Skip to content

chore(deps): update whitenoise[brotli] requirement from >=6.8.2 to >=6.12.0#586

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/whitenoise-brotli--gte-6.12.0
Open

chore(deps): update whitenoise[brotli] requirement from >=6.8.2 to >=6.12.0#586
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/whitenoise-brotli--gte-6.12.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 12, 2026

Updates the requirements on whitenoise[brotli] to permit the latest version.

Changelog

Sourced from whitenoise[brotli]'s changelog.

6.12.0 (2026-02-27)

  • Drop Python 3.9 support.
  • Fix potential unauthorised file access vulnerability in "autorefesh" mode. See PR [#684](https://github.com/evansd/whitenoise/issues/684) <https://github.com/evansd/whitenoise/pull/684>__ for details, and a reminder that autorefresh mode has always been documented as unsuitable for production use. Thanks Seth Larson for reporting.

6.11.0 (2025-09-18)

  • Support Django 6.0.

6.10.0 (2025-09-09)

  • Support Python 3.14.

6.9.0 (2025-02-06)

  • Support Django 5.2.

6.8.2 (2024-10-29)

  • Fix compression speed gains for the thread pool when running Django’s collectstatic. The thread pool had no effect due to use of a generator for the results, a refactoring introduced when reviewing the initial PR.

    Thanks to Petr Přikryl for the investigation and fix in PR [#616](https://github.com/evansd/whitenoise/issues/616) <https://github.com/evansd/whitenoise/pull/616>__.

6.8.1 (2024-10-28)

  • Raise any errors from threads in the whitenoise.compress command.

    Regression in 6.8.0. Thanks to Tom Grainger for the spotting this with a comment on PR [#484](https://github.com/evansd/whitenoise/issues/484) <https://github.com/evansd/whitenoise/pull/484#discussion_r1818989096>__.

6.8.0 (2024-10-28)

  • Drop Django 3.2 to 4.1 support.

  • Drop Python 3.8 support.

  • Support Python 3.13.

  • Fix a bug introduced in version 6.0.0 where Range requests could lead to database connection errors in other requests.

    Thanks to Per Myren for the detailed investigation and fix in PR [#612](https://github.com/evansd/whitenoise/issues/612) <https://github.com/evansd/whitenoise/pull/612>__.

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 12, 2026
@dependabot dependabot Bot force-pushed the dependabot/uv/whitenoise-brotli--gte-6.12.0 branch 2 times, most recently from 2bb1ebd to 656296e Compare April 16, 2026 19:58
Updates the requirements on [whitenoise[brotli]](https://github.com/evansd/whitenoise) to permit the latest version.
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.8.2...6.12.0)

---
updated-dependencies:
- dependency-name: whitenoise[brotli]
  dependency-version: 6.12.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/uv/whitenoise-brotli--gte-6.12.0 branch from 656296e to acf4a43 Compare April 19, 2026 10:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants