Skip to content

chore(deps): bump the content-minor-patch group across 1 directory with 7 updates - #229

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/scope_content/content-minor-patch-be154f9c20
Open

chore(deps): bump the content-minor-patch group across 1 directory with 7 updates#229
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/scope_content/content-minor-patch-be154f9c20

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the content-minor-patch group with 7 updates in the /scope_content directory:

Package From To
djangorestframework 3.15.2 3.17.1
boto3 1.37.24 1.43.40
pillow 12.2.0 12.3.0
pytest 9.0.3 9.1.1
pytest-django 4.10.0 4.12.0
mssql-django 1.7 1.7.3
whitenoise 6.8.2 6.12.0

Updates djangorestframework from 3.15.2 to 3.17.1

Release notes

Sourced from djangorestframework's releases.

3.17.1

What's Changed

Bug fixes

Full Changelog: encode/django-rest-framework@3.17.0...3.17.1

3.17.0

What's Changed

Breaking changes

Features

Bug fixes

Translations

Packaging

Other changes

New Contributors

... (truncated)

Commits
  • 22e231c Prepare bug fix release 3.17.1 (#9931)
  • 8e99b53 Add condition to skip pushed tags from forks (#9924)
  • c0407de Fix HTMLFormRenderer with empty datetime values (#9928)
  • 30d58a7 Fix the book sizing in the documentation (#9926)
  • 6f03b79 Tweak order of changes in release notes
  • 021ab56 Bump version and update release notes for 3.17.0 (#9921)
  • 19ebad7 Bump mkdocs-material[imaging] from 9.7.4 to 9.7.5 (#9923)
  • f222c55 Correct requires-python key in pyproject.toml
  • 7e7de6f Remove code fences from release checklist
  • c599d30 Update release process
  • Additional commits viewable in compare view

Updates boto3 from 1.37.24 to 1.43.40

Commits
  • dd59a59 Merge branch 'release-1.43.40'
  • b416ca0 Bumping version to 1.43.40
  • b228d05 Add changelog entries from botocore
  • 121db7a Merge branch 'release-1.43.39'
  • 00141f6 Merge branch 'release-1.43.39' into develop
  • 310317d Bumping version to 1.43.39
  • ff7c1cf Add changelog entries from botocore
  • 805c683 Update CODEOWNERS to shared Python SDK and CLI team (#4809)
  • efcfb65 Merge branch 'release-1.43.38'
  • d7aa957 Merge branch 'release-1.43.38' into develop
  • Additional commits viewable in compare view

Updates pillow from 12.2.0 to 12.3.0

Release notes

Sourced from pillow's releases.

12.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Documentation

Dependencies

Testing

... (truncated)

Commits
  • bb1d8e8 12.3.0 version bump
  • e63fc48 Add release notes for SBOM and performance improvements (#9747)
  • 13b701b Add release notes for #9679
  • 5564ca7 List methods
  • a0920fd Speed up ImageChops operations (#9738)
  • 07e9a6c Speed up Image.filter() (#9736)
  • a94578c Speed up Image.getchannel(), Image.merge(), Image.putalpha() and `Image...
  • 53e02c4 Speed up Image.fill(), Image.linear_gradient() and `Image.radial_gradient...
  • af03747 Speed up Image.resample() (#9739)
  • 5c9ca56 Speed up alpha_composite, matrix, negative, quantize (#9740)
  • Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

    If this is undesirable, move the fixture definition to a conftest.py file if possible.

    Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

  • #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

    See 10819 and 14011.

  • #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

    See dynamic-fixture-request-during-teardown for details.

  • #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

    These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

    See parametrize-iterators for details and suggestions.

  • #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

    See config-inicfg for more details.

  • #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates pytest-django from 4.10.0 to 4.12.0

Release notes

Sourced from pytest-django's releases.

v4.11.1

https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4111-2025-04-03

v4.11.0

https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4110-2025-04-01

Changelog

Sourced from pytest-django's changelog.

v4.12.0 (2026-02-14)

Compatibility ^^^^^^^^^^^^^

  • Official Python 3.14 support.
  • Dropped support for Python 3.9, minimum version is now Python 3.10.
  • Official Django 6.0 support.

Improvements ^^^^^^^^^^^^

  • The :ref:multiple databases <multi-db> support added in v4.3.0 is no longer considered experimental.
  • Added :func:@pytest.mark.django_isolate_apps <pytest.mark.django_isolate_apps> for isolating Django's app registry in pytest tests, and a :fixture:django_isolated_apps fixture to access the isolated Apps registry instance if needed.

v4.11.1 (2025-04-03)

Bugfixes ^^^^^^^^

  • Fixed a regression in v4.11.0 for Django TestCase tests using the databases class variable ([#1188](https://github.com/pytest-dev/pytest-django/issues/1188) <https://github.com/pytest-dev/pytest-django/issues/1188>__).

v4.11.0 (2025-04-01)

Compatibility ^^^^^^^^^^^^^

  • Added official support for Django 5.2 (PR [#1179](https://github.com/pytest-dev/pytest-django/issues/1179) <https://github.com/pytest-dev/pytest-django/pull/1179>__).
  • Dropped testing on MySQL’s MyISAM storage engine (PR [#1180](https://github.com/pytest-dev/pytest-django/issues/1180) <https://github.com/pytest-dev/pytest-django/pull/1180>__).

Bugfixes ^^^^^^^^

  • Stopped setting up and serializing databases on test session setup when not needed (the database is not requested / serialized_rollback is not used). On test databases with large amounts of pre-seeded data, this may remove a delay of a few seconds when running pytest --reuse-db.

    The determination of which databases to setup is done by static inspection of the test suite. Using pytest's dynamic features to request db access, such as :meth:request.getfixturevalue("db") <pytest.FixtureRequest.getfixturevalue>, may throw off this analysis. If you start seeing DatabaseOperationForbidden or "unable to open database" errors, this is likely the cause. To fix this, decorate at least one test with the :func:django_db <pytest.mark.django_db> marker with appropriate databases and serialized_rollback settings.

Commits
  • a2a9495 Release 4.12.0
  • 020bc23 tests: make sure access to default can also be blocked
  • bcefbe8 Add support for isolating apps in tests
  • 39c8dcc plugin: add a note why we reorder tests
  • 1830acd pyproject.toml: require pytest 9 for self tests, switch to native toml config...
  • f19da08 Fix the order of the test cases that use the live_server fixture
  • 92858ee docs: add pytest 9.0+ native TOML configuration format
  • 3f550d9 build(deps): bump hynek/build-and-inspect-python-package
  • 1f50dd2 Drop obsolete traces of Django 5.0 in CI
  • 247ec1c Fix PytestCollectionWarning for TestRunner class (#1259)
  • Additional commits viewable in compare view

Updates mssql-django from 1.7 to 1.7.3

Release notes

Sourced from mssql-django's releases.

1.7.3

mssql-django 1.7.3 Release Notes (June 2026)

mssql-django 1.7.3 is a patch release that fixes a subclassing regression in the backend wrapper and corrects connection-string handling when an explicit Authentication= mode is used. It also adds automated PR code-coverage reporting.

Bug Fixes

FIX: Subclass KeyError in server property caches (#532, closes #531)

  • What changed: Subclassing DatabaseWrapper raised KeyError: 'sql_server_version' on the first connection. _fetch_server_properties() introspected the cache via type(self).__dict__[...], but for a subclass instance type(self) is the subclass, which doesn't carry the inherited cached_property in its own __dict__. The cache now uses explicit class-level dicts (_known_versions, _known_azures) accessed via self., which resolves correctly through the MRO. This is a regression from #518.
  • Who benefits: Anyone subclassing DatabaseWrapper to extend or customize the backend.
  • Impact: Subclassed backends connect without crashing; no change for direct users of the base wrapper.

FIX: Skip Trusted_Connection/SSPI when Authentication= is explicit (#533, #529)

  • What changed: When extra_params set an explicit Authentication= mode (e.g. ActiveDirectoryIntegrated), the backend could still inject Trusted_Connection=yes, which the ODBC driver rejects with FA001. The previous code only special-cased ActiveDirectoryMsi and ActiveDirectoryInteractive. Connection-string building now parses the auth mode with a boundary-aware, case-insensitive regex and skips Trusted_Connection/SSPI for any explicit Authentication=, skipping PWD only for known passwordless modes.
  • Who benefits: Anyone using Azure AD / Microsoft Entra authentication (ActiveDirectoryIntegrated, ActiveDirectoryDefault, ActiveDirectoryDeviceFlow, etc.).
  • Impact: Entra auth connection strings build correctly without driver rejection, while SqlPassword, ActiveDirectoryPassword, and ActiveDirectoryServicePrincipal continue to send PWD as before.

Test Improvements

  • Added 11 connection-string tests covering explicit Authentication= modes, case-insensitive detection, multi-param strings, the FreeTDS path, and the helper method directly (#533)
  • Updated cache test helpers to use the new class-level dicts instead of introspecting func.__defaults__ (#532)

Infrastructure

  • CI: PR code coverage comments (#538) — A GitHub Action now polls ADO pipeline 2195, parses the Cobertura coverage.xml, runs diff-cover for patch coverage, and posts a sticky PR comment with diff coverage, overall coverage, a per-file breakdown, and build links. Handles both same-repo and forked PRs.

Version Compatibility

Component Supported Versions
Django 3.2, 4.0, 4.1, 4.2, 5.0, 5.1, 5.2, 6.0
Python 3.8 – 3.14
SQL Server 2016, 2017, 2019, 2022, 2025; Azure SQL DB / Managed Instance / Microsoft Fabric
ODBC Driver 17 or 18 for SQL Server (v18 is the default)

Breaking Changes

None. This is a fully backward-compatible patch release.

... (truncated)

Commits
  • 8f2bd94 RELEASE: 1.7.3
  • 7b44fd2 CI: add PR code coverage comments via GitHub Actions (#538)
  • 908bc1b FIX: skip Trusted_Connection/SSPI when Authentication= is explicit (#533)
  • 9937ab9 FIX: Use class-level dicts for server property caches to fix subclass KeyErro...
  • 9b8110d RELEASE: 1.7.2 (#528)
  • 574f470 FIX: Remove return in finally that swallows exceptions (#417) (#526)
  • 34888f4 FIX: Updates TimeZone support for DATETIMEOFFSET type, fixes incorrect Now() ...
  • 3545831 FIX: AttributeError on .explain() for Django 4.0+ (#409) (#524)
  • cfdd6d4 Update nightly schedule to 2:30 AM IST (9 PM UTC) (#523)
  • ecb0a0f RELEASE: 1.7.1 (#522)
  • Additional commits viewable in compare view

Updates whitenoise from 6.8.2 to 6.12.0

Changelog

Sourced from whitenoise's changelog.

6.12.0 (2026-02-27)

  • Drop Python 3.9 support.
  • Fix potential unauthorised file access vulnerability in "autorefesh" mode. See PR [#684](https://github.com/evansd/whitenoise/issues/684) <https://github.com/evansd/whitenoise/pull/684>__ for details, and a reminder that autorefresh mode has always been documented as unsuitable for production use. Thanks Seth Larson for reporting.

6.11.0 (2025-09-18)

  • Support Django 6.0.

6.10.0 (2025-09-09)

  • Support Python 3.14.

6.9.0 (2025-02-06)

  • Support Django 5.2.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the content-minor-patch group across 1 directory wi…
b89ff19 
…th 7 updates

Bumps the content-minor-patch group with 7 updates in the /scope_content directory:

| Package | From | To |
| --- | --- | --- |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.15.2` | `3.17.1` |
| [boto3](https://github.com/boto/boto3) | `1.37.24` | `1.43.40` |
| [pillow](https://github.com/python-pillow/Pillow) | `12.2.0` | `12.3.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [pytest-django](https://github.com/pytest-dev/pytest-django) | `4.10.0` | `4.12.0` |
| [mssql-django](https://github.com/microsoft/mssql-django) | `1.7` | `1.7.3` |
| [whitenoise](https://github.com/evansd/whitenoise) | `6.8.2` | `6.12.0` |



Updates `djangorestframework` from 3.15.2 to 3.17.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.15.2...3.17.1)

Updates `boto3` from 1.37.24 to 1.43.40
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.37.24...1.43.40)

Updates `pillow` from 12.2.0 to 12.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@12.2.0...12.3.0)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `pytest-django` from 4.10.0 to 4.12.0
- [Release notes](https://github.com/pytest-dev/pytest-django/releases)
- [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst)
- [Commits](pytest-dev/pytest-django@v4.10.0...v4.12.0)

Updates `mssql-django` from 1.7 to 1.7.3
- [Release notes](https://github.com/microsoft/mssql-django/releases)
- [Commits](microsoft/mssql-django@1.7...1.7.3)

Updates `whitenoise` from 6.8.2 to 6.12.0
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.8.2...6.12.0)

---
updated-dependencies:
- dependency-name: djangorestframework
  dependency-version: 3.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: content-minor-patch
- dependency-name: boto3
  dependency-version: 1.43.40
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: content-minor-patch
- dependency-name: pillow
  dependency-version: 12.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: content-minor-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: content-minor-patch
- dependency-name: pytest-django
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: content-minor-patch
- dependency-name: mssql-django
  dependency-version: 1.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: content-minor-patch
- dependency-name: whitenoise
  dependency-version: 6.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: content-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 6, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from lhd2156 as a code owner July 6, 2026 14:26
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lhd2156 lhd2156 Awaiting requested review from lhd2156 lhd2156 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants