Bump the production-version-updates group across 1 directory with 4 updates

[dependabot]

Bumps the production-version-updates group with 4 updates in the / directory: django, djangorestframework, psycopg2 and asgiref.

Updates django from 5.2.4 to 5.2.7

Commits

• 3cff320 [5.2.x] Bumped version for 5.2.7 release.
• ed8fc39 [5.2.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal v...
• 52fbae0 [5.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggre...
• 1794cbf [5.2.x] Made cosmetic edits to 5.2.7 release notes.
• 81625a1 [5.2.x] Fixed #36587 -- Clarified usage of list.insert() for upload handlers.
• 6f3813e [5.2.x] Fixed #35877, Refs #36128 -- Documented unique constraint when migrat...
• 10a2d3b [5.2.x] Added stub release notes and release date for 5.2.7, 5.1.13, and 4.2.25.
• b2773a3 [5.2.x] Refs #25508 -- Used QuerySet.repr in docs/ref/contrib/postgres/se...
• 7554c54 [5.2.x] Fixed #36581 -- Updated serialization examples from XML to JSON.
• 2a2936c [5.2.x] Updated translations from Transifex.
• Additional commits viewable in compare view

Updates djangorestframework from 3.16.0 to 3.16.1

Release notes

Sourced from djangorestframework's releases.

v3.16.1

This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.

Minor changes

• Cleanup optional backports.zoneinfo dependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.

Bug fixes

• Fix regression in unique_together validation with SerializerMethodField in #9712
• Fix UniqueTogetherValidator to handle fields with source attribute in #9688
• Drop HTML line breaks on long headers in browsable API in #9438

Translations

• Add Kazakh locale support in #9713
• Update translations for Korean translations in #9571
• Update German translations in #9676
• Update Chinese translations in #9675
• Update Arabic translations-sal in #9595
• Update Persian translations in #9576
• Update Spanish translations in #9701
• Update Turkish Translations in #9749
• Fix some typos in Brazilian Portuguese translations in #9673

Documentation

• Removed reference to GitHub Issues and Discussions in #9660
• Add drf-restwind and update outdated images in browsable-api.md in #9680
• Updated funding page to represent current scope in #9686
• Fix broken Heroku JSON Schema link in #9693
• Update Django documentation links to use stable version in #9698
• Expand docs on unique constraints cause 'required=True' in #9725
• Revert extension back from djangorestframework-guardian2 to djangorestframework-guardian in #9734
• Add note to tutorial about required request in serializer context when using HyperlinkedModelSerializer in #9732

Internal changes

• Update GitHub Actions to use Ubuntu 24.04 for testing in #9677
• Update test matrix to use Django 5.2 stable version in #9679
• Add pyupgrade to pre-commit hooks in #9682
• Fix test with Django 5 when pytz is available in #9715

New Contributors

• @​araggohnxd made their first contribution in #9673
• @​mbeijen made their first contribution in #9660
• @​stefan6419846 made their first contribution in #9676
• @​ren000thomas made their first contribution in #9675
• @​ulgens made their first contribution in #9682

... (truncated)

Commits

• de018df Prepare 3.16.1 release (#9752)
• a7d050f Turkish Translation updates (#9749)
• 853969c Fix test with Django 5 when pytz is available (#9715)
• 2ae8c11 Add note to tutorial about required request in serializer context when using ...
• 70e54f4 Revert docs back to djangorestframework-guardian (#9734)
• 3038494 Document that unique constraints cause required=True in ModelSerializer (#9...
• 4bb46c2 Add Kazakh(kk) locale support (#9713)
• e454758 Fix regression in unique_together validation with SerializerMethodField (#9712)
• 33d59fe Update Spanish translations (#9701)
• c0202a0 Update Django documentation links to use stable version (#9698)
• Additional commits viewable in compare view

Updates psycopg2 from 2.9.10 to 2.9.11

Changelog

Sourced from psycopg2's changelog.

Current release

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Add support for Python 3.14.
• Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).
• ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.
• Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Add support for Python 3.13.
• Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).
• ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.
• Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Add support for Python 3.12.
• Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
• Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
• Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

... (truncated)

Commits

• fd9ae8c chore: bump to version 2.9.11
• d923840 chore: update docs requirements
• d42dc71 Merge branch 'fix-1791'
• 4fde656 fix: avoid failed assert passing more arguments than placeholders
• 8308c19 fix: drop warning about the use of deprecated PyWeakref_GetObject function
• 1a1eabf build(deps): bump actions/github-script from 7 to 8
• 897af8b build(deps): bump peter-evans/repository-dispatch from 3 to 4
• ceefd30 build(deps): bump actions/checkout from 4 to 5
• 4dc5854 build(deps): bump actions/setup-python from 5 to 6
• 1945788 Merge pull request #1802 from edgarrmondragon/cp314-wheels
• Additional commits viewable in compare view

Updates asgiref from 3.9.1 to 3.10.0

Changelog

Sourced from asgiref's changelog.

3.10.0 (2025-10-05)

• Added AsyncSingleThreadContext context manager to ensure multiple AsyncToSync invocations use the same thread. (#511)

3.9.2 (2025-09-23)

• Adds support for Python 3.14.

• Fixes wsgi.errors file descriptor in WsgiToAsgi adapter.

Commits

• f587b12 Releasing 3.10.0.
• b08087c Added AsyncSingleThreadContext (#511)
• 3471a0c Releasing 3.9.2
• 4f892bd Remove Python 3.8 from tox
• 83cd6f3 Run CI against Python 3.14
• 796b9f1 Fix incorrect Trailer header (#531)
• 29b108b Fixed #529: wsgi.errors should be a StringIO (#530)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[mrlonis]

@dependabot recreate

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.