Skip to content

Bump the minor group across 1 directory with 2 updates - #279

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/minor-6186fbdcbf
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/minor-6186fbdcbf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the minor group with 2 updates in the / directory: django-ninja and newrelic.

Updates django-ninja from 1.7.1 to 1.7.3

Release notes

Sourced from django-ninja's releases.

v1.7.3

What's Changed

  • Filter the response by the declared schema when a view returns a subclass instance in vitalik/django-ninja#1823
    • If a view declared response=UserOut and returned an instance of a subclass of UserOut, fields defined only on the subclass were included in the response (since 1.6.0). Now only the declared schema's fields are returned, as in 1.5.x.
    • Annotated[...] response types (e.g. with PlainSerializer) are now applied when a model instance is returned.

If your views return instances of subclasses of their response schema, we recommend upgrading.

Hotfix release cut from v1.7.2. It contains only the changes above.

Full Changelog: vitalik/django-ninja@v1.7.2...v1.7.3

1.7.2

What's Changed

  • Fix auth/throttle overrides for nested routers in vitalik/django-ninja#1820
    • api.add_router(..., auth=..., throttle=...) now also applies to routers nested inside the mounted router
    • Router.add_router(..., auth=..., throttle=...) keeps the override per mount, so a child router reused under several parents gets the right settings under each one

If you use nested routers with auth or throttle set on add_router(), we recommend upgrading.

Security reviewer reference: ANT-2026-H81LRF3W

Hotfix release cut from v1.7.1. It contains only the changes above (plus a test-only fix for pydantic 2.14, #1797).

Full Changelog: vitalik/django-ninja@v1.7.1...v1.7.2

Commits
  • c1235ec Bump version to 1.7.3
  • e51fcb9 Comment on using the declared schema serializer
  • 5358af3 Serialize returned schema instances with the declared response schema
  • bd13055 Bump version to 1.7.2
  • 282456f Keep Router.add_router(auth=/throttle=) overrides per mount
  • 23730e7 tests: decimal JSON schema has no pattern since pydantic 2.14 (#1797)
  • 05e0132 Fix add_router(auth=/throttle=) override not applied to nested routers
  • See full diff in compare view

Updates newrelic from 14.0.0 to 14.2.0

Release notes

Sourced from newrelic's releases.

v14.2.0

Notes

This release of the Python agent adds instrumentation for Microsoft Agent Framework and CrewAI, improves LaunchDarkly feature flag instrumentation and span forwarding support, and fixes several crashes.

Install the agent using easy_install/pip/distribute via the Python Package Index, using conda via the Conda-Forge Package Index, or download it directly from the New Relic download site.

New features

  • New instrumentation for Microsoft Agent Framework

    • Instrumentation was added for tools and agents in the agent-framework package.
    • Multi-agent configurations are not yet instrumented.
  • New instrumentation for CrewAI

    • Instrumentation was added for agents, crews, and tools in the crewai package.

Enhanced features

  • Improved LaunchDarkly feature flag integration.

    We're still working on this feature, but we'd love for you to try it out! This feature is currently provided as part of a preview program pursuant to our pre-release policies.

    • To opt-in to our public preview integration with LaunchDarkly, enable the settings launch_darkly_integration.enabled and opentelemetry.enabled in your config file.

    • Improved feature flag instrumentation in ldclient.

      • Added the new feature_flag.url.full attribute to enable deep UI linking.
      • Changed the case of the inExperiment key to match LaunchDarkly.
      • Added support for falsy values in feature flag attributes.
      • Reduced all LaunchDarkly integration warnings to display only once.
    • Improved span forwarding for ldobserve.

      • Added the nr.entity.guid and nr.entity.url span attributes to enable deep UI linking.
      • Corrected span parenting to allow proper nesting in the UI.

Bug fixes

  • Fixed a crash in TimeTrace when attributes was None in _add_span_event_event.
  • Fixed a crash in the LaunchDarkly Config wrapper when falling back to default values.

v14.1.0

https://docs.newrelic.com/docs/release-notes/agent-release-notes/python-release-notes/python-agent-14-01-00/

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 4, 2026
Bumps the minor group with 2 updates in the / directory: [django-ninja](https://github.com/vitalik/django-ninja) and [newrelic](https://github.com/newrelic/newrelic-python-agent).


Updates `django-ninja` from 1.7.1 to 1.7.3
- [Release notes](https://github.com/vitalik/django-ninja/releases)
- [Commits](vitalik/django-ninja@v1.7.1...v1.7.3)

Updates `newrelic` from 14.0.0 to 14.2.0
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](newrelic/newrelic-python-agent@v14.0.0...v14.2.0)

---
updated-dependencies:
- dependency-name: django-ninja
  dependency-version: 1.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: newrelic
  dependency-version: 14.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/minor-6186fbdcbf branch from cdfb6af to 422c812 Compare November 5, 2026 06:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants