[dependabot]

Bumps djangorestframework from 3.15.2 to 3.18.2.

Release notes

Sourced from djangorestframework's releases.

3.18.2

What's Changed

Security

• GHSA-33wh-fxxf-88vv: Harden content negotiation against large Accept headers by @​jisung-02 in 148ab65. Thanks @​jisung-02 for the report.
• GHSA-3547-9m27-7rxg: Refuse non-text encoding charsets by @​syrull in 3c26345. Thanks @​syrull and @​jisung-02 who both reported the problem.
• GHSA-xw6w-gcfp-cf8m: Make TokenProxy deletion actually delete the token by @​syrull in af3fabf. Thanks @​syrull for the report.

Features

• Add support for Python 3.15 by @​p-r-a-v-i-n in encode/django-rest-framework#10025

Bug fixes

• Fix blank=True fields in unique constraints being treated as required by @​MehrazRumman in encode/django-rest-framework#10039
• Fix UniqueConstraint validation with conditional fields by @​majidkhazaei in encode/django-rest-framework#10021

New Contributors

• @​olitreadwell made their first contribution in encode/django-rest-framework#10038
• @​majidkhazaei made their first contribution in encode/django-rest-framework#10021
• @​rblotsky made their first contribution in encode/django-rest-framework#10045
• @​mrchatam made their first contribution in encode/django-rest-framework#10042
• @​haimingZZ made their first contribution in encode/django-rest-framework#10052
• @​jisung-02 made their first contribution in 148ab65
• @​syrull made their first contribution in 3c26345

Full Changelog: encode/django-rest-framework@3.18.1...3.18.2

3.18.1

What's Changed

Bug fixes

• Fix duplicate validation errors for GenericIPAddressField with protocol by @​browniebroke in encode/django-rest-framework#10011
• Fix int64 format detection for negative IntegerField minimums in OpenAPI schema definition by @​zainnadeem786 in encode/django-rest-framework#9989
• Fix list serializer on unique constraint validator by @​MehrazRumman in encode/django-rest-framework#10033
• Reject non-finite values (nan, inf) in FloatField by @​winklemad in encode/django-rest-framework#9998

Other changes

• Add a compatibility setting for ListSerializer error formats by @​Kub-AT in encode/django-rest-framework#10027
• Expand deprecation classes and review deprecation policy by @​browniebroke in encode/django-rest-framework#10034

New Contributors

• @​abidaliamanat9 made their first contribution in encode/django-rest-framework#10028
• @​epuronta made their first contribution in encode/django-rest-framework#10030
• @​Kub-AT made their first contribution in encode/django-rest-framework#10027
• @​winklemad made their first contribution in encode/django-rest-framework#9998

... (truncated)

Commits

• 69694a1 Prepare release 3.18.2 (#10065)
• af3fabf Merge commit from fork
• 3c26345 Merge commit from fork
• 148ab65 Merge commit from fork
• 3d18900 Fix CI that broke due to latest Django bugfix (#10064)
• d6c4564 Improve teardown of test modifying INSTALLED_APPS (#10056)
• 41764f1 Bump codecov/codecov-action in the github-actions group (#10058)
• b578eab Add support for Python 3.15 (#10025)
• 0038f75 Add missing article in "writable relationship field" in documentation (#10052)
• 107d033 Add rest-filters package to filtering docs (#10049)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 96fdb534-3f0f-47d1-85c8-3a3446add835

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.