chore(deps): bump the python-minor-patch group with 6 updates

[dependabot]

Bumps the python-minor-patch group with 6 updates:

Package	From	To
django	6.0.7	6.1
djangorestframework	3.17.1	3.17.2
djoser	2.3.3	2.3.4
ipython	9.15.0	9.16.1
pytest-django	4.12.0	4.13.0
ruff	0.16.0	0.16.1

Updates django from 6.0.7 to 6.1

Commits

• fe0a859 [6.1.x] Bumped version for 6.1 release.
• 6277045 [6.1.x] Updated man page for Django 6.1.
• fc78c5c [6.1.x] Finalized release notes for Django 6.1.
• c58d861 [6.1.x] Updated translations from Transifex.
• dc1b8de [6.1.x] Added missing lang override in translation fetching helper for Serbia...
• 1f5bf63 [6.1.x] Refs #36735 -- Added DatabaseFeatures.supports_uuid4_function_in_defa...
• 8099984 [6.1.x] Added CVE-2026-15307, CVE-2026-15337, CVE-2026-15830, and CVE-2026-15...
• 5a260d3 [6.1.x] Fixed CVE-2026-15920 -- Made display_for_field() validate URLs before...
• 9e4a3f1 [6.1.x] Fixed CVE-2026-15830 -- Mitigated potential DoS via nested geometry c...
• 5b3523d [6.1.x] Fixed CVE-2026-15337 -- Mitigated potential DoS in check_for_language().
• Additional commits viewable in compare view

Updates djangorestframework from 3.17.1 to 3.17.2

Release notes

Sourced from djangorestframework's releases.

3.17.2

What's Changed

Bug fixes

• Fix disclosure of GET-protected data in case of validation error with AdminRenderer by @​browniebroke in encode/django-rest-framework#10012. Thanks, @​zainnadeem786 for the report.
• Enforce DATA_UPLOAD_MAX_MEMORY_SIZE for request.data parsing by @​zainnadeem786 in encode/django-rest-framework#10013. Thanks, @​zainnadeem786 for the report.

Full Changelog: encode/django-rest-framework@3.17.1...3.17.2

Commits

• ad309f3 Release 3.17.2 (#10014)
• 2912dc9 Enforce DATA_UPLOAD_MAX_MEMORY_SIZE for request.data parsing (#10013)
• 71f8194 Fix disclosure of GET-protected data in case of validation error with `AdminR...
• See full diff in compare view

Updates djoser from 2.3.3 to 2.3.4

Release notes

Sourced from djoser's releases.

2.3.4

• return 404 Not Found instead of an unhandled server error when requesting social authentication for a provider that is not configured sunscrapers/djoser#893
• return 400 Bad Request instead of a server error when the social auth provider is unreachable while completing authentication sunscrapers/djoser#893

2.3.4a1

Pre-release of 2.3.4.

• return 404 Not Found instead of an unhandled server error when requesting social authentication for a provider that is not configured sunscrapers/djoser#893
• return 400 Bad Request instead of a server error when the social auth provider is unreachable while completing authentication sunscrapers/djoser#893

Changelog

Sourced from djoser's changelog.

2.3.4_ (2026-08-01)

• return 404 Not Found instead of an unhandled server error when requesting social authentication for a provider that is not configured sunscrapers/djoser#893
• return 400 Bad Request instead of a server error when the social auth provider is unreachable while completing authentication sunscrapers/djoser#893

---

Commits

• 5a5dc71 Bump version to 2.3.4 (#918)
• 43ec8a5 Release 2.3.4a1: publish from CI with an API token (#917)
• f78c5a7 migrate poetry to uv (#888)
• e901621 fix: use supported Read the Docs build image
• ff73a66 test: make user detail/delete tests independent of view class layout
• 536e20b test: address PR 893 review comments
• b3e5f0e test: backport 2.x-compatible tests from release/3.0.0
• ddbb9cf fix TestSignupView, handle conn error in social
• d48478f add tests, minor cleanup
• 1c503fc revert some TestModelBackendLoginFields changes
• Additional commits viewable in compare view

Updates ipython from 9.15.0 to 9.16.1

Commits

• 3b83e1b release 9.16.1
• cc8334e Convert IFrame sources to strings before HTML escaping (#15348)
• 82a902e back to dev
• 2ae7863 release 9.16.0
• 6334b8f Update whats new for version 9.16 (#15342)
• dbbfa7b escape urls and file names interpolated into display html attributes (#15334)
• 59986e7 fix: correct typos
• 0e9d34d Fix missing space
• 1a753ba Resolve attribute annotations under the policy in eval_node (#15337)
• 876b5aa resolve attribute annotations under the policy in eval_node
• Additional commits viewable in compare view

Updates pytest-django from 4.12.0 to 4.13.0

Release notes

Sourced from pytest-django's releases.

v4.13.0

https://pytest-django.readthedocs.io/en/latest/changelog.html#v4-13-0-2026-08-06

Changelog

Sourced from pytest-django's changelog.

v4.13.0 (2026-08-06)

Compatibility ^^^^^^^^^^^^^

• Dropped support for Django 4.2 and 5.1.

Improvements ^^^^^^^^^^^^

• Export pytest_django.Settings from the top-level pytest_django module so the :fixture:settings fixture can be type-annotated ([#1257](https://github.com/pytest-dev/pytest-django/issues/1257) <https://github.com/pytest-dev/pytest-django/issues/1257>__).

Bugfixes ^^^^^^^^

• Fixed type hints of assert methods to match actual signature (PR [#1271](https://github.com/pytest-dev/pytest-django/issues/1271) <https://github.com/pytest-dev/pytest-django/pull/1271>__)
• Handled Django 6.2's ImproperlyConfigured (in addition to ImportError) when the configured DJANGO_SETTINGS_MODULE cannot be imported, so pytest-django still shows its guidance message.
• Fixed django_db(transaction=True) tests being set up twice, which repeated the serialized_rollback restore and the fixtures load, and sent setting_changed and post_migrate twice when available_apps is set.
• Fixed --help/--version failing with AppRegistryNotReady (surfaced as a could not load initial conftests warning) when a conftest.py imports Django models at the top level. Django is now set up even when --help/--version are passed, before the initial conftests are loaded for these options ([#1152](https://github.com/pytest-dev/pytest-django/issues/1152) <https://github.com/pytest-dev/pytest-django/issues/1152>__).

Commits

• dc8d17d Release 4.13.0
• 6cfcfbd fixtures: explain a bit more in Settings docstring
• 3478bd7 Minor typing improvements
• faa443b Fix --help/--version when a conftest imports Django models
• fb4417f plugin: add missing type annotation for non_debugging_runtest
• f151858 Remove useless test test_change_settings to simplify (#1302)
• 1a5fdab Removes django-upgrade dependency (#1301)
• 17f1dec asserts: move type annotations to an asserts.pyi stubs file
• 0ca15e7 editorconfig-checker: add .venv to Exclude
• 68334fd Add django-upgrade dependency (#1298)
• Additional commits viewable in compare view

Updates ruff from 0.16.0 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

• Add an option to opt out of human-readable names (#27160)
• [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
• [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
• [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

• Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
• [flake8-bugbear] Mark range as immutable (B008) (#27247)
• [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
• [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
• [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
• [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

• [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
• [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

• Fix indexing of excluded nested Ruff workspaces (#27303)
• Lint TOML files in the LSP (#26862)

Documentation

• Cover pycon Markdown formatting (#27153)
• [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
• [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
• [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

• Reduce syntax error noise by swallowing dedents like indents (#27170)
• Vendor latest annotate-snippets (#27033)

Contributors

• @​bxff
• @​anishgirianish
• @​Avasam
• @​epage
• @​LHMQ878

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

• Add an option to opt out of human-readable names (#27160)
• [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
• [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
• [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

• Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
• [flake8-bugbear] Mark range as immutable (B008) (#27247)
• [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
• [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
• [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
• [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

• [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
• [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

• Fix indexing of excluded nested Ruff workspaces (#27303)
• Lint TOML files in the LSP (#26862)

Documentation

• Cover pycon Markdown formatting (#27153)
• [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
• [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
• [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

• Reduce syntax error noise by swallowing dedents like indents (#27170)
• Vendor latest annotate-snippets (#27033)

Contributors

• @​bxff
• @​anishgirianish
• @​Avasam
• @​epage
• @​LHMQ878
• @​MichaReiser

... (truncated)

Commits

• 80790b3 Bump 0.16.1 (#27330)
• 63830f3 [ty] Borrow from constraint set storage less often (#27328)
• f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
• 0d80497 Lint TOML files in the LSP (#26862)
• d91586b Update prek dependencies (#27293)
• 7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
• b20daf7 [ty] refactor: add helper function to send partial results (#27249)
• 4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
• 7c3e2db [ty] Fix enum class container assignability (#27318)
• d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions