Skip to content

oidc #620

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 176 commits into from
Closed

oidc #620

wants to merge 176 commits into from

Conversation

@codingjoe
Copy link
Collaborator

@codingjoe codingjoe commented Oct 15, 2025

  • Fix NPM release version
  • Fix NPM release command
  • Fix code block syntax, thx @hartwork
  • Clarify the key-value pair for the dependent_fields docs.
  • Fix black code style
  • Fix docs build
  • Fix bandit config
  • Add Python 3.9 support
  • Remove official Python 3.6 support
  • Add official Django 3.1 support
  • Remove official Django 3.0 support
  • Remove colon in example for use with ArrayField
  • Split search terms only for __contains queries
  • Fix Mutiple Select has fixed width #29 -- Do not filter based on empty search term
  • Add dependabot config
  • Switch to latest chromedriver version
  • Resolve pytest deprecation warning
  • Bump actions/setup-node from v1 to v2.1.5
  • Resolve MultipleSelect2HiddenInput.render() should use mark_safe() #39 -- Make default search more like Django admin
  • Add support for dependent m2m fields
  • Add css support for Django admin
  • *Added .egg-info in .gitignore
  • Fix Removed empty term validation. #52 -- Get all dependent field values
  • Fix distinct results
  • Add Django 3.2 to CI suite
  • Clarify that cache is not strictly necessary (Select2 options #16)
  • Bump actions/checkout from 2 to 2.3.4
  • Bump actions/setup-python from 2 to 2.2.2
  • Bump actions/setup-node from 2.1.5 to 2.2.0
  • Bump actions/setup-node from 2.2.0 to 2.3.0
  • Bump actions/setup-node from 2.3.0 to 2.3.1
  • Bump actions/setup-node from 2.3.1 to 2.3.2
  • Bump actions/setup-node from 2.3.2 to 2.4.0
  • Added lang attribute to widgets
  • Added LANGUAGE_CODE for tests
  • Bump actions/setup-node from 2.4.0 to 2.4.1
  • Resolve Add extra parameters to heavy fields ajax #92 -- Add tests to sdist package
  • Remove other unneeded files
  • Add Django 4.0 compatibility
  • Update version makers and Ci suite
  • Bump actions/checkout from 2.3.4 to 2.3.5
  • Resolve typo #91 -- Add comment about cache expiration
  • Bump actions/checkout from 2.3.5 to 2.4.0
  • Don't set default_app_config in Django 3.2 up
  • Added SELECT2_THEME settings
  • Bump actions/setup-python from 2.2.2 to 2.3.0
  • Bump actions/setup-node from 2.4.1 to 2.5.0
  • Bump actions/setup-python from 2.3.0 to 2.3.1
  • Bump actions/setup-node from 2.5.0 to 2.5.1
  • Add Select2 mixin that uses Django's own select template
  • Bump actions/setup-python from 2.3.1 to 2.3.2
  • Bump actions/setup-node from 2.5.1 to 3.0.0
  • Bump actions/setup-python from 2.3.2 to 3
  • Bump actions/checkout from 2.4.0 to 3
  • Bump actions/setup-node from 3.0.0 to 3.1.0
  • Fix HeavyModelSelect2TagField #133 -- Remove double dependency entry
  • Bump actions/setup-node from 3.1.0 to 3.1.1
  • Bump actions/setup-node from 3.1.1 to 3.2.0
  • Bump actions/setup-node from 3.2.0 to 3.3.0
  • Fix Select2 4.0 #141 -- Create .readthedocs.yaml
  • Bump actions/setup-node from 3.3.0 to 3.4.0
  • Bump actions/setup-node from 3.4.0 to 3.4.1
  • Bump actions/setup-python from 3 to 4.1.0
  • Set explicit python version
  • Support Django 4.1
  • Python 3.10, fix for removals in selenium
  • Remove Python 3.7 support
  • Remove Django 2.2 support
  • Fix Django version install in CI
  • Update CI suite
  • Simplify GH action version setup
  • Bump codecov/codecov-action from 2 to 3
  • Add tidelift security information
  • Add tidelift funding link
  • Add clarification about widget types
  • Resolve relative import fix #159 -- Add custom JSONEncoder support via setting (django1.8 compatibility issues #160)
  • Fix 'appname.django_select2_keymap' doesn't exist #79 -- Clear values of related fields (Correctly handles attrs['readonly'] = True #137)
  • Add header image
  • Add selenium test marker to stablize CI suite
  • Repleace fussyfox with GH actions
  • Reformat code using black & isort
  • Fix travis failures on python 2.6 #163 -- Lazily get i18n locale name
  • Update packaging to pyproject.toml
  • Fix Select2AdminMixin
  • Change default Select2 version to Django's vendored version
  • Correct the copyright in the licence
  • Fix typo on first line of docs
  • Fix of documentation for ModelSelect2TagWidget
  • Bump flake8 from 5.0.4 to 6.0.0
  • Bump black from 22.10.0 to 22.12.0
  • Bump isort from 5.10.1 to 5.11.1
  • Bump isort from 5.11.1 to 5.11.2
  • Bump isort from 5.11.2 to 5.11.4
  • Bump pydocstyle[toml] from 6.1.1 to 6.2.2
  • Bump pydocstyle[toml] from 6.2.2 to 6.2.3
  • Bump pydocstyle[toml] from 6.2.3 to 6.3.0
  • Bump isort from 5.11.4 to 5.12.0
  • Bump black from 22.12.0 to 23.1.0 (integration with standard jquery.formset.js - solved #202)
  • Add list support for static asset settings (CSS files not available intermittently #189)
  • Support data_view and data_url class attributes on HeavySelect (New release needed (4.3.2) #182)
  • Fix Add a Gitter chat badge to README.md #188 -- Add graphviz to RTD config
  • Bump bandit from 1.7.4 to 1.7.5
  • Fix override_settings issue
  • Update django_select2/apps.py
  • Fix extraneous dot
  • Bump black from 23.1.0 to 23.3.0
  • Fix AutoModelSelect2Field cant save a new model instance. #128, add documentation on how to confifure select2 options
  • Fix Fix HeavySelect2TagWidget to respect custom attrs and default overrides #214 -- Update contributing guilde
  • Update Python & Django version support (Add custom label support #218)
  • [Django 4.1+] Make i18n works for LANGUAGE_CODE with a country code (Added search term splitting #206)
  • Bump black from 23.3.0 to 23.7.0
  • Bump flake8 from 6.0.0 to 6.1.0
  • Note case in which cache is not needed (Fixed #218 -- Add custom label support #233)
  • Bump actions/checkout from 3 to 4
  • Bump black from 23.7.0 to 23.9.1
  • Bump codecov/codecov-action from 3 to 4
  • Bump black from 23.9.1 to 23.10.0
  • Bump black from 23.10.0 to 23.10.1
  • Bump actions/setup-node from 3 to 4
  • Revert "Bump codecov/codecov-action from 3 to 4"
  • Bump black from 23.10.1 to 23.11.0
  • Update issue tempaltes
  • Add a issues config file
  • Drop secuirty link in favor of CVE
  • Bump bandit from 1.7.5 to 1.7.6
  • Bump isort from 5.12.0 to 5.13.0
  • Bump actions/setup-python from 4 to 5
  • Bump isort from 5.13.0 to 5.13.1
  • Bump black from 23.11.0 to 23.12.0
  • Bump isort from 5.13.1 to 5.13.2
  • Bump black from 23.12.0 to 23.12.1
  • Bump flake8 from 6.1.0 to 7.0.0
  • Bump bandit from 1.7.6 to 1.7.7
  • Bump black from 23.12.1 to 24.1.0
  • Bump codecov/codecov-action from 3 to 4
  • Bump black from 24.1.0 to 24.1.1 (Click to select first element #264)
  • Bump black from 24.1.1 to 24.2.0
  • Bump bandit from 1.7.7 to 1.7.8
  • Bump black from 24.2.0 to 24.3.0
  • Bump black from 24.3.0 to 24.4.0
  • Bump black from 24.4.0 to 24.4.1
  • Bump black from 24.4.1 to 24.4.2
  • Bump flake8 from 7.0.0 to 7.1.0
  • Bump bandit from 1.7.8 to 1.7.9
  • Add ModelSelect2Mixin.result_from_instance method (No result found with whitespace #272)
  • Improve the documentation of Select2TagWidget (Document Django Support (>=1.8) #291)
  • Bump flake8 from 7.1.0 to 7.1.1
  • Bump black from 24.4.2 to 24.8.0
  • Fix How to pass language to select2 widgets? #292 -- Change admin widgets' JS media ordering (field id Not Found for ModelSelect2TagWidget #295)
  • Bump bandit from 1.7.9 to 1.7.10
  • Bump black from 24.8.0 to 24.10.0
  • Bump codecov/codecov-action from 4 to 5
  • Bump bandit from 1.7.10 to 1.8.0
  • Fix HeavySelect2Widget confusion regarding choices arg #297 -- Add Django admin' inline formset support (refer to the correct class #300)
  • Upgrade to Baseline2024 compliant JS code (Initial Update #307)
  • Bump bandit from 1.8.0 to 1.8.2 (This app uninstalls django 1.10 and installs Django 1.9.6 #310)
  • Bump isort from 5.13.2 to 6.0.0 (Update coverage to 4.3.4 #311)
  • Bump black from 24.10.0 to 25.1.0
  • Drop official support for EOL Python and Django versions (Update jinja2 to 2.9.5 #313)
  • Bump flake8 from 7.1.1 to 7.1.2 (Update mccabe to 0.6.1 #314)
  • Bump bandit from 1.8.2 to 1.8.3 (Update pyflakes to 1.5.0 #315)
  • Bump isort from 6.0.0 to 6.0.1
  • Fix Readonly Attribute Ignored #136 -- Support dependent fields in formsets (Update pygments to 2.2.0 #316)
  • Bump flake8 from 7.1.2 to 7.2.0 (Update alabaster to 0.7.10 #322)
  • Merge commit from fork
  • Bump bandit from 1.8.3 to 1.8.5
  • Bump flake8 from 7.2.0 to 7.3.0
  • Bump bandit from 1.8.5 to 1.8.6
  • Bump actions/checkout from 4 to 5
  • Bump actions/setup-python from 5 to 6
  • Bump actions/setup-node from 4 to 5
  • Bump black from 25.1.0 to 25.9.0
  • Bump isort from 6.0.1 to 6.1.0
  • Bump isort from 6.1.0 to 7.0.0
  • Bump actions/setup-node from 5 to 6
  • Use OpenID Connect to publish releases on PyPi & NPMJS

codingjoe and others added 30 commits May 24, 2020 18:10
@codingjoe
Fix NPM release version
d27760e
@codingjoe
Fix NPM release command
35354d0
@codingjoe
Fix code block syntax, thx @hartwork
b9d02bc
@YPCrumble @codingjoe
Clarify the key-value pair for the dependent_fields docs.
5356c7c
@codingjoe
Fix black code style
f5a9d48
@codingjoe
Fix docs build
4e7bbad
@codingjoe
Fix bandit config
98c9c45
@codingjoe
Add Python 3.9 support
6ad4447
@codingjoe
Remove official Python 3.6 support
15629f4
@codingjoe
Add official Django 3.1 support
0e1b8c4
@codingjoe
Remove official Django 3.0 support
9cb9848
@jieter @codingjoe
Remove colon in example for use with ArrayField
709ec19
@dbramwell @codingjoe
Split search terms only for __contains queries
07054b2 
Split search terms only for `__contains` queries and not for
`__startswith` or `__endswith`. We no also split not only be
whitespace but tab and newline.

If multiple search fields are defined conditions combined with
and OR. If single word matches in a for contains queries are
OR combined as well.

Co-Authored-By: codingjoe <[email protected]>
@codingjoe
Fix #29 -- Do not filter based on empty search term
e735be2
@codingjoe
Add dependabot config
bc6282f
@codingjoe
Switch to latest chromedriver version
44b2273
@codingjoe
Resolve pytest deprecation warning
fcea539
@dependabot @codingjoe
Bump actions/setup-node from v1 to v2.1.5
c093aab 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from v1 to v2.1.5.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v1...46071b5)

Signed-off-by: dependabot[bot] <[email protected]>
@codingjoe
Resolve #39 -- Make default search more like Django admin
05556e1 
Different to before we now match search terms only if all
bits match or the entire statement. The last part differs
from the behavior in Django admin, which does not inlcude
exact machtes of the entire search term inlcude spaces.

Partially revert 07054b2
@codingjoe
Add support for dependent m2m fields
dc91f03
@codingjoe
Add css support for Django admin
b1b229f
@CleitonDeLima @codingjoe
Added *.egg-info in .gitignore
13d6a40
@codingjoe
Fix #52 -- Get all dependent field values
62d85d5
@codingjoe
Fix distinct results
3448ce7
@codingjoe
Add Django 3.2 to CI suite
038026c
@abeforgit
Clarify that cache is not strictly necessary (#16)
fcd825d
@dependabot @codingjoe
Bump actions/checkout from 2 to 2.3.4
c049b30 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 2.3.4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2...v2.3.4)

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump actions/setup-python from 2 to 2.2.2
c1900dd 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 2.2.2.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v2...v2.2.2)

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump actions/setup-node from 2.1.5 to 2.2.0
4ff262f 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.1.5 to 2.2.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v2.1.5...v2.2.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump actions/setup-node from 2.2.0 to 2.3.0
4d51978 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v2.2.0...v2.3.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
mardukbp and others added 28 commits August 9, 2024 18:02
@mardukbp @codingjoe
Fix #292 -- Change admin widgets' JS media ordering (#295)
50c488c 
Select2Mixin now loads admin/js/jquery.init.js, just like the AutocompleteMixin of Django Admin.

---------

Co-authored-by: Johannes Maron <[email protected]>
@dependabot @codingjoe
Bump bandit from 1.7.9 to 1.7.10
458ff01 
Bumps [bandit](https://github.com/PyCQA/bandit) from 1.7.9 to 1.7.10.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.7.9...1.7.10)

---
updated-dependencies:
- dependency-name: bandit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump black from 24.8.0 to 24.10.0
59798d2 
Bumps [black](https://github.com/psf/black) from 24.8.0 to 24.10.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@24.8.0...24.10.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump codecov/codecov-action from 4 to 5
de441b6 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v4...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump bandit from 1.7.10 to 1.8.0
12e2d60 
Bumps [bandit](https://github.com/PyCQA/bandit) from 1.7.10 to 1.8.0.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.7.10...1.8.0)

---
updated-dependencies:
- dependency-name: bandit
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@mardukbp @codingjoe
Fix #297 -- Add Django admin' inline formset support (#300)
352811b 
As described in #249 and #297 django-select2 does not currently work
with selects added dynamically in the Django admin.

The solution was implemented in #249 and all credit should go to Jurrian
Tromp. I only added a small correction:

```diff
- jqRow.find('.select2-container').remove()
+ jqRow.find('.django-select2').parent().find('.select2-container').remove()
```

to only remove `.select2-container` when it is a sibling of
`.django-select2`. Otherwise the wrong `.select2-container` might get
deleted.

---------

Co-authored-by: Johannes Maron <[email protected]>
@codingjoe
Upgrade to Baseline2024 compliant JS code (#307)
94c70dc 
Run `styleling --fix`.
@dependabot
Bump bandit from 1.8.0 to 1.8.2 (#310)
5cbd569 
Bumps [bandit](https://github.com/PyCQA/bandit) from 1.8.0 to 1.8.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/PyCQA/bandit/releases">bandit's
releases</a>.</em></p>
<blockquote>
<h2>1.8.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Revert &quot;Start testing with 3.14 alphas&quot; by <a
href="https://github.com/ericwb"><code>@​ericwb</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1217">PyCQA/bandit#1217</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/PyCQA/bandit/compare/1.8.1...1.8.2">https://github.com/PyCQA/bandit/compare/1.8.1...1.8.2</a></p>
<h2>1.8.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump docker/build-push-action from 6.9.0 to 6.10.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1209">PyCQA/bandit#1209</a></li>
<li>Update the bug template with latest bandit version by <a
href="https://github.com/ericwb"><code>@​ericwb</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1208">PyCQA/bandit#1208</a></li>
<li>Add Mercedes-Benz to sponsor list by <a
href="https://github.com/ericwb"><code>@​ericwb</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1210">PyCQA/bandit#1210</a></li>
<li>Bump docker/setup-buildx-action from 3.7.1 to 3.8.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1211">PyCQA/bandit#1211</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1213">PyCQA/bandit#1213</a></li>
<li>Start testing with 3.14 alphas by <a
href="https://github.com/ericwb"><code>@​ericwb</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1189">PyCQA/bandit#1189</a></li>
<li>Remove lxml (B320 &amp; B410) from blacklist by <a
href="https://github.com/djbrown"><code>@​djbrown</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1212">PyCQA/bandit#1212</a></li>
<li>Clarify &quot;getting started&quot; docs by <a
href="https://github.com/Flimm"><code>@​Flimm</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/963">PyCQA/bandit#963</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/djbrown"><code>@​djbrown</code></a> made
their first contribution in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1212">PyCQA/bandit#1212</a></li>
<li><a href="https://github.com/Flimm"><code>@​Flimm</code></a> made
their first contribution in <a
href="https://redirect.github.com/PyCQA/bandit/pull/963">PyCQA/bandit#963</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/PyCQA/bandit/compare/1.8.0...1.8.1">https://github.com/PyCQA/bandit/compare/1.8.0...1.8.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/PyCQA/bandit/commit/c2c336d1273b06fb667a31d4ecb83de7ea23a6cb"><code>c2c336d</code></a>
Revert &quot;Start testing with 3.14 alphas&quot; (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1217">#1217</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/e58379c5089305c845bae6e816e5faa5680b8097"><code>e58379c</code></a>
Clarify &quot;getting started&quot; docs (<a
href="https://redirect.github.com/PyCQA/bandit/issues/963">#963</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/e4da0b351f89a82b5de8dd791cbdd963476b5a11"><code>e4da0b3</code></a>
Remove lxml (B320 &amp; B410) from blacklist (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1212">#1212</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/13d3406dbba67e22d80f8f8e5b182c5f6e45face"><code>13d3406</code></a>
Start testing with 3.14 alphas (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1189">#1189</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/1abd1d7d65bebad99c6a1731216d46203359fa1e"><code>1abd1d7</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1213">#1213</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/8e3c928985e9c4000d74622520b92c322e7b9024"><code>8e3c928</code></a>
Bump docker/setup-buildx-action from 3.7.1 to 3.8.0 (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1211">#1211</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/929d5976f3949f7507d035b98c9b2db9911ab790"><code>929d597</code></a>
Add Mercedes-Benz to sponsor list (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1210">#1210</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/ead671777dd6cff5f995e92c13814a9eb62db13e"><code>ead6717</code></a>
Update the bug template with latest bandit version (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1208">#1208</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/65ddf8f572f6d6068781b3cb970df2e412406b19"><code>65ddf8f</code></a>
Bump docker/build-push-action from 6.9.0 to 6.10.0 (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1209">#1209</a>)</li>
<li>See full diff in <a
href="https://github.com/PyCQA/bandit/compare/1.8.0...1.8.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit&package-manager=pip&previous-version=1.8.0&new-version=1.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump isort from 5.13.2 to 6.0.0 (#311)
7fef9f7 
Bumps [isort](https://github.com/pycqa/isort) from 5.13.2 to 6.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pycqa/isort/releases">isort's
releases</a>.</em></p>
<blockquote>
<h2>6.0.0</h2>
<h2>Changes</h2>
<h2>:boom: Breaking Changes</h2>
<ul>
<li>Remove support for Python 3.8 (<a
href="https://redirect.github.com/pycqa/isort/issues/2327">#2327</a>) <a
href="https://github.com/DanielNoord"><code>@​DanielNoord</code></a></li>
</ul>
<h2>:rocket: Features</h2>
<ul>
<li>Python 3.13 support (<a
href="https://redirect.github.com/pycqa/isort/issues/2306">#2306</a>) <a
href="https://github.com/mayty"><code>@​mayty</code></a></li>
<li>Updates round 3 (<a
href="https://redirect.github.com/pycqa/isort/issues/2334">#2334</a>) <a
href="https://github.com/matthewhughes934"><code>@​matthewhughes934</code></a></li>
<li>Speed up exists_case_sensitive calls (<a
href="https://redirect.github.com/pycqa/isort/issues/2264">#2264</a>) <a
href="https://github.com/correctmost"><code>@​correctmost</code></a></li>
<li>nit: Fix deprecation message link (<a
href="https://redirect.github.com/pycqa/isort/issues/2220">#2220</a>) <a
href="https://github.com/syou6162"><code>@​syou6162</code></a></li>
<li>Ensure that split_on_trailing_comma works with <code>as</code>
imports (<a
href="https://redirect.github.com/pycqa/isort/issues/2340">#2340</a>) <a
href="https://github.com/DanielNoord"><code>@​DanielNoord</code></a></li>
<li>Black profile: enable magic comma (<a
href="https://redirect.github.com/pycqa/isort/issues/2236">#2236</a>) <a
href="https://github.com/MrMino"><code>@​MrMino</code></a></li>
<li>Fix google style test (<a
href="https://redirect.github.com/pycqa/isort/issues/2336">#2336</a>) <a
href="https://github.com/DanielNoord"><code>@​DanielNoord</code></a></li>
<li>Update line_length and single_line_exclusions in google profile (<a
href="https://redirect.github.com/pycqa/isort/issues/2149">#2149</a>) <a
href="https://github.com/jagapiou"><code>@​jagapiou</code></a></li>
<li>Updates round 2 (<a
href="https://redirect.github.com/pycqa/isort/issues/2329">#2329</a>) <a
href="https://github.com/matthewhughes934"><code>@​matthewhughes934</code></a></li>
<li>Dependency updates round 1 (<a
href="https://redirect.github.com/pycqa/isort/issues/2325">#2325</a>) <a
href="https://github.com/matthewhughes934"><code>@​matthewhughes934</code></a></li>
<li>Run <code>pre-commit autoupdate</code> (<a
href="https://redirect.github.com/pycqa/isort/issues/2321">#2321</a>) <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a></li>
</ul>
<h2>:beetle: Fixes</h2>
<ul>
<li>Allow <code>--diff</code> to be used with <code>--jobs</code> (<a
href="https://redirect.github.com/pycqa/isort/issues/2302">#2302</a>) <a
href="https://github.com/mnakama"><code>@​mnakama</code></a></li>
<li><code>wemake</code> has 80 chars hard limit, not 79 (<a
href="https://redirect.github.com/pycqa/isort/issues/2241">#2241</a>) <a
href="https://github.com/sobolevn"><code>@​sobolevn</code></a></li>
<li>Fix errors on <code>main</code> (<a
href="https://redirect.github.com/pycqa/isort/issues/2320">#2320</a>) <a
href="https://github.com/DanielNoord"><code>@​DanielNoord</code></a></li>
<li>Fixed syntax error (<a
href="https://redirect.github.com/pycqa/isort/issues/2289">#2289</a>) <a
href="https://github.com/Sergio-prog"><code>@​Sergio-prog</code></a></li>
<li>fix: typo (<a
href="https://redirect.github.com/pycqa/isort/issues/2298">#2298</a>) <a
href="https://github.com/Rotzbua"><code>@​Rotzbua</code></a></li>
<li>Fix <code>sort_reexports</code> code mangling (<a
href="https://redirect.github.com/pycqa/isort/issues/2283">#2283</a>) <a
href="https://github.com/Helveg"><code>@​Helveg</code></a></li>
<li>fix: correct group by package tokenization (<a
href="https://redirect.github.com/pycqa/isort/issues/2136">#2136</a>) <a
href="https://github.com/glasnt"><code>@​glasnt</code></a></li>
<li>Fix isort-action usage documentation (<a
href="https://redirect.github.com/pycqa/isort/issues/2297">#2297</a>) <a
href="https://github.com/jamescurtin"><code>@​jamescurtin</code></a></li>
<li>Fix CDN for Ace (<a
href="https://redirect.github.com/pycqa/isort/issues/2127">#2127</a>) <a
href="https://github.com/abitrolly"><code>@​abitrolly</code></a></li>
<li>Fix help text (<a
href="https://redirect.github.com/pycqa/isort/issues/2229">#2229</a>) <a
href="https://github.com/stweil"><code>@​stweil</code></a></li>
<li>docs: fix spelling mistake (<a
href="https://redirect.github.com/pycqa/isort/issues/2249">#2249</a>) <a
href="https://github.com/cachho"><code>@​cachho</code></a></li>
</ul>
<h2>:construction_worker: Continuous Integration</h2>
<ul>
<li>UV replacement of Poetry (<a
href="https://redirect.github.com/pycqa/isort/issues/2349">#2349</a>) <a
href="https://github.com/staticdev"><code>@​staticdev</code></a></li>
<li>Make actions happy (<a
href="https://redirect.github.com/pycqa/isort/issues/2311">#2311</a>) <a
href="https://github.com/matthewhughes934"><code>@​matthewhughes934</code></a></li>
<li>Fix GitHub Actions badges (<a
href="https://redirect.github.com/pycqa/isort/issues/2326">#2326</a>) <a
href="https://github.com/hugovk"><code>@​hugovk</code></a></li>
<li>Eliminate <code>actions/cache@v2</code> usage (<a
href="https://redirect.github.com/pycqa/isort/issues/2322">#2322</a>) <a
href="https://github.com/kurtmckee"><code>@​kurtmckee</code></a></li>
<li>feat: add dependabot for GH action update (<a
href="https://redirect.github.com/pycqa/isort/issues/2300">#2300</a>) <a
href="https://github.com/Rotzbua"><code>@​Rotzbua</code></a></li>
<li>Update stage names for <code>pre-commit</code> (<a
href="https://redirect.github.com/pycqa/isort/issues/2296">#2296</a>) <a
href="https://github.com/matthewhughes934"><code>@​matthewhughes934</code></a></li>
</ul>
<h2>:package: Dependencies</h2>
<ul>
<li>Bump <code>poetry</code> to <code>2.0.1</code> (<a
href="https://redirect.github.com/pycqa/isort/issues/2341">#2341</a>) <a
href="https://github.com/DanielNoord"><code>@​DanielNoord</code></a></li>
<li>Fix misc unsafe dependencies (<a
href="https://redirect.github.com/pycqa/isort/issues/2345">#2345</a>) <a
href="https://github.com/staticdev"><code>@​staticdev</code></a></li>
<li>Bump the github-actions group across 1 directory with 5 updates (<a
href="https://redirect.github.com/pycqa/isort/issues/2324">#2324</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
<li>Bump gitpython from 3.1.40 to 3.1.41 (<a
href="https://redirect.github.com/pycqa/isort/issues/2223">#2223</a>)
@<a href="https://github.com/apps/dependabot">dependabot[bot]</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/PyCQA/isort/blob/main/CHANGELOG.md">isort's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>NOTE: isort follows the <a href="https://semver.org/">semver</a>
versioning standard.
Find out more about isort's release policy <a
href="https://pycqa.github.io/isort/docs/major_releases/release_policy">here</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/PyCQA/isort/commit/0a0b7a830386ba6a31c2ec8316849ae4d1b8240d"><code>0a0b7a8</code></a>
6.0.0</li>
<li><a
href="https://github.com/PyCQA/isort/commit/2d00730d48c2963a02c436f3353552ce24689a79"><code>2d00730</code></a>
Merge pull request <a
href="https://redirect.github.com/pycqa/isort/issues/2349">#2349</a>
from PyCQA/revert-2347-revert-2346-ci/uv-replacement...</li>
<li><a
href="https://github.com/PyCQA/isort/commit/16bb0e2d9b7c42edccf4e1ab292d27e9da908e5c"><code>16bb0e2</code></a>
Return user_options</li>
<li><a
href="https://github.com/PyCQA/isort/commit/73abbc8ec7cffc68d9e9c6c47935b46aed5b3665"><code>73abbc8</code></a>
Fix dev and optional dependencies</li>
<li><a
href="https://github.com/PyCQA/isort/commit/8b3828d756d2a359d1b44021c132821ce5955bdf"><code>8b3828d</code></a>
Pin UV version</li>
<li><a
href="https://github.com/PyCQA/isort/commit/02258755eb35111700745a47cce907865c67021a"><code>0225875</code></a>
Remove pip and virtualenv usage</li>
<li><a
href="https://github.com/PyCQA/isort/commit/3d49bc0c44392100bf04b46014fdfc1e9c276f36"><code>3d49bc0</code></a>
Revert &quot;Revert &quot;UV replacement of Poetry&quot;&quot;</li>
<li><a
href="https://github.com/PyCQA/isort/commit/b3760ab1b8844fd4a2c59adee3e0bf3f420fd418"><code>b3760ab</code></a>
Merge pull request <a
href="https://redirect.github.com/pycqa/isort/issues/2347">#2347</a>
from PyCQA/revert-2346-ci/uv-replacement-for-poetry</li>
<li><a
href="https://github.com/PyCQA/isort/commit/cc12cce681098bba70bd78efe76140bdc39792d6"><code>cc12cce</code></a>
Revert &quot;UV replacement of Poetry&quot;</li>
<li><a
href="https://github.com/PyCQA/isort/commit/f7ab073fda5ddab3651fc4438c4e7e16853b3bca"><code>f7ab073</code></a>
Merge pull request <a
href="https://redirect.github.com/pycqa/isort/issues/2346">#2346</a>
from PyCQA/ci/uv-replacement-for-poetry</li>
<li>Additional commits viewable in <a
href="https://github.com/pycqa/isort/compare/5.13.2...6.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=isort&package-manager=pip&previous-version=5.13.2&new-version=6.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @codingjoe
Bump black from 24.10.0 to 25.1.0
d8f5b33 
Bumps [black](https://github.com/psf/black) from 24.10.0 to 25.1.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@24.10.0...25.1.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@mikemanger @codingjoe
Drop official support for EOL Python and Django versions (#313)
9e3d9b6 
* Drop Django < 4.2 LTS support
* Drop Django 5.0 support
* Drop Python < 3.10 support
* Update CI node version to lts/*

---------

Co-authored-by: Johannes Maron <[email protected]>
@dependabot
Bump flake8 from 7.1.1 to 7.1.2 (#314)
1353d8e 
Bumps [flake8](https://github.com/pycqa/flake8) from 7.1.1 to 7.1.2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/PyCQA/flake8/commit/fffee8ba9dc5903484f99390e6c7f4bbef59bda7"><code>fffee8b</code></a>
Release 7.1.2</li>
<li><a
href="https://github.com/PyCQA/flake8/commit/19001f77f3a8edccfd2d4c71e3c0fd7ed7fcb329"><code>19001f7</code></a>
Merge pull request <a
href="https://redirect.github.com/pycqa/flake8/issues/1966">#1966</a>
from PyCQA/limit-procs-to-file-count</li>
<li><a
href="https://github.com/PyCQA/flake8/commit/f35737a32d8283fd0d3456bd9919718ff2d1b077"><code>f35737a</code></a>
avoid starting unnecessary processes when file count is limited</li>
<li>See full diff in <a
href="https://github.com/pycqa/flake8/compare/7.1.1...7.1.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=flake8&package-manager=pip&previous-version=7.1.1&new-version=7.1.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump bandit from 1.8.2 to 1.8.3 (#315)
10061a3 
Bumps [bandit](https://github.com/PyCQA/bandit) from 1.8.2 to 1.8.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/PyCQA/bandit/releases">bandit's
releases</a>.</em></p>
<blockquote>
<h2>1.8.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump docker/build-push-action from 6.10.0 to 6.11.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1220">PyCQA/bandit#1220</a></li>
<li>Bump docker/build-push-action from 6.11.0 to 6.12.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1221">PyCQA/bandit#1221</a></li>
<li>Bump docker/build-push-action from 6.12.0 to 6.13.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1222">PyCQA/bandit#1222</a></li>
<li>[pre-commit.ci] pre-commit autoupdate by <a
href="https://github.com/pre-commit-ci"><code>@​pre-commit-ci</code></a>
in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1229">PyCQA/bandit#1229</a></li>
<li>Update bug template to include latest released versions by <a
href="https://github.com/ericwb"><code>@​ericwb</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1218">PyCQA/bandit#1218</a></li>
<li>Add markupsafe.Markup XSS plugin by <a
href="https://github.com/Daverball"><code>@​Daverball</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1225">PyCQA/bandit#1225</a></li>
<li>Warn not error on an nonexistant test given by <a
href="https://github.com/ericwb"><code>@​ericwb</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1230">PyCQA/bandit#1230</a></li>
<li>Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1233">PyCQA/bandit#1233</a></li>
<li>Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1234">PyCQA/bandit#1234</a></li>
<li>B107: Skip None values in hardcoded password detection by <a
href="https://github.com/lukehinds"><code>@​lukehinds</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1232">PyCQA/bandit#1232</a></li>
<li>Pytorch fix by <a
href="https://github.com/lukehinds"><code>@​lukehinds</code></a> in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1231">PyCQA/bandit#1231</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Daverball"><code>@​Daverball</code></a>
made their first contribution in <a
href="https://redirect.github.com/PyCQA/bandit/pull/1225">PyCQA/bandit#1225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/PyCQA/bandit/compare/1.8.2...1.8.3">https://github.com/PyCQA/bandit/compare/1.8.2...1.8.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/PyCQA/bandit/commit/8ff25e07e487f143571cc305e56dd0253c60bc7b"><code>8ff25e0</code></a>
Pytorch fix (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1231">#1231</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/def123ac6dc581a4240a0656319251a46ab80d45"><code>def123a</code></a>
B107: Skip None values in hardcoded password detection (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1232">#1232</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/00b1e9545a5574a440b82a75c48ebeb4c2915e40"><code>00b1e95</code></a>
Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1234">#1234</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/a324f420e60b72cae9994fdd3725f285be1007b2"><code>a324f42</code></a>
Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1233">#1233</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/affd4fd1f506819de211797f3ea4e11114c31bf1"><code>affd4fd</code></a>
Warn not error on an nonexistant test given (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1230">#1230</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/5e3e694325563a0a07053efd162a661f418948bb"><code>5e3e694</code></a>
Add markupsafe.Markup XSS plugin (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1225">#1225</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/6133e08d26f3c24e279872d0a85d221f078518a9"><code>6133e08</code></a>
Update bug template to include latest released versions (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1218">#1218</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/7619cc4d787923ed836014e28f8970f2955ff7c0"><code>7619cc4</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1229">#1229</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/33487819d4e11ef4d949882dce4a6508f2d46715"><code>3348781</code></a>
Bump docker/build-push-action from 6.12.0 to 6.13.0 (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1222">#1222</a>)</li>
<li><a
href="https://github.com/PyCQA/bandit/commit/ef0090fd2a56dd420d7578a631e5e24bca952a49"><code>ef0090f</code></a>
Bump docker/build-push-action from 6.11.0 to 6.12.0 (<a
href="https://redirect.github.com/PyCQA/bandit/issues/1221">#1221</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/PyCQA/bandit/compare/1.8.2...1.8.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit&package-manager=pip&previous-version=1.8.2&new-version=1.8.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @codingjoe
Bump isort from 6.0.0 to 6.0.1
6e6fdd9 
Bumps [isort](https://github.com/PyCQA/isort) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@6.0.0...6.0.1)

---
updated-dependencies:
- dependency-name: isort
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@mardukbp
Fix #136 -- Support dependent fields in formsets (#316)
f781527 
* Find the closest common ancestor of two chained selects instead of
assuming it is a form.
* Try to find the dependent field by its name attribute using a two-fold
search strategy: exact match otherwise ends with

Special thanks to @rez0n
@dependabot
Bump flake8 from 7.1.2 to 7.2.0 (#322)
e92e090 
Bumps [flake8](https://github.com/pycqa/flake8) from 7.1.2 to 7.2.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/PyCQA/flake8/commit/16f5f28a384f0781bebb37a08aa45e65b9526c50"><code>16f5f28</code></a>
Release 7.2.0</li>
<li><a
href="https://github.com/PyCQA/flake8/commit/ebad305769bbf62d92901a1b9c9121c1b4fec00b"><code>ebad305</code></a>
Merge pull request <a
href="https://redirect.github.com/pycqa/flake8/issues/1974">#1974</a>
from PyCQA/update-plugins</li>
<li><a
href="https://github.com/PyCQA/flake8/commit/d56d569ce40a623a17c212ea7f2b306714f27f31"><code>d56d569</code></a>
update versions of pycodestyle / pyflakes</li>
<li><a
href="https://github.com/PyCQA/flake8/commit/a7e8f6250c23e71546ca4cc35322bc06fe90f9f4"><code>a7e8f62</code></a>
Merge pull request <a
href="https://redirect.github.com/pycqa/flake8/issues/1973">#1973</a>
from PyCQA/py39-plus</li>
<li><a
href="https://github.com/PyCQA/flake8/commit/9d55ccdb729d1255b9cf09438b6073b05b9ce52c"><code>9d55ccd</code></a>
py39+</li>
<li><a
href="https://github.com/PyCQA/flake8/commit/e492aeb385f87c0520c65d32747763209ed1da21"><code>e492aeb</code></a>
Merge pull request <a
href="https://redirect.github.com/pycqa/flake8/issues/1967">#1967</a>
from PyCQA/unnecessary-mocks</li>
<li><a
href="https://github.com/PyCQA/flake8/commit/fa2ed7145cdf80fd983c2a436226a074f9a9d664"><code>fa2ed71</code></a>
remove a few unnecessary mocks in test_checker_manager</li>
<li>See full diff in <a
href="https://github.com/pycqa/flake8/compare/7.1.2...7.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=flake8&package-manager=pip&previous-version=7.1.2&new-version=7.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@codingjoe
Merge commit from fork
e5f41e6
@dependabot @codingjoe
Bump bandit from 1.8.3 to 1.8.5
ae98b9a 
Bumps [bandit](https://github.com/PyCQA/bandit) from 1.8.3 to 1.8.5.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.8.3...1.8.5)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump flake8 from 7.2.0 to 7.3.0
6c98630 
Bumps [flake8](https://github.com/pycqa/flake8) from 7.2.0 to 7.3.0.
- [Commits](PyCQA/flake8@7.2.0...7.3.0)

---
updated-dependencies:
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump bandit from 1.8.5 to 1.8.6
e5aa01f 
Bumps [bandit](https://github.com/PyCQA/bandit) from 1.8.5 to 1.8.6.
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.8.5...1.8.6)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump actions/checkout from 4 to 5
009e99f 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump actions/setup-python from 5 to 6
ae15705 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump actions/setup-node from 4 to 5
77f06fa 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump black from 25.1.0 to 25.9.0
9ae62fd 
Bumps [black](https://github.com/psf/black) from 25.1.0 to 25.9.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@25.1.0...25.9.0)

---
updated-dependencies:
- dependency-name: black
  dependency-version: 25.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump isort from 6.0.1 to 6.1.0
e906c98 
Bumps [isort](https://github.com/PyCQA/isort) from 6.0.1 to 6.1.0.
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@6.0.1...6.1.0)

---
updated-dependencies:
- dependency-name: isort
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump isort from 6.1.0 to 7.0.0
9b98cba 
Bumps [isort](https://github.com/PyCQA/isort) from 6.1.0 to 7.0.0.
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@6.1.0...7.0.0)

---
updated-dependencies:
- dependency-name: isort
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @codingjoe
Bump actions/setup-node from 5 to 6
834d4d9 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@codingjoe
Use OpenID Connect to publish releases on PyPi & NPMJS
c835da4
@codingjoe codingjoe self-assigned this Oct 15, 2025
@codingjoe codingjoe closed this Oct 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@codingjoe codingjoe

Labels

None yet

Projects

None yet

Milestone

No milestone