chore(deps): bump the pip-backend-patch-minor group across 1 directory with 8 updates by dependabot[bot] · Pull Request #118 · Prekzursil/WebCoder

dependabot · 2026-08-10T22:35:37Z

Bumps the pip-backend-patch-minor group with 8 updates in the /backend directory:

Package	From	To
asgiref	`3.11.1`	`3.12.1`
click	`8.4.1`	`8.4.2`
django	`5.2.15`	`5.2.17`
djangorestframework	`3.17.1`	`3.18.0`
prompt-toolkit	`3.0.52`	`3.0.53`
wcwidth	`0.8.1`	`0.8.2`
pytest-django	`4.12.0`	`4.13.0`
django-allauth	`65.18.0`	`65.19.0`

Updates asgiref from 3.11.1 to 3.12.1

Changelog

Sourced from asgiref's changelog.

3.12.1 (2026-07-14)

Restored the previous SyncToAsync.call internal code shape, which was relied on by some APM services. (#572)

Note, this change was available whilst maintaining the underlying fix (from #564). It does not constitute an API stability promise. Ideally APMs are not monkey patching internal APIs, and future changes will be made here if needed.

3.12.0 (2026-07-14)

AsyncToSync no longer captures the running event loop on instantiation. (#562)

This resolves a series of deadlocks that users experienced after asgiref 3.9.0, particularly with pytest-asyncio. pytest-asyncio stops the event loop between tests, and long-running unawaited futures could find themselves trying to schedule work onto a stopped loop, and so would never complete. Ideally, code should be structured to await long-running futures before returning, but this change should help users experiencing issues here.

The loop is now resolved when the callable is invoked rather than when it is created. If async_to_sync is called from within sync_to_async, the parent event loop is still used, as before.

The possibility of deadlock therefore remains in some nested patterns. For example, an async function may call a long-running sync_to_async function that itself uses async_to_sync; if the outer function returns before the sync future completes, the parent event loop may already be stopped, and the nested calls cannot be driven to completion.

This is not a bug in asgiref — the same patterns deadlock in plain asyncio. As above, restructure your code to await the sync_to_async future before exiting the driving coroutine.

Fixed an event loop deadlock when exiting ThreadSensitiveContext while its executor thread was still blocked waiting on the event loop. (#535)

Dropped support for EOL Python 3.9.

Fixed StatelessServer.run() failing on Python 3.14, where asyncio.get_event_loop() no longer creates an event loop if none exists. It now uses asyncio.run(). (#559)

Fixed Local leaking data between unrelated sync threads when sys.flags.thread_inherit_context is enabled (Python 3.14+), so a newly

... (truncated)

Commits

ef9d4b8 Releasing 3.12.1
34fba63 Restore previous SyncToAsync.call internal code shape.
a43900c Separate mypy from tests extra.
1b7c338 Releasing 3.12.0
157d9d4 Renovate precommit (#552)
deda0d4 Test free-threading builds and fix Local data leak for thread_inherit_context...
a54250a Don’t capture the event loop in AsyncToSync.__init__ (#562)
836356a Use asyncio.run in StatelessServer.run (#561)
e04afd5 Dropped support for Python 3.9. (#543)
95d2430 Fixed #535: ThreadSensitiveContext.aexit blocking the event loop. (#563)
Additional commits viewable in compare view

Updates click from 8.4.1 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508

Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509

A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507

echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534

echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533

Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578

{func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582

Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508

Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509

A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507

echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534

echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533

Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578

{func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582

Commits

b2e30a1 Release version 8.4.2
7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
bec5928 Fix package_name resolution when top-level module differs from distribution...
916883a Fix tests to not rely on -Wdefault option (#3591)
09195f6 Fix double-bracketing of choices in synopsis (#3578)
1557e26 Check for warning exception with idiomatic context manager
d9ff133 Static typing improvements in click.shell_completion (#3460)
762c97e Fix double-bracketing of choices in synopsis
8929d39 Convert changes to markdown. (#3559)
237be50 Move changes headings down a level.
Additional commits viewable in compare view

Updates django from 5.2.15 to 5.2.17

Commits

e802ada [5.2.x] Bumped version for 5.2.17 release.
b9adb81 [5.2.x] Fixed CVE-2026-15920 -- Made display_for_field() validate URLs before...
ba80833 [5.2.x] Fixed CVE-2026-15830 -- Mitigated potential DoS via nested geometry c...
c72a5db [5.2.x] Fixed CVE-2026-15337 -- Mitigated potential DoS in check_for_language().
115ffd0 [5.2.x] Fixed CVE-2026-15307 -- Blocked raster strings and dicts in spatial l...
ec5ced4 [5.2.x] Fixed #36770 -- Fixed incomplete mocking in SQLiteInMemoryTestDbs.
02369b5 [5.2.x] Allowed the full Python test matrix to run on GitHub Actions.
686072f [5.2.x] Added stub release notes and release date for 5.2.17.
cd5ad8c [5.2.x] Bumped minimum setuptools version to 83.
3e389b7 [5.2.x] Closed temporary files in GDALRasterTests.
Additional commits viewable in compare view

Updates djangorestframework from 3.17.1 to 3.18.0

Release notes

Sourced from djangorestframework's releases.

3.18.0

What's Changed

Breaking changes

Drop support for Django 4.2, Django 5.0 and Django 5.1 by @p-r-a-v-i-n in encode/django-rest-framework#9899

Change errors for list serializers (many=True) to dict format by @p-r-a-v-i-n in encode/django-rest-framework#9837

Features

Add unaccent to SearchFilter by @mgaligniana in encode/django-rest-framework#9385

Add support for Django 6.1 by @browniebroke in encode/django-rest-framework#10003

Add @throttle_scope function based view decorator by @d-ryzhykau in encode/django-rest-framework#9963

Add nulls_distinct support to UniqueTogetherValidator by @mag123c in encode/django-rest-framework#9866

Bug fixes

Include choices param for non-editable fields by @ticosax in encode/django-rest-framework#9929

Improve cursor pagination template accessibility in browsable API by @kosbemrunal in encode/django-rest-framework#9905

Fix partial form data updates involving ListField by @Natgho in encode/django-rest-framework#9902

Fix crash due to browsable API extra action permissions by @dlfoerster in encode/django-rest-framework#9934

Handle unhashable BooleanField representation value by @emfpdlzj in encode/django-rest-framework#9973

Fix OpenAPI schema for zero numeric bounds on ListField children by @zainnadeem786 in encode/django-rest-framework#9977

Replace cc_delim_re usage with split_header_value for Django 6.1+ compatibility by @laymonage in encode/django-rest-framework#9978

Fix set_rollback to only rollback initialized connections by @jdetaeye in encode/django-rest-framework#9599

Fix DictField HTML input returning empty dict for missing fields by @veeceey in encode/django-rest-framework#9891

Raise clear error for unsupported unique-together list updates by @zainnadeem786 in encode/django-rest-framework#9981

Other changes

Prepare release 3.18.0 by @github-actions[bot] in encode/django-rest-framework#10015

New Contributors

@Im-Bilal made their first contribution in encode/django-rest-framework#9967

@dlfoerster made their first contribution in encode/django-rest-framework#9934

@emfpdlzj made their first contribution in encode/django-rest-framework#9973

@zainnadeem786 made their first contribution in encode/django-rest-framework#9977

@laymonage made their first contribution in encode/django-rest-framework#9978

@harshitkandpal made their first contribution in encode/django-rest-framework#9993

@udit-prabhakar made their first contribution in encode/django-rest-framework#9962

@sai09111995 made their first contribution in encode/django-rest-framework#9884

@d-ryzhykau made their first contribution in encode/django-rest-framework#9963

@Elkasitu made their first contribution in encode/django-rest-framework#8494

@vishalanandl177 made their first contribution in encode/django-rest-framework#10002

@jdetaeye made their first contribution in encode/django-rest-framework#9599

@veeceey made their first contribution in encode/django-rest-framework#9891

@mag123c made their first contribution in encode/django-rest-framework#9866

@anurag12anu made their first contribution in encode/django-rest-framework#9814

@github-actions[bot] made their first contribution in encode/django-rest-framework#10015

Full Changelog: encode/django-rest-framework@3.17.1...3.18.0

3.17.2

What's Changed

... (truncated)

Commits

11875a3 Prepare release 3.18.0 (#10015)
d346a8c Add note about Browsable API simulating POST in documentation (#9814)
80d535d Fix GHA workflow for preparing release
aa1876b Update fields.md explaining how the source argument affects `.validated_dat...
000bb33 Add nulls_distinct support to UniqueTogetherValidator (#9866)
7508e0c Raise clear error for unsupported list update validation (#9981)
69d1cd7 Fix DictField HTML input returning empty dict for missing fields (#9891)
bbc62ac Update Django 6.1 dependency to stable release. (#10016)
f780434 Add GHA workflow to prepare a release
dc027d2 set_rollback should only rollback initialized connections (#9599)
Additional commits viewable in compare view

Updates prompt-toolkit from 3.0.52 to 3.0.53

Release notes

Sourced from prompt-toolkit's releases.

3.0.53

Fixes:

Fix get_word_before_cursor behavior.

Fix vt100 6x6x6 color cube range and missing grayscale shades (232, 254-255).

Treat OSError on add_reader as EOFError (macOS kqueue).

Handle surrogate pairs in FileHistory.store_string.

Fix FuzzyWordCompleter meta_dict type hint to match WordCompleter.

Handle ascii decode errors in terminal type decoding of telnet protocol. (thanks: @SunandM)

Update return types of dialog shortcuts to include None when cancelled.

Set missing minimal requirement on wcwidth.

New features:

Lazy load __version__.

Allow to specify show_numbers in ChoiceInput.

Added support for Python 3.14, 3.15, and set minimum Python version to 3.10.

Changelog

Sourced from prompt-toolkit's changelog.

3.0.53: 2026-07-26

Fixes:

Fix get_word_before_cursor behavior.

Fix vt100 6x6x6 color cube range and missing grayscale shades (232, 254-255).

Treat OSError on add_reader as EOFError (macOS kqueue).

Handle surrogate pairs in FileHistory.store_string.

Fix FuzzyWordCompleter meta_dict type hint to match WordCompleter.

Handle ascii decode errors in terminal type decoding of telnet protocol.

Update return types of dialog shortcuts to include None when cancelled.

Set missing minimal requirement on wcwidth.

New features:

Lazy load __version__.

Allow to specify show_numbers in ChoiceInput.

Added support for Python 3.14, 3.15, and set minimum Python version to 3.10.

Commits

583b341 Release 3.0.53
b6fc80c Fix some incorrect rst markups (#2074)
f4a5a80 Update return types of dialog shortcuts to include None when cancelled
c6c8930 Handle ascii decode errors in terminal type decoding of telnet protocol. (#2080)
25ff042 Typing fix in breakpointhook.
236bfb7 Allow to specify show_numbers in ChoiceInput (#2059)
8f3212d Fix FuzzyWordCompleter meta_dict type hint to match WordCompleter (#2070)
42f2251 Fix: handle surrogate pairs in FileHistory.store_string (#2062)
9146317 Fix typo (#2064)
1041a42 fix(vt100): treat OSError on add_reader as EOFError (macOS kqueue) (#2065)
Additional commits viewable in compare view

Updates wcwidth from 0.8.1 to 0.8.2

Release notes

Sourced from wcwidth's releases.

0.8.2: bugfix: IndexError when 'n' exceeds length

bugfix: IndexError when 'n' exceeds length by @gaoflow in jquast/wcwidth#228

Full Changelog: jquast/wcwidth@0.8.1...0.8.2

Commits

4c91403 bugfix: IndexError when 'n' exceeds length (#228)
See full diff in compare view

Updates pytest-django from 4.12.0 to 4.13.0

Release notes

Sourced from pytest-django's releases.

v4.13.0

https://pytest-django.readthedocs.io/en/latest/changelog.html#v4-13-0-2026-08-06

Changelog

Sourced from pytest-django's changelog.

v4.13.0 (2026-08-06)

Compatibility ^^^^^^^^^^^^^

Dropped support for Django 4.2 and 5.1.

Improvements ^^^^^^^^^^^^

Export pytest_django.Settings from the top-level pytest_django module so the :fixture:settings fixture can be type-annotated ([#1257](https://github.com/pytest-dev/pytest-django/issues/1257) <https://github.com/pytest-dev/pytest-django/issues/1257>__).

Bugfixes ^^^^^^^^

Fixed type hints of assert methods to match actual signature (PR [#1271](https://github.com/pytest-dev/pytest-django/issues/1271) <https://github.com/pytest-dev/pytest-django/pull/1271>__)

Handled Django 6.2's ImproperlyConfigured (in addition to ImportError) when the configured DJANGO_SETTINGS_MODULE cannot be imported, so pytest-django still shows its guidance message.

Fixed django_db(transaction=True) tests being set up twice, which repeated the serialized_rollback restore and the fixtures load, and sent setting_changed and post_migrate twice when available_apps is set.

Fixed --help/--version failing with AppRegistryNotReady (surfaced as a could not load initial conftests warning) when a conftest.py imports Django models at the top level. Django is now set up even when --help/--version are passed, before the initial conftests are loaded for these options ([#1152](https://github.com/pytest-dev/pytest-django/issues/1152) <https://github.com/pytest-dev/pytest-django/issues/1152>__).

Commits

dc8d17d Release 4.13.0
6cfcfbd fixtures: explain a bit more in Settings docstring
3478bd7 Minor typing improvements
faa443b Fix --help/--version when a conftest imports Django models
fb4417f plugin: add missing type annotation for non_debugging_runtest
f151858 Remove useless test test_change_settings to simplify (#1302)
1a5fdab Removes django-upgrade dependency (#1301)
17f1dec asserts: move type annotations to an asserts.pyi stubs file
0ca15e7 editorconfig-checker: add .venv to Exclude
68334fd Add django-upgrade dependency (#1298)
Additional commits viewable in compare view

Updates django-allauth from 65.18.0 to 65.19.0

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 8 updates Bumps the pip-backend-patch-minor group with 8 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [asgiref](https://github.com/django/asgiref) | `3.11.1` | `3.12.1` | | [click](https://github.com/pallets/click) | `8.4.1` | `8.4.2` | | [django](https://github.com/django/django) | `5.2.15` | `5.2.17` | | [djangorestframework](https://github.com/encode/django-rest-framework) | `3.17.1` | `3.18.0` | | [prompt-toolkit](https://github.com/prompt-toolkit/python-prompt-toolkit) | `3.0.52` | `3.0.53` | | [wcwidth](https://github.com/jquast/wcwidth) | `0.8.1` | `0.8.2` | | [pytest-django](https://github.com/pytest-dev/pytest-django) | `4.12.0` | `4.13.0` | | [django-allauth](https://github.com/sponsors/pennersr) | `65.18.0` | `65.19.0` | Updates `asgiref` from 3.11.1 to 3.12.1 - [Changelog](https://github.com/django/asgiref/blob/main/CHANGELOG.txt) - [Commits](django/asgiref@3.11.1...3.12.1) Updates `click` from 8.4.1 to 8.4.2 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](pallets/click@8.4.1...8.4.2) Updates `django` from 5.2.15 to 5.2.17 - [Commits](django/django@5.2.15...5.2.17) Updates `djangorestframework` from 3.17.1 to 3.18.0 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](encode/django-rest-framework@3.17.1...3.18.0) Updates `prompt-toolkit` from 3.0.52 to 3.0.53 - [Release notes](https://github.com/prompt-toolkit/python-prompt-toolkit/releases) - [Changelog](https://github.com/prompt-toolkit/python-prompt-toolkit/blob/main/CHANGELOG) - [Commits](prompt-toolkit/python-prompt-toolkit@3.0.52...3.0.53) Updates `wcwidth` from 0.8.1 to 0.8.2 - [Release notes](https://github.com/jquast/wcwidth/releases) - [Commits](jquast/wcwidth@0.8.1...0.8.2) Updates `pytest-django` from 4.12.0 to 4.13.0 - [Release notes](https://github.com/pytest-dev/pytest-django/releases) - [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst) - [Commits](pytest-dev/pytest-django@v4.12.0...v4.13.0) Updates `django-allauth` from 65.18.0 to 65.19.0 - [Commits](https://github.com/sponsors/pennersr/commits) --- updated-dependencies: - dependency-name: asgiref dependency-version: 3.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: click dependency-version: 8.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-backend-patch-minor - dependency-name: django dependency-version: 5.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-backend-patch-minor - dependency-name: djangorestframework dependency-version: 3.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: prompt-toolkit dependency-version: 3.0.53 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-backend-patch-minor - dependency-name: wcwidth dependency-version: 0.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-backend-patch-minor - dependency-name: pytest-django dependency-version: 4.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: django-allauth dependency-version: 65.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-10T22:35:38Z

Labels

The following labels could not be found: area:ci, type:chore. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026

Navigation Menu

chore(deps): bump the pip-backend-patch-minor group across 1 directory with 8 updates - #118

chore(deps): bump the pip-backend-patch-minor group across 1 directory with 8 updates#118
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/pip-backend-patch-minor-fbcb1a2e09

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026

3.12.1 (2026-07-14)

3.12.0 (2026-07-14)

8.4.2

Version 8.4.2

3.18.0

What's Changed

Breaking changes

Features

Bug fixes

Other changes

New Contributors

3.17.2

What's Changed

3.0.53

3.0.53: 2026-07-26

0.8.2: bugfix: IndexError when 'n' exceeds length

v4.13.0

v4.13.0 (2026-08-06)

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants