chore(deps): bump django-polymorphic from 4.1.0 to 4.11.2 by dependabot[bot] · Pull Request #2975 · python/pythondotorg

Bumps django-polymorphic from 4.1.0 to 4.11.2.

Release notes

Sourced from django-polymorphic's releases.

v4.11.2

What's Changed

Full Changelog: jazzband/django-polymorphic@v4.11.1...v4.11.2

v4.11.1

Fix for Release 4.11 causes UPDATE query to be routed to reader DB

What's Changed

Full Changelog: jazzband/django-polymorphic@v4.11.0...v4.11.1

v4.11.0

Typing support has been added!

What's Changed

New Contributors

Full Changelog: jazzband/django-polymorphic@v4.10.5...v4.11.0

v4.10.5

  • Fix a bug where in some Django bootstrapping scenarios related field accessors to PolymorphicModels would not be polymorphic #858

What's Changed

... (truncated)

Commits
  • fa735f2 switch default branch master -> main
  • fc10d06 update changelog
  • 13b36cf add admin tests for coverage
  • 81f7ccb add more admin tests for coverage
  • 8ad3483 broaden bandit triggers
  • 6c6114d remove unnecessary mark_safe, potentially vulnerable to xss
  • 488e1bf Add bandit security scanning to CI
  • 13521c6 reinclude lockfile - need it to avoid mysql builds
  • c05a2df fix test path restriction
  • d6adb62 Merge pull request #870 from jazzband/dependabot/github_actions/gha-updates-b...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)