenoise 6.3.0 6.6.0
pip-tools 7.3.0 7.4.1
playwright 1.40.0 1.42.0
pre-commit 3.6.0 3.7.0
pytest-django 4.7.0 4.8.0
pytest-mock 3.12.0 3.14.0
pytest-playwright 0.4.3 0.4.4

Updates django-anymail from 9.0 to 10.3

Release notes

Sourced from django-anymail's releases.

v10.3

Changelog

v10.2

Changelog

v10.1

Changelog

v10.0

This release switches to modern Python packaging tools, drops compatibility for some seriously outdated environments, and improves Amazon SES and inbound Postmark handling.

Please see the Changelog for breaking changes and other details.

v9.2

Changelog

v9.1

Changelog

Changelog

Sourced from django-anymail's changelog.

v10.3

2024-03-12

Features


* **Brevo:** Add support for batch sending
  (`docs <https://anymail.dev/en/stable/esps/brevo/#batch-sending-merge-and-esp-templates>`__).
  • Resend: Add support for batch sending (docs &lt;https://anymail.dev/en/stable/esps/resend/#batch-sending-merge-and-esp-templates&gt;__).

  • Unisender Go: Newly supported ESP (docs &lt;https://anymail.dev/en/stable/esps/unisender_go/&gt;__). (Thanks to @Arondit_ for the implementation.)

Fixes


* **Mailgun:** Avoid an error when Mailgun posts null delivery-status
  to the event tracking webhook. (Thanks to `@izimobil`_ for the fix.)

Deprecations
</code></pre>
<ul>
<li><strong>Brevo (SendinBlue):</strong> Rename &quot;SendinBlue&quot; to &quot;Brevo&quot; throughout
Anymail's code, reflecting their rebranding.
This affects the email backend path, settings names, and webhook URLs.
The old names will continue to work for now, but are deprecated. See
<code>Updating code from SendinBlue to Brevo &lt;https://anymail.dev/en/stable/esps/brevo/#brevo-rename&gt;</code>__
for details.</li>
</ul>
<h2>v10.2</h2>
<p><em>2023-10-25</em></p>
<p>Features</p>
<pre><code>
* **Resend**: Add support for this ESP
  (`docs &lt;https://anymail.dev/en/stable/esps/resend/&gt;`__).

Fixes

</tr></table>

... (truncated)

Commits
  • fc1bd14 Release 10.3
  • 948ab2b Brevo: SendinBlue compatibility
  • c7ee59c Brevo: Rename SendinBlue to Brevo
  • 14d4516 Unisender Go: fix integration test
  • e758579 Docs: fix list spacing
  • 5949069 Mailgun: fix webhook error with null delivery-status
  • a71a0d9 Unisender Go: new ESP
  • a2c0ed6 Docs: fix broken links in search results
  • 706fce6 Resend: support batch send
  • d2c5628 Docs: update Brevo feature matrix
  • Additional commits viewable in compare view


Updates django-debug-toolbar from 4.2.0 to 4.3.0

Release notes

Sourced from django-debug-toolbar's releases.

4.3

What's Changed

New Contributors

Full Changelog: https://github.com/jazzband/django-debug-toolbar/compare/4.2...4.3

Changelog

Sourced from django-debug-toolbar's changelog.

4.3.0 (2024-02-01)

  • Dropped support for Django 4.0.
  • Added Python 3.12 to test matrix.
  • Removed outdated third-party panels from the list.
  • Avoided the unnecessary work of recursively quoting SQL parameters.
  • Postponed context process in templates panel to include lazy evaluated content.
  • Fixed template panel to avoid evaluating LazyObject when not already evaluated.
  • Added support for Django 5.0.
  • Refactor the utils.get_name_from_obj to simulate the behavior of django.contrib.admindocs.utils.get_view_name.
  • Switched from black to the ruff formatter <https://astral.sh/blog/the-ruff-formatter>__.
  • Changed the default position of the toolbar from top to the upper top position.
  • Added the setting, UPDATE_ON_FETCH to control whether the toolbar automatically updates to the latest AJAX request or not. It defaults to False.
Commits


Updates django-tailwind from 3.6.0 to 3.8.0

Changelog

Sourced from django-tailwind's changelog.

3.8.0

3.7.0

  • Upgrades Tailwind CSS dependencies;
  • Removes @tailwindcss/line-clamp dependency as it's now included in Tailwind by default;
  • Ensures Django 5.0 support;
  • Drops Python 3.8, 3.9 support;
  • Ensures Python 3.12 support;
  • Updates docs for Windows users;
  • Updates example Dockerfile;
Commits


Updates python-dotenv from 0.21.1 to 1.0.1

Release notes

Sourced from python-dotenv's releases.

v1.0.1

What's Changed

New Contributors

Full Changelog: https://github.com/theskumar/python-dotenv/compare/v1.0.0...v1.0.1

Version 1.0.0

What's Changed

New Contributors

Full Changelog: https://github.com/theskumar/python-dotenv/compare/v0.21.1...v1.0.0

Changelog

Sourced from python-dotenv's changelog.

[1.0.1] - 2024-01-23

Fixed

  • Gracefully handle code which has been imported from a zipfile (#456 by [@​samwyma])
  • Allow modules using load_dotenv to be reloaded when launched in a separate thread (#497 by [@​freddyaboulton])
  • Fix file not closed after deletion, handle error in the rewrite function (#469 by [@​Qwerty-133])

Misc

[1.0.0] - 2023-02-24

Fixed

Commits
  • d6c0b96 Bumpversion 1.0.0 -> 1.0.1
  • 42dc086 Update changelog for 1.0.1
  • b1eebba Add python 3.12 and pypy3.10 to test runner
  • 6ff1391 Fix temporary file is deleted before closing, in the rewrite function (#468)
  • 0b94ac0 Allow modules using load_dotenv to be reloaded when launched in a separate th...
  • 3ffcef6 Use https in README links (#474)
  • be96be2 Use pathlib.Path in tests (#466)
  • 137bc3d Gracefully handle code which has been imported from a zipfile (#456)
  • dd1af68 FIx year in release in changelog (#453)
  • d0684d1 Bump version: 0.21.1 → 1.0.0
  • Additional commits viewable in compare view


Updates typing-extensions from 4.6.3 to 4.10.0

Release notes

Sourced from typing-extensions's releases.

4.10.0

Release 4.10.0 (February 25, 2024)

This feature release adds support for PEP 728 (TypedDict with extra items) and PEP 742 (TypeIs).

There are no changes since 4.10.0rc1.

4.10.0rc1

Release 4.10.0rc1 (February 17, 2024)

  • Add support for PEP 728, supporting the closed keyword argument and the special __extra_items__ key for TypedDict. Patch by Zixuan James Li.
  • Add support for PEP 742, adding typing_extensions.TypeIs. Patch by Jelle Zijlstra.
  • Drop runtime error when a read-only TypedDict item overrides a mutable one. Type checkers should still flag this as an error. Patch by Jelle Zijlstra.
  • Speedup issubclass() checks against simple runtime-checkable protocols by around 6% (backporting python/cpython#112717, by Alex Waygood).
  • Fix a regression in the implementation of protocols where typing.Protocol classes that were not marked as @runtime_checkable would be unnecessarily introspected, potentially causing exceptions to be raised if the protocol had problematic members. Patch by Alex Waygood, backporting python/cpython#113401.

4.9.0

This feature release adds typing_extensions.ReadOnly, as specified by PEP 705, and makes various other improvements, especially to @typing_extensions.deprecated().

There are no changes since 4.9.0rc1.

4.9.0rc1

  • Add support for PEP 705, adding typing_extensions.ReadOnly. Patch by Jelle Zijlstra.
  • All parameters on NewType.__call__ are now positional-only. This means that the signature of typing_extensions.NewType.__call__ now exactly matches the signature of typing.NewType.__call__. Patch by Alex Waygood.
  • Fix bug with using @deprecated on a mixin class. Inheriting from a deprecated class now raises a DeprecationWarning. Patch by Jelle Zijlstra.
  • @deprecated now gives a better error message if you pass a non-str argument to the msg parameter. Patch by Alex Waygood.
  • @deprecated is now implemented as a class for better introspectability. Patch by Jelle Zijlstra.
  • Exclude __match_args__ from Protocol members. Backport of python/cpython#110683 by Nikita Sobolev.
  • When creating a typing_extensions.NamedTuple class, ensure __set_name__ is called on all objects that define __set_name__ and exist in the values

... (truncated)

Changelog

Sourced from typing-extensions's changelog.

Release 4.10.0 (February 24, 2024)

This feature release adds support for PEP 728 (TypedDict with extra items) and PEP 742 (TypeIs).

There are no changes since 4.10.0rc1.

Release 4.10.0rc1 (February 17, 2024)

  • Add support for PEP 728, supporting the closed keyword argument and the special __extra_items__ key for TypedDict. Patch by Zixuan James Li.
  • Add support for PEP 742, adding typing_extensions.TypeIs. Patch by Jelle Zijlstra.
  • Drop runtime error when a read-only TypedDict item overrides a mutable one. Type checkers should still flag this as an error. Patch by Jelle Zijlstra.
  • Speedup issubclass() checks against simple runtime-checkable protocols by around 6% (backporting python/cpython#112717, by Alex Waygood).
  • Fix a regression in the implementation of protocols where typing.Protocol classes that were not marked as @runtime_checkable would be unnecessarily introspected, potentially causing exceptions to be raised if the protocol had problematic members. Patch by Alex Waygood, backporting python/cpython#113401.

Release 4.9.0 (December 9, 2023)

This feature release adds typing_extensions.ReadOnly, as specified by PEP 705, and makes various other improvements, especially to @typing_extensions.deprecated().

There are no changes since 4.9.0rc1.

Release 4.9.0rc1 (November 29, 2023)

  • Add support for PEP 705, adding typing_extensions.ReadOnly. Patch by Jelle Zijlstra.
  • All parameters on NewType.__call__ are now positional-only. This means that the signature of typing_extensions.NewType.__call__ now exactly matches the signature of typing.NewType.__call__. Patch by Alex Waygood.
  • Fix bug with using @deprecated on a mixin class. Inheriting from a deprecated class now raises a DeprecationWarning. Patch by Jelle Zijlstra.
  • @deprecated now gives a better error message if you pass a non-str argument to the msg parameter. Patch by Alex Waygood.
  • @deprecated is now implemented as a class for better introspectability. Patch by Jelle Zijlstra.
  • Exclude __match_args__ from Protocol members. Backport of python/cpython#110683 by Nikita Sobolev.
  • When creating a typing_extensions.NamedTuple class, ensure __set_name__ is called on all objects that define __set_name__ and exist in the values

... (truncated)

Commits


Updates urllib3 from 1.26.18 to 2.2.1

Release notes

Sourced from urllib3's releases.

2.2.1

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

  • Fixed issue where InsecureRequestWarning was emitted for HTTPS connections when using Emscripten. (#3331)
  • Fixed HTTPConnectionPool.urlopen to stop automatically casting non-proxy headers to HTTPHeaderDict. This change was premature as it did not apply to proxy headers and HTTPHeaderDict does not handle byte header values correctly yet. (#3343)
  • Changed ProtocolError to InvalidChunkLength when response terminates before the chunk length is sent. (#2860)
  • Changed ProtocolError to be more verbose on incomplete reads with excess content. (#3261)

2.2.0

🖥️ urllib3 now works in the browser

:tada: This release adds experimental support for using urllib3 in the browser with Pyodide! :tada:

Thanks to Joe Marshall (@​joemarshall) for contributing this feature. This change was possible thanks to work done in urllib3 v2.0 to detach our API from http.client. Please report all bugs to the urllib3 issue tracker.

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

  • Added support for Emscripten and Pyodide, including streaming support in cross-origin isolated browser environments where threading is enabled. (#2951)
  • Added support for HTTPResponse.read1() method. (#3186)
  • Added rudimentary support for HTTP/2. (#3284)
  • Fixed issue where requests against urls with trailing dots were failing due to SSL errors when using proxy. (#2244)
  • Fixed HTTPConnection.proxy_is_verified and HTTPSConnection.proxy_is_verified to be always set to a boolean after connecting to a proxy. It could be None in some cases previously. (#3130)
  • Fixed an issue where headers passed in a request with json= would be mutated (#3203)
  • Fixed HTTPSConnection.is_verified to be set to False when connecting from a HTTPS proxy to an HTTP target. It was set to True previously. (#3267)
  • Fixed handling of new error message from OpenSSL 3.2.0 when configuring an HTTP proxy as HTTPS (#3268)
  • Fixed TLS 1.3 post-handshake auth when the server certificate validation is disabled (#3325)

Note for downstream distributors: To run integration tests, you now need to run the tests a second time with the --integration pytest flag. (#3181)

2.1.0

Read the v2 migration guide for help upgrading to the latest version of urllib3.

Removals

  • Removed support for the deprecated urllib3[secure] extra. (#2680)
  • Removed support for the deprecated SecureTransport TLS implementation. (#2681)
  • Removed support for the end-of-life Python 3.7. (#3143)

... (truncated)

Changelog

Sourced from urllib3's changelog.

2.2.1 (2024-02-16)

  • Fixed issue where InsecureRequestWarning was emitted for HTTPS connections when using Emscripten. ([#3331](https://github.com/urllib3/urllib3/issues/3331) <https://github.com/urllib3/urllib3/issues/3331>__)
  • Fixed HTTPConnectionPool.urlopen to stop automatically casting non-proxy headers to HTTPHeaderDict. This change was premature as it did not apply to proxy headers and HTTPHeaderDict does not handle byte header values correctly yet. ([#3343](https://github.com/urllib3/urllib3/issues/3343) <https://github.com/urllib3/urllib3/issues/3343>__)
  • Changed InvalidChunkLength to ProtocolError when response terminates before the chunk length is sent. ([#2860](https://github.com/urllib3/urllib3/issues/2860) <https://github.com/urllib3/urllib3/issues/2860>__)
  • Changed ProtocolError to be more verbose on incomplete reads with excess content. ([#3261](https://github.com/urllib3/urllib3/issues/3261) <https://github.com/urllib3/urllib3/issues/3261>__)

2.2.0 (2024-01-30)

  • Added support for Emscripten and Pyodide <https://urllib3.readthedocs.io/en/latest/reference/contrib/emscripten.html>, including streaming support in cross-origin isolated browser environments where threading is enabled. ([#2951](https://github.com/urllib3/urllib3/issues/2951) <https://github.com/urllib3/urllib3/issues/2951>)
  • Added support for HTTPResponse.read1() method. ([#3186](https://github.com/urllib3/urllib3/issues/3186) <https://github.com/urllib3/urllib3/issues/3186>__)
  • Added rudimentary support for HTTP/2. ([#3284](https://github.com/urllib3/urllib3/issues/3284) <https://github.com/urllib3/urllib3/issues/3284>__)
  • Fixed issue where requests against urls with trailing dots were failing due to SSL errors when using proxy. ([#2244](https://github.com/urllib3/urllib3/issues/2244) <https://github.com/urllib3/urllib3/issues/2244>__)
  • Fixed HTTPConnection.proxy_is_verified and HTTPSConnection.proxy_is_verified to be always set to a boolean after connecting to a proxy. It could be None in some cases previously. ([#3130](https://github.com/urllib3/urllib3/issues/3130) <https://github.com/urllib3/urllib3/issues/3130>__)
  • Fixed an issue where headers passed in a request with json= would be mutated ([#3203](https://github.com/urllib3/urllib3/issues/3203) <https://github.com/urllib3/urllib3/issues/3203>__)
  • Fixed HTTPSConnection.is_verified to be set to False when connecting from a HTTPS proxy to an HTTP target. It was set to True previously. ([#3267](https://github.com/urllib3/urllib3/issues/3267) <https://github.com/urllib3/urllib3/issues/3267>__)
  • Fixed handling of new error message from OpenSSL 3.2.0 when configuring an HTTP proxy as HTTPS ([#3268](https://github.com/urllib3/urllib3/issues/3268) <https://github.com/urllib3/urllib3/issues/3268>__)
  • Fixed TLS 1.3 post-handshake auth when the server certificate validation is disabled ([#3325](https://github.com/urllib3/urllib3/issues/3325) <https://github.com/urllib3/urllib3/issues/3325>__)
  • Note for downstream distributors: To run integration tests, you now need to run the tests a second time with the --integration pytest flag. ([#3181](https://github.com/urllib3/urllib3/issues/3181) <https://github.com/urllib3/urllib3/issues/3181>__)

2.1.0 (2023-11-13)

  • Removed support for the deprecated urllib3[secure] extra. ([#2680](https://github.com/urllib3/urllib3/issues/2680) <https://github.com/urllib3/urllib3/issues/2680>__)
  • Removed support for the deprecated SecureTransport TLS implementation. ([#2681](https://github.com/urllib3/urllib3/issues/2681) <https://github.com/urllib3/urllib3/issues/2681>__)
  • Removed support for the end-of-life Python 3.7. ([#3143](https://github.com/urllib3/urllib3/issues/3143) <https://github.com/urllib3/urllib3/issues/3143>__)
  • Allowed loading CA certificates from memory for proxies. ([#3065](https://github.com/urllib3/urllib3/issues/3065) <https://github.com/urllib3/urllib3/issues/3065>__)
  • Fixed decoding Gzip-encoded responses which specified x-gzip content-encoding. ([#3174](https://github.com/urllib3/urllib3/issues/3174) <https://github.com/urllib3/urllib3/issues/3174>__)

2.0.7 (2023-10-17)

  • Made body stripped from HTTP requests changing the request method to GET after HTTP 303 "See Other" redirect responses.

2.0.6 (2023-10-02)

  • Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.

... (truncated)

Commits
  • 54d6edf Release 2.2.1
  • 49b2dda Stop casting request headers to HTTPHeaderDict (#3344)
  • e22f651 Fix docstring of retries parameter
  • fa54179 Distinguish between truncated and excess content in response (#3273)
  • cfe52f9 Fix InsecureRequestWarning for HTTPS Emscripten requests (#3333)
  • 25155d7 Ensure no remote connections during testing (#3328)
  • 12f9233 Bump cryptography to 42.0.2 and PyOpenSSL to 24.0.0 (#3340)
  • 9929d3c Add nox session to start local Pyodide console
  • aa8d3dd Fix ssl_version tests for upcoming migration to pytest 8
  • 23f2287 Remove TODO about informational responses (#3319)
  • Additional commits viewable in compare view


Updates wagtail from 4.1.9 to 5.0.5

Release notes

Sourced from wagtail's releases.

5.0.5

  • Fix: CVE-2023-45809: Disclosure of user names via admin bulk action views (Matt Westcott)

5.0.4

  • Maintenance: Relax Willow / Pillow dependency to allow use of current Pillow versions with security fixes (Dan Braghis)

5.0.3

  • Fix: Avoid use of ignore_conflicts when creating extra permissions for snippets, for SQL Server compatibility (Sage Abdullah)
  • Fix: Ensure sequence on wagtailsearchpromotions_query table is correctly set after migrating data (Jake Howard)
  • Fix: Update Pillow dependency to 9.1.0 (Daniel Kirkham)

5.0.2

  • Added TitleFieldPanel to support title / slug field synchronisation (LB (Ben) Johnston)
  • Fix: Prevent JS error when reverting the spinner on a submit button after a validation error (LB (Ben) Johnston)
  • Fix: Prevent crash when comparing page revisions that include MultipleChooserPanel (Matt Westcott)
  • Fix: Ensure that title and slug continue syncing after entering non-URL-safe characters (LB (Ben) Johnston)
  • Fix: Ensure that title and slug are synced on keypress, not just on blur (LB (Ben) Johnston)
  • Fix: Add a more visible active state for side panel toggle buttons (Thibaud Colas)
  • Fix: Use custom dark theme colors for revision comparisons (Thibaud Colas)

5.0.1

  • Fix: Rectify previous fix for TableBlock becoming uneditable after save (Sage Abdullah)
  • Fix: Ensure that copying page correctly picks up the latest revision (Matt Westcott)
  • Fix: Ensure comment buttons always respect WAGTAILADMIN_COMMENTS_ENABLED (Thibaud Colas)
  • Fix: Fix error when deleting a single snippet through the bulk actions interface (Sage Abdullah)
  • Fix: Pass the correct for_update value for get_form_class in SnippetViewSet edit views (Sage Abdullah)
  • Fix: Move comment notifications toggle to the comments side panel (Sage Abdullah)
  • Fix: Remove comment button on InlinePanel fields (Sage Abdullah)
  • Fix: Fix missing link to UsageView from EditView for snippets (Christer Jensen)
  • Fix: Prevent lowercase conversions of IndexView column headers (Virag Jain)
  • Fix: Fix various colour issues in dark mode (Thibaud Colas)
  • Docs: Update documentation for log_action parameter on RevisionMixin.save_revision (Christer Jensen)

5.0

  • Added support for Django 4.2
  • Object usage information on deleting objects (Sage Abdullah)
  • Support for SVG images (Joshua Munn, with sponsorship from YouGov)
  • Custom validation support for StreamField (Matt Westcott)
  • Add WAGTAILIMAGES_EXTENSIONS setting to restrict image uploads to specific file types (Aman Pandey, Ananjan-R)
  • Update user list column level to Access level to be easier to understand (Vallabh Tiwari)
  • Migrate .button-longrunning behaviour to a Stimulus controller with support for custom label element & duration (Loveth Omokaro)
  • Implement new simplified userbar designs (Albina Starykova)
  • Add more Axe rules to the accessibility checker (Albina Starykova)
  • Sort accessibility checker results by position on the page (Albina Starykova)
  • Highlight elements with errors in accessibility checker (Albina Starykova)
  • Add usage view for pages (Sage Abdullah)
  • Copy page form now updates the slug field dynamically with a slugified value on blur (Loveth Omokaro)
  • Ensure selected collection is kept when navigating from documents or images listings to add multiple views & upon upload (Aman Pandey, Bojan Mihelac)
  • Keep applied filters when downloading form submissions (Suyash Srivastava)
  • Messages added dynamically via JavaScript now have an icon to be consistent with those supplied in the page's HTML (Aman Pandey)

... (truncated)

Changelog

Sourced from wagtail's changelog.

5.0.5 (19.10.2023)


* Fix: CVE-2023-45809: Disclosure of user names via admin bulk action views (Matt Westcott)

5.0.4 (04.10.2023)

  • Maintenance: Relax Willow / Pillow dependency to allow use of current Pillow versions with security fixes (Dan Braghis)

5.0.3 (25.09.2023)


 * Fix: Avoid use of `ignore_conflicts` when creating extra permissions for snippets, for SQL Server compatibility (Sage Abdullah)
 * Fix: Ensure sequence on `wagtailsearchpromotions_query` table is correctly set after migrating data (Jake Howard)
 * Fix: Update Pillow dependency to 9.1.0 (Daniel Kirkham)

5.0.2 (21.06.2023)

  • Added TitleFieldPanel to support title / slug field synchronization (LB (Ben) Johnston)
  • Fix: Prevent JS error when reverting the spinner on a submit button after a validation error (LB (Ben) Johnston)
  • Fix: Prevent crash when comparing page revisions that include MultipleChooserPanel (Matt Westcott)
  • Fix: Ensure that title and slug continue syncing after entering non-URL-safe characters (LB (Ben) Johnston)
  • Fix: Ensure that title and slug are synced on keypress, not just on blur (LB (Ben) Johnston)
  • Fix: Add a more visible active state for side panel toggle buttons (Thibaud Colas)
  • Fix: Use custom dark theme colors for revision comparisons (Thibaud Colas)

5.0.1 (25.05.2023)


 * Fix: Rectify previous fix for TableBlock becoming uneditable after save (Sage Abdullah)
 * Fix: Ensure that copying page correctly picks up the latest revision (Matt Westcott)
 * Fix: Ensure comment buttons always respect `WAGTAILADMIN_COMMENTS_ENABLED` (Thibaud Colas)
 * Fix: Fix error when deleting a single snippet through the bulk actions interface (Sage Abdullah)
 * Fix: Pass the correct `for_update` value for `get_form_class` in `SnippetViewSet` edit views (Sage Abdullah)
 * Fix: Move comment notifications toggle to the comments side panel (Sage Abdullah)
 * Fix: Remove comment button on InlinePanel fields (Sage Abdullah)
 * Fix: Fix missing link to `UsageView` from `EditView` for snippets (Christer Jensen)
 * Fix: Prevent lowercase conversions of IndexView column headers (Virag Jain)
 * Fix: Fix various color issues in dark mode (Thibaud Colas)
 * Docs: Update documentation for `log_action` parameter on `RevisionMixin.save_revision` (Christer Jensen)

5.0 (02.05.2023)

&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/wagtail/wagtail/commit/429dec0f1e7ca2b59354564a84b21d84cf9a2d5a"><code>429dec0</code></a> Add 5.0.5 release note page</li>
<li><a href="https://github.com/wagtail/wagtail/commit/664f2e914aefedc8073dc6e85bac0761efef9017"><code>664f2e9</code></a> Version bump to 5.0.5</li>
<li><a href="https://github.com/wagtail/wagtail/commit/8cae3f09c2b14ea757667b0e049f6b60bbe40ba8"><code>8cae3f0</code></a> Release note for CVE-2023-45809 in 5.0.5</li>
<li><a href="https://github.com/wagtail/wagtail/commit/c94056432827e217dc704c5965728be46853b90b"><code>c940564</code></a> Release note for CVE-2023-45809 in 4.1.9</li>
<li><a href="https://github.com/wagtail/wagtail/commit/2231f462c75dfe84307fb40577e8c2109a23b27e"><code>2231f46</code></a> Redirect away from user bulk actions when user has no permissions on users</li>
<li><a href="https://github.com/wagtail/wagtail/commit/739588b4282ad982fe41b3549354551e7122be51"><code>739588b</code></a> Fix changelog for django-filter upgrade in 4.0</li>
<li><a href="https://github.com/wagtail/wagtail/commit/79b7721cd1afabdf8ea69c9e5fa78958a6adb108"><code>79b7721</code></a> Version bump to 5.0.4</li>
<li><a href="https://github.com/wagtail/wagtail/commit/bb225ffb24ecf032fb51c4a33f0b68d5e2460f1c"><code>bb225ff</code></a> Release note for <a href="https://redirect.github.com/wagtail/wagtail/issues/10989">#10989</a> in 5.0.4</li>
<li><a href="https://github.com/wagtail/wagtail/commit/da2cf662a74ddbc303bb1bcac0fc96279037f760"><code>da2cf66</code></a> Update RTD configuration file to v2</li>
<li><a href="https://github.com/wagtail/wagtail/commit/e1e42722d60231d48daa504715b11ed100068e23"><code>e1e4272</code></a> Update Pillow/Willow dependencies to allow Pillow 10.0.1</li>
<li>Additional commits viewable in <a href="https://github.com/wagtail/wagtail/compare/v4.1.9...v5.0.5">compare view</a></li>
</ul>
</details>

<br />
Updates `whitenoise` from 6.3.0 to 6.6.0
Changelog

Sourced from whitenoise's changelog.

6.6.0 (2023-10-11)

  • Support Django 5.0.

  • Drop Python 3.7 support.

6.5.0 (2023-06-16)

  • Support Python 3.12.

  • Changed documentation site URL from https://whitenoise.evans.io/ to https://whitenoise.readthedocs.io/.

6.4.0 (2023-02-25)

  • Support Django 4.2.

  • Remove further support for byte strings from the root and prefix arguments to WhiteNoise, and Django’s STATIC_ROOT setting. Like in the previous release, this seems to be a remnant of Python 2 support. Again, this change may be backwards incompatible for a small number of projects, but it’s unlikely. Django does not support STATIC_ROOT being a byte string.

Commits

Updates `pip-tools` from 7.3.0 to 7.4.1
Release notes

Sourced from pip-tools's releases.

7.4.1

Bug Fixes:

  • Skip constraint path check (
    dependabot[bot] commented 3 months ago

    Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

sarahboyce commented 3 months ago

@dependabot rebase

sarahboyce commented 3 months ago

Going to test on staging