Skip to content

build(deps): bump djangorestframework from 3.17.2 to 3.18.2 - #128652

Open
dependabot[bot] wants to merge 5 commits into
masterfrom
dependabot/uv/djangorestframework-3.18.2
Open

dependabot[bot] wants to merge 5 commits into
masterfrom
dependabot/uv/djangorestframework-3.18.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

To merge after https://github.com/getsentry/getsentry/pull/22724

Bumps djangorestframework from 3.17.2 to 3.18.2.

Release notes

Sourced from djangorestframework's releases.

3.18.2

What's Changed

Security

Features

Bug fixes

New Contributors

Full Changelog: encode/django-rest-framework@3.18.1...3.18.2

3.18.1

What's Changed

Bug fixes

Other changes

New Contributors

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [djangorestframework](https://github.com/encode/django-rest-framework) from 3.17.2 to 3.18.2.
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.17.2...3.18.2)

---
updated-dependencies:
- dependency-name: djangorestframework
  dependency-version: 3.18.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 23, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 23, 2026 14:42
@dependabot dependabot Bot added the python:uv Pull requests that update python:uv code label Oct 23, 2026
@github-actions github-actions Bot added the Scope: Backend Automatically applied to PRs that change backend components label Oct 23, 2026
@oioki oioki added the Trigger: getsentry tests Once code is reviewed: apply label to PR to trigger getsentry tests label Oct 23, 2026
@sentry

sentry Bot commented Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Sentry Snapshot Testing

Name Added Removed Changed Renamed Unchanged Skipped Status
sentry-frontend
sentry-frontend
0 0 0 0 760 0 ✅ Unchanged

⚙️ sentry-frontend Snapshot Settings

@cursor cursor Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit de6134b. Configure here.

Comment thread pyproject.toml
Comment thread pyproject.toml
oioki added 2 commits October 23, 2026 17:28
DRF 3.18 returns many=True validation errors as a dict keyed by index.
CamelSnakeSerializer, the dashboard error formatter and several callers
expect lists, and the change would alter API error responses. Opt back
into the list format and ignore its deprecation warning in tests.

DRF now reads the Authorization header via the cached request.headers,
so the HMAC test builds a fresh request instead of mutating META.
@oioki
oioki requested a review from a team as a code owner October 23, 2026 15:36
@github-actions github-actions Bot removed the Trigger: getsentry tests Once code is reviewed: apply label to PR to trigger getsentry tests label Oct 23, 2026
@oioki oioki added the Trigger: getsentry tests Once code is reviewed: apply label to PR to trigger getsentry tests label Oct 23, 2026
rest_framework.deprecation does not exist before DRF 3.18, so name the
PendingDeprecationWarning base class to keep the filter version-agnostic,
same as getsentry.
@github-actions github-actions Bot removed the Trigger: getsentry tests Once code is reviewed: apply label to PR to trigger getsentry tests label Oct 23, 2026
@oioki oioki added the Trigger: getsentry tests Once code is reviewed: apply label to PR to trigger getsentry tests label Oct 24, 2026

This branch was successfully deployed

1 active deployment
Preview — 56ac95a7 Deployed Oct 24, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code Scope: Backend Automatically applied to PRs that change backend components Trigger: getsentry tests Once code is reviewed: apply label to PR to trigger getsentry tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants