Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 21, 2025

Bumps the python-packages group with 4 updates in the / directory: setuptools, pyright, django and pytest-django.

Updates setuptools from 78.1.0 to 79.0.0

Changelog

Sourced from setuptools's changelog.

v79.0.0

Deprecations and Removals

  • Removed support for 'legacy-editable' installs. (#917)

v78.1.1

Bugfixes

  • More fully sanitized the filename in PackageIndex._download. (#4946)
Commits
  • 56962ec Bump version: 78.1.1 → 79.0.0
  • b137521 Merge pull request #4953 from pypa/debt/917/remove-legacy-editable
  • f89e652 Removed support for the 'legacy-editable' feature.
  • 8e4868a Bump version: 78.1.0 → 78.1.1
  • 100e9a6 Merge pull request #4951
  • 8faf1d7 Add news fragment.
  • 2ca4a9f Rely on re.sub to perform the decision in one expression.
  • e409e80 Extract _sanitize method for sanitizing the filename.
  • 250a6d1 Add a check to ensure the name resolves relative to the tmpdir.
  • d8390fe Extract _resolve_download_filename with test.
  • Additional commits viewable in compare view

Updates pyright from 1.1.398 to 1.1.399

Commits

Updates django from 5.1.7 to 5.1.8

Commits
  • 5773bc9 [5.1.x] Bumped version for 5.1.8 release.
  • edc2716 [5.1.x] Fixed CVE-2025-27556 -- Mitigated potential DoS in url_has_allowed_ho...
  • b3b09dc [5.1.x] Fixed #36213 -- Doc'd MySQL's handling of self-select updates in Quer...
  • 3fdc8c3 [5.1.x] Clarified pre_delete and post_delete's origin attributes.
  • 5805d1c [5.1.x] Simplified Intersphinx configuration example.
  • 31262b3 [5.1.x] Doc'd how to use Intersphinx in the reusable apps tutorial.
  • 451ba1f [5.1.x] Added stub release notes and release date for 5.1.8 and 5.0.14.
  • e38a807 [5.1.x] Pinned black == 24.10.0 in GitHub actions, pre-commit and test requir...
  • 3266f25 [5.1.x] Updated ogrinfo output in GIS tutorial.
  • 659f88e [5.1.x] Fixed typo in docs/topics/signals.txt.
  • Additional commits viewable in compare view

Updates pytest-django from 4.10.0 to 4.11.1

Release notes

Sourced from pytest-django's releases.

v4.11.1

https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4111-2025-04-03

v4.11.0

https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4110-2025-04-01

Changelog

Sourced from pytest-django's changelog.

v4.11.1 (2025-04-03)

Bugfixes ^^^^^^^^

  • Fixed a regression in v4.11.0 for Django TestCase tests using the databases class variable ([#1188](https://github.com/pytest-dev/pytest-django/issues/1188) <https://github.com/pytest-dev/pytest-django/issues/1188>__).

v4.11.0 (2025-04-01)

Compatibility ^^^^^^^^^^^^^

  • Added official support for Django 5.2 (PR [#1179](https://github.com/pytest-dev/pytest-django/issues/1179) <https://github.com/pytest-dev/pytest-django/pull/1179>__).
  • Dropped testing on MySQL’s MyISAM storage engine (PR [#1180](https://github.com/pytest-dev/pytest-django/issues/1180) <https://github.com/pytest-dev/pytest-django/pull/1180>__).

Bugfixes ^^^^^^^^

  • Stopped setting up and serializing databases on test session setup when not needed (the database is not requested / serialized_rollback is not used). On test databases with large amounts of pre-seeded data, this may remove a delay of a few seconds when running pytest --reuse-db.

    The determination of which databases to setup is done by static inspection of the test suite. Using pytest's dynamic features to request db access, such as :meth:request.getfixturevalue("db") <pytest.FixtureRequest.getfixturevalue>, may throw off this analysis. If you start seeing DatabaseOperationForbidden or "unable to open database" errors, this is likely the cause. To fix this, decorate at least one test with the :func:django_db <pytest.mark.django_db> marker with appropriate databases and serialized_rollback settings.

Commits
  • 5ada9c1 Release 4.11.1
  • cf3f0bb fixtures: fixup a regression in previous release for TestCase multi-db support
  • 6d5c272 Release 4.11.0
  • 8000db0 Only setup and serialize databases as needed by tests
  • 6f7fc26 Add optional integration of pytest into django's manage.py test
  • 3071a66 docs/conf.py: format with ruff format
  • 3f44e50 fixtures: avoid unnecessary closure
  • b732869 Remove testing on MyISAM (#1180)
  • e362f4c Add support for Django 5.2 (#1179)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 4 updates in the / directory: [setuptools](https://github.com/pypa/setuptools), [pyright](https://github.com/RobertCraigie/pyright-python), [django](https://github.com/django/django) and [pytest-django](https://github.com/pytest-dev/pytest-django).


Updates `setuptools` from 78.1.0 to 79.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v78.1.0...v79.0.0)

Updates `pyright` from 1.1.398 to 1.1.399
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.398...v1.1.399)

Updates `django` from 5.1.7 to 5.1.8
- [Commits](django/django@5.1.7...5.1.8)

Updates `pytest-django` from 4.10.0 to 4.11.1
- [Release notes](https://github.com/pytest-dev/pytest-django/releases)
- [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst)
- [Commits](pytest-dev/pytest-django@v4.10.0...v4.11.1)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-version: 79.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: pyright
  dependency-version: 1.1.399
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: django
  dependency-version: 5.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: pytest-django
  dependency-version: 4.11.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 21, 2025
@dependabot dependabot bot requested a review from belegnar as a code owner April 21, 2025 00:25
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 23, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 23, 2025
@dependabot dependabot bot deleted the dependabot/pip/python-packages-91e9f5f92b branch June 23, 2025 00:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant