search

ossf / omega-triage-portal

MIT License
13 stars 10 forks source link

Bump django-debug-toolbar from 3.8.1 to 4.2.0 #125

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps django-debug-toolbar from 3.8.1 to 4.2.0.

Release notes

Sourced from django-debug-toolbar's releases.

4.2

What's Changed

New Contributors

Full Changelog: https://github.com/jazzband/django-debug-toolbar/compare/4.1...4.2

4.1

What's Changed

New Contributors

Full Changelog: https://github.com/jazzband/django-debug-toolbar/compare/4.0.0...4.1

4.0.0

  • Added Django 4.2a1 to the CI.

... (truncated)

Changelog

Sourced from django-debug-toolbar's changelog.

4.2.0 (2023-08-10)

  • Adjusted app directories system check to allow for nested template loaders.
  • Switched from flake8, isort and pyupgrade to ruff <https://beta.ruff.rs/>__.
  • Converted cookie keys to lowercase. Fixed the samesite argument to djdt.cookie.set.
  • Converted StaticFilesPanel to no longer use a thread collector. Instead, it collects the used static files in a ContextVar.
  • Added check debug_toolbar.W007 to warn when JavaScript files are resolving to the wrong content type.
  • Fixed SQL statement recording under PostgreSQL for queries encoded as byte strings.
  • Patch the CursorWrapper class with a mixin class to support multiple base wrapper classes.

4.1.0 (2023-05-15)

  • Improved SQL statement formatting performance. Additionally, fixed the indentation of CASE statements and stopped simplifying .count() queries.
  • Added support for the new STORAGES setting in Django 4.2 for static files.
  • Added support for theme overrides.
  • Reworked the cache panel instrumentation code to no longer attempt to undo monkey patching of cache methods, as that turned out to be fragile in the presence of other code which also monkey patches those methods.
  • Update all timing code that used :py:func:time.time() to use :py:func:time.perf_counter() instead.
  • Made the check on request.META["wsgi.multiprocess"] optional, but defaults to forcing the toolbar to render the panels on each request. This is because it's likely an ASGI application that's serving the responses and that's more likely to be an incompatible setup. If you find that this is incorrect for you in particular, you can use the RENDER_PANELS setting to forcibly control this logic.

4.0.0 (2023-04-03)

  • Added Django 4.2 to the CI.
  • Dropped support for Python 3.7.
  • Fixed PostgreSQL raw query with a tuple parameter during on explain.
  • Use TOOLBAR_LANGUAGE setting when rendering individual panels that are loaded via AJAX.
  • Add decorator for rendering toolbar views with TOOLBAR_LANGUAGE.
  • Removed the logging panel. The panel's implementation was too complex, caused memory leaks and sometimes very verbose and hard to silence output in some environments (but not others). The maintainers judged that time and effort is better invested elsewhere.

... (truncated)

Commits
  • 7ab6b0f Version 4.2.0
  • fefec8e [pre-commit.ci] pre-commit autoupdate
  • 7677183 Patch CursorWrapper dynamically to allow multiple base classes. (#1820)
  • 6e55663 [pre-commit.ci] pre-commit autoupdate (#1817)
  • 66eb88d Fix a typo
  • 53747ef [pre-commit.ci] pre-commit autoupdate (#1815)
  • acd69df Handle logging queries encoded as bytes under PostgreSQL (#1812)
  • 43c076a pre-commit updates; disable two of the more annoying ruff rulesets
  • 4a641ec Check JavaScript files content type. (#1802)
  • 47d4eed Switch StaticFilesPanel to use ContextVar. (#1801)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)